last executing test programs: 16.024314847s ago: executing program 2 (id=3728): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x113c}}, 0x8004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000640), 0x4) close(r4) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x29, 0x7, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000005c0)={'IDLETIMER\x00'}, &(0x7f0000000600)=0x1e) recvmsg$kcm(r7, &(0x7f0000000400)={&(0x7f0000000240)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000380)=""/19, 0x13}], 0x4}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304ffffffff000000", @ANYRES32=0x0, @ANYBLOB="0003000002800000140012800a00010069706f69620000000400028008000500", @ANYRES8=r6, @ANYBLOB="74d8"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x20000, 0x30, 0x2}, 0x18) sendfile(r8, r8, 0x0, 0x200000) 14.457214267s ago: executing program 0 (id=3731): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a0102000000000000000002001900090001"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0xfffffffffffffff5, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001500)=ANY=[@ANYBLOB='H\a\x00\x00', @ANYRES16=r8, @ANYBLOB="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"/1858], 0x748}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r9, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) 14.455954426s ago: executing program 1 (id=3732): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xced31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) read(r4, &(0x7f0000001140)=""/4096, 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13.593952645s ago: executing program 4 (id=3733): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001ff020000000000000000000000000001000107144e230005000000003a000000eb2128175268a9dc901d30d7cdf7fcf93be51887225ee81de7ea1ea879ddb03364dde7860858942304d868582de7f0ae310117ff3a89d93cd97752ac33e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141444000000000000000000000000000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae256", 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528", 0x8}, {&(0x7f0000000380)="863df713b27092133340", 0xa}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc62c34db799ccea", 0x60}, {&(0x7f0000001000)="5e48212599327704ccc5ca940f85ce93d081835a8f8ce527ba414eeb2fac35952374361fa3fe455eae90ef6636e089eeae608c4bb2a0cae5f3d8ebe5294f272023815eacab65c0a92cd792cae6645dcef01758183b1dab679fc8bccc9b2a7c95efda137f6f80e4159ff6295a35f2516454afb609ce2bc852ece0d2234e63a4cfcceb2f628f6425b0b5dd6ba4c20e250c72f658b059079271c6f206a758e87784fd6256d1ee6cd55ea723631572ba4729109fa114f7240bb6776054d1fa9b5c3114debca30e4196223e3f6fcbf715c61e62f3702e1a43c72c114587e1eb727a458aba50fe0da0523b0f243482e33c7af73d072374f04ec75bd199e7357d8d37a60c4b225c0ebb8e8fde86484871015eb8ccda35183959fccdbe3cc8f9f018c70c405d1847d8666a34f86d1f996b42f9ce536100b8d6080f472d2a87a277a0c45baca157f0d578b6ca0e8627819d4d8e5226494474ff573c36caf000e9c52f206013851f2702c83224a7ac58fef0a2f337174f79900af0899ad371ebc5759d1f48b01c962be95456341e280de8aa4e5b46f2ac3256254cdec803cbfe59", 0x19c}], 0x4}}], 0x3, 0x4004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 13.486691771s ago: executing program 2 (id=3734): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xced31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) read(r4, &(0x7f0000001140)=""/4096, 0x1000) 12.722748359s ago: executing program 3 (id=3735): pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RUNLINKAT(r0, &(0x7f0000000640)={0x7, 0x4d, 0x2}, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open$dir(0x0, 0x1, 0x19d) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) r5 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x80000002}) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) r6 = socket$kcm(0x29, 0xa, 0x0) recvmsg$kcm(r6, &(0x7f0000000400)={&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/51, 0x33}], 0x1}, 0x10021) r7 = memfd_create(&(0x7f0000000b40)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\xbd/\xd0J\xce=\x924\xc0\x17\x871N:\xb4\xea \x8e\xdelV\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8H\x7fsk\x9cD\xb3w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N', 0x2) fcntl$addseals(r7, 0x409, 0x27) ftruncate(r7, 0x7) syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0xfffffffffffffff5, r8, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x2, 0x80}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 11.953777218s ago: executing program 0 (id=3736): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 11.534486427s ago: executing program 1 (id=3737): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$video(0x0, 0x75, 0x101140) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x1, &(0x7f0000000100)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 9.975635896s ago: executing program 0 (id=3738): socket$inet6(0xa, 0x800, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x7, 0x8000000000000000, 0x7fff, 0xfa11, 0xffffffff}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000380)="2eab6d906e08a46fbdfe61aeb0de86179b9f313aa5e141e2ca00586e449dfe00000000006a00000000", 0x29}, {0x0}], 0x2) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xfe33) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502", @ANYRES8], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/188, 0xbc) socket$nl_generic(0x10, 0x3, 0x10) read$char_usb(r4, &(0x7f0000000100)=""/67, 0x43) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 9.913618311s ago: executing program 4 (id=3739): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) migrate_pages(0x0, 0x1, &(0x7f0000000100)=0x1, &(0x7f0000000180)=0x7) accept(r5, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f0000000440)=0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x3, 0x8, 0xfffff526, 0x74b1, 0x8, 0x5, 0x6, 0xb0, 0x1}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r6, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaeaaaaaaaaaaaaaaa0086dd6000000000180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078ffff03030800"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) 8.731902134s ago: executing program 2 (id=3740): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x40000003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.965428993s ago: executing program 3 (id=3741): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.142639168s ago: executing program 3 (id=3742): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x237, 0x0, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 7.130836845s ago: executing program 1 (id=3743): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000013c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x8000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000438000/0x2000)=nil, &(0x7f00008c4000/0x2000)=nil, 0x2000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x3, 0x0, &(0x7f0000000300)="5ac867"}) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x32) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) r8 = add_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="25543a44ffd654f1dc78b6f334a4dc84b539556f4337bcb0718b6aef8896b6ce0af198c3e028480eecb5f5f59eceb879787aa2837d6a6e5451dd744e113e5295aef4845ccf2a7b9d3f73a0628d18ae43cdf0657c255b976bc87f386dce3ad53beabee8947a30cb94dfe954b8e3e2c2c0fff454115d82563e1ddd3750b01091669c3571f37b5badcb10a2ddabaf5ff8b97429974c72219d34635778c480046ec9c62bb093f9a8f5461cd75a3a97b8939710cb4801a6ba4e9a92a715c4e7df0c68f349a8e3f44daf0f6ae249d67e64c42f6692e3df768b72ec6e738fff60c3696dc547f221ccb0300af124c9bb141eef96c907f20e2706291fbb1d740b604a7826610c8330dbce72ed157e73104550fafd9aba7f8eb4c3243fb4260979a0e41c5b5477843a3920765f5e1299f0f0e0586e9546a26dade07c5eccab78beddb672e5e06668e8e5eccedc0a1e0efb0b716d1494ae55e05de70cf786a406a21bb4e30105df8198c9e71c095ec0fe750d1d3d59483e4acb839687cfbc5a30617b9b48e4eb2ff08387ff12305cd1bdde08bcf7394276e05a4e798f552954e98926b7c3361f89feba4bb76db4740a6fbefed1334d83e6e1698ac4bfe27c7a178e3b1054fae2ab3de6c2e437e0f24546a2bba60984b4afbe666ce8c75cc028b4690a814060ff519206687408d015cef3be3361cddeaa3cd59b23e346a163ac63ab9f562c5afc95c8a3f828b8b87781e80a19f10809155ce7caf36385aa7616b26366593b3e8e829381913e6caf206b98dc80d8132f284c4fc59894cd3dbbb4e8e942b9492301f8a77abf729c0c1aa1134011519d7bf42e3d09260d334611e659f18a213c9268cff355b7b1d9e86f3c973a46f839983b5b4ec5cf85978d94c8af870cc4eb484be1022bf4cca57384b24fcf2f3414c05e8db36deef554640ed01fce1c5a52a62ec6d3b084ca17cfc8cab677a2d4fb902684052315e2223534ac783df9d40d1d0c6c7b5b9a56589ecbd033fb71fed054ef37bd9b68182355bd2a96f7b34d0ca5ba26a239c119b4d8ff9ed463c8033ab48a969d042706a86c288e9373c2a22b94095acfce4418296279bee7fa6432ee3c2545966f5e46c34a5f8d45d0ea2559fb53be40dc17a373f08cbfed30c72a89a1d071610a0d032bda22af6bf89fe945d8771a6d1c75c89fbe61856ffc073150122af407cf81e99257298fac738a8978fe87785f18d899fb49c584f69f42851ed74de75da818dbf18d0f78b6381e63538e0fbf9687e646e5f6a02eb8a0676432818eee4eaf0c702b711ffc702d86a219f427c675985abdd25e831dcc2b3f8a6ee65583a6309891c19e73ce6cd22c85d5006fa81dcf0b31ec81f63321855a372e565c5637fff1212515f9fc32ae96b9e2bc84e0bb449a7b497f267a089eb4ab864f1c9a80f1b3516edd2ce828fa1b8c39593e8851e8bb95ba1c76974d9145f5f0ae7beac45a9303fba5dd914d230bb82dd0e8632b58549626b590a62f0176f3aa0eab1124acc4dfff34194129f8b2078b88f26378c97e15d440a8166d9e5a6dc8ef144cb691ffbb6a026bc5310e53348c4da7f298fff839a10ad81199c66593928e5b6f42537c5e43725f77e75cf87ec3ac59e169eee6848b11f9a755371031937cda5e852e1cb383a1aa8818fb59b087347a36690e22a87d4513323d817f231d0e2364d09ca68e04e444dc0f574c7c1dd7b649d85ee1717930db0b09b3ca651d105bbd6dec55a2be8149a5ba2d4a467f7a375e812bcc9695a9c748cc61e3aa7a414a374eaa3aeedf5850464925f90652b415ef4a05bbcb2136a7e25fcace161c5fde43ac66cbdecbefc8eed546665213fc1af6465eb0eba2c776108dbe21db0d1c08a5fe937177ece4df279de34e839964344d4ae6c578b7fed3eda4f2fbecbc161f9067a0cf2681fcce3b8930418502d24ae41bfaaa281ee4c052bf95414170b1923e62f646bb8401971ee283ebbe8fe54c9b4b5af7f04ed0314da8af87811f941ebaeb76f2125faec0659ff521550a0a97487bfaf7bb72e4271a851f2daac3b1288105eaf7b4ffa6d5c0a6c70bf822a586827da936a1d7c9693b7b51dd6b536bbe14f1f13ad2ff88a9914328171ef32cd0f24554333a995faf024522917dc80e68860e8d9cf808b5a638765203fc9fa107bfd0a8670c4c62751d7189af68eda738bc1fe2967c69940514b58c4fa4168c08fb13b797b75fc122ea74307e94a96f5351f63780d5019bc4a8bf2478049891fcc3ea980ebaf7125fe8c6518ed4d2b5ffb53ffe383455e3e7fbe8bf7e3446fa9e707822358a42f8941bcdce2631347dbd0e3eaefea6cefb760d76cb4e6e125915bd96b68c6c7015a7c71f587796cd3af770470f39f62567125b455ab7130a12f79684698bc75208c42e04fa63e9451f574dda7ab662bdddaa5829d853b9f76ba4c080fe2499bfd8b86e860b5a9e867d14c8d6f9077a143741519774cfa118ad4c2803d876c6e3f92fffc8535aaa9ace8b56216108b7dc43e7c7fd9fd319b14244d1953035193e1be8e3baf576210ac306d85c77366cf1903f8474be05cd3fa3f1111b015410ad449f0fc87ff16cb5724a76e868595639a867dd18bf77fe0ee1ced57dc2ce167fc9e4900aa2cff345e2c94a6d2486ee124859a80dc057e189e8a44abbfaca596bfdc647c6b6d69b94253e4bd64400017a0be66a623321392e4e74036cee9aa06d450b03cc98a75c8a1aff1351072e7851503d45aa6edb10fb028742570d88f0f5f855b64e4147732929a25e3654900dc421434e5e458065bb9003724884a3d4477e3069ee6a1ac46b89a906b6c6b9a99b56f79af272cae984d2186022cdea564a4684e9001ff6ef353667389ef5ead575a45ecff4e9a964b531170650181c7a9c035e6de72a4996cad9c44abc8de535c013db8eaac5ed99c79046838192180e355acbbad651295938feb7e20255d3549957d6e338df9de59986658fca1ba2f3b6e8abacffaa3c400c7768dc6319bad7cb25015ae30e9e6e944da299f3d431d3518865cb31bd284588c1a4c42d527734ee70127bd3155bed279c2051026efc5fc39cf65b9ae0c8caa881a06a3bedc49b3c31eeca28459c3fee87dde9ac60c2268bb03804973942aec6fab7c7408f41ded4dcf43d76cc758d6ec8991b816cdfd305583c111d8476b4e2789e4120472a72d0bd8ca6353dd82c1d804740bd43332abf431d17f2690898237b43606f5bc40fbe5ca1ca43b83200022dcdeca12abc3ddd39d262c957d3ef830c7ff281067bda58465c87463be440026f994548e126a40e7881619a05637316db591c7c890c2d4577ab632fa6f341068526babb791bb74dc9569f36928a38b424dc86f0d2d37f379db0a84cd2c3ed825049fd0c9933f8f3b308bc505930a8319a26fe1029412264900cda89378a68e87ad2bfc5816225788e80dafbc582115f711309b95cc535082a7a0e1a12ded7ac77571e2d0a03436520c1f96cf738e221b7d24a0e334ed56ee55945c4ee1acc966b4572c10be9acdc9a24baf44d680ab3ac13705f816d59dfecc39e453ebea503577c0b30bbe898b7dbc1583edc9963461d949848ecbb857bfc88c885ce7a049aabbd9a6df84cb9071313ef0b8b2c5b2aa58c03403237815e218830a74abc8f7f867fc87725dbc25888b04af260004fcaac764f0c028ac2fb061273d365efe8462f3b7be966df5773c960ab82259628786ebdc5b0a64e905bab994b89e0f73f69cc2b2d9e0d4d6f82950b98d395698ec6479a058af2cef30bce42b3823ef2f739781ea7912938767c304ae32bb391c367a05dd51599d5fc7c4f71b8ba98ab1b97c501dd255c4f7b1db3d77ab85652eb4f1453ba38e8e1ce68677ba5070b66cd30c351c51f40069f5dd3b08b03ed33a38e3a2f72c4393fd71dee16f7d04f3a90a7d4fe15df5be130f6d5475d7f0e096727a3c2b7f8f45724c9a5a6e99edb1b87eb230640f90a124735b3001f01c87c40fe5172fe2aaed62096fc508abc81199a24c4c10d701f053cd99b33a5b51efe9f081dc8a00fa297ab80e52fe587cb8c1ecf12ec3492402d4905181d05dcdcfd1363898fabd7ae769db41494a464b5269856455b5fef6de42cca2e0e63a25ccf7b4be9bead331ae8a5b5de1d51d3b7d66cfd5f8ce3e7b197dd6c8d30ddb9e6b109d392949b309d567dee28937a891ef498488e5b184e315023c5d3eea84b44d06040744bf2b0f8db8619ce5c234d7b44d53b981160536be1d4827123ccff38b4986856c162ef60626a306aad3ac38d551c1d61faf5f3275eb7659dc911bc53619a01baddb871a491e95b70e362705ee5b5de7ec2f0c1fb38bc458b9e13e1d6bd3d3fbe6e157347e0802c8ff9c50e1c9412ac43c43409135bb2bbbab745d7248ccc473834218fdd79e4299c3a78e473c401f78429f85bf73a4f86423d6ec1212fd33b63ab35204ec5a8468de1a3d357e097be2024fda324687db1c8049f309011503ee2499b9127ee424e535eb6ad5feb4f02cab135d20edc412e65290fb1d406a11873af98e5717392e37f010443a8cef8380e0e7e0210f5c9474fd3169f1f476d0605530bbf9dc1acce5f1e778842843a2c6ba1e900fd675e1b24662fb9b60a0a1cd69e9c52225feda3c524a50af22fee1086fe538c27d7df9a7b4ed9ed5451bdbc7a360f8ec923db07d65684aa686ff85f03980314c01fae9d32eb9cb9c24934c93139fad8a3caa123c131a61e47a4ee0091838e557ae73e54dd1bfcb242c0234ddcb6896d48eb78a0d1b2889511b433a0454d137d710e6fb971fab986eddaeba5b93c21edb21b04f52d2bdb4adda91af742a3a4403396fa5c47ade26b5097dfe9311e4eab7a44fe7a0252c021492a3514fff0b9bb9764c8de81f814d4abfff46dca6ac0d76ab95d265e4ab1db3ef2d6b405a742d912bb78ab0184dee140bb3181c8bae52c78aea9dedbf438cbc5b89eb262654378a3c98cdaddc2c0d458bdcf23eb18d504e8a31c3c39753ae78f230769a9b9854dea00cb7ad4a2dd8cbcfb0280a4212ef0e2a5c5072ef5d7f8e2ec994b18938540dfece9aef57fa1c87ac8b06daaf549fbf047397df9563818fd9885cddb918c65ba774d12478d30ded3df0c44c2f373efb8e517a90117de8a085edd8447d1a9b0cc0050166ae36fdbf6acb6ee7efdbfb80e5a69e09dd36b186ca3b86a67a9fd1d256e619094400db2081ae8d8665717ec20b3c38a550cbbff00634323ae662862072c00b931472ae5ad15716d48218097357b8d6518f9dc8799adf67896c3c6b812b9409f64cc0bd20a112d395f3ac8909eba02068ca45835c1d87952a6c55e0a94f55f71e27b24c8dc15f780fcfdf66a67e617e039936f20c0a7bf9ad421ebe4e129d1816548270eee313b7b19429ef7c17ce34a7cd8e5865ab434118f23233fe5acec15db4494f7404ff39f9f235322028bbb48cd6d08e44cb5f41b0f94f546634e635de4290fef2207b45b6b77e4afc5a71b1237ed97220ec1ef9342157f9bc6987f92f7da0532dcc51b58ba576073d4a807276cee8dd74bee0bb986811280d8bdf89ccc398c2d62a16deaa36182a0e8c69222c13a5f5456f61a7a5cf4ac92d45f07a0a552befdbf23b020d937d4704d7fcdd16cb9dc3c9ae0b5b7bb5c9ef1a5a535fe60d280ca628452b0b4b8b078d416ae6dcb4016e97b25096fdd047bfb27991749b36f0fa8cca1c1ab71f571d94e937061c4a39c6df2122af671", 0xfe0, 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r8) r10 = geteuid() keyctl$get_persistent(0x16, r10, r8) io_destroy(0x0) keyctl$negate(0xd, r9, 0x200, r8) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) keyctl$revoke(0x3, r4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 6.967199288s ago: executing program 4 (id=3744): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000180)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x1) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000140)=0x12) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\n']) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x301540, 0x0) 6.146275729s ago: executing program 2 (id=3745): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xced31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) read(r4, &(0x7f0000001140)=""/4096, 0x1000) ptrace(0x10, 0x0) 5.670131389s ago: executing program 0 (id=3746): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x40000003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.544475564s ago: executing program 3 (id=3747): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x40000003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) 4.920607353s ago: executing program 4 (id=3748): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @empty, 0x400005}, 0x1c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000ca32c7329458e68a330a721f000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000674ae874c8a3ac27c779eb0000000000000000000000000000000000000000000000000000000000000000fcffffff00"/144]}, 0x108) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r6 = open(0x0, 0x64842, 0x389b0d52417bb201) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200488b0}, 0x40c4) pwritev2(r6, 0x0, 0x0, 0x7000, 0x0, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x92e82) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x40000c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x9, @empty, 0x20002}, 0x1c) 3.732309358s ago: executing program 1 (id=3749): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x40000003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.880050869s ago: executing