last executing test programs: 14m38.302893794s ago: executing program 3 (id=354): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffff9c, 0x0, 0x90000, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="37022300a5d0e1e805f600000000000005830000000008000000000000000000404100000000e0e5000005000000000000001b0004"], 0x237) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x4000000) 14m37.368383085s ago: executing program 3 (id=358): getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x1b, &(0x7f0000000180)={0x8, 0x10001, 0x5}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f0000000340)=[{0x4, 0x8000, 0x41, &(0x7f0000000200)="5c8c9b3871fe66783719f3407146a37948fc25617888afb8bd3da46d8e9902bd7a27a76d770bd15b16743994174b295fdf09ad3fec6b6941b94ae7f40c5e702f5f"}], 0x1}) 14m33.396580483s ago: executing program 3 (id=374): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x16) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000400)={{}, 0x16, 0x1, 0x5}, 0x18) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigpending(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000203505a8a440000102030109022400010109900d5adae8480997eb3631924109040006020701010209050102"], &(0x7f0000000280)={0x0, 0x0, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="050f1a00020a100300060006f7ff070810010c05007f"]}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x9) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000140)=0xd6b, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x24004881) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0xa000000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0xffffffffffffffb2, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x841) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x0, &(0x7f00000001c0)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 14m30.096571927s ago: executing program 3 (id=385): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000540)={0xb, 0x100, 0x7, {0x9, 0x10000870, 0x2d0, 0x2d3}}) 14m29.113616855s ago: executing program 3 (id=388): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x18, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x9, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x7, "ea6aafaabfc592"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000fc0)={&(0x7f0000001200)=[{0x79, 0x5811, 0x0, 0x0}, {0x2, 0x2800, 0x0, 0x0}], 0x2}) 14m28.844432853s ago: executing program 3 (id=391): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x2a1e41b6, 0xb6a3, 0xfffffff6, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}, 0x1, 0x0, 0x1f}, 0x0) 14m27.969803315s ago: executing program 32 (id=391): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x2a1e41b6, 0xb6a3, 0xfffffff6, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}, 0x1, 0x0, 0x1f}, 0x0) 14.121038528s ago: executing program 2 (id=2675): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x18, &(0x7f0000000040)={0x40, 0x23, 0x1b, {0x1b, 0x6, "e6e64d5e00840c849a6e3f3ee2b697f2e2c48131b74f4be972"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x8, 0x8, "698730f6", "23f0a8ae"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x1, 0xff, 0x6, 0x3, 0x3, 0x113}}}, &(0x7f0000000700)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="200527000000c747587387a2fbb275a235deb765442a0055b4aa57ac25074fbb3c6d2d64caa96e9264a8391e21"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x160, 0x20}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x24}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x63}, &(0x7f0000000480)={0x40, 0xb, 0x2, "63a4"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "a45e"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x10}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xe}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x7}}) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x5, 0x590f, 0x2}) 13.938549142s ago: executing program 1 (id=2676): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x44000) r3 = socket$inet6(0xa, 0x3, 0xff) syz_open_dev$sg(&(0x7f00000001c0), 0x6, 0x565a02) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) syz_clone(0x100814000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)="864e6ec01aa2120a4f1c30a61ee6c5b07dcc78829fcf6acf98e360924eab155f741a30ab980516c6b228682ba3c0be4ccb472804c0eae4409c930353d7ad1364c714abea3dd67245826a2c4d1c") r4 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000b, 0x1010, r4, 0xac0a5000) r5 = dup(r3) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x16f8c2, 0x0) ftruncate(r6, 0x200004) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in, 0x0, 0xfffd, 0x0, 0x0, 0x310, 0x9}, 0x9c) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 12.586827925s ago: executing program 4 (id=2680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x84e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b400000000000000791198000000000005000000000000009500740000000000cb27c4786e9e52b1d4b45e497170bda75d477e83fd63ccac4c96398a050000000000000091d81e9d9825cb887305abdafae210539c471700c3107c098d548c76251d8ec0a1b5f3a1cea8e4074427681ef227b09c2bb1fd8454789229a269bfb8eaa7f7a6ca346d250cc62c61df686eb38b4d21458a2f76a5ff825928728b6c0961be16a7e02454b391cab827a72a7622911f2fa0eb07ad34ec2b41787f6b2aa10200000000000000cfc7f6535f2fd3bbc9d938f4ddc522772241"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) flistxattr(r4, &(0x7f0000000000)=""/23, 0x17) mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000280), 0x80000001, 0x480000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000630000006600000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) socket(0x23, 0x1, 0x7) preadv(r1, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0xa000) 12.55977211s ago: executing program 0 (id=2690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x80000, 0x25dfdbfd, {0x2, 0x8, 0x52, 0xfe, r3}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0xdd, 0x5}}]}, 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e23, 0xa0002000, @private1, 0x7fff}, 0x1c) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 11.046916736s ago: executing program 1 (id=2681): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f0000000340)=[{0x4, 0x8000, 0x21, &(0x7f0000000200)="5c8c9b3871fe66783719f3407146a37948fc25617888afb8bd3da46d8e9902bd7a"}], 0x1}) 10.716439928s ago: executing program 2 (id=2682): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5839, &(0x7f00000004c0)={0x20, 0x1, 0x0, 0x400}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0xffff0000, 0x107002) 10.195883741s ago: executing program 4 (id=2683): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x18, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x9, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000fc0)={&(0x7f0000001200)=[{0x2, 0x2800, 0x0, 0x0}], 0x1}) 9.096642669s ago: executing program 0 (id=2686): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x44000) r3 = socket$inet6(0xa, 0x3, 0xff) syz_open_dev$sg(&(0x7f00000001c0), 0x6, 0x565a02) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) syz_clone(0x100814000, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)="864e6ec01aa2120a4f1c30a61ee6c5b07dcc78829fcf6acf98e360924eab155f741a30ab980516c6b228682ba3c0be4ccb472804c0eae4409c930353d7ad1364c714abea3dd67245826a2c4d1c") r4 = openat$procfs(0xffffff9c, &(0x7f0000003980)='/proc/timer_list\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000b, 0x1010, r4, 0xac0a5000) r5 = dup(r3) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x16f8c2, 0x0) ftruncate(r6, 0x200004) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in, 0x0, 0xfffd, 0x0, 0x0, 0x310, 0x9}, 0x9c) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 8.976686747s ago: executing program 2 (id=2687): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x44000) r3 = socket$inet6(0xa, 0x3, 0xff) syz_open_dev$sg(&(0x7f00000001c0), 0x6, 0x565a02) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) syz_clone(0x100814000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)="864e6ec01aa2120a4f1c30a61ee6c5b07dcc78829fcf6acf98e360924eab155f741a30ab980516c6b228682ba3c0be4ccb472804c0eae4409c930353d7ad1364c714abea3dd67245826a2c4d1c") r4 = openat$procfs(0xffffff9c, &(0x7f0000003980)='/proc/timer_list\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000b, 0x1010, r4, 0xac0a5000) r5 = dup(r3) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x16f8c2, 0x0) ftruncate(r6, 0x200004) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 7.880393648s ago: executing program 1 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x10, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0xff, 0x0, 0xd, 0x3], 0x0, [0x7f, 0x4, 0x2, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x106], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000e9b619ed0000000000000000000218000006000000000000000a004616ac1414000c00090008"], 0x30}, 0x1, 0x0, 0x0, 0x20008894}, 0x4000054) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c02", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980282100f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aecaad952f364f05d5e0f", 0x29}, {&(0x7f0000000580)="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", 0x121}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)="2001987c5ccf58f5f75061ee", 0xc}, {&(0x7f00000003c0)="8b120728c90b0b4a530fab46abf402095b65870c2a0ac8f0847a8e8ab1d98f34cdd3a1c838f816c52ca57b8a7efbcea529afab803882b9f88c28cab3df58895ebffef931a275cc35f9fefa5bd7a1f580106f3c7defd09032cf42417504eefea81cfa7bfea5032e42cc0858cee1b8e74e133934cc54cd707c5c85d4e5008025c28b72b46d12248babbe0d3f7916a5610416ee255a331398dea59a1a406070cc13e81701447ded270b0c1bce36d2bf06db98dd9c1ed65668eb5c2f4cab0ee3", 0xbe}, {&(0x7f0000000940)="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", 0x16c}], 0x3}}], 0x2, 0x8810) sendmsg$alg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000e0ffffffff81000000000000000000000008000d"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a00000000000000000800034000000000060006400000000008000440000000000a000200000000000000000008000440000000000800044000000000"], 0x6c}}, 0x0) 7.743785357s ago: executing program 5 (id=2689): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x12}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/199, 0xc7}, {&(0x7f0000001940)=""/229, 0xe5}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000002d40)=""/4073, 0xfe9}, {&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000500)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x827}], 0x5, 0x140, 0x0) 7.67663028s ago: executing program 1 (id=2691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bind$inet6(r2, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@canfd={0xd, {{0x0, 0x0, 0x1, 0x1}, 0x1a, 0x0, 0x0, 0x0, "4aa8be5fb4d80ef41acc899145f9188e1cd271bfea7cd70786c81dc2cddb12cebf162eaa48b9c53ce170c01ea8d2a8c5180dd28300c2a3553794ce06bdcdb7b0"}}}}, &(0x7f0000000140)={0x1, 0x1, [0x11d, 0xf1a, 0x840, 0x442]}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 7.472982556s ago: executing program 5 (id=2692): get_thread_area(&(0x7f0000000000)={0x7fffffff, 0x100000}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f00000001c0)) socket$key(0xf, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8020, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xc27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB="34010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES8=r2], 0x134}, 0x1, 0xe}, 0x40000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) preadv(r12, &(0x7f0000000240)=[{&(0x7f0000001840)=""/102390, 0x18ff6}], 0x1, 0x0, 0x0) read$FUSE(r12, &(0x7f000001c880)={0x2020}, 0xffffffffffffff4a) 7.158714936s ago: executing program 0 (id=2693): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x5, &(0x7f0000002d40)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x40, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da192442518", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x4c) rt_sigaction(0x4, &(0x7f00000000c0)={0x0, 0x80000003, 0x0, {[0x2, 0x3f1]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c720500746d6f64653d3030303e303030303030303030303030303034303030302c2935c4045160de1eec757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="2a00000004000000000000000072630000000100030000002000ffffffff0000000002000000000000000000"], 0x2a) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = fsopen(&(0x7f0000000000)='ubifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x10, 0x117, 0x4, 0x1fd}], 0x10, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001b40)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x40000043, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r7, 0x2285, 0x0) 7.028194916s ago: executing program 2 (id=2694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x84e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b400000000000000791198000000000005000000000000009500740000000000cb27c4786e9e52b1d4b45e497170bda75d477e83fd63ccac4c96398a050000000000000091d81e9d9825cb887305abdafae210539c471700c3107c098d548c76251d8ec0a1b5f3a1cea8e4074427681ef227b09c2bb1fd8454789229a269bfb8eaa7f7a6ca346d250cc62c61df686eb38b4d21458a2f76a5ff825928728b6c0961be16a7e02454b391cab827a72a7622911f2fa0eb07ad34ec2b41787f6b2aa10200000000000000cfc7f6535f2fd3bbc9d938f4ddc522772241"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) flistxattr(r4, &(0x7f0000000000)=""/23, 0x17) mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000280), 0x80000001, 0x480000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000630000006600000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) socket(0x23, 0x1, 0x7) preadv(r1, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0xa000) 6.856115385s ago: executing program 4 (id=2695): r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb}, {0xffef, 0xb}, {0x5, 0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xc, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x7fffffff}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x58, "a8ad9b99f313555eb95c6a7e8e59e4cb"}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @TCA_RATE={0x6, 0x5, {0x4, 0xcb}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44000800}, 0xc004090) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x400000000000003, 0x0, 0x0, 0x20, 0x0, 0x0, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x3, 0x0, 0x65f7}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@local, 0x1e, 0x1c, 0x14}]}, 0x100}}, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) unshare(0x20000400) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r6, 0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000600)={[&(0x7f0000000440)='=\'@\x96\x00']}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000000)=0x1) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x218101, 0x0) openat$full(0xffffff9c, &(0x7f0000000040), 0x408800, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r10, &(0x7f0000001d00)="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", 0x6c2, 0x24048091, 0x0, 0x0) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r10, &(0x7f0000000580)="17", 0x1, 0x10048095, 0x0, 0x0) 6.576857208s ago: executing program 1 (id=2696): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000200", @ANYRES32=0xee00, @ANYBLOB="08000f"], 0x2c}, 0x1, 0x0, 0x0, 0x448c4}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d48e8840c21536007abb000000010902240001100049000904004b028d4add060905070b0804090800090506"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00006e8000/0x1000)=nil, 0x1000, 0x16) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x46}, 0x1c) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) bind$tipc(r6, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) recvmmsg(r2, &(0x7f0000000580)=[{{&(0x7f0000000380)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000000300)=""/64, 0x40}, {&(0x7f00000004c0)=""/40, 0x28}], 0x5, &(0x7f0000000540)=""/39, 0x27}, 0x71}], 0x1, 0x1, &(0x7f00000005c0)={0x0, 0x3938700}) r7 = fcntl$dupfd(r0, 0x406, r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f00007ea000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/80, 0x50, 0x66c45e5c226945e6, 0x0}, &(0x7f0000000240)=0x40) 5.700595346s ago: executing program 5 (id=2697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x84e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b400000000000000791198000000000005000000000000009500740000000000cb27c4786e9e52b1d4b45e497170bda75d477e83fd63ccac4c96398a050000000000000091d81e9d9825cb887305abdafae210539c471700c3107c098d548c76251d8ec0a1b5f3a1cea8e4074427681ef227b09c2bb1fd8454789229a269bfb8eaa7f7a6ca346d250cc62c61df686eb38b4d21458a2f76a5ff825928728b6c0961be16a7e02454b391cab827a72a7622911f2fa0eb07ad34ec2b41787f6b2aa10200000000000000cfc7f6535f2fd3bbc9d938f4ddc522772241"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) flistxattr(r4, &(0x7f0000000000)=""/23, 0x17) mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000280), 0x80000001, 0x480000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000630000006600000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) socket(0x23, 0x1, 0x7) preadv(r1, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0xa000) 5.700129691s ago: executing program 4 (id=2698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@canfd={0xd, {{0x0, 0x0, 0x1, 0x1}, 0x1a, 0x0, 0x0, 0x0, "4aa8be5fb4d80ef41acc899145f9188e1cd271bfea7cd70786c81dc2cddb12cebf162eaa48b9c53ce170c01ea8d2a8c5180dd28300c2a3553794ce06bdcdb7b0"}}}}, &(0x7f0000000140)={0x1, 0x1, [0x11d, 0xf1a, 0x840, 0x442]}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 4.948249222s ago: executing program 0 (id=2699): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f0000000340)=[{0x4, 0x8000, 0x21, &(0x7f0000000200)="5c8c9b3871fe66783719f3407146a37948fc25617888afb8bd3da46d8e9902bd7a"}], 0x1}) 3.848564332s ago: executing program 2 (id=2700): semget$private(0x0, 0x4000000009, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0xe0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x10) read$FUSE(r3, &(0x7f0000000b40)={0x2020}, 0x2020) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5a8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) ioctl$TUNGETFILTER(r7, 0x801054db, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0xa1, 0x4, 0xcd}, {0xdddd0000, 0x3000, 0xf, 0x0, 0x3, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf9ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd01, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000000c0)={0x170003, 0x0, [0xe, 0x0, 0x4, 0x8, 0x9, 0x8, 0x2, 0xfffffffffffffff7]}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x2b, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 3.848174287s ago: executing program 4 (id=2701): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x0, r5, 0x40, r4}, 0x10) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r6 = openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x2f) statx(r6, &(0x7f0000000140)='./file0\x00', 0x3000, 0x400, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3.689690281s ago: executing program 5 (id=2702): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3, 0xcd}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = getpgid(0xffffffffffffffff) getpgrp(r5) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0xf00) 2.166966334s ago: executing program 5 (id=2703): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)}, 0x12}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/199, 0xc7}, {&(0x7f0000001940)=""/229, 0xe5}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000002d40)=""/4073, 0xfe9}, {&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000500)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x827}], 0x5, 0x140, 0x0) 1.824417908s ago: executing program 0 (id=2704): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5839, &(0x7f00000004c0)={0x20, 0x1, 0x0, 0x400}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0xffff0000, 0x107002) 1.823912009s ago: executing program 1 (id=2705): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x18, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x9, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x7, "ea6aafaabfc592"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000fc0)={&(0x7f0000001200)=[{0x2, 0x2800, 0x0, 0x0}], 0x1}) 1.727787445s ago: executing program 5 (id=2706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0xffffffffffffffff, 0x4, 0xd) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) lseek(r2, 0x0, 0x4) 645.738971ms ago: executing program 4 (id=2707): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x5, &(0x7f0000002d40)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x40, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da192442518", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x4c) rt_sigaction(0x4, &(0x7f00000000c0)={0x0, 0x80000003, 0x0, {[0x2, 0x3f1]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="2a00000004000000000000000072630000000100030000002000ffffffff0000000002000000000000000000"], 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = fsopen(&(0x7f0000000000)='ubifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x10, 0x117, 0x4, 0x1fd}], 0x10, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001b40)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x40000043, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r7, 0x2285, 0x0) 365.67745ms ago: executing program 0 (id=2708): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0xffffffffffffffff, 0x4, 0xd) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) lseek(r2, 0x0, 0x4) 0s ago: executing program 2 (id=2709): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x14, 0x0, 0x917, 0x0, 0xffffffe4}, 0x14}}, 0x4000) r1 = syz_open_dev$video(0x0, 0x7, 0x28000) preadv(r1, 0x0, 0x0, 0x4, 0xb) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="28000e00800000000802110000010802110000010802110000000000000000000000000064000000080026006c09000008000c050000000008000d00a2a40000"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): umber=3 [ 909.729630][ T6964] usb 6-1: Product: syz [ 909.739299][ T6964] usb 6-1: Manufacturer: syz [ 909.769924][ T6964] usb 6-1: SerialNumber: syz [ 909.799998][ T6964] usb 6-1: config 0 descriptor?? [ 909.819140][ T6964] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 909.831124][ T6964] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 910.439350][ T6964] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 910.852553][ T6964] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 910.862859][ T6964] em28xx 6-1:0.0: board has no eeprom [ 910.925427][ T6964] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 910.943669][ T6964] em28xx 6-1:0.0: dvb set to bulk mode. [ 910.962991][T14722] em28xx 6-1:0.0: Binding DVB extension [ 910.991423][ T6964] usb 6-1: USB disconnect, device number 97 [ 911.028830][ T6964] em28xx 6-1:0.0: Disconnecting em28xx [ 911.102659][T14722] em28xx 6-1:0.0: Registering input extension [ 911.128652][ T6964] em28xx 6-1:0.0: Closing input extension [ 911.245251][ T6964] em28xx 6-1:0.0: Freeing device [ 911.342681][T16382] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 911.356731][T16382] loop6: detected capacity change from 0 to 63 [ 911.367884][T16382] buffer_io_error: 5230 callbacks suppressed [ 911.367903][T16382] Buffer I/O error on dev loop6, logical block 0, async page read [ 911.382236][T16382] Buffer I/O error on dev loop6, logical block 1, async page read [ 911.390448][T16382] Buffer I/O error on dev loop6, logical block 2, async page read [ 911.398853][T16382] Buffer I/O error on dev loop6, logical block 3, async page read [ 911.406975][T16382] Buffer I/O error on dev loop6, logical block 0, async page read [ 911.524446][T16382] Buffer I/O error on dev loop6, logical block 1, async page read [ 911.555222][T16382] Buffer I/O error on dev loop6, logical block 2, async page read [ 911.563964][T16382] Buffer I/O error on dev loop6, logical block 3, async page read [ 911.572171][T16383] Buffer I/O error on dev loop6, logical block 0, async page read [ 911.581348][T16383] Buffer I/O error on dev loop6, logical block 1, async page read [ 911.628219][ T5926] usb 5-1: USB disconnect, device number 106 [ 913.533597][ T6973] usb 1-1: new low-speed USB device number 118 using dummy_hcd [ 913.757814][ T6973] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 913.776690][ T6973] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 914.081732][ T6973] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 914.094191][ T6973] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 914.106154][ T6973] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 914.239138][ T6973] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 914.248681][ T6973] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 914.345068][ T6973] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 914.566940][ T6973] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 914.627787][ T6973] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 914.686992][ T6973] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 914.701058][ T6973] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 914.720018][ T6973] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 915.113311][ T6973] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 915.196779][ T6973] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 915.313675][T16423] loop6: detected capacity change from 0 to 63 [ 915.479242][ T6973] usb 1-1: string descriptor 0 read error: -22 [ 915.612633][ T6973] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 915.642748][ T6973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.741849][ T6973] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 916.373768][T16423] buffer_io_error: 6411 callbacks suppressed [ 916.373791][T16423] Buffer I/O error on dev loop6, logical block 1, async page read [ 916.388040][T16423] Buffer I/O error on dev loop6, logical block 2, async page read [ 916.396474][T16423] Buffer I/O error on dev loop6, logical block 3, async page read [ 916.404894][T16417] Buffer I/O error on dev loop6, logical block 0, async page read [ 916.412806][T16417] Buffer I/O error on dev loop6, logical block 1, async page read [ 916.448887][T16417] Buffer I/O error on dev loop6, logical block 2, async page read [ 916.457699][T16417] Buffer I/O error on dev loop6, logical block 3, async page read [ 916.467660][T16423] Buffer I/O error on dev loop6, logical block 0, async page read [ 916.485654][T16423] Buffer I/O error on dev loop6, logical block 1, async page read [ 916.521683][T16423] Buffer I/O error on dev loop6, logical block 2, async page read [ 916.543421][T14722] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 917.248869][T14722] usb 2-1: unable to get BOS descriptor or descriptor too short [ 917.258002][T14722] usb 2-1: not running at top speed; connect to a high speed hub [ 917.485091][ T5841] usb 1-1: USB disconnect, device number 118 [ 917.570318][T14722] usb 2-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 917.618398][T14722] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 917.674120][T14722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.698328][T14722] usb 2-1: Product: syz [ 917.714608][T14722] usb 2-1: Manufacturer: syz [ 917.718980][T16438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2350'. [ 917.732725][T14722] usb 2-1: SerialNumber: syz [ 917.787486][T14722] usb 2-1: bad CDC descriptors [ 918.671840][T16450] cgroup: fork rejected by pids controller in /syz2 [ 919.670877][T14722] usb 2-1: USB disconnect, device number 105 [ 919.974915][T17340] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 919.990674][T17340] loop6: detected capacity change from 0 to 63 [ 921.218796][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 921.350020][T17507] binder: 17503:17507 ioctl c0306201 0 returned -14 [ 921.444715][T17340] buffer_io_error: 9229 callbacks suppressed [ 921.444738][T17340] Buffer I/O error on dev loop6, logical block 0, async page read [ 921.473889][T17506] binder: 17503:17506 ioctl 3ba0 80000240 returned -22 [ 921.504788][T17340] Buffer I/O error on dev loop6, logical block 1, async page read [ 921.506041][T17506] binder: 17503:17506 ioctl 3b81 80000040 returned -22 [ 921.536430][T17340] Buffer I/O error on dev loop6, logical block 2, async page read [ 921.546260][T17504] binder: 17503:17504 ioctl 3ba0 800002c0 returned -22 [ 921.580311][T17340] Buffer I/O error on dev loop6, logical block 3, async page read [ 921.625140][T17340] Buffer I/O error on dev loop6, logical block 0, async page read [ 921.647507][T17340] Buffer I/O error on dev loop6, logical block 1, async page read [ 921.659957][T17340] Buffer I/O error on dev loop6, logical block 2, async page read [ 921.682805][T17340] Buffer I/O error on dev loop6, logical block 3, async page read [ 921.691810][T17340] Buffer I/O error on dev loop6, logical block 0, async page read [ 921.702435][T17340] Buffer I/O error on dev loop6, logical block 1, async page read [ 921.913453][T14722] usb 5-1: new low-speed USB device number 107 using dummy_hcd [ 922.159954][T14722] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 922.168527][T14722] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 922.350505][T14722] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 922.371385][T14722] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 922.392414][T14722] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 922.626284][T14722] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 922.633906][T14722] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 922.647734][T14722] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 923.184815][T14722] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 923.224885][T14722] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 923.245154][T14722] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 923.252816][T14722] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 923.265250][T14722] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 923.287397][T14722] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 923.319629][T14722] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 923.385401][T14722] usb 5-1: string descriptor 0 read error: -22 [ 923.391779][T14722] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 923.401774][T14722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.435478][T14722] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 923.613305][ T6964] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 923.805638][ T6964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.910837][ T6964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.973308][ T6964] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 924.033301][ T6964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.135543][ T6964] usb 2-1: config 0 descriptor?? [ 924.536097][T17531] syz.2.2366 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 924.623060][ T6964] cp2112 0003:10C4:EA90.003F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 924.825329][ T6964] cp2112 0003:10C4:EA90.003F: Part Number: 0x82 Device Version: 0xFE [ 925.428363][ T6964] cp2112 0003:10C4:EA90.003F: error reading lock byte: -71 [ 925.457873][ T6964] usb 2-1: USB disconnect, device number 106 [ 925.497513][T14722] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 925.658163][T14722] usb 3-1: unable to get BOS descriptor or descriptor too short [ 925.667394][T14722] usb 3-1: not running at top speed; connect to a high speed hub [ 925.678518][T14722] usb 3-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 925.738451][T14722] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 925.852704][ T6973] usb 5-1: USB disconnect, device number 107 [ 925.882667][T14722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.989408][T14722] usb 3-1: Product: syz [ 926.050083][T14722] usb 3-1: Manufacturer: syz [ 926.060653][T17546] FAULT_INJECTION: forcing a failure. [ 926.060653][T17546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.065136][T14722] usb 3-1: SerialNumber: syz [ 926.083790][ T5841] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 926.122611][T17546] CPU: 1 UID: 0 PID: 17546 Comm: syz.1.2373 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 926.122643][T17546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 926.122665][T17546] Call Trace: [ 926.122675][T17546] [ 926.122684][T17546] dump_stack_lvl+0x189/0x250 [ 926.122715][T17546] ? __pfx____ratelimit+0x10/0x10 [ 926.122738][T17546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.122763][T17546] ? __pfx__printk+0x10/0x10 [ 926.122791][T17546] ? __might_fault+0xb0/0x130 [ 926.122830][T17546] should_fail_ex+0x414/0x560 [ 926.122858][T17546] _copy_from_user+0x2d/0xb0 [ 926.122888][T17546] get_compat_msghdr+0xad/0x4a0 [ 926.122927][T17546] ? __pfx_get_compat_msghdr+0x10/0x10 [ 926.122972][T17546] ___sys_sendmsg+0x193/0x2a0 [ 926.123007][T17546] ? __pfx____sys_sendmsg+0x10/0x10 [ 926.123078][T17546] ? __fget_files+0x2a/0x420 [ 926.123097][T17546] ? __fget_files+0x3a0/0x420 [ 926.123127][T17546] __sys_sendmsg+0x164/0x220 [ 926.123161][T17546] ? __pfx___sys_sendmsg+0x10/0x10 [ 926.123211][T17546] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 926.123237][T17546] ? lockdep_hardirqs_on+0x9c/0x150 [ 926.123262][T17546] __do_fast_syscall_32+0xb6/0x2b0 [ 926.123287][T17546] ? lockdep_hardirqs_on+0x9c/0x150 [ 926.123314][T17546] do_fast_syscall_32+0x34/0x80 [ 926.123337][T17546] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 926.123362][T17546] RIP: 0023:0xf712e539 [ 926.123381][T17546] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 926.123398][T17546] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 926.123419][T17546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000740 [ 926.123435][T17546] RDX: 0000000000008840 RSI: 0000000000000000 RDI: 0000000000000000 [ 926.123447][T17546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 926.123459][T17546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 926.123472][T17546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 926.123503][T17546] [ 926.125344][T14722] usb 3-1: bad CDC descriptors [ 926.243341][ T5841] usb 6-1: device descriptor read/64, error -71 [ 926.539320][T17553] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2374'. [ 926.583439][ T5841] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 926.723485][ T5841] usb 6-1: device descriptor read/64, error -71 [ 926.846040][ T5841] usb usb6-port1: attempt power cycle [ 927.203987][ T5841] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 927.235170][ T5841] usb 6-1: device descriptor read/8, error -71 [ 927.493638][ T5841] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 927.536973][ T5841] usb 6-1: device descriptor read/8, error -71 [ 927.653518][ T5841] usb usb6-port1: unable to enumerate USB device [ 928.208468][ T5841] usb 3-1: USB disconnect, device number 91 [ 928.419695][T17573] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2379'. [ 928.435707][T17574] loop6: detected capacity change from 0 to 63 [ 928.448028][ T6047] buffer_io_error: 6966 callbacks suppressed [ 928.448043][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.498384][T17574] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.508309][T17574] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.535144][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.545234][T17574] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.554091][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.562858][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.589276][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.669838][T17575] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.683090][T17568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 