program 0 (id=3750): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8004) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r5) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x29, 0x7, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) recvmsg$kcm(r8, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x20000, 0x30, 0x2}, 0x18) sendfile(r9, r9, 0x0, 0x200000) 2.828020802s ago: executing program 2 (id=3751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000402, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x18, r9, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 2.688549214s ago: executing program 3 (id=3752): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x40000003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.311455082s ago: executing program 4 (id=3753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 862.120569ms ago: executing program 1 (id=3754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x20000010) 722.953706ms ago: executing program 0 (id=3755): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x40000003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) 623.349462ms ago: executing program 1 (id=3756): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x40000003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 591.824627ms ago: executing program 3 (id=3757): pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RUNLINKAT(r0, &(0x7f0000000640)={0x7, 0x4d, 0x2}, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open$dir(0x0, 0x1, 0x19d) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) r5 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x80000002}) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) r6 = socket$kcm(0x29, 0xa, 0x0) recvmsg$kcm(r6, &(0x7f0000000400)={&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/51, 0x33}], 0x1, &(0x7f0000000300)=""/206, 0xce}, 0x10021) r7 = memfd_create(&(0x7f0000000b40)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\xbd/\xd0J\xce=\x924\xc0\x17\x871N:\xb4\xea \x8e\xdelV\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8H\x7fsk\x9cD\xb3w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N', 0x2) fcntl$addseals(r7, 0x409, 0x27) ftruncate(r7, 0x7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000002140)={0x50, 0xfffffffffffffff5, r9, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x2, 0x80}}, 0x50) read$FUSE(r8, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r10}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 565.545643ms ago: executing program 4 (id=3758): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$video(0x0, 0x75, 0x101140) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x1, &(0x7f0000000100)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x20000010) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000f80)=[{&(0x7f0000000080)=""/13, 0xd}], 0x1, 0x8, 0x1) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f00000001c0)=0x9) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010024000000000000000000000a64000000060a010400000000000000000200ffff38000480340001800b000100657874686472000024000280050002008900000008000340000000d5080006400000000208000140000007010900010073797a30000000000900020073797a320000000014000000110001000000000000000000"], 0x8c}}, 0x8000) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) close(r0) 0s ago: executing program 2 (id=3759): pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RUNLINKAT(r0, &(0x7f0000000640)={0x7, 0x4d, 0x2}, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open$dir(0x0, 0x1, 0x19d) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x80000002}) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) socket$kcm(0x29, 0xa, 0x0) r5 = memfd_create(&(0x7f0000000b40)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\xbd/\xd0J\xce=\x924\xc0\x17\x871N:\xb4\xea \x8e\xdelV\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8H\x7fsk\x9cD\xb3w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N', 0x2) fcntl$addseals(r5, 0x409, 0x27) ftruncate(r5, 0x7) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYBLOB, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002140)={0x50, 0xfffffffffffffff5, r7, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x2, 0x80}}, 0x50) read$FUSE(r6, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): usb 5-1: no configurations [ 1111.136638][T14173] usb 5-1: can't read configurations, error -22 [ 1111.266172][T14173] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1111.427247][T14173] usb 5-1: Using ep0 maxpacket: 16 [ 1111.435325][T14173] usb 5-1: no configurations [ 1111.453296][T14173] usb 5-1: can't read configurations, error -22 [ 1111.504745][T14173] usb usb5-port1: attempt power cycle [ 1111.710341][T17432] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1111.726280][T17432] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1111.734843][T17432] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1111.904642][T17434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2939'. [ 1112.136141][T14173] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1112.177860][T14173] usb 5-1: Using ep0 maxpacket: 16 [ 1112.184947][T14173] usb 5-1: no configurations [ 1112.199936][T14173] usb 5-1: can't read configurations, error -22 [ 1112.406127][T14173] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1112.451461][T14173] usb 5-1: Using ep0 maxpacket: 16 [ 1112.477164][T14173] usb 5-1: no configurations [ 1112.481875][T14173] usb 5-1: can't read configurations, error -22 [ 1112.497845][T14173] usb usb5-port1: unable to enumerate USB device [ 1113.130343][ T30] audit: type=1326 audit(1768525244.908:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17443 comm="syz.1.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88641865e7 code=0x7ffc0000 [ 1113.246104][ T30] audit: type=1326 audit(1768525244.908:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17443 comm="syz.1.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f886412b829 code=0x7ffc0000 [ 1113.476227][ T30] audit: type=1326 audit(1768525244.908:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17443 comm="syz.1.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88641865e7 code=0x7ffc0000 [ 1113.998135][ T30] audit: type=1326 audit(1768525244.918:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17443 comm="syz.1.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f886412b829 code=0x7ffc0000 [ 1115.501625][ T30] audit: type=1326 audit(1768525244.918:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17443 comm="syz.1.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88641865e7 code=0x7ffc0000 [ 1115.743242][ T30] audit: type=1326 audit(1768525244.928:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17443 comm="syz.1.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f886412b829 code=0x7ffc0000 [ 1115.896062][ T30] audit: type=1326 audit(1768525244.928:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17443 comm="syz.1.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88641865e7 code=0x7ffc0000 [ 1115.986164][ T30] audit: type=1326 audit(1768525244.968:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17443 comm="syz.1.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f886412b829 code=0x7ffc0000 [ 1116.196033][ T30] audit: type=1326 audit(1768525244.968:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17443 comm="syz.1.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88641865e7 code=0x7ffc0000 [ 1116.226140][ T30] audit: type=1326 audit(1768525244.968:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17443 comm="syz.1.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f886412b829 code=0x7ffc0000 [ 1116.276148][ T5950] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1116.487372][ T5950] usb 4-1: no configurations [ 1116.493838][ T5950] usb 4-1: can't read configurations, error -22 [ 1116.657997][ T5950] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1117.020912][ T5950] usb 4-1: no configurations [ 1117.025605][ T5950] usb 4-1: can't read configurations, error -22 [ 1117.185500][ T5950] usb usb4-port1: attempt power cycle [ 1117.556599][ T5950] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1117.606452][ T5950] usb 4-1: no configurations [ 1117.611100][ T5950] usb 4-1: can't read configurations, error -22 [ 1117.842331][ T5950] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1117.892831][ T5950] usb 4-1: no configurations [ 1117.926060][ T9355] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1117.935490][ T5950] usb 4-1: can't read configurations, error -22 [ 1118.035317][ T5950] usb usb4-port1: unable to enumerate USB device [ 1118.076041][ T9355] usb 3-1: Using ep0 maxpacket: 32 [ 1118.093365][ T9355] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1118.148124][ T9355] usb 3-1: config 0 has no interface number 0 [ 1118.154292][ T9355] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1118.214426][ T9355] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1118.271719][ T9355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.313485][ T9355] usb 3-1: Product: syz [ 1118.352907][ T9355] usb 3-1: Manufacturer: syz [ 1118.386048][ T9355] usb 3-1: SerialNumber: syz [ 1118.442741][ T9355] usb 3-1: config 0 descriptor?? [ 1118.511435][ T9355] smsc75xx v1.0.0 [ 1118.808912][T17490] loop6: detected capacity change from 0 to 4095 [ 1120.073526][T17501] lo: Caught tx_queue_len zero misconfig [ 1120.296095][ T5950] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1120.383251][T17509] fuse: Bad value for 'fd' [ 1120.541090][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 1121.331580][ T5950] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1121.344683][ T5950] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1121.526552][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2950'. [ 1121.578463][ T5950] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1121.603829][ T5950] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1121.632262][ T5950] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1121.805400][ T5950] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1121.881625][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.171694][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1122.171715][ T30] audit: type=1326 audit(1768525253.948:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.0.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1122.223339][ T5950] usb 2-1: GET_CAPABILITIES returned 0 [ 1122.260383][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.267033][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.281952][ T5950] usbtmc 2-1:16.0: can't read capabilities [ 1122.370743][ T30] audit: type=1326 audit(1768525253.948:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.0.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1122.484420][ T30] audit: type=1326 audit(1768525254.008:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.0.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1122.566113][ T30] audit: type=1326 audit(1768525254.008:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.0.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1122.640276][ T30] audit: type=1326 audit(1768525254.008:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.0.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1122.704155][T17500] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2949'. [ 1122.729912][ T30] audit: type=1326 audit(1768525254.008:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.0.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff67e78e1ff code=0x7ffc0000 [ 1122.757901][ T5950] usb 2-1: USB disconnect, device number 69 [ 1122.811373][ T30] audit: type=1326 audit(1768525254.008:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.0.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1122.846631][ T30] audit: type=1326 audit(1768525254.008:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.0.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1122.870531][ T30] audit: type=1326 audit(1768525254.008:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.0.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1122.893792][ T30] audit: type=1326 audit(1768525254.008:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.0.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1123.469195][ T9355] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1123.542294][ T9355] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1123.605111][ T9355] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1123.626143][ T5950] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1123.653437][ T9355] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1123.765137][ T9355] usb 3-1: USB disconnect, device number 85 [ 1123.853787][ T5950] usb 5-1: Using ep0 maxpacket: 32 [ 1123.958210][ T5950] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1123.984532][ T5950] usb 5-1: config 0 has no interface number 0 [ 1124.009302][ T5950] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1124.079032][T17539] sit1: entered allmulticast mode [ 1124.333463][ T5950] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1124.373377][T17544] random: crng reseeded on system resumption [ 1124.391766][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.400132][ T5950] usb 5-1: Product: syz [ 1124.416143][ T5950] usb 5-1: Manufacturer: syz [ 1124.424845][ T5950] usb 5-1: SerialNumber: syz [ 1124.489760][ T5950] usb 5-1: config 0 descriptor?? [ 1124.723294][T17550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2956'. [ 1126.487571][T17554] kvm: MWAIT instruction emulated as NOP! [ 1127.346843][T14172] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1127.427166][ T5950] ipheth 5-1:0.196: Unable to find endpoints [ 1127.472275][ T5950] usb 5-1: USB disconnect, device number 68 [ 1127.543215][T14172] usb 4-1: no configurations [ 1127.548148][T14172] usb 4-1: can't read configurations, error -22 [ 1127.786039][T14172] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1127.983461][T14172] usb 4-1: no configurations [ 1128.002628][T14172] usb 4-1: can't read configurations, error -22 [ 1128.046107][T14172] usb usb4-port1: attempt power cycle [ 1128.096066][ T5950] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1128.273545][ T5950] usb 5-1: config 0 has no interfaces? [ 1128.288229][ T5950] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1128.298509][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.322064][ T5950] usb 5-1: Product: syz [ 1128.326989][ T5950] usb 5-1: Manufacturer: syz [ 1128.346635][ T5950] usb 5-1: SerialNumber: syz [ 1128.368272][ T5950] usb 5-1: config 0 descriptor?? [ 1128.416993][T14172] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1128.485887][T14172] usb 4-1: no configurations [ 1128.513340][T14172] usb 4-1: can't read configurations, error -22 [ 1128.667630][T14172] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1128.750534][T14172] usb 4-1: no configurations [ 1128.755398][T14172] usb 4-1: can't read configurations, error -22 [ 1128.784238][ T5950] usb 5-1: USB disconnect, device number 69 [ 1128.849393][T14172] usb usb4-port1: unable to enumerate USB device [ 1129.784472][T17586] netlink: 'syz.4.2963': attribute type 10 has an invalid length. [ 1130.002232][T17591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2964'. [ 1130.020261][T17591] input: syz1 as /devices/virtual/input/input57 [ 1134.914629][T17641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2974'. [ 1134.957813][T17641] netlink: 'syz.3.2974': attribute type 3 has an invalid length. [ 1136.326038][T14154] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1136.500162][T14154] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.510696][T14154] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1136.538658][T14154] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1136.599889][T14154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.644285][T14154] usb 4-1: Product: syz [ 1136.665700][T14154] usb 4-1: Manufacturer: syz [ 1136.679583][T14154] usb 4-1: SerialNumber: syz [ 1136.735512][T14154] usb 4-1: config 0 descriptor?? [ 1137.018606][T17654] fuse: Unknown parameter 'use' [ 1140.498376][T14154] usb 4-1: USB disconnect, device number 87 [ 1141.736258][ T5950] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1141.936116][ T5950] usb 5-1: Using ep0 maxpacket: 32 [ 1142.110707][ T5950] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1142.133134][ T5950] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1142.144033][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1142.163147][ T5950] usb 5-1: Product: syz [ 1142.183293][ T5950] usb 5-1: Manufacturer: syz [ 1142.193337][ T5950] usb 5-1: SerialNumber: syz [ 1142.245282][ T5950] usb 5-1: config 0 descriptor?? [ 1142.287632][T17709] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1142.324874][T17718] F2FS-fs: Conflicting test_dummy_encryption options [ 1142.914522][ T5950] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1143.358055][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.373406][ T5950] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1143.673575][ T5950] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1143.764704][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.812904][ T5950] usb 3-1: Product: syz [ 1143.827462][ T5950] usb 3-1: Manufacturer: syz [ 1143.837200][ T5950] usb 3-1: SerialNumber: syz [ 1143.954422][ T5950] usb 3-1: config 0 descriptor?? [ 1143.989508][ T5950] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1144.041245][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1144.100348][ T5950] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1144.816163][ T9355] usb 5-1: USB disconnect, device number 70 [ 1145.003528][T17729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2992'. [ 1145.077508][T17729] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1145.089173][T17729] block device autoloading is deprecated and will be removed. [ 1145.602499][T17739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2994'. [ 1146.087404][ T5950] usb 3-1: USB disconnect, device number 86 [ 1146.196150][T14172] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1146.407034][T14172] usb 2-1: config 27 has an invalid descriptor of length 121, skipping remainder of the config [ 1146.426131][T14172] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1146.447645][T14172] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1146.546247][T14172] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1146.576165][T14172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.730362][T14172] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1146.857222][T14172] usb 2-1: invalid MIDI out EP 0 [ 1146.930017][T17729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.939091][T17729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.971657][T17748] binder: 17744:17748 ioctl 400c620e 200000000100 returned -22 [ 1147.224323][T14172] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1148.126707][ T9355] usb 2-1: USB disconnect, device number 70 [ 1148.642639][T17767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2997'. [ 1149.198220][T17769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2999'. [ 1151.615517][T17787] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3002'. [ 1152.756272][ T9355] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1152.948982][ T9355] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.959528][ T9355] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.970590][ T9355] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1152.982297][ T9355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.001219][ T9355] usb 5-1: Product: syz [ 1153.009276][ T9355] usb 5-1: Manufacturer: syz [ 1153.018621][ T9355] usb 5-1: SerialNumber: syz [ 1153.066529][ T9355] usb 5-1: config 0 descriptor?? [ 1153.080178][ T9355] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1153.333527][ T9355] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1153.367216][ T9355] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1153.928392][T17814] Cannot find set identified by id 3 to match [ 1154.089436][T17813] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3007'. [ 1155.453854][T14154] usb 5-1: USB disconnect, device number 71 [ 1156.006183][T14154] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1156.153162][T17831] fuse: Bad value for 'fd' [ 1156.305693][T14154] usb 5-1: Using ep0 maxpacket: 32 [ 1156.322992][T14154] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 1156.341494][T14154] usb 5-1: config 0 has no interface number 0 [ 1156.366471][T14154] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1156.425229][T14154] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1156.466152][T14154] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1156.521741][T14154] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1156.546597][T14154] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1156.566396][T14154] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1156.590718][T14154] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1156.607156][T14154] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1156.629799][T14154] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1156.653052][T14154] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1156.797925][T14154] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1156.825972][T14154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.876023][T14154] usb 5-1: Product: syz [ 1156.880264][T14154] usb 5-1: Manufacturer: syz [ 1156.884862][T14154] usb 5-1: SerialNumber: syz [ 1156.951570][T14154] usb 5-1: config 0 descriptor?? [ 1156.980754][T17825] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1156.988838][T17825] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1157.034951][T14154] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1157.066049][T14154] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1157.120304][T14154] scsi host1: microtekX6 [ 1157.462427][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 1157.474311][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 1157.484250][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 1157.494481][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 1159.935028][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3018'. [ 1160.161920][T17867] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3018'. [ 1160.697749][T14172] usb 5-1: USB disconnect, device number 72 [ 1161.376026][ T9370] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1161.540758][ T9370] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 1161.574067][ T9370] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 1161.594714][ T9370] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.742106][ T9370] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1161.820516][ T9370] usb 4-1: config 0 has no interface number 0 [ 1161.909758][ T9370] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1161.950498][ T9370] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1162.006237][ T9370] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1162.052492][ T9370] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1162.116191][ T9370] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1162.146662][ T9370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.178411][ T9370] usb 4-1: config 0 descriptor?? [ 1162.246719][ T9370] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1162.487021][T14172] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1162.832146][ T9370] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 1162.878798][ T9370] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1162.896024][T14172] usb 2-1: Using ep0 maxpacket: 16 [ 1163.010881][T14172] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.026608][ T9370] usb 4-1: MIDIStreaming interface descriptor not found [ 1163.033774][T14172] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1163.155753][T14172] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1163.206208][T14172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.230096][T14172] usb 2-1: Product: syz [ 1163.241225][T14172] usb 2-1: Manufacturer: syz [ 1163.295875][T14172] usb 2-1: SerialNumber: syz [ 1163.566831][T14172] usb 2-1: 0:2 : does not exist [ 1163.608455][T17896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3025'. [ 1163.784960][T14172] usb 2-1: USB disconnect, device number 71 [ 1164.209839][T17693] udevd[17693]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1164.286108][T14154] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1164.680249][T14154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1164.705983][T14154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1165.032360][T14154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1165.046286][T17907] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1165.106155][T14154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1165.150233][T17907] bond2 (unregistering): Released all slaves [ 1165.276061][T14154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1165.341814][T14154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1165.576885][T14172] usb 4-1: USB disconnect, device number 88 [ 1165.598498][T14154] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1165.612040][T14154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.628957][T14154] usb 5-1: Product: syz [ 1165.633203][T14154] usb 5-1: Manufacturer: syz [ 1165.637880][T14154] usb 5-1: SerialNumber: syz [ 1165.645548][T14154] usb 5-1: config 0 descriptor?? [ 1165.654006][T14154] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 1165.726685][T14154] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 1168.501312][T14172] usb 5-1: USB disconnect, device number 73 [ 1168.828875][T17939] syzkaller0: entered promiscuous mode [ 1168.834484][T17939] syzkaller0: entered allmulticast mode [ 1170.146050][ T9370] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1170.316002][ T9370] usb 3-1: Using ep0 maxpacket: 32 [ 1170.333523][ T9370] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1170.366361][ T9370] usb 3-1: can't read configurations, error -61 [ 1170.636189][ T9370] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1170.818884][T17962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3037'. [ 1170.827998][ T9370] usb 3-1: Using ep0 maxpacket: 32 [ 1170.867496][ T9370] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1170.893227][ T9370] usb 3-1: can't read configurations, error -61 [ 1170.900086][T17962] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 1170.912499][ T9370] usb usb3-port1: attempt power cycle [ 1171.389963][ T9370] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1171.424355][T17967] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3038'. [ 1171.450495][ T9370] usb 3-1: Using ep0 maxpacket: 32 [ 1171.463099][ T9370] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1171.490700][ T9370] usb 3-1: can't read configurations, error -61 [ 1171.646758][ T9370] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1171.691871][ T9370] usb 3-1: Using ep0 maxpacket: 32 [ 1171.719124][ T9370] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1171.727942][ T9370] usb 3-1: can't read configurations, error -61 [ 1171.822158][ T9370] usb usb3-port1: unable to enumerate USB device [ 1172.200626][T17978] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1172.203496][T17977] fuse: Unknown parameter 'user_id00000000000000000000' [ 1172.206770][T17978] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1173.706046][T17991] binder: 17987:17991 unknown command 1077961494 [ 1173.712597][T17991] binder: 17987:17991 ioctl c0306201 200000000100 returned -22 [ 1175.246709][T14152] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1175.330778][T18001] syzkaller0: entered promiscuous mode [ 1175.337639][T18001] syzkaller0: entered allmulticast mode [ 1175.403871][T18003] program syz.0.3046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1175.468381][T14152] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1175.509135][T14152] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1175.555230][T14152] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1175.668565][T14152] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1175.709944][T14152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.756066][T14152] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1175.973538][T17997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.993992][T17997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.029336][T17997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.076594][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1176.076643][ T30] audit: type=1326 audit(1768525307.798:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1176.116335][T17997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.246144][ T5950] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1176.262543][ T30] audit: type=1326 audit(1768525307.798:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f886418df90 code=0x7ffc0000 [ 1176.314065][ T30] audit: type=1326 audit(1768525307.798:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f886418f34b code=0x7ffc0000 [ 1176.496125][ T30] audit: type=1326 audit(1768525307.798:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f886418f34b code=0x7ffc0000 [ 1176.549212][ T30] audit: type=1326 audit(1768525307.938:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1176.595819][T14152] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1176.676009][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 1176.757682][T18017] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3049'. [ 1176.810767][ T30] audit: type=1326 audit(1768525307.938:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1176.837991][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.866467][ T5950] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1176.880233][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.900330][T14152] usb 2-1: USB disconnect, device number 72 [ 1176.931892][ T30] audit: type=1326 audit(1768525307.938:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1177.002649][ T5950] usb 3-1: config 0 descriptor?? [ 1177.202409][ T30] audit: type=1326 audit(1768525307.938:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1177.366145][T14172] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1177.376336][ T30] audit: type=1326 audit(1768525307.938:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1177.519367][ T30] audit: type=1326 audit(1768525307.938:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1177.590985][T14172] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.631972][T14172] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1177.664347][T14172] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1177.803047][T14172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1177.811934][T14172] usb 4-1: SerialNumber: syz [ 1177.940299][T14172] usb 4-1: 0:2 : does not exist [ 1177.956787][T14172] usb 4-1: unit 255 not found! [ 1179.767080][ T5950] usbhid 3-1:0.0: can't add hid device: -71 [ 1179.793458][ T5950] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1179.818917][ T5950] usb 3-1: USB disconnect, device number 91 [ 1180.142382][T14152] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1180.326130][T14152] usb 2-1: Using ep0 maxpacket: 16 [ 1180.340047][T14152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.495264][T14152] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1180.504561][T14152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.593960][T14152] usb 2-1: config 0 descriptor?? [ 1181.017361][T14154] usb 4-1: USB disconnect, device number 89 [ 1181.067572][T14152] mcp2221 0003:04D8:00DD.0030: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1181.273973][T14152] usb 2-1: USB disconnect, device number 73 [ 1181.405304][T18047] syzkaller0: entered promiscuous mode [ 1181.411218][T18047] syzkaller0: entered allmulticast mode [ 1181.654173][T18051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3054'. [ 1181.790065][T18052] loop6: detected capacity change from 0 to 524288000 [ 1181.856036][T14173] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1181.909148][T18057] bond2: option ad_user_port_key: invalid value (22844) [ 1181.916411][T18057] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 1182.024809][T18052] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3058'. [ 1182.025788][T18057] bond2 (unregistering): Released all slaves [ 1182.086046][T14173] usb 4-1: Using ep0 maxpacket: 16 [ 1182.108490][T14173] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 1182.144273][T14173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.177176][T14173] usb 4-1: Product: syz [ 1182.191320][T14173] usb 4-1: Manufacturer: syz [ 1182.210054][T14173] usb 4-1: SerialNumber: syz [ 1182.239891][T14173] usb 4-1: config 0 descriptor?? [ 1182.277774][T14173] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1182.526319][T14173] usb 4-1: Detected FT232B [ 1182.746491][T18062] syzkaller1: entered promiscuous mode [ 1182.768060][T18062] syzkaller1: entered allmulticast mode [ 1182.788616][T14152] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1182.996000][T14152] usb 2-1: Using ep0 maxpacket: 32 [ 1183.004088][T14152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.028994][T14152] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1183.062815][T14152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.125369][T14152] usb 2-1: config 0 descriptor?? [ 1183.155062][T14152] hub 2-1:0.0: bad descriptor, ignoring hub [ 1183.201126][T14152] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1183.241484][T14152] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1183.591533][ T5921] kworker/1:6 (5921) used greatest stack depth: 15288 bytes left [ 1183.606865][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.613655][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.984605][T14173] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1185.027090][T14173] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1185.040620][T14173] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1185.061262][T14173] usb 4-1: USB disconnect, device number 90 [ 1185.081652][T14173] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1185.112665][T14173] ftdi_sio 4-1:0.0: device disconnected [ 1185.261382][T18079] netlink: 'syz.2.3062': attribute type 5 has an invalid length. [ 1185.469027][T18084] random: crng