928.711237][T17568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 928.734798][T17575] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.783459][ T6964] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 930.946601][ T6964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.962947][ T6964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.976612][ T6964] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 931.008861][ T6964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.046611][ T6964] usb 5-1: config 0 descriptor?? [ 931.498744][ T6964] cp2112 0003:10C4:EA90.0040: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 931.683505][ T6964] cp2112 0003:10C4:EA90.0040: Part Number: 0x82 Device Version: 0xFE [ 932.526016][ T6964] cp2112 0003:10C4:EA90.0040: error reading lock byte: -71 [ 932.579808][ T6964] usb 5-1: USB disconnect, device number 108 [ 933.405834][T17623] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2390'. [ 933.701361][ T6964] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 934.437953][ T6964] usb 6-1: unable to get BOS descriptor or descriptor too short [ 934.468789][ T6964] usb 6-1: not running at top speed; connect to a high speed hub [ 934.496497][ T6964] usb 6-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 934.660617][ T6964] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 934.688187][ T6964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.765183][ T6964] usb 6-1: Product: syz [ 934.792013][ T6964] usb 6-1: Manufacturer: syz [ 934.830613][ T6964] usb 6-1: SerialNumber: syz [ 935.041803][ T6964] usb 6-1: bad CDC descriptors [ 936.832363][ T6964] usb 6-1: USB disconnect, device number 102 [ 936.898094][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.904938][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.005579][T17656] loop6: detected capacity change from 0 to 63 [ 937.035767][T17656] buffer_io_error: 6048 callbacks suppressed [ 937.035787][T17656] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.393921][T17656] Buffer I/O error on dev loop6, logical block 1, async page read [ 937.411272][T17656] Buffer I/O error on dev loop6, logical block 2, async page read [ 937.429149][T17661] fuse: Unknown parameter 'r' [ 937.448336][T17656] Buffer I/O error on dev loop6, logical block 3, async page read [ 937.477557][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.492126][ T5903] Buffer I/O error on dev loop6, logical block 1, async page read [ 937.504786][ T5903] Buffer I/O error on dev loop6, logical block 2, async page read [ 937.591985][ T5903] Buffer I/O error on dev loop6, logical block 3, async page read [ 937.605313][T17668] Buffer I/O error on dev loop6, logical block 0, async page read [ 937.633722][T17668] Buffer I/O error on dev loop6, logical block 1, async page read [ 940.842569][T17696] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2406'. [ 942.568077][ T5926] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 942.669191][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2411'. [ 943.172197][ T5926] usb 6-1: unable to get BOS descriptor or descriptor too short [ 943.186562][ T5926] usb 6-1: not running at top speed; connect to a high speed hub [ 943.486490][T17721] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2412'. [ 943.566209][T17721] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2412'. [ 943.584740][ T5926] usb 6-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 943.612277][ T5926] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 943.622911][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.644356][ T5926] usb 6-1: Product: syz [ 943.650925][ T5926] usb 6-1: Manufacturer: syz [ 943.671919][ T5926] usb 6-1: SerialNumber: syz [ 943.781512][ T5926] usb 6-1: bad CDC descriptors [ 945.972696][ T6973] usb 6-1: USB disconnect, device number 103 [ 946.843656][T14722] usb 1-1: new low-speed USB device number 119 using dummy_hcd [ 947.075722][T14722] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 947.083737][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 947.095321][T14722] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 947.217866][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 947.271736][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 947.364036][T14722] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 947.381824][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 947.402744][T14722] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 947.459600][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 947.503998][T17764] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2422'. [ 947.516395][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 947.566356][T14722] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 947.618641][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 947.793896][T14722] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 947.806795][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 947.872320][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 947.969623][T14722] usb 1-1: string descriptor 0 read error: -22 [ 947.976466][T14722] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 948.026077][T14722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.172461][T14722] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 950.860351][T14722] usb 1-1: USB disconnect, device number 119 [ 951.673638][T14722] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 951.932031][T14722] usb 1-1: unable to get BOS descriptor or descriptor too short [ 951.944816][T14722] usb 1-1: not running at top speed; connect to a high speed hub [ 951.959855][T14722] usb 1-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 952.663133][T14722] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 952.679512][T14722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.703126][T14722] usb 1-1: Product: syz [ 952.773350][T14722] usb 1-1: Manufacturer: syz [ 953.020921][T14722] usb 1-1: SerialNumber: syz [ 953.274387][T14722] usb 1-1: bad CDC descriptors [ 953.992444][T17814] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 954.010458][T17814] loop6: detected capacity change from 0 to 63 [ 954.026215][T17814] buffer_io_error: 5274 callbacks suppressed [ 954.026288][T17814] Buffer I/O error on dev loop6, logical block 0, async page read [ 954.051839][T17814] Buffer I/O error on dev loop6, logical block 1, async page read [ 954.384744][T17814] Buffer I/O error on dev loop6, logical block 2, async page read [ 954.410136][T17814] Buffer I/O error on dev loop6, logical block 3, async page read [ 954.421021][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 954.433929][ T5903] Buffer I/O error on dev loop6, logical block 1, async page read [ 954.442301][ T5903] Buffer I/O error on dev loop6, logical block 2, async page read [ 954.929950][ T5903] Buffer I/O error on dev loop6, logical block 3, async page read [ 955.022914][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 955.475510][ T5903] Buffer I/O error on dev loop6, logical block 1, async page read [ 955.921216][ T6964] usb 1-1: USB disconnect, device number 120 [ 956.635151][ T5841] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 956.925696][ T5841] usb 1-1: unable to get BOS descriptor or descriptor too short [ 957.296002][ T5841] usb 1-1: not running at top speed; connect to a high speed hub [ 957.415283][ T5841] usb 1-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 957.868023][ T5841] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 957.881056][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.899608][ T5841] usb 1-1: Product: syz [ 957.923473][ T5841] usb 1-1: Manufacturer: syz [ 957.933135][ T5841] usb 1-1: SerialNumber: syz [ 958.087482][ T5841] usb 1-1: bad CDC descriptors [ 958.299279][T17856] loop6: detected capacity change from 0 to 63 [ 958.843298][T14722] usb 6-1: new low-speed USB device number 104 using dummy_hcd [ 959.033299][T17860] buffer_io_error: 7503 callbacks suppressed [ 959.033322][T17860] Buffer I/O error on dev loop6, logical block 0, async page read [ 959.047618][T17860] Buffer I/O error on dev loop6, logical block 0, async page read [ 959.055876][T17860] Buffer I/O error on dev loop6, logical block 0, async page read [ 959.064101][T17860] Buffer I/O error on dev loop6, logical block 0, async page read [ 959.072276][T17860] Buffer I/O error on dev loop6, logical block 0, async page read [ 959.080333][T17860] Buffer I/O error on dev loop6, logical block 0, async page read [ 959.088644][T17860] Buffer I/O error on dev loop6, logical block 0, async page read [ 959.096983][T17860] Buffer I/O error on dev loop6, logical block 0, async page read [ 959.105175][T17860] Buffer I/O error on dev loop6, logical block 0, async page read [ 959.113338][T17860] Buffer I/O error on dev loop6, logical block 0, async page read [ 959.823796][T14722] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 959.831722][T14722] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 959.876781][T14722] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 960.061863][ T5926] usb 1-1: USB disconnect, device number 121 [ 960.081551][T14722] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 960.202210][T14722] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 960.430964][T14722] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 960.654011][T14722] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 960.667614][T14722] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 960.679493][T14722] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 960.750637][T14722] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 962.960227][T14722] usb 6-1: unable to read config index 2 descriptor/start: -71 [ 963.021744][T14722] usb 6-1: can't read configurations, error -71 [ 963.523049][T17898] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 963.544630][T17898] loop6: detected capacity change from 0 to 63 [ 964.043298][T17898] buffer_io_error: 9028 callbacks suppressed [ 964.043321][T17898] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.106203][T17898] Buffer I/O error on dev loop6, logical block 1, async page read [ 964.221746][T17898] Buffer I/O error on dev loop6, logical block 2, async page read [ 964.261730][T17898] Buffer I/O error on dev loop6, logical block 3, async page read [ 964.336704][T17901] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.344963][T17901] Buffer I/O error on dev loop6, logical block 1, async page read [ 964.353105][T17901] Buffer I/O error on dev loop6, logical block 2, async page read [ 964.361296][T17901] Buffer I/O error on dev loop6, logical block 3, async page read [ 964.369476][T17901] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.377670][T17901] Buffer I/O error on dev loop6, logical block 1, async page read [ 967.084463][ T9] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 967.259408][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 967.277037][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 967.296342][ T9] usb 6-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 967.321841][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 967.333419][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.341559][ T9] usb 6-1: Product: syz [ 967.348204][ T9] usb 6-1: Manufacturer: syz [ 967.386823][ T9] usb 6-1: SerialNumber: syz [ 967.417984][ T9] usb 6-1: bad CDC descriptors [ 968.516246][T17942] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 969.033292][T14722] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 969.278398][T14722] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 969.327337][T14722] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 969.356154][T14722] usb 5-1: config 16 interface 0 has no altsetting 0 [ 969.370738][T14722] usb 5-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 969.400146][T14722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.432856][T17943] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 970.106915][ T5926] usb 6-1: USB disconnect, device number 106 [ 970.585925][T17959] loop6: detected capacity change from 0 to 63 [ 970.618628][ T5903] buffer_io_error: 5326 callbacks suppressed [ 970.618643][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 970.684306][T17959] Buffer I/O error on dev loop6, logical block 0, async page read [ 970.709085][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 970.733128][T17959] Buffer I/O error on dev loop6, logical block 0, async page read [ 970.744761][T17960] Buffer I/O error on dev loop6, logical block 0, async page read [ 970.754053][T17959] Buffer I/O error on dev loop6, logical block 0, async page read [ 970.763093][T17959] Buffer I/O error on dev loop6, logical block 0, async page read [ 970.771967][T17959] Buffer I/O error on dev loop6, logical block 0, async page read [ 970.780517][T17960] Buffer I/O error on dev loop6, logical block 0, async page read [ 970.789921][T17959] Buffer I/O error on dev loop6, logical block 0, async page read [ 971.732529][T14722] usb 5-1: string descriptor 0 read error: -71 [ 971.753703][T14722] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 971.761428][T14722] imon 5-1:16.0: unable to initialize intf0, err -19 [ 971.853644][T14722] imon:imon_probe: failed to initialize context! [ 971.870795][T14722] imon 5-1:16.0: unable to register, err -19 [ 972.705266][T14722] usb 5-1: USB disconnect, device number 109 [ 972.793325][ T5926] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 973.197373][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short [ 973.275855][ T5926] usb 1-1: not running at top speed; connect to a high speed hub [ 973.305664][ T5926] usb 1-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 973.342852][ T5926] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 974.064670][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.099080][ T5926] usb 1-1: Product: syz [ 974.106728][ T5926] usb 1-1: Manufacturer: syz [ 974.112230][ T5926] usb 1-1: SerialNumber: syz [ 975.033992][ T5926] usb 1-1: can't set config #1, error -71 [ 975.061654][ T5926] usb 1-1: USB disconnect, device number 122 [ 976.651551][T18007] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2472'. [ 976.962959][T18013] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 977.005411][T18013] loop6: detected capacity change from 0 to 63 [ 977.047527][T18013] buffer_io_error: 4427 callbacks suppressed [ 977.047543][T18013] Buffer I/O error on dev loop6, logical block 0, async page read [ 977.167365][T18013] Buffer I/O error on dev loop6, logical block 1, async page read [ 977.256594][T18013] Buffer I/O error on dev loop6, logical block 2, async page read [ 977.315587][T18013] Buffer I/O error on dev loop6, logical block 3, async page read [ 977.427611][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 977.457349][ T5903] Buffer I/O error on dev loop6, logical block 1, async page read [ 977.488865][ T5903] Buffer I/O error on dev loop6, logical block 2, async page read [ 977.523658][ T5903] Buffer I/O error on dev loop6, logical block 3, async page read [ 977.531844][T18014] Buffer I/O error on dev loop6, logical block 0, async page read [ 977.557832][T18014] Buffer I/O error on dev loop6, logical block 1, async page read [ 978.010268][T18019] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2475'. [ 978.041389][T18019] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2475'. [ 979.395969][T18031] FAULT_INJECTION: forcing a failure. [ 979.395969][T18031] name failslab, interval 1, probability 0, space 0, times 0 [ 979.485493][T18031] CPU: 1 UID: 0 PID: 18031 Comm: syz.5.2481 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 979.485517][T18031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 979.485527][T18031] Call Trace: [ 979.485534][T18031] [ 979.485541][T18031] dump_stack_lvl+0x189/0x250 [ 979.485565][T18031] ? __pfx____ratelimit+0x10/0x10 [ 979.485582][T18031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 979.485600][T18031] ? __pfx__printk+0x10/0x10 [ 979.485625][T18031] ? __pfx___might_resched+0x10/0x10 [ 979.485642][T18031] ? fs_reclaim_acquire+0x7d/0x100 [ 979.485661][T18031] should_fail_ex+0x414/0x560 [ 979.485681][T18031] should_failslab+0xa8/0x100 [ 979.485705][T18031] __kmalloc_cache_noprof+0x70/0x3d0 [ 979.485736][T18031] ? snd_pcm_oss_change_params_locked+0x1b3/0x3e40 [ 979.485774][T18031] snd_pcm_oss_change_params_locked+0x1b3/0x3e40 [ 979.485797][T18031] ? __pfx___mutex_trylock_common+0x10/0x10 [ 979.485820][T18031] ? rcu_is_watching+0x15/0xb0 [ 979.485838][T18031] ? trace_contention_end+0x39/0x120 [ 979.485857][T18031] ? __mutex_lock+0x330/0xe80 [ 979.485880][T18031] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 979.485897][T18031] ? snd_pcm_oss_write+0x28f/0x11a0 [ 979.485916][T18031] ? __pfx___mutex_lock+0x10/0x10 [ 979.485933][T18031] ? aa_file_perm+0x3e7/0xed0 [ 979.485963][T18031] snd_pcm_oss_write+0x2fb/0x11a0 [ 979.485995][T18031] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 979.486016][T18031] ? bpf_lsm_file_permission+0x9/0x20 [ 979.486033][T18031] ? security_file_permission+0x75/0x290 [ 979.486057][T18031] ? rw_verify_area+0x258/0x650 [ 979.486075][T18031] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 979.486093][T18031] vfs_write+0x27e/0xa90 [ 979.486118][T18031] ? __pfx_vfs_write+0x10/0x10 [ 979.486157][T18031] ? __fget_files+0x2a/0x420 [ 979.486173][T18031] ? __fget_files+0x2a/0x420 [ 979.486185][T18031] ? __fget_files+0x3a0/0x420 [ 979.486197][T18031] ? __fget_files+0x2a/0x420 [ 979.486217][T18031] ksys_write+0x145/0x250 [ 979.486240][T18031] ? __pfx_ksys_write+0x10/0x10 [ 979.486261][T18031] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 979.486279][T18031] ? lockdep_hardirqs_on+0x9c/0x150 [ 979.486297][T18031] __do_fast_syscall_32+0xb6/0x2b0 [ 979.486316][T18031] ? lockdep_hardirqs_on+0x9c/0x150 [ 979.486335][T18031] do_fast_syscall_32+0x34/0x80 [ 979.486352][T18031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 979.486371][T18031] RIP: 0023:0xf707e539 [ 979.486384][T18031] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 979.486397][T18031] RSP: 002b:00000000f504d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 979.486413][T18031] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 979.486424][T18031] RDX: 000000000000fdbc RSI: 0000000000000000 RDI: 0000000000000000 [ 979.486433][T18031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 979.486442][T18031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 979.486451][T18031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 979.486472][T18031] [ 983.078974][T18069] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2489'. [ 983.090348][T18069] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2489'. [ 983.703965][T18075] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2491'. [ 984.612791][T18086] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 984.968993][T18086] loop6: detected capacity change from 0 to 63 [ 985.106473][T18086] buffer_io_error: 7938 callbacks suppressed [ 985.106502][T18086] Buffer I/O error on dev loop6, logical block 0, async page read [ 985.144008][T18086] Buffer I/O error on dev loop6, logical block 1, async page read [ 985.161746][T18086] Buffer I/O error on dev loop6, logical block 2, async page read [ 985.266921][T18086] Buffer I/O error on dev loop6, logical block 3, async page read [ 985.336257][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 985.410820][ T5903] Buffer I/O error on dev loop6, logical block 1, async page read [ 985.432323][ T5903] Buffer I/O error on dev loop6, logical block 2, async page read [ 985.472675][ T5903] Buffer I/O error on dev loop6, logical block 3, async page read [ 985.494025][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 985.512340][ T5903] Buffer I/O error on dev loop6, logical block 1, async page read [ 985.583667][ T9] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 985.602640][T18096] vivid-000: ================= START STATUS ================= [ 985.642152][T18096] vivid-000: Test Pattern: 75% Colorbar [ 985.675679][T18096] vivid-000: Fill Percentage of Frame: 100 [ 985.682666][T18096] vivid-000: Horizontal Movement: No Movement [ 985.691113][T18096] vivid-000: Vertical Movement: Move Up Slow [ 985.706543][T18096] vivid-000: OSD Text Mode: All [ 985.715553][T18096] vivid-000: Show Border: false [ 985.728000][T18096] vivid-000: Show Square: false [ 985.740266][T18096] vivid-000: Sensor Flipped Horizontally: false [ 985.754284][T18096] vivid-000: Sensor Flipped Vertically: [ 985.793703][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.830930][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.842987][T18096] false [ 985.847383][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 985.876678][T18096] vivid-000: Insert SAV Code in Image: false [ 985.883020][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.893042][T18096] vivid-000: Insert EAV Code in Image: false [ 985.924426][T18096] vivid-000: Insert Video Guard Band: false [ 985.933083][T18096] vivid-000: Reduced Framerate: false [ 985.945559][T18096] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 985.956820][T18096] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 985.977298][T18096] vivid-000: Enable Capture Cropping: true grabbed [ 985.991423][ T9] usb 3-1: config 0 descriptor?? [ 986.003202][T18096] vivid-000: Enable Capture Composing: true grabbed [ 986.010268][T18096] vivid-000: Enable Capture Scaler: true grabbed [ 986.037509][T18096] vivid-000: Timestamp Source: End of Frame [ 986.273254][T18096] vivid-000: Colorspace: sRGB [ 986.288402][T18096] vivid-000: Transfer Function: Default [ 986.423244][T18096] vivid-000: Y'CbCr Encoding: Default [ 986.429288][T18096] vivid-000: HSV Encoding: [ 986.439710][ T9] cp2112 0003:10C4:EA90.0041: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 986.459442][T18096] Hue 0-179 [ 986.468657][T18096] vivid-000: Quantization: Default [ 986.479366][T18096] vivid-000: Apply Alpha To Red Only: false [ 986.492042][T18096] vivid-000: Standard Aspect Ratio: 4x3 [ 986.503811][T18096] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 986.518949][T18096] vivid-000: DV Timings: 640x480p59 inactive [ 986.631874][ T9] cp2112 0003:10C4:EA90.0041: error requesting version [ 986.642972][ T9] cp2112 0003:10C4:EA90.0041: probe with driver cp2112 failed with error -5 [ 986.664909][T18096] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 986.719580][T18096] vivid-000: Maximum EDID Blocks: 2 [ 986.730233][T18096] vivid-000: Limited RGB Range (16-235): false [ 986.937891][T18096] vivid-000: Rx RGB Quantization Range: Automatic [ 986.976237][T18096] vivid-000: Power Present: 0x00000001 [ 986.988143][T18096] tpg source WxH: 320x180 (R'G'B) [ 987.050513][T18096] tpg field: 1 [ 987.057098][T18096] tpg crop: (0,0)/320x180 [ 987.061609][T18096] tpg compose: (0,0)/320x180 [ 987.069154][T18096] tpg colorspace: 8 [ 987.121039][T18096] tpg transfer function: 0/2 [ 987.136137][T18096] tpg quantization: 0/1 [ 987.145197][T18096] tpg RGB range: 0/2 [ 987.157738][T18096] vivid-000: ================== END STATUS ================== [ 989.163432][ T9] usb 6-1: new low-speed USB device number 107 using dummy_hcd [ 989.186017][ T6964] usb 3-1: USB disconnect, device number 92 [ 989.317683][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 989.330808][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 989.361369][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 989.388864][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 989.438491][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 989.469430][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 989.568002][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 989.581812][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 989.681973][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 989.832743][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 990.122309][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 990.130275][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 990.141806][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.182345][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 990.200014][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 990.227710][ T9] usb 6-1: string descriptor 0 read error: -22 [ 990.235375][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 990.245092][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.278753][ T9] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 991.593296][ T5841] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 991.743323][ T5841] usb 2-1: device descriptor read/64, error -71 [ 991.907439][ T6964] usb 6-1: USB disconnect, device number 107 [ 992.003557][ T5841] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 992.163297][ T5841] usb 2-1: device descriptor read/64, error -71 [ 992.290343][ T5841] usb usb2-port1: attempt power cycle [ 992.400615][T18143] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2510'. [ 992.609571][T18148] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 992.637510][T18148] loop6: detected capacity change from 0 to 63 [ 992.666181][T18148] buffer_io_error: 9030 callbacks suppressed [ 992.666199][T18148] Buffer I/O error on dev loop6, logical block 0, async page read [ 992.683340][ T5841] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 992.701547][T18148] Buffer I/O error on dev loop6, logical block 1, async page read [ 992.727744][T18148] Buffer I/O error on dev loop6, logical block 2, async page read [ 992.747056][ T5841] usb 2-1: device descriptor read/8, error -71 [ 992.785808][T18148] Buffer I/O error on dev loop6, logical block 3, async page read [ 992.833554][T18148] Buffer I/O error on dev loop6, logical block 0, async page read [ 992.855206][T18148] Buffer I/O error on dev loop6, logical block 1, async page read [ 992.878452][T18148] Buffer I/O error on dev loop6, logical block 2, async page read [ 992.904566][T18148] Buffer I/O error on dev loop6, logical block 3, async page read [ 992.929140][T18149] Buffer I/O error on dev loop6, logical block 0, async page read [ 992.945389][T18149] Buffer I/O error on dev loop6, logical block 1, async page read [ 992.977317][T18151] vivid-000: ================= START STATUS ================= [ 993.003380][ T5841] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 993.012982][T18151] vivid-000: Test Pattern: 75% Colorbar [ 993.031792][T18151] vivid-000: Fill Percentage of Frame: 100 [ 993.042923][ T5841] usb 2-1: device descriptor read/8, error -71 [ 993.061365][T18151] vivid-000: Horizontal Movement: No Movement [ 993.068638][T18151] vivid-000: Vertical Movement: Move Up Slow [ 993.077953][T18151] vivid-000: OSD Text Mode: All [ 993.085643][T18151] vivid-000: Show Border: false [ 993.091947][T18151] vivid-000: Show Square: false [ 993.120942][T18151] vivid-000: Sensor Flipped Horizontally: false [ 993.140595][T18151] vivid-000: Sensor Flipped Vertically: false [ 993.148437][T18151] vivid-000: Insert SAV Code in Image: false [ 993.163304][T18151] vivid-000: Insert EAV Code in Image: false [ 993.163484][ T5841] usb usb2-port1: unable to enumerate USB device [ 993.177564][T18151] [ 993.186313][T18151] vivid-000: Insert Video Guard Band: false [ 993.212703][T18151] vivid-000: Reduced Framerate: false [ 993.226979][T18151] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 993.241544][T18151] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 993.350578][T18151] vivid-000: Enable Capture Cropping: true grabbed [ 993.375834][T18151] vivid-000: Enable Capture Composing: true grabbed [ 993.396201][T18151] vivid-000: Enable Capture Scaler: true grabbed [ 993.412342][T18151] vivid-000: Timestamp Source: End of Frame [ 993.428148][T18151] vivid-000: Colorspace: sRGB [ 993.440311][T18151] vivid-000: Transfer Function: Default [ 993.454623][T18151] vivid-000: Y'CbCr Encoding: Default [ 993.460222][T18151] vivid-000: HSV Encoding: Hue 0-179 [ 993.469904][T18151] vivid-000: Quantization: Default [ 993.485201][T18151] vivid-000: Apply Alpha To Red Only: false [ 993.492469][T18151] vivid-000: Standard Aspect Ratio: 4x3 [ 993.505749][T18151] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 993.519596][T18151] vivid-000: DV Timings: 640x480p59 inactive [ 993.527487][T18151] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 993.540117][T18151] vivid-000: Maximum EDID Blocks: 2 [ 993.545826][T18151] vivid-000: Limited RGB Range (16-235): false [ 993.552172][T18151] vivid-000: Rx RGB Quantization Range: Automatic [ 993.559836][T18151] vivid-000: Power Present: 0x00000001 [ 993.565978][T18151] tpg source WxH: 320x180 (R'G'B) [ 993.571314][T18151] tpg field: 1 [ 993.629737][T18151] tpg crop: (0,0)/320x180 [ 993.639884][T18151] tpg compose: (0,0)/320x180 [ 993.650093][T18151] tpg colorspace: 8 [ 993.660316][T18151] tpg transfer function: 0/2 [ 993.665426][T18151] tpg quantization: 0/1 [ 993.669795][T18151] tpg RGB range: 0/2 [ 993.677404][T18151] vivid-000: ================== END STATUS ================== [ 994.083390][ T5841] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 994.266031][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.277987][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.306206][ T5841] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 994.354801][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.420778][ T5841] usb 3-1: config 0 descriptor?? [ 994.884848][ T5841] cp2112 0003:10C4:EA90.0042: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 995.068431][ T5841] cp2112 0003:10C4:EA90.0042: error requesting version [ 995.107768][ T5841] cp2112 0003:10C4:EA90.0042: probe with driver cp2112 failed with error -5 [ 996.151061][T18180] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 996.191861][T18180] loop6: detected capacity change from 0 to 63 [ 997.258642][ T9] usb 3-1: USB disconnect, device number 93 [ 997.466236][T18183] fuse: Unknown parameter 'r' [ 997.695293][T18180] buffer_io_error: 13854 callbacks suppressed [ 997.695315][T18180] Buffer I/O error on dev loop6, logical block 0, async page read [ 997.748440][T18180] Buffer I/O error on dev loop6, logical block 1, async page read [ 997.762486][T18180] Buffer I/O error on dev loop6, logical block 2, async page read [ 997.807881][T18180] Buffer I/O error on dev loop6, logical block 3, async page read [ 997.853656][T18180] Buffer I/O error on dev loop6, logical block 0, async page read [ 997.886307][T18180] Buffer I/O error on dev loop6, logical block 1, async page read [ 997.908978][T18180] Buffer I/O error on dev loop6, logical block 2, async page read [ 997.945612][T18180] Buffer I/O error on dev loop6, logical block 3, async page read [ 997.971634][T18180] Buffer I/O error on dev loop6, logical block 0, async page read [ 998.010443][T18180] Buffer I/O error on dev loop6, logical block 1, async page read [ 998.338361][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.344903][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.299971][T18205] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 999.310492][T18205] loop6: detected capacity change from 0 to 63 [ 999.317362][T18201] vivid-000: ================= START STATUS ================= [ 999.325308][T18201] vivid-000: Test Pattern: 75% Colorbar [ 999.351999][T18201] vivid-000: Fill Percentage of Frame: 100 [ 999.359995][T18201] vivid-000: Horizontal Movement: No Movement [ 999.383768][ T9] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 999.392881][T18201] vivid-000: Vertical Movement: Move Up Slow [ 999.436072][T18201] vivid-000: OSD Text Mode: All [ 999.466884][T18201] vivid-000: Show Border: false [ 999.502735][T18201] vivid-000: Show Square: false [ 999.508028][T18201] vivid-000: Sensor Flipped Horizontally: false [ 999.514822][T18201] vivid-000: Sensor Flipped Vertically: false [ 999.524003][T18201] vivid-000: Insert SAV Code in Image: false [ 999.568734][T18201] vivid-000: Insert EAV Code in Image: false [ 999.581473][T18201] vivid-000: Insert Video Guard Band: false [ 999.588167][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 999.603869][T18201] vivid-000: Reduced Framerate: false [ 999.609524][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 999.621800][T18201] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 999.645958][T18201] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 999.660589][T18201] vivid-000: Enable Capture Cropping: true grabbed [ 999.675866][T18201] vivid-000: Enable Capture Composing: true [ 999.680077][ T9] usb 1-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 999.709956][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 999.720422][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.729660][ T9] usb 1-1: Product: syz [ 999.735775][ T9] usb 1-1: Manufacturer: syz [ 999.743598][ T9] usb 1-1: SerialNumber: syz [ 999.758068][T18201] grabbed [ 999.772428][T18201] vivid-000: Enable Capture Scaler: true grabbed [ 999.779826][T18201] vivid-000: Timestamp Source: End of Frame [ 999.798166][T18201] vivid-000: Colorspace: sRGB [ 999.803921][T18201] vivid-000: Transfer Function: Default [ 999.807697][ T9] usb 1-1: bad CDC descriptors [ 999.818665][T18201] [ 999.822535][T18201] vivid-000: Y'CbCr Encoding: Default [ 999.839365][T18201] vivid-000: HSV Encoding: Hue 0-179 [ 999.851634][T18201] vivid-000: Quantization: Default [ 999.863473][T18201] vivid-000: Apply Alpha To Red Only: false [ 999.885521][T18201] vivid-000: Standard Aspect Ratio: 4x3 [ 999.893528][ T5841] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 999.911523][T18201] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 999.927232][T18201] vivid-000: DV Timings: 640x480p59 inactive [ 999.942844][T18201] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 999.954662][T18201] vivid-000: Maximum EDID Blocks: 2 [ 999.961156][T18201] vivid-000: Limited RGB Range (16-235): false [ 999.969249][T18201] vivid-000: Rx RGB Quantization Range: Automatic [ 999.978252][T18201] vivid-000: Power Present: 0x00000001 [ 999.992022][T18201] tpg source WxH: 320x180 (R'G'B) [ 999.997796][T18201] tpg field: 1 [ 1000.003637][T18201] tpg crop: (0,0)/320x180 [ 1000.008176][T18201] tpg compose: (0,0)/320x180 [ 1000.016898][T18201] tpg colorspace: 8 [ 1000.023605][T18201] tpg transfer function: 0/2 [ 1000.050851][ T5841] usb 5-1: device descriptor read/64, error -71 [ 1000.118396][T18201] tpg quantization: 0/1 [ 1000.138792][T18201] tpg RGB range: 0/2 [ 1000.143460][T18201] vivid-000: ================== END STATUS ================== [ 1000.382591][ T5841] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1000.559686][ T5841] usb 5-1: device descriptor read/64, error -71 [ 1000.675591][ T5841] usb usb5-port1: attempt power cycle [ 1001.013279][ T5841] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1001.100148][ T5841] usb 5-1: device descriptor read/8, error -71 [ 1001.343763][ T5841] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1001.384434][ T5841] usb 5-1: device descriptor read/8, error -71 [ 1001.518425][ T5841] usb usb5-port1: unable to enumerate USB device [ 1001.964698][ T5841] usb 1-1: USB disconnect, device number 123 [ 1002.493491][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1002.659658][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.696228][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.718841][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1002.750300][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.787593][ T9] usb 3-1: config 0 descriptor?? [ 