reseeded on system resumption [ 1186.384594][T14154] usb 2-1: USB disconnect, device number 74 [ 1186.916456][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3064'. [ 1189.591079][T18122] program syz.2.3069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1189.602050][T18122] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1190.531600][T18127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3067'. [ 1191.914196][T14173] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1192.293986][T18147] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1192.349261][T14173] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.375685][T14173] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1192.427678][T14173] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1192.437111][T14173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.499417][T14173] usb 4-1: Product: syz [ 1192.503653][T14173] usb 4-1: Manufacturer: syz [ 1192.509530][T14173] usb 4-1: SerialNumber: syz [ 1192.516436][T14173] usb 4-1: config 0 descriptor?? [ 1192.604223][T14173] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1192.624100][T14173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1192.691860][T14173] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1192.893843][T18135] fuse: Unknown parameter 'use' [ 1193.428296][T18149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3072'. [ 1194.743538][T14173] usb 4-1: USB disconnect, device number 91 [ 1195.245756][T18170] binder: BINDER_SET_CONTEXT_MGR already set [ 1195.252783][T18170] binder: 18165:18170 ioctl 4018620d 200000000040 returned -16 [ 1195.329430][T18172] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1198.428274][T18197] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1198.648155][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3083'. [ 1198.956912][T18206] program syz.0.3086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1200.556025][T14173] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1200.828416][T14173] usb 5-1: Using ep0 maxpacket: 16 [ 1200.942977][T14173] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1200.984760][T14173] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1201.138185][ T9355] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1201.436080][ T9355] usb 4-1: Using ep0 maxpacket: 32 [ 1201.531428][ T9355] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1201.616766][ T9355] usb 4-1: config 0 has no interface number 0 [ 1201.671230][ T9355] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1201.760338][ T9355] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1201.877640][ T9355] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1201.923085][ T9355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.974044][ T9355] usb 4-1: Product: syz [ 1201.998870][ T9355] usb 4-1: Manufacturer: syz [ 1202.042208][ T9355] usb 4-1: SerialNumber: syz [ 1202.087978][ T9355] usb 4-1: config 0 descriptor?? [ 1202.190727][ T9355] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1202.397191][ T9355] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 1202.408049][ T9355] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 1203.586642][T18232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3091'. [ 1204.538005][ T9355] usb 4-1: USB disconnect, device number 92 [ 1204.713268][T14173] usb 5-1: string descriptor 0 read error: -71 [ 1204.760683][T14173] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1204.796058][T14173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.867558][T14173] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 1204.896598][T14173] usb 5-1: no configuration chosen from 1 choice [ 1204.930316][T14173] usb 5-1: USB disconnect, device number 74 [ 1205.006978][T14172] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1205.132295][T18252] random: crng reseeded on system resumption [ 1205.178872][T14172] usb 2-1: Using ep0 maxpacket: 8 [ 1205.249532][T14172] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1205.271958][T14172] usb 2-1: config index 0 descriptor too short (expected 255, got 18) [ 1205.298670][T14172] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1205.345174][T14172] usb 2-1: string descriptor 0 read error: -22 [ 1205.354068][T14172] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1205.382477][T14172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.447304][T14172] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1205.534137][T14172] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1205.658086][T14172] dvb_usb_au6610 2-1:4.0: probe with driver dvb_usb_au6610 failed with error -23 [ 1206.612092][T18265] kvm: user requested TSC rate below hardware speed [ 1206.860789][T18270] binder: 18267:18270 unknown command 1077961494 [ 1206.867420][T18270] binder: 18267:18270 ioctl c0306201 200000000100 returned -22 [ 1206.946737][T14172] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1207.206056][T14172] usb 3-1: Using ep0 maxpacket: 8 [ 1207.215450][T14172] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1207.228791][T14172] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1207.242163][T14172] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1207.273236][T14172] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1207.300757][T14172] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1207.320852][T14172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.581474][T14172] usb 3-1: GET_CAPABILITIES returned 0 [ 1207.622952][T14152] usb 2-1: USB disconnect, device number 75 [ 1207.634239][T14172] usbtmc 3-1:16.0: can't read capabilities [ 1208.646055][T14172] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1208.866147][T14172] usb 5-1: Using ep0 maxpacket: 32 [ 1208.909388][T14172] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 1208.951405][T14172] usb 5-1: config 0 has no interface number 1 [ 1209.028281][T14172] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1209.037690][T14172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.058531][T14172] usb 5-1: Product: syz [ 1209.068572][T14172] usb 5-1: Manufacturer: syz [ 1209.080659][T14172] usb 5-1: SerialNumber: syz [ 1209.118355][T14172] usb 5-1: config 0 descriptor?? [ 1209.258918][T14172] snd-usb-audio 5-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 1209.399542][T17693] udevd[17693]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1209.467706][ T9355] usb 5-1: USB disconnect, device number 75 [ 1210.396557][T18298] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.3107'. [ 1210.589471][ T9355] usb 3-1: USB disconnect, device number 92 [ 1212.805373][T18321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3113'. [ 1212.816341][T18321] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3113'. [ 1213.096034][T14152] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1213.329488][T14152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1213.508506][T14152] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1213.517650][T14152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.525671][T14152] usb 2-1: Product: syz [ 1213.553062][T14152] usb 2-1: Manufacturer: syz [ 1213.560500][T14152] usb 2-1: SerialNumber: syz [ 1213.597052][T14152] usb 2-1: config 0 descriptor?? [ 1216.253564][T14173] usb 2-1: USB disconnect, device number 76 [ 1217.055937][T18371] usb usb8: usbfs: process 18371 (syz.2.3126) did not claim interface 0 before use [ 1217.628199][T18379] fuse: Unknown parameter '000000000000000000040x0000000000000005' [ 1217.749388][T18379] geneve2: entered allmulticast mode [ 1217.764756][ T5935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1217.935952][ T5935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1218.121197][ T5935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1218.212031][ T5935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1218.969040][T18384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3130'. [ 1219.036075][T18387] tipc: Enabling of bearer rejected, already enabled [ 1219.072092][T18387] netlink: 39 bytes leftover after parsing attributes in process `syz.4.3131'. [ 1219.081465][T18387] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3131'. [ 1219.125567][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1219.133640][ T30] audit: type=1326 audit(1768525350.808:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1219.195190][T18387] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1219.206680][T18387] tipc: Enabled bearer , priority 10 [ 1219.295568][ T30] audit: type=1326 audit(1768525350.808:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1219.373362][ T30] audit: type=1326 audit(1768525350.808:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1219.396248][ T30] audit: type=1326 audit(1768525350.808:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1219.421086][ T30] audit: type=1326 audit(1768525350.808:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1219.444021][ T30] audit: type=1326 audit(1768525350.808:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8704991667 code=0x7ffc0000 [ 1219.477395][ T30] audit: type=1326 audit(1768525350.808:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f87049915dc code=0x7ffc0000 [ 1219.675284][ T30] audit: type=1326 audit(1768525350.808:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8704991514 code=0x7ffc0000 [ 1219.772771][ T30] audit: type=1326 audit(1768525350.808:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8704991514 code=0x7ffc0000 [ 1219.845755][ T30] audit: type=1326 audit(1768525350.808:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f870498e3aa code=0x7ffc0000 [ 1219.989992][T18392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3133'. [ 1220.901917][T18402] binder: BINDER_SET_CONTEXT_MGR already set [ 1220.908183][T18402] binder: 18399:18402 ioctl 4018620d 200000000040 returned -16 [ 1221.790280][T18420] libceph: resolve '0' (ret=-3): failed [ 1222.840247][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3147'. [ 1222.851579][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3147'. [ 1223.675913][T18443] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3149'. [ 1223.972830][T18444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3148'. [ 1224.345053][ T9355] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1225.738162][T18471] overlayfs: missing 'lowerdir' [ 1226.507995][T18491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1226.826076][T18493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3166'. [ 1227.124969][T18502] kAFS: unable to lookup cell '' [ 1227.132338][T18502] kAFS: unable to lookup cell '(,c' [ 1227.410940][ T9355] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1227.547950][ T9355] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1227.581810][ T9355] usb 5-1: can't read configurations, error -71 [ 1228.086370][T14172] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1228.134021][T18518] syzkaller0: entered promiscuous mode [ 1228.143249][T18518] syzkaller0: entered allmulticast mode [ 1228.149415][ T9355] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1228.246062][T14172] usb 4-1: Using ep0 maxpacket: 16 [ 1228.274821][T14172] usb 4-1: config 0 has an invalid interface number: 129 but max is 0 [ 1228.307597][ T9355] usb 5-1: Using ep0 maxpacket: 8 [ 1228.319448][ T9355] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1228.340027][ T9355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.359620][ T9355] usb 5-1: Product: syz [ 1228.364040][T14172] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.384295][ T9355] usb 5-1: Manufacturer: syz [ 1228.402413][ T9355] usb 5-1: SerialNumber: syz [ 1228.406118][T14172] usb 4-1: config 0 has no interface number 0 [ 1228.474275][T14172] usb 4-1: config 0 interface 129 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1228.502497][ T9355] usb 5-1: config 0 descriptor?? [ 1228.517246][T14172] usb 4-1: New USB device found, idVendor=19d2, idProduct=1165, bcdDevice=c1.d5 [ 1228.527235][T14172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.535510][T14172] usb 4-1: Product: syz [ 1228.540217][T14172] usb 4-1: Manufacturer: syz [ 1228.544967][T14172] usb 4-1: SerialNumber: syz [ 1228.569152][T14172] usb 4-1: config 0 descriptor?? [ 1228.570563][ T9355] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1228.584563][T14172] option 4-1:0.129: GSM modem (1-port) converter detected [ 1228.603809][ T9355] dvb-usb: bulk message failed: -22 (2/0) [ 1228.654884][ T9355] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1228.696874][T18524] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3176'. [ 1228.728428][ T9355] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) error while loading driver (-23) [ 1228.753948][ T9355] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 1230.718791][T14172] usb 5-1: USB disconnect, device number 77 [ 1231.025592][T14172] usb 4-1: USB disconnect, device number 93 [ 1231.049573][T14172] option 4-1:0.129: device disconnected [ 1231.121155][T18549] syzkaller0: entered promiscuous mode [ 1231.126886][T18549] syzkaller0: entered allmulticast mode [ 1231.214096][T18559] ksmbd: Unknown IPC event: 3, ignore. [ 1232.776086][T14172] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1232.938529][T14172] usb 5-1: Using ep0 maxpacket: 32 [ 1232.951787][T14172] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1232.971095][T14172] usb 5-1: config 0 has no interface number 0 [ 1232.989811][T14172] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1233.018811][T14172] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1233.076815][T14172] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1233.100086][T14172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.115805][T14172] usb 5-1: Product: syz [ 1233.123409][T14172] usb 5-1: Manufacturer: syz [ 1233.182384][T18599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3193'. [ 1233.236626][T14172] usb 5-1: SerialNumber: syz [ 1233.256771][T14172] usb 5-1: config 0 descriptor?? [ 1233.497549][T14172] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1233.692675][T14172] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 1233.747087][T14172] quatech2 5-1:0.51: probe with driver quatech2 failed with error -90 [ 1234.357286][T14172] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1234.538715][T14172] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.550305][T14172] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1234.576624][T14172] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1234.588819][T14172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.623132][T14172] usb 3-1: Product: syz [ 1234.640164][T14172] usb 3-1: Manufacturer: syz [ 1234.654844][T14172] usb 3-1: SerialNumber: syz [ 1234.733210][T14172] usb 3-1: config 0 descriptor?? [ 1234.764095][T14172] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1234.777761][T14172] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1234.820927][T18628] ksmbd: Unknown IPC event: 3, ignore. [ 1234.922866][T14172] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1234.964904][T18618] fuse: Bad value for 'fd' [ 1235.755426][T14172] usb 5-1: USB disconnect, device number 78 [ 1236.286534][T18649] netlink: 'syz.4.3220': attribute type 11 has an invalid length. [ 1236.295244][T18649] netlink: 448 bytes leftover after parsing attributes in process `syz.4.3220'. [ 1237.740606][T14172] usb 3-1: USB disconnect, device number 93 [ 1238.527330][T18682] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1238.914883][T18693] IPVS: Error connecting to the multicast addr [ 1239.936224][T18705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3233'. [ 1241.446048][T14172] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1241.596079][T14173] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1241.645293][T14172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1241.655224][T14172] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1241.671568][T14172] usb 3-1: can't read configurations, error -71 [ 1241.746028][T14173] usb 4-1: Using ep0 maxpacket: 32 [ 1241.754252][T14173] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1241.769965][T14173] usb 4-1: config 4 has an invalid interface number: 136 but max is 0 [ 1241.788727][T14173] usb 4-1: config 4 has no interface number 0 [ 1241.805273][T14173] usb 4-1: config 4 interface 136 has no altsetting 0 [ 1241.825424][T14173] usb 4-1: string descriptor 0 read error: -22 [ 1241.842112][T14173] usb 4-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=16.c8 [ 1241.855983][T14173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.898790][T14173] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state. [ 1241.949901][T14173] dvb-usb: bulk message failed: -22 (4/0) [ 1241.981088][T14173] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1242.004306][T14173] dvb-usb: bulk message failed: -22 (5/0) [ 1242.018042][T14173] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1242.067315][T14173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1242.086177][T14173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1242.100781][T18746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3251'. [ 1242.177899][T14173] dvb-usb: Technotrend TT-connect CT-3650 error while loading driver (-23) [ 1242.208752][T14173] usb 4-1: USB disconnect, device number 94 [ 1242.701951][T18750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3254'. [ 1242.967656][T18756] netlink: set zone limit has 4 unknown bytes [ 1243.272134][T18774] sock: sock_timestamping_bind_phc: sock not bind to device [ 1243.447271][T14152] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1243.565288][T18779] ksmbd: Unknown IPC event: 3, ignore. [ 1243.777815][T14152] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1243.797176][T14152] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1243.819949][T14152] usb 4-1: can't read configurations, error -71 [ 1244.082895][T18798] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3273'. [ 1244.433145][T18803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3275'. [ 1244.647426][T18810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'. [ 1244.936067][ T5950] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1245.029812][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.046105][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.097223][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 1245.114530][ T5950] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1245.204878][ T5950] usb 2-1: config 0 has no interface number 0 [ 1245.229027][ T5950] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1245.284655][ T5950] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1245.363137][ T5950] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1245.407084][T18831] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 1245.416014][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.428519][ T5950] usb 2-1: Product: syz [ 1245.464274][ T5950] usb 2-1: Manufacturer: syz [ 1245.486617][ T5950] usb 2-1: SerialNumber: syz [ 1245.512762][ T5950] usb 2-1: config 0 descriptor?? [ 1245.541853][T18834] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3288'. [ 1245.551691][T18834] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3288'. [ 1245.568309][ T5950] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1245.626734][ T9355] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1245.755108][ T5950] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 1245.762394][ T5950] quatech2 2-1:0.51: probe with driver quatech2 failed with error -90 [ 1245.799593][ T9355] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1245.812490][ T9355] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1245.834903][ T9355] usb 4-1: can't read configurations, error -71 [ 1246.328235][T18847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3294'. [ 1246.789634][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 1246.798930][T18855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3297'. [ 1246.819856][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 1246.828965][T18855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3297'. [ 1246.849313][T18855] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1247.796167][ T5950] usb 2-1: USB disconnect, device number 77 [ 1249.946413][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3312'. [ 1251.006066][ T5950] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1251.169807][ T5950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.194942][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1251.214307][ T5950] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1251.296149][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.304737][ T5950] usb 5-1: Product: syz [ 1251.323715][ T5950] usb 5-1: Manufacturer: syz [ 1251.328987][ T5950] usb 5-1: SerialNumber: syz [ 1251.458309][ T5950] usb 5-1: config 0 descriptor?? [ 1251.503488][ T5950] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1251.518693][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1251.561628][ T5950] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1251.756525][T18917] fuse: Unknown parameter 'use' [ 1251.949356][T18938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3326'. [ 1251.959623][T18938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3326'. [ 1252.040532][T18938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3326'. [ 1252.092946][T18938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3326'. [ 1252.176136][T18941] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1252.922478][T18932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3324'. [ 1253.669953][ T5950] usb 5-1: USB disconnect, device number 79 [ 1254.752577][T18982] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1255.216086][T14152] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1255.377859][T14152] usb 3-1: Using ep0 maxpacket: 16 [ 1255.389337][T14152] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1255.399023][T14152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.407233][T14152] usb 3-1: Product: syz [ 1255.411883][T14152] usb 3-1: Manufacturer: syz [ 1255.417146][T14152] usb 3-1: SerialNumber: syz [ 1255.616591][ T5950] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1255.639724][T14152] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1255.674736][T14152] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1255.698111][T14152] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -23 [ 1255.788940][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.806086][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1255.834921][ T5950] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1255.852169][T14152] usb 3-1: USB disconnect, device number 96 [ 1255.858233][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.858264][ T5950] usb 2-1: Product: syz [ 1255.858282][ T5950] usb 2-1: Manufacturer: syz [ 1255.858299][ T5950] usb 2-1: SerialNumber: syz [ 1255.865464][ T5950] usb 2-1: config 0 descriptor?? [ 1255.928218][ T5950] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1255.950615][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1255.980268][ T5950] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1256.066329][T19007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3352'. [ 1256.106992][T18996] fuse: Unknown parameter 'use' [ 1256.244149][T19017] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1257.668001][T19026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3359'. [ 1258.340473][T14173] usb 2-1: USB disconnect, device number 78 [ 1258.492126][T19051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3362'. [ 1259.670731][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3382'. [ 1259.763960][T19090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1259.813281][T19094] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1259.906163][T14152] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1260.067426][T14152] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.123483][T14152] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1260.177549][T14152] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1260.236700][T14152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.256593][T14152] usb 4-1: Product: syz [ 1260.260811][T14152] usb 4-1: Manufacturer: syz [ 1260.285834][T14152] usb 4-1: SerialNumber: syz [ 1260.316180][T14152] usb 4-1: config 0 descriptor?? [ 1260.338612][T14152] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1260.421825][T14152] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1260.470742][T14152] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1260.540231][T19088] fuse: Unknown parameter 'use' [ 1261.346856][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1261.346876][ T30] audit: type=1326 audit(1768525393.108:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19124 comm="syz.4.3396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f870498f749 code=0x0 [ 1261.423856][T19128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3399'. [ 1261.446066][T19128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3399'. [ 1261.455190][ T5950] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1261.476278][T19128] erspan0: entered promiscuous mode [ 1261.483119][T19128] gretap0: entered promiscuous mode [ 1261.665946][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 1261.673168][ T5950] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1261.683906][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.713493][ T5950] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1261.727096][ T5950] pvrusb2: ********** [ 1261.733458][ T5950] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1261.753133][ T5950] pvrusb2: Important functionality might not be entirely working. [ 1261.768049][ T5950] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1261.788809][ T5950] pvrusb2: ********** [ 1261.923797][ T2344] pvrusb2: Invalid write control endpoint [ 1262.006278][ T2344] pvrusb2: Invalid write control endpoint [ 1262.012042][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1262.022086][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1262.035708][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1262.047909][ T2344] pvrusb2: Device being rendered inoperable [ 1262.053952][ T2344] cx25840 16-0044: Unable to detect h/w, assuming cx23887 [ 1262.062891][ T2344] cx25840 16-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1262.071926][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1262.081926][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1262.145464][T14152] usb 3-1: USB disconnect, device number 97 [ 1262.155216][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1262.477792][ T5950] usb 4-1: USB disconnect, device number 99 [ 1262.817250][T19157] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3407'. [ 1263.247952][T19173] IPv6: sit3: Disabled Multicast RS [ 1264.285998][T14154] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1264.436009][T14154] usb 4-1: Using ep0 maxpacket: 32 [ 1264.444369][T14154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.456331][T14154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1264.470535][T14154] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1264.497351][T14154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.521832][T14154] usb 4-1: config 0 descriptor?? [ 1265.014208][T14154] savu 0003:1E7D:2D5A.0031: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1265.278360][T14154] usb 4-1: USB disconnect, device number 100 [ 1265.326034][ T5950] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1265.476813][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 1265.484363][ T5950] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 1265.493600][ T5950] usb 3-1: config 252 has no interface number 0 [ 1265.500642][ T5950] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1265.527172][ T5950] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1265.537511][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.555511][ T5950] usb 3-1: Product: syz [ 1265.564606][ T5950] usb 3-1: Manufacturer: syz [ 1265.574940][ T5950] usb 3-1: SerialNumber: syz [ 1265.604811][T19216] ksmbd: Unknown IPC event: 3, ignore. [ 1265.638863][ T5950] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1265.877083][T14175] usb 3-1: Failed to submit usb control message: -71 [ 1265.886223][T14154] usb 3-1: USB disconnect, device number 98 [ 1265.911935][T14175] usb 3-1: unable to send the bmi data to the device: -71 [ 1265.930755][T14175] usb 3-1: unable to get target info from device [ 1265.951056][T14175] usb 3-1: could not get target info (-71) [ 1265.959719][T14175] usb 3-1: could not probe fw (-71) [ 1266.752055][T19244] bridge0: port 3(syz_tun) entered blocking state [ 1266.830977][T19244] bridge0: port 3(syz_tun) entered disabled state [ 1266.859319][T19244] syz_tun: entered allmulticast mode [ 1266.910754][T19244] syz_tun: entered promiscuous mode [ 1266.945261][T19244] bridge0: port 3(syz_tun) entered blocking state [ 1266.952577][T19244] bridge0: port 3(syz_tun) entered forwarding state [ 1267.417027][T19273] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3448'. [ 1268.506321][T14172] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1268.668726][T14172] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1268.685242][T14172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.745989][T14172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.755796][T14172] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1268.816218][T14172] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1268.839723][T14172] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1268.872338][T14172] usb 4-1: Manufacturer: syz [ 1268.918509][T14172] usb 4-1: config 0 descriptor?? [ 1269.063916][T19309] netlink: 'syz.0.3461': attribute type 10 has an invalid length. [ 1269.226120][T19315] netlink: 'syz.1.3465': attribute type 4 has an invalid length. [ 1269.374864][T14172] appleir 0003:05AC:8243.0032: unknown main item tag 0x0 [ 1269.423057][T14172] appleir 0003:05AC:8243.0032: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1269.688434][ T9363] usb 4-1: USB disconnect, device number 101 [ 1269.886291][T14172] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1270.056396][T14172] usb 2-1: Using ep0 maxpacket: 8 [ 1270.130296][T14172] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.173623][T14172] usb 2-1: config 0 has no interfaces? [ 1270.197094][T14172] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1270.219255][T14172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.241275][T14172] usb 2-1: config 0 descriptor?? [ 1270.300341][T19333] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 1270.465001][T14154] usb 2-1: USB disconnect, device number 79 [ 1270.776022][T14172] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1270.896121][T14154] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1270.946074][T14172] usb 5-1: Using ep0 maxpacket: 32 [ 1270.953166][T14172] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.966692][T14172] usb 5-1: config 0 has no interfaces? [ 1270.974092][T14172] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1270.994282][T14172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.016819][T14172] usb 5-1: config 0 descriptor?? [ 1271.068090][T14154] usb 3-1: Using ep0 maxpacket: 32 [ 1271.090927][T14154] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 1271.106110][T14154] usb 3-1: config 0 has no interface number 0 [ 1271.112291][T14154] usb 3-1: config 0 interface 230 has no altsetting 0 [ 1271.151354][T14154] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1271.175406][T14154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.196250][T14154] usb 3-1: Product: syz [ 1271.200517][T14154] usb 3-1: Manufacturer: syz [ 1271.216064][T14154] usb 3-1: SerialNumber: syz [ 1271.226908][T14154] usb 3-1: config 0 descriptor?? [ 1271.248170][T14154] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 1271.279439][T14154] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1271.500498][T19355] ksmbd: Unknown IPC event: 3, ignore. [ 1271.526158][T14152] usb 5-1: USB disconnect, device number 80 [ 1271.637472][ T9363] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1271.795957][ T9363] usb 4-1: Using ep0 maxpacket: 8 [ 1271.807622][ T9363] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.848165][ T9363] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1271.887326][ T9363] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1271.899090][ T9363] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1271.913747][ T9363] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1271.923146][ T9363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.943731][ T9363] hub 4-1:1.0: bad descriptor, ignoring hub [ 1271.950509][ T9363] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1271.958654][ T9363] cdc_wdm 4-1:1.0: skipping garbage [ 1271.963948][ T9363] cdc_wdm 4-1:1.0: skipping garbage [ 1271.974133][ T9363] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1271.980409][ T9363] cdc_wdm 4-1:1.0: Unknown control protocol [ 1272.406893][T14172] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1272.598671][T14172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 90, changing to 10 [ 1272.615442][T14172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.642497][T14172] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1272.664128][T14172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.694543][T14172] usb 5-1: config 0 descriptor?? [ 1273.128047][T14172] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 1273.154520][T14172] cp2112 0003:10C4:EA90.0033: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1273.325725][T14172] cp2112 0003:10C4:EA90.0033: Part Number: 0x82 Device Version: 0xFE [ 1273.512509][T14154] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 1273.932319][T14172] cp2112 0003:10C4:EA90.0033: error reading lock byte: -32 [ 1273.951363][T14172] usb 5-1: USB disconnect, device number 81 [ 1274.376122][T14154] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1274.535931][T14154] usb 2-1: Using ep0 maxpacket: 16 [ 1274.548707][T14154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.570001][T14154] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1274.584939][T14154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.602116][T14154] usb 2-1: config 0 descriptor?? [ 1274.818356][T14152] usb 3-1: USB disconnect, device number 99 [ 1275.067189][T14154] mcp2221 