1002.971487][T18234] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1002.984780][T18234] loop6: detected capacity change from 0 to 63 [ 1003.006895][ T5903] buffer_io_error: 5474 callbacks suppressed [ 1003.006911][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.030425][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.040488][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.061971][T18234] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.070478][T18234] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.079405][T18234] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.088131][T18234] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.096712][T18234] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.105333][T18234] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.153032][T18234] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.801230][ T9] cp2112 0003:10C4:EA90.0043: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1003.914837][ T9] cp2112 0003:10C4:EA90.0043: Part Number: 0x82 Device Version: 0xFE [ 1004.099892][ T9] cp2112 0003:10C4:EA90.0043: error requesting SMBus config [ 1004.118756][ T9] cp2112 0003:10C4:EA90.0043: probe with driver cp2112 failed with error -32 [ 1004.133759][T18243] vivid-000: ================= START STATUS ================= [ 1004.142803][T18243] vivid-000: Test Pattern: 75% Colorbar [ 1004.344206][T18243] vivid-000: Fill Percentage of Frame: 100 [ 1004.350185][T18243] vivid-000: Horizontal Movement: No Movement [ 1004.363229][T18243] vivid-000: Vertical Movement: Move Up Slow [ 1004.369476][T18243] vivid-000: OSD Text Mode: All [ 1004.384383][T18243] vivid-000: Show Border: false [ 1004.397268][T18243] vivid-000: Show Square: false [ 1004.405694][T18243] vivid-000: Sensor Flipped Horizontally: false [ 1004.419170][T18243] vivid-000: Sensor Flipped Vertically: false [ 1004.431575][T18243] vivid-000: Insert SAV Code in Image: false [ 1004.447179][T18243] vivid-000: Insert EAV Code in Image: false [ 1004.458587][T18243] vivid-000: Insert Video Guard Band: false [ 1004.471030][T18243] vivid-000: Reduced Framerate: false [ 1004.489050][T18243] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1004.503216][T18243] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1004.511429][T18243] vivid-000: Enable Capture Cropping: true grabbed [ 1004.528831][T18243] vivid-000: Enable Capture Composing: true grabbed [ 1004.562860][T18243] vivid-000: Enable Capture Scaler: true grabbed [ 1004.572984][T18243] vivid-000: Timestamp Source: End of Frame [ 1004.588371][T18243] vivid-000: Colorspace: sRGB [ 1004.633655][T18243] vivid-000: Transfer Function: Default [ 1004.643414][T18243] vivid-000: Y'CbCr Encoding: Default [ 1004.650983][T18243] vivid-000: HSV Encoding: Hue 0-179 [ 1004.665230][T18243] vivid-000: Quantization: Default [ 1004.672098][T18243] vivid-000: Apply Alpha To Red Only: false [ 1004.680142][T18243] vivid-000: Standard Aspect Ratio: 4x3 [ 1004.690249][T18243] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1004.743071][T18243] vivid-000: DV Timings: 640x480p59 inactive [ 1004.770156][T18243] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1004.787089][T18243] vivid-000: Maximum EDID Blocks: 2 [ 1004.794467][T18243] vivid-000: Limited RGB Range (16-235): false [ 1004.802412][T18243] vivid-000: Rx RGB Quantization Range: Automatic [ 1004.820238][T18243] vivid-000: Power Present: 0x00000001 [ 1004.831072][T18243] tpg source WxH: 320x180 (R'G'B) [ 1004.836856][T18243] tpg field: 1 [ 1004.842793][T18243] tpg crop: (0,0)/320x180 [ 1004.848478][T18243] tpg compose: (0,0)/320x180 [ 1004.854752][T18243] tpg colorspace: 8 [ 1004.859307][T18243] tpg transfer function: 0/2 [ 1004.865747][T18243] tpg quantization: 0/1 [ 1004.871301][T18243] tpg RGB range: 0/2 [ 1004.875864][T18243] vivid-000: ================== END STATUS ================== [ 1005.550425][ T5926] usb 3-1: USB disconnect, device number 94 [ 1005.801478][T18261] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2542'. [ 1005.880890][ T9] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1006.202062][T18267] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1006.232885][T18267] loop6: detected capacity change from 0 to 63 [ 1006.289855][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1006.301197][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 1006.325960][ T9] usb 2-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 1006.363332][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1006.372618][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.381016][ T9] usb 2-1: Product: syz [ 1006.393656][ T9] usb 2-1: Manufacturer: syz [ 1006.400110][ T9] usb 2-1: SerialNumber: syz [ 1006.451374][ T9] usb 2-1: bad CDC descriptors [ 1007.263671][ T9] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1007.423894][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1007.432689][ T9] usb 3-1: config 0 has no interfaces? [ 1007.441908][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1007.451660][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.461430][ T9] usb 3-1: Product: syz [ 1007.465941][ T9] usb 3-1: Manufacturer: syz [ 1007.479839][ T9] usb 3-1: SerialNumber: syz [ 1007.516774][ T9] usb 3-1: config 0 descriptor?? [ 1008.014486][T18267] buffer_io_error: 7614 callbacks suppressed [ 1008.014510][T18267] Buffer I/O error on dev loop6, logical block 0, async page read [ 1008.051587][T18267] Buffer I/O error on dev loop6, logical block 0, async page read [ 1008.070094][T18267] Buffer I/O error on dev loop6, logical block 0, async page read [ 1008.096662][T18267] Buffer I/O error on dev loop6, logical block 0, async page read [ 1008.121043][T18267] Buffer I/O error on dev loop6, logical block 0, async page read [ 1008.143112][T18267] Buffer I/O error on dev loop6, logical block 0, async page read [ 1008.179043][T18267] Buffer I/O error on dev loop6, logical block 0, async page read [ 1008.197590][T18267] Buffer I/O error on dev loop6, logical block 0, async page read [ 1008.217179][T18267] Buffer I/O error on dev loop6, logical block 0, async page read [ 1008.236258][T18267] Buffer I/O error on dev loop6, logical block 0, async page read [ 1008.954706][ T5841] usb 2-1: USB disconnect, device number 111 [ 1009.443306][ T5926] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 1009.690912][ T5926] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1009.702295][ T5926] usb 6-1: not running at top speed; connect to a high speed hub [ 1009.713616][T14722] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1009.723858][ T5926] usb 6-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 1009.742288][ T5926] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1009.751545][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.787032][ T5926] usb 6-1: Product: syz [ 1009.793087][ T5926] usb 6-1: Manufacturer: syz [ 1009.816058][ T5926] usb 6-1: SerialNumber: syz [ 1009.835318][ T5926] usb 6-1: bad CDC descriptors [ 1009.875143][T14722] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1009.888842][T14722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1010.008381][T14722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1010.085137][T14722] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1010.135612][T14722] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1010.140064][ T5841] usb 3-1: USB disconnect, device number 95 [ 1010.261268][T14722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.312909][T14722] usb 5-1: config 0 descriptor?? [ 1010.383792][T18304] vivid-000: ================= START STATUS ================= [ 1010.410494][T18304] vivid-000: Test Pattern: 75% Colorbar [ 1010.425287][T18304] vivid-000: Fill Percentage of Frame: 100 [ 1010.483701][T18304] vivid-000: Horizontal Movement: No Movement [ 1010.489973][T18304] vivid-000: Vertical Movement: Move Up Slow [ 1010.517898][T18304] vivid-000: OSD Text Mode: All [ 1010.733512][T18304] vivid-000: Show Border: false [ 1010.780433][T14722] plantronics 0003:047F:FFFF.0044: ignoring exceeding usage max [ 1010.828208][T14722] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1010.855267][T18304] vivid-000: Show Square: false [ 1010.879882][T18304] vivid-000: Sensor Flipped Horizontally: false [ 1010.916304][T18304] vivid-000: Sensor Flipped Vertically: false [ 1010.945844][T18304] vivid-000: Insert SAV Code in Image: false [ 1011.005158][T18304] vivid-000: Insert EAV Code in Image: false [ 1011.017370][T18304] vivid-000: Insert Video Guard Band: false [ 1011.030863][T18304] vivid-000: Reduced Framerate: false [ 1011.039149][T18304] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1011.058437][T18304] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1011.075041][T18304] vivid-000: Enable Capture Cropping: true grabbed [ 1011.088455][T18304] vivid-000: Enable Capture Composing: true grabbed [ 1011.096399][T18304] vivid-000: Enable Capture Scaler: true grabbed [ 1011.111419][T18304] vivid-000: Timestamp Source: End of Frame [ 1011.128407][T18304] vivid-000: Colorspace: sRGB [ 1011.140312][T18304] vivid-000: Transfer Function: Default [ 1011.151995][T18304] vivid-000: Y'CbCr Encoding: Default [ 1011.163802][T18304] vivid-000: HSV Encoding: Hue 0-179 [ 1011.177106][T18304] vivid-000: Quantization: Default [ 1011.194276][T18304] vivid-000: Apply Alpha To Red Only: false [ 1011.205878][T18304] vivid-000: Standard Aspect Ratio: 4x3 [ 1011.227837][T18304] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1011.264537][T18304] vivid-000: DV Timings: 640x480p59 inactive [ 1011.280647][T18304] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1011.291004][T18304] vivid-000: Maximum EDID Blocks: 2 [ 1011.301191][T18304] vivid-000: Limited RGB Range (16-235): false [ 1011.319524][T18304] vivid-000: Rx RGB Quantization Range: Automatic [ 1011.333875][T18304] vivid-000: Power Present: 0x00000001 [ 1011.359896][T18304] tpg source WxH: 320x180 (R'G'B) [ 1011.387853][T18304] tpg field: 1 [ 1011.408876][T18313] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2555'. [ 1011.425022][T18304] tpg crop: (0,0)/320x180 [ 1011.429506][T18304] tpg compose: (0,0)/320x180 [ 1011.434424][T18304] tpg colorspace: 8 [ 1011.441131][T18304] tpg transfer function: 0/2 [ 1011.447019][T18304] tpg quantization: 0/1 [ 1011.455260][T18304] tpg RGB range: 0/2 [ 1011.459840][T18304] vivid-000: ================== END STATUS ================== [ 1012.087979][T14722] usb 5-1: USB disconnect, device number 114 [ 1012.386114][T18325] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2558'. [ 1012.554299][T18327] fuse: Unknown parameter 'r' [ 1012.860966][ T5926] usb 6-1: USB disconnect, device number 108 [ 1013.161795][T18332] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2569'. [ 1013.425222][T18338] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1013.437382][T18338] loop6: detected capacity change from 0 to 63 [ 1013.448170][T18338] buffer_io_error: 917 callbacks suppressed [ 1013.448191][T18338] Buffer I/O error on dev loop6, logical block 0, async page read [ 1013.462502][T18338] Buffer I/O error on dev loop6, logical block 1, async page read [ 1013.470675][T18338] Buffer I/O error on dev loop6, logical block 2, async page read [ 1013.479629][T18338] Buffer I/O error on dev loop6, logical block 3, async page read [ 1013.601148][T18338] Buffer I/O error on dev loop6, logical block 0, async page read [ 1013.609835][T18338] Buffer I/O error on dev loop6, logical block 1, async page read [ 1013.619249][T18338] Buffer I/O error on dev loop6, logical block 2, async page read [ 1013.627968][T18338] Buffer I/O error on dev loop6, logical block 3, async page read [ 1013.637345][T18338] Buffer I/O error on dev loop6, logical block 0, async page read [ 1013.646157][T18338] Buffer I/O error on dev loop6, logical block 1, async page read [ 1014.223352][ T9] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 1014.699927][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1014.766598][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 1014.802251][ T9] usb 6-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 1015.370656][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1015.410738][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.449554][ T9] usb 6-1: Product: syz [ 1015.489513][ T9] usb 6-1: Manufacturer: syz [ 1015.667021][ T9] usb 6-1: SerialNumber: syz [ 1015.753030][ T9] usb 6-1: bad CDC descriptors [ 1015.753327][ T5926] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1015.787710][T18354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2564'. [ 1015.923403][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 1015.957279][ T5926] usb 1-1: config 0 has no interfaces? [ 1015.981425][ T5926] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1015.999133][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.022510][ T5926] usb 1-1: Product: syz [ 1016.038281][ T5926] usb 1-1: Manufacturer: syz [ 1016.072595][ T5926] usb 1-1: SerialNumber: syz [ 1016.104919][ T5926] usb 1-1: config 0 descriptor?? [ 1017.423498][T18364] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2567'. [ 1017.593755][ T9] usb 6-1: USB disconnect, device number 109 [ 1017.649037][T18368] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 1017.649037][T18368] program syz.4.2566 not setting count and/or reply_len properly [ 1018.271864][T18371] vivid-000: ================= START STATUS ================= [ 1018.279831][T18371] vivid-000: Test Pattern: 75% Colorbar [ 1018.287794][T18371] vivid-000: Fill Percentage of Frame: 100 [ 1018.294817][T18371] vivid-000: Horizontal Movement: No Movement [ 1018.303407][T18371] vivid-000: Vertical Movement: Move Up Slow [ 1018.309917][T18371] vivid-000: OSD Text Mode: All [ 1018.316196][T18371] vivid-000: Show Border: false [ 1018.321324][T18371] vivid-000: Show Square: false [ 1018.405189][T18371] vivid-000: Sensor Flipped Horizontally: false [ 1018.447258][T18371] vivid-000: Sensor Flipped Vertically: false [ 1018.505626][T18371] vivid-000: Insert SAV Code in Image: false [ 1018.527098][T18371] vivid-000: Insert EAV Code in Image: false [ 1018.563882][T18371] vivid-000: Insert Video Guard Band: false [ 1018.570613][T18371] vivid-000: Reduced Framerate: false [ 1018.576853][T18371] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1018.585995][T18371] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1018.607480][T18371] vivid-000: Enable Capture Cropping: true grabbed [ 1018.640542][T18371] vivid-000: Enable Capture Composing: true grabbed [ 1018.649154][T18371] vivid-000: Enable Capture Scaler: [ 1018.770255][ T6964] usb 1-1: USB disconnect, device number 124 [ 1018.785246][T18371] true grabbed [ 1018.807355][T18371] vivid-000: Timestamp Source: End of Frame [ 1018.814552][T18371] vivid-000: Colorspace: sRGB [ 1018.822807][T18371] vivid-000: Transfer Function: Default [ 1018.830783][T18371] vivid-000: Y'CbCr Encoding: Default [ 1018.837243][T18371] vivid-000: HSV Encoding: Hue 0-179 [ 1018.843076][T18371] vivid-000: Quantization: Default [ 1018.854635][T18371] vivid-000: Apply Alpha To Red Only: false [ 1018.869538][T18371] vivid-000: Standard Aspect Ratio: 4x3 [ 1018.879815][T18371] vivid-000: DV Timings Signal Mode: [ 1018.883693][ T9] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1018.899360][T18371] Current DV Timings inactive [ 1018.906192][T18371] vivid-000: DV Timings: 640x480p59 inactive [ 1018.929250][T18371] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1018.946028][T18371] vivid-000: Maximum EDID Blocks: 2 [ 1018.960702][T18371] vivid-000: Limited RGB Range (16-235): false [ 1018.970239][T18371] vivid-000: Rx RGB Quantization Range: Automatic [ 1018.977449][T18371] vivid-000: Power Present: 0x00000001 [ 1018.985744][T18371] tpg source WxH: 320x180 (R'G'B) [ 1018.992001][T18371] tpg field: 1 [ 1018.996002][T18371] tpg crop: (0,0)/320x180 [ 1019.000627][T18371] tpg compose: (0,0)/320x180 [ 1019.006366][T18371] tpg colorspace: 8 [ 1019.010341][T18371] tpg transfer function: 0/2 [ 1019.020509][T18380] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2572'. [ 1019.030827][T18371] tpg quantization: 0/1 [ 1019.041390][T18371] tpg RGB range: 0/2 [ 1019.045577][T18371] vivid-000: ================== END STATUS ================== [ 1019.093487][ T5926] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1019.098838][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1019.135644][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1019.164573][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1019.175356][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1019.195693][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1019.231431][T18382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'. [ 1019.245307][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.248967][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.269676][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.282044][ T9] usb 3-1: config 0 descriptor?? [ 1019.298810][ T5926] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1019.309735][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.329253][ T5926] usb 2-1: config 0 descriptor?? [ 1019.721530][ T9] plantronics 0003:047F:FFFF.0045: ignoring exceeding usage max [ 1019.755051][ T9] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1019.763822][ T5926] cp2112 0003:10C4:EA90.0046: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1020.077290][ T5926] cp2112 0003:10C4:EA90.0046: Part Number: 0x82 Device Version: 0xFE [ 1020.745262][ T5926] cp2112 0003:10C4:EA90.0046: error requesting SMBus config [ 1020.770349][ T5926] cp2112 0003:10C4:EA90.0046: probe with driver cp2112 failed with error -32 [ 1020.901764][T18404] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1020.921732][T18404] loop6: detected capacity change