0003:04D8:00DD.0034: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1275.563369][T14172] usb 2-1: USB disconnect, device number 80 [ 1275.944658][T14173] usb 4-1: USB disconnect, device number 102 [ 1276.183739][T19410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3495'. [ 1276.421163][T19415] syz_tun: entered allmulticast mode [ 1276.446704][T19414] syz_tun: left allmulticast mode [ 1277.016084][T14173] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1277.190447][T14173] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1277.199007][T14173] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.209557][T14173] usb 5-1: config 0 has no interface number 0 [ 1277.218832][T14173] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1277.228203][T14173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.238594][T14173] usb 5-1: Product: syz [ 1277.243971][T14173] usb 5-1: Manufacturer: syz [ 1277.249074][T14173] usb 5-1: SerialNumber: syz [ 1277.275690][T14173] usb 5-1: config 0 descriptor?? [ 1277.373089][T14173] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 1277.592963][T19422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.614712][T19422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.648751][T19422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.726495][T19422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.823397][T14152] usb 5-1: USB disconnect, device number 82 [ 1278.404964][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3514'. [ 1278.818411][T19459] ksmbd: Unknown IPC event: 3, ignore. [ 1279.131785][T19475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1279.316273][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1279.322880][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1279.330864][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1279.338823][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1279.346807][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1279.354656][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1279.362626][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1279.370524][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1279.378494][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1279.386382][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1279.394320][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1279.402211][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1279.410189][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1279.418075][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1279.426046][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1279.433885][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1279.441797][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1279.449633][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1279.945998][T14172] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1280.130866][T14172] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1280.153372][T14172] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.233667][T14172] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1280.255406][T14172] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.300418][T14172] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1280.330775][T14172] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1280.351836][T14172] usb 2-1: Product: syz [ 1280.360511][T14172] usb 2-1: Manufacturer: syz [ 1280.504036][T14172] cdc_wdm 2-1:1.0: skipping garbage [ 1280.512633][T14172] cdc_wdm 2-1:1.0: skipping garbage [ 1280.535774][T14172] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1280.546101][T14172] cdc_wdm 2-1:1.0: Unknown control protocol [ 1280.581425][T19486] netlink: 'syz.4.3520': attribute type 1 has an invalid length. [ 1280.780294][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1280.786970][T14152] usb 2-1: USB disconnect, device number 81 [ 1280.786973][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1280.786996][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1282.439739][T19515] syzkaller0: entered promiscuous mode [ 1282.445415][T19515] syzkaller0: entered allmulticast mode [ 1282.552151][T19519] openvswitch: netlink: IP tunnel dst address not specified [ 1282.724356][T19525] netlink: 'syz.3.3532': attribute type 1 has an invalid length. [ 1282.803839][T19530] ksmbd: Unknown IPC event: 3, ignore. [ 1282.945301][T19525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1283.522796][T19541] xt_hashlimit: size too large, truncated to 1048576 [ 1284.003649][T19551] binder_alloc: 19550: pid 19550 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1284.636943][T14152] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1284.806336][T14152] usb 4-1: Using ep0 maxpacket: 32 [ 1284.825424][T14152] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.837319][T14152] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1284.978837][T14152] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1285.008132][T14152] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1285.045417][T14152] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1285.066357][T14152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.082472][T14152] usb 4-1: Product: syz [ 1285.094709][T14152] usb 4-1: Manufacturer: syz [ 1285.130762][T14152] usb 4-1: SerialNumber: syz [ 1285.177329][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1285.294314][T14152] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input58 [ 1285.486111][T14152] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1285.525034][T14152] (id 0x00) [ 1285.596038][T14172] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1285.696019][T14152] rc_core: IR keymap rc-imon-pad not found [ 1285.701902][T14152] Registered IR keymap rc-empty [ 1285.746430][T14152] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1285.768004][T14172] usb 3-1: config 0 has no interfaces? [ 1285.778486][T14172] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1285.787938][T14172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.796721][T14172] usb 3-1: Product: syz [ 1285.801016][T14172] usb 3-1: Manufacturer: syz [ 1285.805648][T14172] usb 3-1: SerialNumber: syz [ 1285.816307][T14152] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1285.827157][T14172] usb 3-1: config 0 descriptor?? [ 1285.912542][T14152] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1285.964370][T14152] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input59 [ 1285.987673][T14152] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:103> initialized [ 1286.055051][T19582] netlink: 'syz.1.3547': attribute type 1 has an invalid length. [ 1286.072884][T14152] usb 3-1: USB disconnect, device number 100 [ 1286.198851][T19582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1286.257041][T19585] vlan2: entered promiscuous mode [ 1286.262168][T19585] bond1: entered promiscuous mode [ 1286.306158][T19585] vlan2: entered allmulticast mode [ 1286.313421][T19585] bond1: entered allmulticast mode [ 1286.389215][T19586] bond1: (slave gretap1): making interface the new active one [ 1286.397406][T19586] gretap1: entered promiscuous mode [ 1286.408594][T19586] gretap1: entered allmulticast mode [ 1286.433378][T19586] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1286.495775][T19558] imon:send_packet: packet tx failed (-71) [ 1286.496073][T14152] usb 4-1: USB disconnect, device number 103 [ 1286.516288][T19558] imon:vfd_write: send packet #1 failed [ 1286.587334][ T9363] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 1286.635082][ T9363] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1286.920227][T19606] ksmbd: Unknown IPC event: 3, ignore. [ 1287.901454][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3553'. [ 1287.926834][T19616] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1288.059087][T19616] team1: entered promiscuous mode [ 1288.064958][T19616] team1: entered allmulticast mode [ 1288.070906][T19616] 8021q: adding VLAN 0 to HW filter on device team1 [ 1289.479076][T19639] netlink: 'syz.4.3559': attribute type 1 has an invalid length. [ 1289.655993][T19643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3560'. [ 1289.665264][T19643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3560'. [ 1290.355572][T19651] syzkaller0: entered promiscuous mode [ 1290.373371][T19651] syzkaller0: entered allmulticast mode [ 1290.876454][T14152] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1291.046067][T14152] usb 4-1: Using ep0 maxpacket: 16 [ 1291.072215][T14152] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1291.087127][T14152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.118532][T14152] usb 4-1: Product: syz [ 1291.136506][T14152] usb 4-1: Manufacturer: syz [ 1291.141437][T14152] usb 4-1: SerialNumber: syz [ 1291.229333][T14152] usb 4-1: config 0 descriptor?? [ 1291.340198][T19664] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1291.843930][T14152] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1291.865823][T14152] usb 4-1: USB disconnect, device number 104 [ 1294.756020][ T5950] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1295.057738][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.076481][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1295.131062][ T5950] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1295.185915][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.265229][ T5950] usb 4-1: Product: syz [ 1295.269871][ T5950] usb 4-1: Manufacturer: syz [ 1295.274488][ T5950] usb 4-1: SerialNumber: syz [ 1295.345292][ T5950] usb 4-1: config 0 descriptor?? [ 1295.410626][ T5950] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1295.468831][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1295.526966][T19704] syzkaller0: entered promiscuous mode [ 1295.556390][T19704] syzkaller0: entered allmulticast mode [ 1295.564492][ T5950] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1295.904648][T19715] syzkaller0: entered promiscuous mode [ 1295.910349][T19715] syzkaller0: entered allmulticast mode [ 1295.988999][T14152] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1296.686745][T14152] usb 2-1: Using ep0 maxpacket: 32 [ 1296.696097][T14152] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1296.704781][T14152] usb 2-1: config 0 has no interface number 0 [ 1296.714761][T14152] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1296.725678][T14152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.744644][T14152] usb 2-1: Product: syz [ 1296.750239][T14152] usb 2-1: Manufacturer: syz [ 1296.754929][T14152] usb 2-1: SerialNumber: syz [ 1296.762868][T14152] usb 2-1: config 0 descriptor?? [ 1296.789053][T14152] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1296.802045][T14152] usb 2-1: selecting invalid altsetting 1 [ 1296.810966][T14152] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1296.832171][T14152] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1296.859272][ T5950] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1296.955329][ T9363] usb 4-1: USB disconnect, device number 105 [ 1296.988128][T14152] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1297.010778][T14152] dvb_usb_ce6230 2-1:0.1: probe with driver dvb_usb_ce6230 failed with error -23 [ 1297.031357][T14152] usb 2-1: USB disconnect, device number 82 [ 1297.075989][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 1297.089528][ T5950] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1297.102133][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.116663][ T5950] usb 3-1: config 0 descriptor?? [ 1297.135975][ T5950] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1297.187786][T19733] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3588'. [ 1297.665619][T19739] netlink: 'syz.3.3590': attribute type 1 has an invalid length. [ 1297.725817][T19740] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3590'. [ 1297.887458][T19739] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1298.181915][ T5950] gspca_sonixj: reg_w1 err -71 [ 1298.206265][ T5950] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1298.222306][ T5950] usb 3-1: USB disconnect, device number 101 [ 1299.127882][T19757] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1299.563267][T14173] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1299.733285][T14173] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.656130][T14173] usb 5-1: config 0 has no interfaces? [ 1300.724865][T14173] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1300.735572][T14173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.752044][T14173] usb 5-1: Product: syz [ 1300.866605][T14173] usb 5-1: Manufacturer: syz [ 1300.871254][T14173] usb 5-1: SerialNumber: syz [ 1300.901423][T14173] usb 5-1: config 0 descriptor?? [ 1302.959274][T14152] usb 5-1: USB disconnect, device number 83 [ 1304.166022][T14152] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1304.336165][T14152] usb 2-1: Using ep0 maxpacket: 16 [ 1304.354205][T14152] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1304.364342][T14152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.373739][T14152] usb 2-1: Product: syz [ 1304.378536][T14152] usb 2-1: Manufacturer: syz [ 1304.405982][T14152] usb 2-1: SerialNumber: syz [ 1304.426978][T19818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3604'. [ 1304.778773][T14152] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1304.818569][T14152] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1304.867774][T14152] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -23 [ 1306.602081][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.608915][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.246852][T14152] usb 2-1: USB disconnect, device number 83 [ 1307.715984][T14152] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1307.888843][T14152] usb 2-1: not running at top speed; connect to a high speed hub [ 1307.903702][T14152] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.921100][T19845] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3612'. [ 1307.959651][T14152] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1308.013311][T14152] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1308.022979][T14152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.045647][T14152] usb 2-1: Product: ᐌ [ 1308.071089][T14152] usb 2-1: Manufacturer: О [ 1308.109001][T14152] usb 2-1: SerialNumber: syz [ 1308.740341][T14152] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1308.791288][T14152] usb 2-1: USB disconnect, device number 84 [ 1308.859570][T19859] syzkaller0: entered promiscuous mode [ 1308.866021][T14173] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1308.883645][T19859] syzkaller0: entered allmulticast mode [ 1309.055926][T14173] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 1309.066678][T14173] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.078708][T14173] usb 4-1: config 0 has no interface number 0 [ 1309.085682][T14173] usb 4-1: config 0 interface 238 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1309.118443][T14173] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 1309.136952][T14173] usb 4-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 1309.148975][T14173] usb 4-1: Product: syz [ 1309.155763][T14173] usb 4-1: Manufacturer: syz [ 1309.160980][T14173] usb 4-1: SerialNumber: syz [ 1309.178004][T14173] usb 4-1: config 0 descriptor?? [ 1309.201755][T14173] comedi comedi5: Wrong number of endpoints [ 1309.212133][T14173] ni6501 4-1:0.238: driver 'ni6501' failed to auto-configure device. [ 1309.562870][ T9363] usb 4-1: USB disconnect, device number 106 [ 1311.596064][T14173] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1311.760772][T14173] usb 3-1: Using ep0 maxpacket: 8 [ 1311.799221][T14173] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1311.855962][T14173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.873660][T14173] usb 3-1: Product: syz [ 1311.880656][T14173] usb 3-1: Manufacturer: syz [ 1311.890822][T14173] usb 3-1: SerialNumber: syz [ 1311.937729][T14173] usb 3-1: config 0 descriptor?? [ 1312.173442][T14173] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1313.283906][T19895] netlink: 'syz.3.3625': attribute type 13 has an invalid length. [ 1313.291845][T19895] netlink: 'syz.3.3625': attribute type 17 has an invalid length. [ 1313.397024][T19895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1314.027243][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1314.070223][T14173] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1314.128735][T19900] netlink: 'syz.0.3627': attribute type 1 has an invalid length. [ 1314.236129][T19902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3627'. [ 1314.287245][T19900] bond2: entered promiscuous mode [ 1314.301255][T19900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1314.343504][T19902] bond2: entered allmulticast mode [ 1314.449130][T19900] bond2: (slave bridge3): making interface the new active one [ 1314.545817][T19900] bridge3: entered promiscuous mode [ 1314.586545][T19900] bridge3: entered allmulticast mode [ 1314.627685][T19900] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1314.786578][T14173] usb 3-1: USB disconnect, device number 102 [ 1315.279585][ T30] audit: type=1326 audit(1768525446.968:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1315.336475][ T9363] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 1315.486452][ T9370] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1315.519902][ T30] audit: type=1326 audit(1768525446.968:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1315.553412][ T30] audit: type=1326 audit(1768525446.968:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1315.586723][ T30] audit: type=1326 audit(1768525446.968:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1315.626034][ T30] audit: type=1326 audit(1768525446.968:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f870498e1ff code=0x7ffc0000 [ 1315.648934][ T30] audit: type=1326 audit(1768525446.968:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1315.806889][ T30] audit: type=1326 audit(1768525446.968:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1315.845304][ T30] audit: type=1326 audit(1768525446.968:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1315.886120][ T9370] usb 5-1: Using ep0 maxpacket: 16 [ 1315.943227][ T9363] usb 2-1: not running at top speed; connect to a high speed hub [ 1315.952489][ T9363] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1315.963494][ T9363] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1315.982563][ T9363] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1315.999138][ T9363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.008632][ T9363] usb 2-1: Product: 犯ﲈ⨸㰊粤퀻燶첛؅놋庵墪䬱箿賄࢟鯐챤ਥ⣤혇᷈隆䫤翖훭덵飽烝ﮁ덒只뽶鹺뮒绥Ȁ [ 1316.047132][ T9370] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1316.078890][ T30] audit: type=1326 audit(1768525446.968:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1316.111803][ T9370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.129134][ T9370] usb 5-1: Product: syz [ 1316.140622][ T9370] usb 5-1: Manufacturer: syz [ 1316.162093][ T9363] usb 2-1: Manufacturer: О [ 1316.166776][ T9363] usb 2-1: SerialNumber: syz [ 1316.196309][T19912] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1316.212314][T19912] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1316.332972][ T9370] usb 5-1: SerialNumber: syz [ 1316.348188][ T30] audit: type=1326 audit(1768525446.968:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870498f749 code=0x7ffc0000 [ 1316.428098][ T9370] usb 5-1: config 0 descriptor?? [ 1316.449500][ T9370] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1316.766492][ T9370] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 1317.484270][ T9363] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1317.531227][ T9363] usb 2-1: USB disconnect, device number 85 [ 1318.416338][ T9370] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1318.478730][ T9363] usb 5-1: USB disconnect, device number 84 [ 1318.596797][ T9370] usb 2-1: Using ep0 maxpacket: 32 [ 1318.604723][ T9370] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1318.624748][ T9370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.656110][ T9370] usb 2-1: config 0 descriptor?? [ 1318.726376][ T9370] as10x_usb: device has been detected [ 1319.865046][ T9370] usb 2-1: as102_dvb_register: dvb_register_adapter() failed: -23 [ 1319.891603][ T9370] Abilis Systems as10x usb driver 2-1:0.0: probe with driver Abilis Systems as10x usb driver failed with error -23 [ 1320.000104][T19948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1320.162049][ T9363] usb 2-1: USB disconnect, device number 86 [ 1321.415338][T19967] vivid-004: disconnect [ 1322.391470][T19979] ksmbd: Unknown IPC event: 3, ignore. [ 1322.465422][T19962] vivid-004: reconnect [ 1324.666001][ T9370] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1324.917189][ T9370] usb 4-1: Using ep0 maxpacket: 8 [ 1324.971726][ T9370] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1324.986223][ T9370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.996916][ T9370] usb 4-1: Product: syz [ 1325.006329][ T9370] usb 4-1: Manufacturer: syz [ 1325.020039][ T9370] usb 4-1: SerialNumber: syz [ 1325.091094][ T9370] usb 4-1: config 0 descriptor?? [ 1325.160772][ T9370] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1325.664237][ T9370] gspca_sonixj: reg_r err -32 [ 1325.701299][ T9370] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 1326.256008][ T9370] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1326.435777][ T9370] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.467816][ T9370] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1326.481625][ T9370] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1326.491006][ T9370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.499672][ T9370] usb 3-1: Product: syz [ 1326.503966][ T9370] usb 3-1: Manufacturer: syz [ 1326.514491][ T9370] usb 3-1: SerialNumber: syz [ 1326.535120][ T9370] usb 3-1: config 0 descriptor?? [ 1326.647819][ T9370] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1326.670917][ T9370] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1326.693308][ T9370] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1326.876616][T20022] fuse: Bad value for 'fd' [ 1326.920330][T20032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3648'. [ 1327.786138][ T9363] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1328.017771][ T9363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.036264][ T9363] usb 2-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 1328.080647][ T9363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.164239][ T9363] usb 2-1: config 0 descriptor?? [ 1328.607978][ T9363] viewsonic 0003:0543:E621.0036: item fetching failed at offset 2/5 [ 1328.791967][ T9363] viewsonic 0003:0543:E621.0036: probe with driver viewsonic failed with error -22 [ 1329.627335][ T9363] usb 4-1: USB disconnect, device number 107 [ 1329.987739][ T9370] usb 3-1: USB disconnect, device number 103 [ 1330.491887][ T9363] usb 2-1: USB disconnect, device number 87 [ 1331.160843][ T9363] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1331.417107][ T9363] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.682700][ T9363] usb 2-1: config 0 has no interfaces? [ 1331.688552][ T9363] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1331.711045][ T9363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.953450][ T9363] usb 2-1: config 0 descriptor?? [ 1334.013097][ T9370] usb 2-1: USB disconnect, device number 88 [ 1336.095646][T20105] xt_policy: output policy not valid in PREROUTING and INPUT [ 1336.882142][T20113] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1336.890603][T20113] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1336.900427][T20113] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1337.206910][T20115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3671'. [ 1341.118233][T20161] fuse: Bad value for 'fd' [ 1342.585938][ T9363] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1342.935715][T20183] cifs: Unknown parameter ' [ 1343.040475][ T9363] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.421698][ T9363] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1343.453585][ T9363] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1343.480838][ T9363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.506479][ T9363] usb 2-1: Product: syz [ 1343.521996][ T9363] usb 2-1: Manufacturer: syz [ 1343.532284][ T9363] usb 2-1: SerialNumber: syz [ 1343.554792][ T9363] usb 2-1: config 0 descriptor?? [ 1343.572564][ T9363] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1343.636444][ T9363] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1343.667477][ T9363] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1343.781104][T20172] fuse: Unknown parameter 'use' [ 1346.175071][ T9370] usb 2-1: USB disconnect, device number 89 [ 1349.556001][ T5950] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1349.737654][ T5950] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1349.766725][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1349.802723][ T5950] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1349.835973][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1349.857779][ T5950] usb 5-1: Product: syz [ 1349.878725][ T5950] usb 5-1: Manufacturer: syz [ 1349.883392][ T5950] usb 5-1: SerialNumber: syz [ 1349.915110][ T5950] usb 5-1: config 0 descriptor?? [ 1349.941766][ T5950] usb 5-1: selecting invalid altsetting 0 [ 1350.316571][ T5950] usb 5-1: USB disconnect, device number 85 [ 1351.214825][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3696'. [ 1351.656145][T20236] vivid-007: ================= START STATUS ================= [ 1351.718171][T20236] vivid-007: Enable Output Cropping: true [ 1351.734714][T20236] vivid-007: Enable Output Composing: true [ 1351.842776][T20236] vivid-007: Enable Output Scaler: true [ 1351.852893][T20236] vivid-007: Tx RGB Quantization Range: Automatic [ 1352.043169][T20236] vivid-007: Transmit Mode: HDMI [ 1352.076101][T20236] vivid-007: Hotplug Present: 0x00000000 [ 1352.092778][T20236] vivid-007: RxSense Present: 0x00000000 [ 1352.126128][T20236] vivid-007: EDID Present: 0x00000000 [ 1352.132317][T20236] vivid-007: ================== END STATUS ================== [ 1353.595796][T20262] random: crng reseeded on system resumption [ 1354.326039][ T5950] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1354.475931][ T5950] usb 5-1: Using ep0 maxpacket: 32 [ 1354.488348][ T5950] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1354.547387][ T5950] usb 5-1: config 0 has no interface number 0 [ 1354.588625][ T5950] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1354.717991][ T5950] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1354.739616][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.788389][ T5950] usb 5-1: Product: syz [ 1354.792625][ T5950] usb 5-1: Manufacturer: syz [ 1354.804245][ T5950] usb 5-1: SerialNumber: syz [ 1354.818197][ T5950] usb 5-1: config 0 descriptor?? [ 1354.839111][ T5950] smsc75xx v1.0.0 [ 1355.162011][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 1355.162038][ T30] audit: type=1326 audit(1768525486.938:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.0.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1355.269557][ T30] audit: type=1326 audit(1768525486.938:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.0.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1355.411219][ T30] audit: type=1326 audit(1768525486.938:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.0.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1355.803269][ T30] audit: type=1326 audit(1768525486.938:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.0.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1355.903245][ T30] audit: type=1326 audit(1768525487.678:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.0.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1356.131623][ T30] audit: type=1326 audit(1768525487.678:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20290 comm="syz.0.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff67e7c2005 code=0x7ffc0000 [ 1356.267460][ T30] audit: type=1326 audit(1768525487.678:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.0.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1356.476182][ T30] audit: type=1326 audit(1768525487.798:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.0.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1356.511812][ T30] audit: type=1326 audit(1768525487.798:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.0.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1356.551332][ T30] audit: type=1326 audit(1768525487.798:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.0.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67e78f749 code=0x7ffc0000 [ 1357.349552][ T5950] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1357.384981][ T5950] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1357.426083][ T5950] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1357.448970][ T5950] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1357.508338][ T5950] usb 5-1: USB disconnect, device number 86 [ 1357.863193][T20316] binder: 20315:20316 ioctl c0306201 2000000003c0 returned -14 [ 1358.346016][ T5950] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1358.516652][ T5950] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1358.540728][ T5950] usb 2-1: not running at top speed; connect to a high speed hub [ 1358.576211][ T5950] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 1358.594296][ T5950] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.619479][ T5950] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1358.644836][ T5950] usb 2-1: config 2 has no interface number 0 [ 1358.691432][ T5950] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1358.713731][ T5950] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1358.739458][ T5950] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1358.777176][ T5950] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1358.808032][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.832611][ T5950] usb 2-1: Product: syz [ 1358.846101][ T5950] usb 2-1: Manufacturer: syz [ 1358.872850][ T5950] usb 2-1: SerialNumber: syz [ 1359.121529][T20316] binder: 20315:20316 ioctl c04064a0 2000000001c0 returned -22 [ 1359.132496][T20316] binder: 20315:20316 ioctl c06864a1 2000000003c0 returned -22 [ 1359.146128][T20316] binder: 20315:20316 ioctl c06864ce 200000000440 returned -22 [ 1359.304606][ T5950] usb 2-1: USB disconnect, device number 90 [ 1359.927565][T14154] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1360.087818][T14154] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.098581][T14154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1360.108252][T14154] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1360.129882][T14154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.143540][T14154] usb 4-1: Product: syz [ 1360.148090][T14154] usb 4-1: Manufacturer: syz [ 1360.153191][T14154] usb 4-1: SerialNumber: syz [ 1360.321410][T14154] usb 4-1: config 0 descriptor?? [ 1360.338260][T14154] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1360.358438][T14154] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1360.519133][T14154] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1360.537988][T20331] fuse: Invalid rootmode [ 1361.932397][ T9370] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1361.997320][T14154] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1362.178339][ T9370] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1362.235081][ T9370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1362.337674][T14154] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.352443][T14154] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1362.360483][ T9370] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1362.380024][T14154] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1362.390637][T14154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.405963][T14154] usb 3-1: Product: syz [ 1362.410354][T14154] usb 3-1: Manufacturer: syz [ 1362.421699][ T9370] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1362.450604][T14154] usb 3-1: SerialNumber: syz [ 1362.450617][ T9370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.512553][ T9370] usb 5-1: Product: syz [ 1362.528366][T14154] usb 3-1: config 0 descriptor?? [ 1362.554314][T14152] usb 4-1: USB disconnect, device number 108 [ 1362.570385][ T9370] usb 5-1: Manufacturer: syz [ 1362.598661][T14154] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1362.613054][ T9370] usb 5-1: SerialNumber: syz [ 1362.667664][T14154] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1362.717561][ T9370] usb 5-1: config 0 descriptor?? [ 1362.738299][T20354] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1362.756599][T14154] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1362.994148][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3719'. [ 1363.005501][T20354] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1363.029006][T20362] program syz.3.3721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1365.050342][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1365.050362][ T30] audit: type=1326 audit(1768525496.818:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1365.165467][ T30] audit: type=1326 audit(1768525496.818:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1365.311008][ T30] audit: type=1326 audit(1768525496.818:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1365.334921][ T9370] usb 3-1: USB disconnect, device number 104 [ 1365.453113][ T30] audit: type=1326 audit(1768525496.828:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1365.505390][ T30] audit: type=1326 audit(1768525496.828:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1365.546093][ T5950] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1365.795428][ T5950] usb 2-1: device descriptor read/64, error -71 [ 1365.970392][ T30] audit: type=1326 audit(1768525496.828:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1366.000797][ T30] audit: type=1326 audit(1768525496.828:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1366.049601][T14154] usb 5-1: USB disconnect, device number 87 [ 1366.165995][ T5950] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1366.318035][ T5950] usb 2-1: device descriptor read/64, error -71 [ 1366.330547][ T30] audit: type=1326 