from 0 to 63 [ 1020.937013][T18404] buffer_io_error: 7910 callbacks suppressed [ 1020.937028][T18404] Buffer I/O error on dev loop6, logical block 0, async page read [ 1020.956424][T18404] Buffer I/O error on dev loop6, logical block 1, async page read [ 1020.965820][T18404] Buffer I/O error on dev loop6, logical block 2, async page read [ 1020.976110][T18404] Buffer I/O error on dev loop6, logical block 3, async page read [ 1020.985409][T18404] Buffer I/O error on dev loop6, logical block 0, async page read [ 1020.996265][T18404] Buffer I/O error on dev loop6, logical block 1, async page read [ 1021.005078][T18404] Buffer I/O error on dev loop6, logical block 2, async page read [ 1021.013696][T18404] Buffer I/O error on dev loop6, logical block 3, async page read [ 1021.024728][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 1021.033737][T18405] Buffer I/O error on dev loop6, logical block 1, async page read [ 1022.168706][ T6967] usb 2-1: USB disconnect, device number 112 [ 1022.264078][T18419] netlink: 'syz.1.2581': attribute type 11 has an invalid length. [ 1022.309422][T18419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2581'. [ 1022.833759][T14722] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 1022.842464][ T6967] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1023.060217][ T6967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1023.078193][ T5926] usb 3-1: USB disconnect, device number 96 [ 1023.108015][ T6967] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1023.150385][ T6967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1023.184792][ T6967] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1023.199083][T14722] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1023.228477][T14722] usb 6-1: not running at top speed; connect to a high speed hub [ 1023.240530][ T6967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.254024][ T5926] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1023.271013][T14722] usb 6-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 1023.348820][ T6967] usb 2-1: config 0 descriptor?? [ 1023.378018][T14722] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1023.470309][ T6967] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 1023.482204][T14722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.510488][ T6967] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 1023.526385][T14722] usb 6-1: Product: syz [ 1023.537806][T14722] usb 6-1: Manufacturer: syz [ 1023.563523][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1023.609055][T14722] usb 6-1: SerialNumber: syz [ 1023.695405][ T5926] usb 3-1: not running at top speed; connect to a high speed hub [ 1023.713052][T14722] usb 6-1: bad CDC descriptors [ 1023.944568][ T5841] usb 2-1: USB disconnect, device number 113 [ 1024.154676][ T5926] usb 3-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 1024.254802][ T5926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1024.331079][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.364613][ T5926] usb 3-1: Product: syz [ 1024.370291][ T5926] usb 3-1: Manufacturer: syz [ 1024.378828][ T5926] usb 3-1: SerialNumber: syz [ 1024.470151][ T5926] usb 3-1: bad CDC descriptors [ 1024.505221][T14722] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 1024.583723][ T6967] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1024.702679][T14722] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1024.714080][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1024.747642][ T6967] usb 5-1: Using ep0 maxpacket: 16 [ 1024.760795][T14722] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1024.777548][ T6967] usb 5-1: config 0 has no interfaces? [ 1024.783955][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1024.808035][ T6967] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1024.823748][ T6967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.882862][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1025.059826][ T6967] usb 5-1: Product: syz [ 1025.099802][ T6967] usb 5-1: Manufacturer: syz [ 1025.116410][ T6967] usb 5-1: SerialNumber: syz [ 1025.126035][T14722] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1025.140246][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1025.154779][T14722] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1025.167657][ T6967] usb 5-1: config 0 descriptor?? [ 1025.300436][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1025.306245][ T5926] usb 6-1: USB disconnect, device number 110 [ 1025.322138][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1025.351709][T14722] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1025.361722][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1025.374252][T14722] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1025.419352][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1025.457943][T14722] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1025.487915][T14722] usb 1-1: string descriptor 0 read error: -22 [ 1025.494730][T14722] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1025.515628][T14722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.710797][T18437] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 1025.710797][T18437] program syz.1.2584 not setting count and/or reply_len properly [ 1025.908883][T14722] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1026.163388][ T9] usb 3-1: USB disconnect, device number 97 [ 1026.229131][T18442] vivid-000: ================= START STATUS ================= [ 1026.243393][T18442] vivid-000: Test Pattern: 75% Colorbar [ 1026.273772][T18442] vivid-000: Fill Percentage of Frame: 100 [ 1026.305471][T18442] vivid-000: Horizontal Movement: No Movement [ 1026.311878][T18442] vivid-000: Vertical Movement: Move Up Slow [ 1026.319040][T18442] vivid-000: OSD Text Mode: All [ 1026.333698][T18442] vivid-000: Show Border: false [ 1026.348888][T18442] vivid-000: Show Square: false [ 1026.362329][T18442] vivid-000: Sensor Flipped Horizontally: false [ 1026.375317][T18442] vivid-000: Sensor Flipped Vertically: false [ 1026.389914][T18442] vivid-000: Insert SAV Code in Image: false [ 1026.400479][T18442] vivid-000: Insert EAV Code in Image: false [ 1026.407530][T18442] vivid-000: Insert Video Guard Band: false [ 1026.415602][T18442] vivid-000: Reduced Framerate: false [ 1026.421282][T18442] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1026.430055][T18442] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1026.438752][T18442] vivid-000: Enable Capture Cropping: true grabbed [ 1026.446774][T18442] vivid-000: Enable Capture Composing: true grabbed [ 1026.456617][T18446] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2587'. [ 1026.469388][T18442] vivid-000: Enable Capture Scaler: true grabbed [ 1026.484905][T18442] vivid-000: Timestamp Source: End of Frame [ 1026.495775][T18442] vivid-000: Colorspace: sRGB [ 1026.501506][T18442] vivid-000: Transfer Function: Default [ 1026.511697][T18442] vivid-000: Y'CbCr Encoding: Default [ 1026.519622][T18442] vivid-000: HSV Encoding: Hue 0-179 [ 1026.532040][T18442] vivid-000: Quantization: Default [ 1026.541193][T18442] vivid-000: Apply Alpha To Red Only: false [ 1026.551446][T18442] vivid-000: Standard Aspect Ratio: 4x3 [ 1026.559367][T18442] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1026.580768][T18442] vivid-000: DV Timings: 640x480p59 inactive [ 1026.599746][T18442] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1026.626664][T18442] vivid-000: Maximum EDID Blocks: 2 [ 1026.670317][T18442] vivid-000: Limited RGB Range (16-235): false [ 1026.678005][T18442] vivid-000: Rx RGB Quantization Range: Automatic [ 1026.691790][T18442] vivid-000: Power Present: 0x00000001 [ 1026.702510][T18442] tpg source WxH: 320x180 (R'G'B) [ 1026.709133][T18442] tpg field: 1 [ 1026.712753][T18442] tpg crop: (0,0)/320x180 [ 1026.717352][T18442] tpg compose: (0,0)/320x180 [ 1026.722138][T18442] tpg colorspace: 8 [ 1026.726211][T18442] tpg transfer function: 0/2 [ 1026.731024][T18442] tpg quantization: 0/1 [ 1026.735936][T18442] tpg RGB range: 0/2 [ 1026.739983][T18442] vivid-000: ================== END STATUS ================== [ 1026.808252][ T5841] usb 1-1: USB disconnect, device number 125 [ 1027.497813][T14722] usb 5-1: USB disconnect, device number 115 [ 1027.964427][T14722] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1027.983354][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1028.093240][T18483] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1028.110282][T18483] loop6: detected capacity change from 0 to 63 [ 1028.113527][ T9] usb 3-1: device descriptor read/64, error -71 [ 1028.151478][ T5903] buffer_io_error: 5098 callbacks suppressed [ 1028.151494][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.165625][T14722] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1028.179982][T14722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1028.192044][T14722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1028.205913][T18483] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.223878][T14722] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1028.238906][T18483] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.254007][T18483] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.268189][T18483] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.302086][T14722] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1028.343907][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.352714][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.365369][T14722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.396980][T18484] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.418553][T14722] usb 5-1: config 0 descriptor?? [ 1028.438498][T18484] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.447508][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1028.468261][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.603835][ T9] usb 3-1: device descriptor read/64, error -71 [ 1028.714207][ T9] usb usb3-port1: attempt power cycle [ 1028.877531][T14722] plantronics 0003:047F:FFFF.0047: ignoring exceeding usage max [ 1028.974062][T14722] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1029.073362][ T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1029.144261][ T9] usb 3-1: device descriptor read/8, error -71 [ 1029.403413][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1029.430011][ T9] usb 3-1: device descriptor read/8, error -71 [ 1029.544572][ T9] usb usb3-port1: unable to enumerate USB device [ 1029.708074][ T9] usb 5-1: USB disconnect, device number 116 [ 1030.579009][T18498] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1031.257006][T18504] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2596'. [ 1032.203506][T14722] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1032.627719][T14722] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1032.636248][T14722] usb 3-1: not running at top speed; connect to a high speed hub [ 1032.676558][T14722] usb 3-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 1032.755669][T14722] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1032.802388][T14722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.011585][T14722] usb 3-1: Product: syz [ 1033.016658][T14722] usb 3-1: Manufacturer: syz [ 1033.021314][T14722] usb 3-1: SerialNumber: syz [ 1033.132805][T14722] usb 3-1: bad CDC descriptors [ 1033.155176][T18498] buffer_io_error: 11329 callbacks suppressed [ 1033.155200][T18498] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.193658][T18498] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.235857][T18498] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.277797][T18498] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.277932][T18527] vivid-000: ================= START STATUS ================= [ 1033.294486][T18498] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.302383][T18527] vivid-000: Test Pattern: 75% Colorbar [ 1033.308651][T18527] vivid-000: Fill Percentage of Frame: 100 [ 1033.315325][T18498] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.323670][T18527] vivid-000: Horizontal Movement: No Movement [ 1033.334159][T18498] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.343862][T18527] vivid-000: Vertical Movement: Move Up Slow [ 1033.345689][T18498] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.354498][T18527] vivid-000: OSD Text Mode: All [ 1033.363065][T18527] vivid-000: Show Border: false [ 1033.373583][T18498] Buffer I/O error on dev loop6, logical block 0, async page read [ 1033.460664][T18527] vivid-000: Show Square: false [ 1033.472754][T18527] vivid-000: Sensor Flipped Horizontally: false [ 1033.497156][T18527] vivid-000: Sensor Flipped Vertically: false [ 1033.506210][T18527] vivid-000: Insert SAV Code in Image: false [ 1033.512728][T18527] vivid-000: Insert EAV Code in Image: false [ 1033.522844][T18527] vivid-000: Insert Video Guard Band: false [ 1033.532945][T18527] vivid-000: Reduced Framerate: false [ 1033.549717][T18527] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1033.595786][T18527] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1033.625715][T18527] vivid-000: Enable Capture Cropping: true grabbed [ 1033.646004][T18527] vivid-000: Enable Capture Composing: true grabbed [ 1033.690329][T18527] vivid-000: Enable Capture Scaler: true grabbed [ 1033.736599][T18527] vivid-000: Timestamp Source: End of Frame [ 1033.752013][T18527] vivid-000: Colorspace: sRGB [ 1033.774502][T18527] vivid-000: Transfer Function: Default [ 1033.791668][T18527] vivid-000: Y'CbCr Encoding: Default [ 1033.816421][T18527] vivid-000: HSV Encoding: Hue 0-179 [ 1033.842016][T18527] vivid-000: Quantization: Default [ 1033.865996][T18527] vivid-000: Apply Alpha To Red Only: false [ 1033.883793][T18527] vivid-000: Standard Aspect Ratio: 4x3 [ 1033.894442][T18527] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1033.909263][T18527] vivid-000: DV Timings: 640x480p59 inactive [ 1033.933563][T18527] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1033.951558][T18527] vivid-000: Maximum EDID Blocks: 2 [ 1033.967505][T18527] vivid-000: Limited RGB Range (16-235): false [ 1033.980521][T18527] vivid-000: Rx RGB Quantization Range: Automatic [ 1033.989522][T18527] vivid-000: Power Present: 0x00000001 [ 1033.996511][T18527] tpg source WxH: 320x180 (R'G'B) [ 1034.002762][T18527] tpg field: 1 [ 1034.006247][T18527] tpg crop: (0,0)/320x180 [ 1034.012924][T18527] tpg compose: (0,0)/320x180 [ 1034.019734][T18527] tpg colorspace: 8 [ 1034.025763][T18527] tpg transfer function: 0/2 [ 1034.032458][T18527] tpg quantization: 0/1 [ 1034.038241][T18527] tpg RGB range: 0/2 [ 1034.045548][T18527] vivid-000: ================== END STATUS ================== [ 1034.093687][T14722] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1034.234661][T18533] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2603'. [ 1034.253508][T14722] usb 6-1: Using ep0 maxpacket: 16 [ 1034.263983][T14722] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.278606][T14722] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1034.288402][T14722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.297282][T14722] usb 6-1: Product: syz [ 1034.303966][T14722] usb 6-1: Manufacturer: syz [ 1034.308645][T14722] usb 6-1: SerialNumber: syz [ 1034.324427][T14722] usb 6-1: config 0 descriptor?? [ 1034.652670][T14722] usb 3-1: USB disconnect, device number 102 [ 1035.220074][ T6964] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1035.464506][ T6964] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1035.518063][ T6964] usb 2-1: not running at top speed; connect to a high speed hub [ 1035.585294][ T6964] usb 2-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 1035.628515][ T6964] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1035.638111][ T6964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.646352][ T6964] usb 2-1: Product: syz [ 1035.651357][ T6964] usb 2-1: Manufacturer: syz [ 1035.656698][ T6964] usb 2-1: SerialNumber: syz [ 1035.672737][ T6964] usb 2-1: bad CDC descriptors [ 1036.880341][T14722] usb 6-1: USB disconnect, device number 111 [ 1036.895300][T18562] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1036.906433][T18562] loop6: detected capacity change from 0 to 63 [ 1036.954345][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1037.623287][T14722] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1038.163231][T18563] buffer_io_error: 3460 callbacks suppressed [ 1038.163256][T18563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.178231][T18563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.187197][T18563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.193365][T14722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.230111][T14722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.243919][T14722] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1038.254253][T18563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.255034][T14722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.285648][T18563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.294750][T18563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.305025][T18563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.313850][T18563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.323021][T18563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.331930][T18563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.422540][T14722] usb 6-1: config 0 descriptor?? [ 1038.722725][ T6964] usb 2-1: USB disconnect, device number 114 [ 1038.852217][T14722] cp2112 0003:10C4:EA90.0048: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1039.048143][T14722] cp2112 0003:10C4:EA90.0048: Part Number: 0x82 Device Version: 0xFE [ 1039.248861][T14722] cp2112 0003:10C4:EA90.0048: error requesting SMBus