audit(1768525496.828:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1366.430928][ T5950] usb usb2-port1: attempt power cycle [ 1366.480079][ T30] audit: type=1326 audit(1768525496.828:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1366.526774][ T30] audit: type=1326 audit(1768525496.828:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886418f749 code=0x7ffc0000 [ 1366.856039][ T5950] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1366.887505][ T5950] usb 2-1: device descriptor read/8, error -71 [ 1366.989233][T20395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3728'. [ 1367.090573][T20399] netlink: 'syz.3.3729': attribute type 1 has an invalid length. [ 1367.145955][ T5950] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1367.237418][ T5950] usb 2-1: device descriptor read/8, error -71 [ 1367.408295][ T5950] usb usb2-port1: unable to enumerate USB device [ 1367.912119][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.924184][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.066827][T20407] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3731'. [ 1369.301873][T20422] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1369.348182][T20421] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1370.226395][T14152] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1370.556045][T14152] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.586685][T14152] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1370.720728][T14152] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1370.740168][T14152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.771238][T14152] usb 4-1: Product: syz [ 1370.812706][T14152] usb 4-1: Manufacturer: syz [ 1370.832147][T14152] usb 4-1: SerialNumber: syz [ 1370.850732][T14152] usb 4-1: config 0 descriptor?? [ 1370.870024][T14152] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1370.936265][T14152] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1370.974762][T14152] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1371.316047][T14173] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1371.716013][T14173] usb 2-1: Using ep0 maxpacket: 32 [ 1371.723599][T14173] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1371.733088][T14173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.752288][T14173] usb 2-1: config 0 descriptor?? [ 1371.774491][T14173] as10x_usb: device has been detected [ 1371.801779][T14173] usb 2-1: as102_dvb_register: dvb_register_adapter() failed: -23 [ 1371.843885][T14173] Abilis Systems as10x usb driver 2-1:0.0: probe with driver Abilis Systems as10x usb driver failed with error -23 [ 1373.406595][T20449] netdevsim netdevsim4: Direct firmware load for / [ 1373.406595][T20449] failed with error -2 [ 1373.522189][T20449] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 1373.522189][T20449] [ 1374.436738][ T5950] usb 4-1: USB disconnect, device number 109 [ 1375.262511][T14173] usb 2-1: USB disconnect, device number 95 [ 1375.696981][T20473] program syz.4.3744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1381.759917][T20519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3754'. [ 1382.295888][T14173] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1382.445938][ T9370] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1382.501436][T14173] usb 5-1: Using ep0 maxpacket: 32 [ 1382.514822][T14173] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1382.531239][T14173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.572072][T14173] usb 5-1: config 0 descriptor?? [ 1382.607108][T14173] as10x_usb: device has been detected [ 1382.630625][T14173] usb 5-1: as102_dvb_register: dvb_register_adapter() failed: -23 [ 1382.778406][ T9370] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.805935][ T9370] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1382.827402][T14173] Abilis Systems as10x usb driver 5-1:0.0: probe with driver Abilis Systems as10x usb driver failed with error -23 [ 1382.847767][ T9370] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1382.986325][ T9370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.994381][ T9370] usb 4-1: Product: syz [ 1383.000359][ T9370] usb 4-1: Manufacturer: syz [ 1383.005004][ T9370] usb 4-1: SerialNumber: syz [ 1383.024732][ T9370] usb 4-1: config 0 descriptor?? [ 1383.043307][ T9370] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1383.059037][ T9370] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1383.074250][ T9370] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1383.196254][T14173] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1383.269223][T20534] fuse: Unknown parameter 'use' [ 1383.393576][T14173] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.480783][T14173] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1383.490880][T20542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3758'. [ 1383.667998][T14173] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1383.690403][T14173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.698888][T20544] ================================================================== [ 1383.706995][T20544] BUG: KASAN: slab-use-after-free in as102_release+0x52/0xe0 [ 1383.714414][T20544] Write of size 4 at addr ffff888077576150 by task syz.4.3758/20544 [ 1383.716888][T14173] usb 3-1: Product: syz [ 1383.722425][T20544] [ 1383.722463][T20544] CPU: 1 UID: 0 PID: 20544 Comm: syz.4.3758 Tainted: G L syzkaller #0 PREEMPT(full) [ 1383.722494][T20544] Tainted: [L]=SOFTLOCKUP [ 1383.722502][T20544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1383.722524][T20544] Call Trace: [ 1383.722533][T20544] [ 1383.722543][T20544] dump_stack_lvl+0xe8/0x150 [ 1383.722576][T20544] print_report+0xca/0x240 [ 1383.722600][T20544] ? as102_release+0x52/0xe0 [ 1383.722619][T20544] kasan_report+0x118/0x150 [ 1383.722648][T20544] ? as102_release+0x52/0xe0 [ 1383.722670][T20544] ? __pfx_as102_release+0x10/0x10 [ 1383.722692][T20544] kasan_check_range+0x2b0/0x2c0 [ 1383.722720][T20544] ? __pfx_as102_release+0x10/0x10 [ 1383.722741][T20544] as102_release+0x52/0xe0 [ 1383.722762][T20544] __fput+0x44c/0xa70 [ 1383.722797][T20544] fput_close_sync+0x113/0x220 [ 1383.722827][T20544] ? __pfx_fput_close_sync+0x10/0x10 [ 1383.722864][T20544] __x64_sys_close+0x7f/0x110 [ 1383.722895][T20544] do_syscall_64+0xec/0xf80 [ 1383.722921][T20544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.722943][T20544] ? trace_irq_disable+0x37/0x100 [ 1383.722972][T20544] ? clear_bhb_loop+0x60/0xb0 [ 1383.722997][T20544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.723023][T20544] RIP: 0033:0x7f870498f749 [ 1383.723048][T20544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1383.723069][T20544] RSP: 002b:00007f8705807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1383.723093][T20544] RAX: ffffffffffffffda RBX: 00007f8704be6360 RCX: 00007f870498f749 [ 1383.723109][T20544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1383.723123][T20544] RBP: 00007f8704a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1383.723136][T20544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1383.723149][T20544] R13: 00007f8704be63f8 R14: 00007f8704be6360 R15: 00007f8704d0fa28 [ 1383.723172][T20544] [ 1383.723180][T20544] [ 1383.723191][T20544] Allocated by task 14173: [ 1383.723203][T20544] kasan_save_track+0x3e/0x80 [ 1383.723224][T20544] __kasan_kmalloc+0x93/0xb0 [ 1383.723247][T20544] __kmalloc_cache_noprof+0x3e2/0x700 [ 1383.944958][T20544] as102_usb_probe+0x5b/0x6e0 [ 1383.949640][T20544] usb_probe_interface+0x668/0xc90 [ 1383.954766][T20544] really_probe+0x26d/0xad0 [ 1383.959281][T20544] __driver_probe_device+0x18c/0x320 [ 1383.964573][T20544] driver_probe_device+0x4f/0x240 [ 1383.969604][T20544] __device_attach_driver+0x279/0x430 [ 1383.974999][T20544] bus_for_each_drv+0x251/0x2e0 [ 1383.979860][T20544] __device_attach+0x2b8/0x430 [ 1383.984628][T20544] device_initial_probe+0xa1/0xd0 [ 1383.989684][T20544] bus_probe_device+0x12a/0x220 [ 1383.994549][T20544] device_add+0x7b6/0xb80 [ 1383.998880][T20544] usb_set_configuration+0x1a87/0x2110 [ 1384.004356][T20544] usb_generic_driver_probe+0x8d/0x150 [ 1384.009826][T20544] usb_probe_device+0x1c4/0x3c0 [ 1384.014694][T20544] really_probe+0x26d/0xad0 [ 1384.019200][T20544] __driver_probe_device+0x18c/0x320 [ 1384.024488][T20544] driver_probe_device+0x4f/0x240 [ 1384.029519][T20544] __device_attach_driver+0x279/0x430 [ 1384.034913][T20544] bus_for_each_drv+0x251/0x2e0 [ 1384.039810][T20544] __device_attach+0x2b8/0x430 [ 1384.044621][T20544] device_initial_probe+0xa1/0xd0 [ 1384.049653][T20544] bus_probe_device+0x12a/0x220 [ 1384.054520][T20544] device_add+0x7b6/0xb80 [ 1384.058898][T20544] usb_new_device+0xa39/0x1720 [ 1384.063708][T20544] hub_event+0x29b1/0x4ef0 [ 1384.068155][T20544] process_scheduled_works+0xad1/0x1770 [ 1384.073720][T20544] worker_thread+0x8a0/0xda0 [ 1384.078323][T20544] kthread+0x711/0x8a0 [ 1384.082406][T20544] ret_from_fork+0x510/0xa50 [ 1384.087000][T20544] ret_from_fork_asm+0x1a/0x30 [ 1384.091864][T20544] [ 1384.094227][T20544] Freed by task 14173: [ 1384.098308][T20544] kasan_save_track+0x3e/0x80 [ 1384.103008][T20544] kasan_save_free_info+0x46/0x50 [ 1384.108047][T20544] __kasan_slab_free+0x5c/0x80 [ 1384.112822][T20544] kfree+0x1c0/0x660 [ 1384.116735][T20544] as102_usb_probe+0x5d0/0x6e0 [ 1384.121509][T20544] usb_probe_interface+0x668/0xc90 [ 1384.126629][T20544] really_probe+0x26d/0xad0 [ 1384.131140][T20544] __driver_probe_device+0x18c/0x320 [ 1384.136446][T20544] driver_probe_device+0x4f/0x240 [ 1384.141487][T20544] __device_attach_driver+0x279/0x430 [ 1384.146875][T20544] bus_for_each_drv+0x251/0x2e0 [ 1384.151747][T20544] __device_attach+0x2b8/0x430 [ 1384.156518][T20544] device_initial_probe+0xa1/0xd0 [ 1384.161549][T20544] bus_probe_device+0x12a/0x220 [ 1384.166413][T20544] device_add+0x7b6/0xb80 [ 1384.170755][T20544] usb_set_configuration+0x1a87/0x2110 [ 1384.176230][T20544] usb_generic_driver_probe+0x8d/0x150 [ 1384.181705][T20544] usb_probe_device+0x1c4/0x3c0 [ 1384.186566][T20544] really_probe+0x26d/0xad0 [ 1384.191078][T20544] __driver_probe_device+0x18c/0x320 [ 1384.196370][T20544] driver_probe_device+0x4f/0x240 [ 1384.201405][T20544] __device_attach_driver+0x279/0x430 [ 1384.206797][T20544] bus_for_each_drv+0x251/0x2e0 [ 1384.211717][T20544] __device_attach+0x2b8/0x430 [ 1384.216511][T20544] device_initial_probe+0xa1/0xd0 [ 1384.221550][T20544] bus_probe_device+0x12a/0x220 [ 1384.226427][T20544] device_add+0x7b6/0xb80 [ 1384.230790][T20544] usb_new_device+0xa39/0x1720 [ 1384.235567][T20544] hub_event+0x29b1/0x4ef0 [ 1384.240000][T20544] process_scheduled_works+0xad1/0x1770 [ 1384.245558][T20544] worker_thread+0x8a0/0xda0 [ 1384.250158][T20544] kthread+0x711/0x8a0 [ 1384.254237][T20544] ret_from_fork+0x510/0xa50 [ 1384.258841][T20544] ret_from_fork_asm+0x1a/0x30 [ 1384.263621][T20544] [ 1384.265955][T20544] The buggy address belongs to the object at ffff888077576000 [ 1384.265955][T20544] which belongs to the cache kmalloc-4k of size 4096 [ 1384.280030][T20544] The buggy address is located 336 bytes inside of [ 1384.280030][T20544] freed 4096-byte region [ffff888077576000, ffff888077577000) [ 1384.294034][T20544] [ 1384.296388][T20544] The buggy address belongs to the physical page: [ 1384.302817][T20544] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77570 [ 1384.311585][T20544] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1384.320098][T20544] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1384.327669][T20544] page_type: f5(slab) [ 1384.331657][T20544] raw: 00fff00000000040 ffff88813ffa7140 ffffea0000a09600 dead000000000002 [ 1384.340249][T20544] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1384.348852][T20544] head: 00fff00000000040 ffff88813ffa7140 ffffea0000a09600 dead000000000002 [ 1384.357526][T20544] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1384.366227][T20544] head: 00fff00000000003 ffffea0001dd5c01 00000000ffffffff 00000000ffffffff [ 1384.374908][T20544] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1384.383592][T20544] page dumped because: kasan: bad access detected [ 1384.390005][T20544] page_owner tracks the page as allocated [ 1384.395754][T20544] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 993, tgid 993 (kworker/u8:5), ts 228553816285, free_ts 228220405329 [ 1384.417950][T20544] post_alloc_hook+0x234/0x290 [ 1384.422726][T20544] get_page_from_freelist+0x24e0/0x2580 [ 1384.428278][T20544] __alloc_frozen_pages_noprof+0x181/0x370 [ 1384.434093][T20544] alloc_pages_mpol+0x232/0x4a0 [ 1384.438950][T20544] allocate_slab+0x86/0x3b0 [ 1384.443465][T20544] ___slab_alloc+0xe53/0x1820 [ 1384.448153][T20544] __slab_alloc+0x65/0x100 [ 1384.452575][T20544] __kmalloc_node_track_caller_noprof+0x5d4/0x820 [ 1384.459001][T20544] kmalloc_reserve+0x136/0x290 [ 1384.463774][T20544] __alloc_skb+0x204/0x3a0 [ 1384.468197][T20544] nsim_dev_trap_report_work+0x29a/0xb80 [ 1384.473844][T20544] process_scheduled_works+0xad1/0x1770 [ 1384.479396][T20544] worker_thread+0x8a0/0xda0 [ 1384.483989][T20544] kthread+0x711/0x8a0 [ 1384.488062][T20544] ret_from_fork+0x510/0xa50 [ 1384.492656][T20544] ret_from_fork_asm+0x1a/0x30 [ 1384.497443][T20544] page last free pid 5198 tgid 5198 stack trace: [ 1384.503766][T20544] __free_frozen_pages+0xbc8/0xd30 [ 1384.508905][T20544] __put_partials+0x146/0x170 [ 1384.513612][T20544] __slab_free+0x294/0x320 [ 1384.518066][T20544] qlist_free_all+0x97/0x100 [ 1384.522660][T20544] kasan_quarantine_reduce+0x148/0x160 [ 1384.528271][T20544] __kasan_slab_alloc+0x22/0x80 [ 1384.533146][T20544] __kmalloc_noprof+0x3cf/0x800 [ 1384.538019][T20544] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1384.543592][T20544] tomoyo_path_perm+0x213/0x4b0 [ 1384.548471][T20544] security_inode_getattr+0x12f/0x330 [ 1384.553878][T20544] __x64_sys_newfstat+0xfc/0x200 [ 1384.558832][T20544] do_syscall_64+0xec/0xf80 [ 1384.563355][T20544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.569259][T20544] [ 1384.571597][T20544] Memory state around the buggy address: [ 1384.577250][T20544] ffff888077576000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1384.585322][T20544] ffff888077576080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1384.593392][T20544] >ffff888077576100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1384.601460][T20544] ^ [ 1384.608144][T20544] ffff888077576180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1384.616211][T20544] ffff888077576200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1384.624271][T20544] ================================================================== [ 1384.658273][T14173] usb 3-1: Manufacturer: syz [ 1384.704870][T14173] usb 3-1: SerialNumber: syz [ 1384.722949][T14173] usb 3-1: config 0 descriptor?? [ 1384.764585][T14173] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1384.829342][T14173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1384.887982][T14173] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1384.946714][T20544] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1384.953993][T20544] CPU: 0 UID: 0 PID: 20544 Comm: syz.4.3758 Tainted: G L syzkaller #0 PREEMPT(full) [ 1384.964982][T20544] Tainted: [L]=SOFTLOCKUP [ 1384.969423][T20544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1384.979512][T20544] Call Trace: [ 1384.982825][T20544] [ 1384.985793][T20544] vpanic+0x1e0/0x670 [ 1384.989816][T20544] panic+0xb9/0xc0 [ 1384.993577][T20544] ? __pfx_panic+0x10/0x10 [ 1384.998030][T20544] ? preempt_schedule_thunk+0x16/0x30 [ 1385.003452][T20544] ? as102_release+0x52/0xe0 [ 1385.008070][T20544] ? preempt_schedule_thunk+0x16/0x30 [ 1385.013445][T20544] ? as102_release+0x52/0xe0 [ 1385.018046][T20544] check_panic_on_warn+0x89/0xb0 [ 1385.023019][T20544] ? as102_release+0x52/0xe0 [ 1385.027611][T20544] end_report+0x6f/0x140 [ 1385.031892][T20544] kasan_report+0x129/0x150 [ 1385.036426][T20544] ? as102_release+0x52/0xe0 [ 1385.041023][T20544] ? __pfx_as102_release+0x10/0x10 [ 1385.046142][T20544] kasan_check_range+0x2b0/0x2c0 [ 1385.051093][T20544] ? __pfx_as102_release+0x10/0x10 [ 1385.056205][T20544] as102_release+0x52/0xe0 [ 1385.060629][T20544] __fput+0x44c/0xa70 [ 1385.064622][T20544] fput_close_sync+0x113/0x220 [ 1385.069391][T20544] ? __pfx_fput_close_sync+0x10/0x10 [ 1385.074705][T20544] __x64_sys_close+0x7f/0x110 [ 1385.079413][T20544] do_syscall_64+0xec/0xf80 [ 1385.083972][T20544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.090052][T20544] ? trace_irq_disable+0x37/0x100 [ 1385.095178][T20544] ? clear_bhb_loop+0x60/0xb0 [ 1385.099865][T20544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.105761][T20544] RIP: 0033:0x7f870498f749 [ 1385.110207][T20544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1385.129822][T20544] RSP: 002b:00007f8705807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1385.138249][T20544] RAX: ffffffffffffffda RBX: 00007f8704be6360 RCX: 00007f870498f749 [ 1385.146229][T20544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1385.154203][T20544] RBP: 00007f8704a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1385.162205][T20544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1385.170185][T20544] R13: 00007f8704be63f8 R14: 00007f8704be6360 R15: 00007f8704d0fa28 [ 1385.178177][T20544] [ 1385.181831][T20544] Kernel Offset: disabled [ 1385.186172][T20544] Rebooting in 86400 seconds..