config [ 1039.304029][T14722] cp2112 0003:10C4:EA90.0048: probe with driver cp2112 failed with error -32 [ 1039.401879][T18578] vivid-000: ================= START STATUS ================= [ 1039.443530][T18580] fuse: Unknown parameter 'r' [ 1039.494458][T18578] vivid-000: Test Pattern: 75% Colorbar [ 1039.500618][T18578] vivid-000: Fill Percentage of Frame: 100 [ 1039.509672][T18578] vivid-000: Horizontal Movement: No Movement [ 1039.520042][T18578] vivid-000: Vertical Movement: Move Up Slow [ 1039.533029][T18578] vivid-000: OSD Text Mode: All [ 1039.540457][T18578] vivid-000: Show Border: false [ 1039.661202][T18578] vivid-000: Show Square: false [ 1039.669218][T18578] vivid-000: Sensor Flipped Horizontally: false [ 1039.677081][T18578] vivid-000: Sensor Flipped Vertically: false [ 1039.687655][T18578] vivid-000: Insert SAV Code in Image: false [ 1039.752793][T18578] vivid-000: Insert EAV Code in Image: false [ 1039.761283][T18578] vivid-000: Insert Video Guard Band: false [ 1039.774009][T18578] vivid-000: Reduced Framerate: false [ 1039.781043][T18578] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1039.796028][T18578] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1039.817993][T18578] vivid-000: Enable Capture Cropping: true grabbed [ 1039.832575][T18578] vivid-000: Enable Capture Composing: true grabbed [ 1039.839785][T18578] vivid-000: Enable Capture Scaler: true grabbed [ 1039.875161][T18578] vivid-000: Timestamp Source: End of Frame [ 1039.926253][T18578] vivid-000: Colorspace: sRGB [ 1039.938630][T18578] vivid-000: Transfer Function: Default [ 1039.950969][T18578] vivid-000: Y'CbCr Encoding: Default [ 1039.965415][T18578] vivid-000: HSV Encoding: Hue 0-179 [ 1039.978836][T18578] vivid-000: Quantization: Default [ 1039.995562][T18578] vivid-000: Apply Alpha To Red Only: false [ 1040.007907][T18578] vivid-000: Standard Aspect Ratio: 4x3 [ 1040.019735][T18578] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1040.038839][T18578] vivid-000: DV Timings: 640x480p59 inactive [ 1040.050583][T18578] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1040.065001][T18578] vivid-000: Maximum EDID Blocks: 2 [ 1040.076479][T18578] vivid-000: Limited RGB Range (16-235): false [ 1040.089249][T18578] vivid-000: Rx RGB Quantization Range: Automatic [ 1040.101531][T18578] vivid-000: Power Present: 0x00000001 [ 1040.113283][T18578] tpg source WxH: 320x180 (R'G'B) [ 1040.119998][T18578] tpg field: 1 [ 1040.126774][T18578] tpg crop: (0,0)/320x180 [ 1040.132458][T18578] tpg compose: (0,0)/320x180 [ 1040.138435][T18578] tpg colorspace: 8 [ 1040.151352][T18578] tpg transfer function: 0/2 [ 1040.157727][T18578] tpg quantization: 0/1 [ 1040.164723][T18578] tpg RGB range: 0/2 [ 1040.171383][T18578] vivid-000: ================== END STATUS ================== [ 1040.268290][T18584] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2625'. [ 1040.328283][T18586] vivid-000: ================= START STATUS ================= [ 1040.346042][T18586] vivid-000: Test Pattern: 75% Colorbar [ 1040.351840][T18586] vivid-000: Fill Percentage of Frame: 100 [ 1040.359287][T18586] vivid-000: Horizontal Movement: No Movement [ 1040.366974][T18586] vivid-000: Vertical Movement: Move Up Slow [ 1040.374502][T18586] vivid-000: OSD Text Mode: All [ 1040.380549][T18586] vivid-000: Show Border: false [ 1040.386755][T18586] vivid-000: Show Square: false [ 1040.392725][T18586] vivid-000: Sensor Flipped Horizontally: false [ 1040.402795][T18586] vivid-000: Sensor Flipped Vertically: false [ 1040.979040][T18586] vivid-000: Insert SAV Code in Image: false [ 1040.988568][T18586] vivid-000: Insert EAV Code in Image: false [ 1041.001850][T18586] vivid-000: Insert Video Guard Band: false [ 1041.015794][T18586] vivid-000: Reduced Framerate: false [ 1041.025819][T18586] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1041.037517][T18586] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1041.058043][T18586] vivid-000: Enable Capture Cropping: true grabbed [ 1041.085322][T18586] vivid-000: Enable Capture Composing: true grabbed [ 1041.102833][T18586] vivid-000: Enable Capture Scaler: true grabbed [ 1041.117698][T18586] vivid-000: Timestamp Source: End of Frame [ 1041.177888][T18586] vivid-000: Colorspace: sRGB [ 1041.184611][T18586] vivid-000: Transfer Function: Default [ 1041.189799][ T5841] usb 6-1: USB disconnect, device number 112 [ 1041.201770][T18586] [ 1041.205152][T18586] vivid-000: Y'CbCr Encoding: Default [ 1041.212015][T18586] vivid-000: HSV Encoding: Hue 0-179 [ 1041.218656][T18586] vivid-000: Quantization: Default [ 1041.227197][T18586] vivid-000: Apply Alpha To Red Only: false [ 1041.233989][T18586] vivid-000: Standard Aspect Ratio: 4x3 [ 1041.261573][T18586] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1041.522413][T18586] vivid-000: DV Timings: 640x480p59 inactive [ 1041.644443][T18586] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1041.662153][T18586] vivid-000: Maximum EDID Blocks: 2 [ 1041.674697][T18586] vivid-000: Limited RGB Range (16-235): false [ 1041.685426][T18586] vivid-000: Rx RGB Quantization Range: Automatic [ 1041.694376][T18586] vivid-000: Power Present: 0x00000001 [ 1041.704765][T18586] tpg source WxH: 320x180 (R'G'B) [ 1041.713742][T18586] tpg field: 1 [ 1041.721505][T18586] tpg crop: (0,0)/320x180 [ 1041.729335][T18586] tpg compose: (0,0)/320x180 [ 1041.737265][T18586] tpg colorspace: 8 [ 1041.743928][T18586] tpg transfer function: 0/2 [ 1041.750939][T18586] tpg quantization: 0/1 [ 1041.758036][T18586] tpg RGB range: 0/2 [ 1041.768269][T18586] vivid-000: ================== END STATUS ================== [ 1041.961457][T18605] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2619'. [ 1042.423620][T14722] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1042.598239][T14722] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1042.608397][T14722] usb 2-1: not running at top speed; connect to a high speed hub [ 1042.619162][T14722] usb 2-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 1042.642101][T14722] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1042.652544][T14722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.672651][T14722] usb 2-1: Product: syz [ 1042.682015][T14722] usb 2-1: Manufacturer: syz [ 1042.692444][T14722] usb 2-1: SerialNumber: syz [ 1042.776525][T18620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2622'. [ 1042.786913][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2622'. [ 1043.044567][T14722] usb 2-1: bad CDC descriptors [ 1043.883263][ T6964] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1044.083599][ T6964] usb 1-1: Using ep0 maxpacket: 16 [ 1044.107973][ T6964] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.147669][ T6964] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1044.171593][ T6964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.200480][ T6964] usb 1-1: Product: syz [ 1044.217297][ T6964] usb 1-1: Manufacturer: syz [ 1044.233455][ T6964] usb 1-1: SerialNumber: syz [ 1044.271092][ T6964] usb 1-1: config 0 descriptor?? [ 1045.000769][ T5841] usb 2-1: USB disconnect, device number 115 [ 1045.762667][T18642] fuse: Unknown parameter 'r' [ 1045.808360][ T6964] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1045.943345][ T6964] usb 6-1: device descriptor read/64, error -71 [ 1046.106537][T18645] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2629'. [ 1046.193712][ T6964] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1046.333415][ T6964] usb 6-1: device descriptor read/64, error -71 [ 1046.397370][ T6967] usb 1-1: USB disconnect, device number 126 [ 1046.443524][ T6964] usb usb6-port1: attempt power cycle [ 1046.502693][T18652] vivid-000: ================= START STATUS ================= [ 1046.520906][T18652] vivid-000: Test Pattern: 75% Colorbar [ 1046.530220][T18652] vivid-000: Fill Percentage of Frame: 100 [ 1046.536513][T18652] vivid-000: Horizontal Movement: No Movement [ 1046.542835][T18652] vivid-000: Vertical Movement: Move Up Slow [ 1046.550969][T18652] vivid-000: OSD Text Mode: All [ 1046.556678][T18652] vivid-000: Show Border: false [ 1046.563349][ T5841] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1046.571447][T18652] vivid-000: Show Square: false [ 1046.577336][T18652] vivid-000: Sensor Flipped Horizontally: false [ 1046.584077][T18652] vivid-000: Sensor Flipped Vertically: false [ 1046.592803][T18652] vivid-000: Insert SAV Code in Image: false [ 1046.599543][T18652] vivid-000: Insert EAV Code in Image: false [ 1046.606876][T18652] vivid-000: Insert Video Guard Band: false [ 1046.614027][T18652] vivid-000: Reduced Framerate: false [ 1046.620454][T18652] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1046.628981][T18652] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1046.638132][T18652] vivid-000: Enable Capture Cropping: true grabbed [ 1046.645881][T18652] vivid-000: Enable Capture Composing: true grabbed [ 1046.652603][T18652] vivid-000: Enable Capture Scaler: true grabbed [ 1046.665722][T18652] vivid-000: Timestamp Source: End of Frame [ 1046.675828][T18652] vivid-000: Colorspace: sRGB [ 1046.681731][T18652] vivid-000: Transfer Function: Default [ 1046.689727][T18652] vivid-000: Y'CbCr Encoding: Default [ 1046.701583][T18652] vivid-000: HSV Encoding: Hue 0-179 [ 1046.711599][T18652] vivid-000: Quantization: Default [ 1046.717484][T18652] vivid-000: Apply Alpha To Red Only: false [ 1046.724020][T18652] vivid-000: Standard Aspect Ratio: 4x3 [ 1046.731658][T18652] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1046.740754][T18652] vivid-000: DV Timings: 640x480p59 inactive [ 1046.748853][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.760815][T18652] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1046.768984][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.779184][ T5841] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1046.788662][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.797121][T18652] vivid-000: Maximum EDID Blocks: 2 [ 1046.802834][T18652] vivid-000: Limited RGB Range (16-235): [ 1046.804005][ T6964] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1046.805987][ T5841] usb 3-1: config 0 descriptor?? [ 1046.822665][T18652] false [ 1046.834194][T18652] vivid-000: Rx RGB Quantization Range: Automatic [ 1046.840825][T18652] vivid-000: Power Present: 0x00000001 [ 1046.846685][T18652] tpg source WxH: 320x180 (R'G'B) [ 1046.852284][T18652] tpg field: 1 [ 1046.854343][ T6964] usb 6-1: device descriptor read/8, error -71 [ 1046.866190][T18652] tpg crop: (0,0)/320x180 [ 1046.879020][T18652] tpg compose: (0,0)/320x180 [ 1046.884145][T18652] tpg colorspace: 8 [ 1046.888641][T18652] tpg transfer function: 0/2 [ 1046.895092][T18652] tpg quantization: 0/1 [ 1046.899627][T18652] tpg RGB range: 0/2 [ 1046.904299][T18652] vivid-000: ================== END STATUS ================== [ 1047.103334][ T6964] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1047.121716][T18657] fuse: Unknown parameter 'r' [ 1047.136631][ T6964] usb 6-1: device descriptor read/8, error -71 [ 1047.243925][ T6964] usb usb6-port1: unable to enumerate USB device [ 1047.294218][ T5841] cp2112 0003:10C4:EA90.0049: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1047.536083][ T5841] cp2112 0003:10C4:EA90.0049: Part Number: 0x82 Device Version: 0xFE [ 1047.791044][ T5841] cp2112 0003:10C4:EA90.0049: error requesting SMBus config [ 1047.809826][ T5841] cp2112 0003:10C4:EA90.0049: probe with driver cp2112 failed with error -32 [ 1047.953282][ T6964] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1048.348635][ T6964] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1048.410646][ T6964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1048.425248][ T6964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1048.436883][ T6964] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1048.774892][ T6964] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1048.818415][ T6964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.884766][ T6964] usb 1-1: config 0 descriptor?? [ 1049.013317][ T5841] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 1049.081992][T18685] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2636'. [ 1049.191032][ T5841] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1049.202464][ T5841] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1049.240519][ T5841] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1049.293566][ T5841] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1049.307251][ T5841] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1049.319013][ T6964] plantronics 0003:047F:FFFF.004A: ignoring exceeding usage max [ 1049.323390][ T5841] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1049.366454][ T6973] usb 3-1: USB disconnect, device number 103 [ 1049.388371][ T5841] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1049.420582][ T6964] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1049.441676][ T5841] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1049.502363][ T5841] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1049.551650][ T5841] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1049.587387][ T5841] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1049.597414][ T5841] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1049.615987][ T5841] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1049.633317][ T5841] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1049.645262][ T5841] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1049.751659][ T5841] usb 2-1: string descriptor 0 read error: -22 [ 1049.764449][ T5841] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1049.776197][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.832581][ T5841] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1050.153604][ T5841] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1050.337866][ T5841] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1050.353896][ T5841] usb 3-1: not running at top speed; connect to a high speed hub [ 1050.374990][ T5841] usb 3-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 1050.388717][ T5841] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1050.398409][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.410619][ T5841] usb 3-1: Product: syz [ 1050.417318][ T5841] usb 3-1: Manufacturer: syz [ 1050.434710][ T5841] usb 3-1: SerialNumber: syz [ 1050.643396][ T5841] usb 3-1: bad CDC descriptors [ 1050.658840][ T6964] usb 2-1: USB disconnect, device number 116 [ 1051.004133][ T5841] usb 1-1: USB disconnect, device number 127 [ 1051.432154][T18712] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2642'. [ 1051.519301][T18712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'. [ 1052.670643][ T5926] usb 3-1: USB disconnect, device number 104 [ 1052.844739][T18717] vivid-000: ================= START STATUS ================= [ 1052.852956][T18717] vivid-000: Test Pattern: 75% Colorbar [ 1052.859204][T18717] vivid-000: Fill Percentage of Frame: 100 [ 1052.866791][T18717] vivid-000: Horizontal Movement: No Movement [ 1052.873564][T18717] vivid-000: Vertical Movement: Move Up Slow [ 1052.880259][T18717] vivid-000: OSD Text Mode: All [ 1052.887284][T18717] vivid-000: Show Border: false [ 1052.892651][T18717] vivid-000: Show Square: false [ 1052.905445][T18717] vivid-000: Sensor Flipped Horizontally: false [ 1052.912040][T18717] vivid-000: Sensor Flipped Vertically: false [ 1052.920077][T18717] vivid-000: Insert SAV Code in Image: false [ 1052.934964][T18717] vivid-000: Insert EAV Code in Image: false [ 1052.942904][T18717] vivid-000: Insert Video Guard Band: false [ 1052.967877][T18717] vivid-000: Reduced Framerate: false [ 1052.993781][T18717] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1053.040572][T18717] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1053.062335][T18717] vivid-000: Enable Capture Cropping: true grabbed [ 1053.072857][T18717] vivid-000: Enable Capture Composing: true grabbed [ 1053.086682][T18717] vivid-000: Enable Capture Scaler: true grabbed [ 1053.096009][T18717] vivid-000: Timestamp Source: End of Frame [ 1053.103565][T18717] vivid-000: Colorspace: sRGB [ 1053.110165][T18717] vivid-000: Transfer Function: Default [ 1053.116317][T18717] vivid-000: Y'CbCr Encoding: Default [ 1053.121893][T18717] vivid-000: HSV Encoding: Hue 0-179 [ 1053.131595][T18717] vivid-000: Quantization: Default [ 1053.142326][T18717] vivid-000: Apply Alpha To Red Only: false [ 1053.144193][T18723] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2646'. [ 1053.160437][T18717] [ 1053.163034][T18717] vivid-000: Standard Aspect Ratio: 4x3 [ 1053.163354][ T6964] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1053.171111][T18717] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1053.189324][T18717] vivid-000: DV Timings: 640x480p59 inactive [ 1053.209437][T18717] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1053.221378][T18717] vivid-000: Maximum EDID Blocks: 2 [ 1053.232551][T18717] vivid-000: Limited RGB Range (16-235): false [ 1053.255167][T18717] vivid-000: Rx RGB Quantization Range: Automatic [ 1053.268754][T18717] vivid-000: Power Present: 0x00000001 [ 1053.278908][T18717] tpg source WxH: 320x180 (R'G'B) [ 1053.285687][T18717] tpg field: 1 [ 1053.291273][T18717] tpg crop: (0,0)/320x180 [ 1053.297562][T18717] tpg compose: (0,0)/320x180 [ 1053.302475][T18717] tpg colorspace: 8 [ 1053.307575][T18717] tpg transfer function: 0/2 [ 1053.312324][T18717] tpg quantization: 0/1 [ 1053.324115][T18717] tpg RGB range: 0/2 [ 1053.328361][T18717] vivid-000: ================== END STATUS ================== [ 1053.358772][ T6964] usb 3-1: Using ep0 maxpacket: 16 [ 1053.377272][ T6964] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.395719][ T6964] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1053.441460][ T6964] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1053.451191][ T6964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.459292][ T6964] usb 3-1: Product: syz [ 1053.463808][ T6964] usb 3-1: Manufacturer: syz [ 1053.468437][ T6964] usb 3-1: SerialNumber: syz [ 1053.547439][ T6964] usb 3-1: config 0 descriptor?? [ 1053.778289][T18727] fuse: Unknown parameter 'r' [ 1054.766993][T18742] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2650'. [ 1054.905884][T18744] input: syz1 as /devices/virtual/input/input87 [ 1055.460431][T18747] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2651'. [ 1055.853017][ T6964] usb 3-1: USB disconnect, device number 105 [ 1056.703289][ T5926] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1057.072783][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1057.088019][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1057.111890][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1057.143110][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1057.181757][ T5926] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1057.206406][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.237948][ T5926] usb 2-1: config 0 descriptor?? [ 1057.666605][ T5926] plantronics 0003:047F:FFFF.004B: ignoring exceeding usage max [ 1057.698602][ T5926] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1058.297309][T18772] bridge0: entered promiscuous mode [ 1058.930541][T18782] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2660'. [ 1058.940685][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2660'. [ 1059.360149][T18787] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2662'. [ 1059.667595][ T6964] usb 2-1: USB disconnect, device number 117 [ 1059.777860][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.784612][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.855540][T18792] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1059.897407][T18792] loop6: detected capacity change from 0 to 63 [ 1059.931576][ T5903] buffer_io_error: 2194 callbacks suppressed [ 1059.931593][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1060.047420][T18792] Buffer I/O error on dev loop6, logical block 0, async page read [ 1060.057174][T18793] Buffer I/O error on dev loop6, logical block 0, async page read [ 1060.093606][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1060.144169][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1060.167347][T18793] Buffer I/O error on dev loop6, logical block 0, async page read [ 1060.192432][T18793] Buffer I/O error on dev loop6, logical block 0, async page read [ 1060.203641][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1060.212199][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1060.226527][T18793] Buffer I/O error on dev loop6, logical block 0, async page read [ 1060.333493][ T6964] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1060.623612][ T6964] usb 2-1: Using ep0 maxpacket: 16 [ 1060.667591][ T6964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.682089][ T6964] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1060.709712][ T6964] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1060.719552][ T6964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.813411][ T6964] usb 2-1: Product: syz [ 1060.893618][ T6964] usb 2-1: Manufacturer: syz [ 1061.021959][ T6964] usb 2-1: SerialNumber: syz [ 1061.085614][ T6964] usb 2-1: config 0 descriptor?? [ 1063.292279][T18824] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2678'. [ 1063.303018][T18824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'. [ 1063.399529][T18827] input: syz1 as /devices/virtual/input/input88 [ 1063.437216][ T5926] usb 2-1: USB disconnect, device number 118 [ 1064.332477][T18834] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2671'. [ 1065.796861][T18842] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2674'. [ 1066.245652][ T6964] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1066.360033][T18849] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2677'. [ 1066.425500][ T6964] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1066.479382][ T6964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1066.585489][ T6964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1066.615321][ T6964] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1066.674666][ T6964] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1066.729558][ T6964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.763926][ T6964] usb 3-1: config 0 descriptor?? [ 1066.918216][T18854] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1067.146092][T18854] loop6: detected capacity change from 0 to 63 [ 1067.238483][ T5903] buffer_io_error: 3053 callbacks suppressed [ 1067.238502][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1067.354222][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1067.384005][ T6964] plantronics 0003:047F:FFFF.004C: ignoring exceeding usage max [ 1067.418134][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1067.447715][ T6964] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1067.535607][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1067.589426][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1067.674963][T18861] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2690'. [ 1067.683471][T18854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1067.693703][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2690'. [ 1067.749602][T18854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1067.777670][T18854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1067.810026][T18855] Buffer I/O error on dev loop6, logical block 0, async page read [ 1067.853780][T18854] Buffer I/O error on dev loop6, logical block 0, async page read [ 1069.203255][ T5926] usb 3-1: USB disconnect, device number 106 [ 1069.303705][ T5841] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1069.583523][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 1069.592118][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.672092][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1069.712594][ T5841] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1069.723234][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.732013][ T5841] usb 2-1: Product: syz [ 1069.758630][ T5841] usb 2-1: Manufacturer: syz [ 1069.769780][ T5841] usb 2-1: SerialNumber: syz [ 1069.792974][ T5841] usb 2-1: config 0 descriptor?? [ 1070.333340][ T6967] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1070.500301][ T6967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.511976][ T6967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.543295][ T6967] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1070.561703][ T6967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.586648][ T6967] usb 5-1: config 0 descriptor?? [ 1071.035787][ T6967] cp2112 0003:10C4:EA90.004D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1071.221065][ T6967] cp2112 0003:10C4:EA90.004D: Part Number: 0x82 Device Version: 0xFE [ 1071.438798][ T6967] cp2112 0003:10C4:EA90.004D: error requesting SMBus config [ 1071.484479][ T6967] cp2112 0003:10C4:EA90.004D: probe with driver cp2112 failed with error -5 [ 1071.517091][T18881] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1072.047226][ T5926] usb 2-1: USB disconnect, device number 119 [ 1072.127833][T18900] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2688'. [ 1072.715206][T18907] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2692'. [ 1073.046918][ T5926] usb 5-1: USB disconnect, device number 117 [ 1073.359168][T18921] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2695' sets config #1 [ 1073.717088][T18925] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1073.909264][T18928] fuse: Unknown parameter 'r' [ 1074.175323][T18925] loop6: detected capacity change from 0 to 63 [ 1074.277202][ T5903] buffer_io_error: 2907 callbacks suppressed [ 1074.277217][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.314040][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.532467][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.542928][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.563621][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.583699][T18925] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.591833][T18925] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.603692][T18925] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.613506][T18925] Buffer I/O error on dev loop6, logical block 0, async page read [ 1074.621719][T18925] Buffer I/O error on dev loop6, logical block 0, async page read [ 1075.380085][ T5841] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1075.553890][ T5841] usb 1-1: Using ep0 maxpacket: 16 [ 1075.965383][ T5841] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1076.043472][ T5841] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1076.073485][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.093228][ T5841] usb 1-1: Product: syz [ 1076.108539][ T5841] usb 1-1: Manufacturer: syz [ 1076.115869][ T5841] usb 1-1: SerialNumber: syz [ 1076.124641][ T5841] usb 1-1: config 0 descriptor?? [ 1078.113574][ T6973] usb 1-1: USB disconnect, device number 2 [ 1078.396359][T18943] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1078.493350][ T5841] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1078.791567][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.903561][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.915227][ T5841] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1078.925030][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.942073][ T5841] usb 2-1: config 0 descriptor?? [ 1079.515039][ T5841] cp2112 0003:10C4:EA90.004E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1079.721752][ T5841] cp2112 0003:10C4:EA90.004E: Part Number: 0x82 Device Version: 0xFE [ 1080.092593][ T5841] cp2112 0003:10C4:EA90.004E: error requesting SMBus config [ 1080.100049][T11757] ================================================================== [ 1080.108149][T11757] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x5b9/0x7e0 [ 1080.115982][T11757] Read of size 8 at addr ffff88804764cb88 by task kworker/u8:4/11757 [ 1080.124073][T11757] [ 1080.126453][T11757] CPU: 1 UID: 0 PID: 11757 Comm: kworker/u8:4 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 1080.126482][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1080.126497][T11757] Workqueue: events_unbound linkwatch_event [ 1080.126524][T11757] Call Trace: [ 1080.126533][T11757] [ 1080.126543][T11757] dump_stack_lvl+0x189/0x250 [ 1080.126568][T11757] ? __kasan_check_byte+0x12/0x40 [ 1080.126600][T11757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1080.126624][T11757] ? lock_release+0x4b/0x3e0 [ 1080.126648][T11757] ? __virt_addr_valid+0x4a5/0x5c0 [ 1080.126677][T11757] print_report+0xca/0x230 [ 1080.126695][T11757] ? __linkwatch_run_queue+0x5b9/0x7e0 [ 1080.126715][T11757] kasan_report+0x118/0x150 [ 1080.126745][T11757] ? __linkwatch_run_queue+0x5b9/0x7e0 [ 1080.126770][T11757] __linkwatch_run_queue+0x5b9/0x7e0 [ 1080.126793][T11757] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1080.126816][T11757] ? _raw_spin_unlock_irq+0x23/0x50 [ 1080.126855][T11757] ? process_scheduled_works+0x9ef/0x17b0 [ 1080.126878][T11757] ? process_scheduled_works+0x9ef/0x17b0 [ 1080.126902][T11757] linkwatch_event+0x4c/0x60 [ 1080.126921][T11757] process_scheduled_works+0xae1/0x17b0 [ 1080.126959][T11757] ? __pfx_process_scheduled_works+0x10/0x10 [ 1080.126991][T11757] worker_thread+0x8a0/0xda0 [ 1080.127029][T11757] kthread+0x70e/0x8a0 [ 1080.127058][T11757] ? __pfx_worker_thread+0x10/0x10 [ 1080.127091][T11757] ? __pfx_kthread+0x10/0x10 [ 1080.127119][T11757] ? _raw_spin_unlock_irq+0x23/0x50 [ 1080.127138][T11757] ? lockdep_hardirqs_on+0x9c/0x150 [ 1080.127160][T11757] ? __pfx_kthread+0x10/0x10 [ 1080.127187][T11757] ret_from_fork+0x3fc/0x770 [ 1080.127211][T11757] ? __pfx_ret_from_fork+0x10/0x10 [ 1080.127234][T11757] ? __switch_to_asm+0x39/0x70 [ 1080.127260][T11757] ? __switch_to_asm+0x33/0x70 [ 1080.127296][T11757] ? __pfx_kthread+0x10/0x10 [ 1080.127329][T11757] ret_from_fork_asm+0x1a/0x30 [ 1080.127372][T11757] [ 1080.127380][T11757] [ 1080.317932][T11757] The buggy address belongs to the physical page: [ 1080.324369][T11757] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804764fc00 pfn:0x4764c [ 1080.334466][T11757] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1080.341609][T11757] raw: 00fff00000000000 ffffea0001500008 ffff8880b863fdc0 0000000000000000 [ 1080.350208][T11757] raw: ffff88804764fc00 0000000000000000 00000000ffffffff 0000000000000000 [ 1080.358804][T11757] page dumped because: kasan: bad access detected [ 1080.365230][T11757] page_owner tracks the page as freed [ 1080.370613][T11757] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 18948, tgid 18944 (syz.2.2700), ts 1076435161010, free_ts 1079864808768 [ 1080.392610][T11757] post_alloc_hook+0x240/0x2a0 [ 1080.397402][T11757] get_page_from_freelist+0x21e4/0x22c0 [ 1080.402966][T11757] __alloc_frozen_pages_noprof+0x181/0x370 [ 1080.408813][T11757] __alloc_pages_noprof+0xa/0x30 [ 1080.413763][T11757] ___kmalloc_large_node+0x85/0x210 [ 1080.418982][T11757] __kmalloc_large_node_noprof+0x18/0x90 [ 1080.424641][T11757] __kvmalloc_node_noprof+0x6d/0x5f0 [ 1080.429947][T11757] alloc_netdev_mqs+0xa6/0x11e0 [ 1080.434815][T11757] tun_set_iff+0x532/0xef0 [ 1080.439284][T11757] __tun_chr_ioctl+0x788/0x1df0 [ 1080.444156][T11757] __ia32_compat_sys_ioctl+0x540/0x840 [ 1080.449629][T11757] __do_fast_syscall_32+0xb6/0x2b0 [ 1080.454761][T11757] do_fast_syscall_32+0x34/0x80 [ 1080.459632][T11757] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1080.465997][T11757] page last free pid 18946 tgid 18944 stack trace: [ 1080.472517][T11757] __free_frozen_pages+0xc71/0xe70 [ 1080.477661][T11757] __folio_put+0x21b/0x2c0 [ 1080.482091][T11757] free_large_kmalloc+0x145/0x200 [ 1080.487136][T11757] device_release+0x99/0x1c0 [ 1080.491753][T11757] kobject_put+0x22b/0x480 [ 1080.496186][T11757] netdev_run_todo+0xd2e/0xea0 [ 1080.500966][T11757] tun_chr_close+0x13c/0x1c0 [ 1080.505580][T11757] __fput+0x44c/0xa70 [ 1080.509575][T11757] task_work_run+0x1d1/0x260 [ 1080.514222][T11757] do_exit+0x6b5/0x22e0 [ 1080.518399][T11757] do_group_exit+0x21c/0x2d0 [ 1080.523006][T11757] get_signal+0x1286/0x1340 [ 1080.527523][T11757] arch_do_signal_or_restart+0x9a/0x750 [ 1080.533363][T11757] exit_to_user_mode_loop+0x75/0x110 [ 1080.538705][T11757] __do_fast_syscall_32+0x1f4/0x2b0 [ 1080.544030][T11757] do_fast_syscall_32+0x34/0x80 [ 1080.548911][T11757] [ 1080.551301][T11757] Memory state around the buggy address: [ 1080.556957][T11757] ffff88804764ca80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1080.565126][T11757] ffff88804764cb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1080.573206][T11757] >ffff88804764cb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1080.581282][T11757] ^ [ 1080.585622][T11757] ffff88804764cc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1080.593693][T11757] ffff88804764cc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1080.601764][T11757] ================================================================== [ 1080.735050][ T5841] cp2112 0003:10C4:EA90.004E: probe with driver cp2112 failed with error -5 [ 1080.938173][T11757] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1080.945439][T11757] CPU: 1 UID: 0 PID: 11757 Comm: kworker/u8:4 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 1080.958129][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1080.968219][T11757] Workqueue: events_unbound linkwatch_event [ 1080.974166][T11757] Call Trace: [ 1080.977494][T11757] [ 1080.980439][T11757] dump_stack_lvl+0x99/0x250 [ 1080.985139][T11757] ? __asan_memcpy+0x40/0x70 [ 1080.989773][T11757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1080.995113][T11757] ? __pfx__printk+0x10/0x10 [ 1080.999733][T11757] panic+0x2db/0x790 [ 1081.003656][T11757] ? __pfx_panic+0x10/0x10 [ 1081.008091][T11757] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1081.014012][T11757] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1081.020366][T11757] ? print_memory_metadata+0x314/0x400 [ 1081.025869][T11757] ? __linkwatch_run_queue+0x5b9/0x7e0 [ 1081.031386][T11757] check_panic_on_warn+0x89/0xb0 [ 1081.036374][T11757] ? __linkwatch_run_queue+0x5b9/0x7e0 [ 1081.041868][T11757] end_report+0x78/0x160 [ 1081.046316][T11757] kasan_report+0x129/0x150 [ 1081.050852][T11757] ? __linkwatch_run_queue+0x5b9/0x7e0 [ 1081.056344][T11757] __linkwatch_run_queue+0x5b9/0x7e0 [ 1081.061655][T11757] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1081.067483][T11757] ? _raw_spin_unlock_irq+0x23/0x50 [ 1081.072714][T11757] ? process_scheduled_works+0x9ef/0x17b0 [ 1081.078481][T11757] ? process_scheduled_works+0x9ef/0x17b0 [ 1081.084231][T11757] linkwatch_event+0x4c/0x60 [ 1081.088838][T11757] process_scheduled_works+0xae1/0x17b0 [ 1081.094420][T11757] ? __pfx_process_scheduled_works+0x10/0x10 [ 1081.100522][T11757] worker_thread+0x8a0/0xda0 [ 1081.105144][T11757] kthread+0x70e/0x8a0 [ 1081.109268][T11757] ? __pfx_worker_thread+0x10/0x10 [ 1081.114406][T11757] ? __pfx_kthread+0x10/0x10 [ 1081.119113][T11757] ? _raw_spin_unlock_irq+0x23/0x50 [ 1081.124335][T11757] ? lockdep_hardirqs_on+0x9c/0x150 [ 1081.129584][T11757] ? __pfx_kthread+0x10/0x10 [ 1081.134407][T11757] ret_from_fork+0x3fc/0x770 [ 1081.139121][T11757] ? __pfx_ret_from_fork+0x10/0x10 [ 1081.144259][T11757] ? __switch_to_asm+0x39/0x70 [ 1081.149076][T11757] ? __switch_to_asm+0x33/0x70 [ 1081.153886][T11757] ? __pfx_kthread+0x10/0x10 [ 1081.158526][T11757] ret_from_fork_asm+0x1a/0x30 [ 1081.163327][T11757] [ 1081.166685][T11757] Kernel Offset: disabled [ 1081.171065][T11757] Rebooting in 86400 seconds..