last executing test programs: 25m35.25727499s ago: executing program 1 (id=2): pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 25m28.849943031s ago: executing program 1 (id=23): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) 25m26.012191389s ago: executing program 1 (id=28): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000001c0)) 25m25.747013009s ago: executing program 1 (id=31): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_setup(0x30, 0x0) 25m9.971811519s ago: executing program 32 (id=31): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_setup(0x30, 0x0) 23m8.910910116s ago: executing program 0 (id=338): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(r4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 23m7.772288273s ago: executing program 0 (id=342): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x101, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c9774b4884c350cb1c9a5209ad334d1c1ccc0f3676272febbe9e396bebb587b58a71faa13bd64ad802f1d49201cb55ab74c60f9b23640d8453ffb5e692eb022997c861fd283e9e1427abe81eebf4049a1b5a1df7b9c8b855753c84a6cc3534761a2f21574e7704e3b1e2b86a5b31fc21147aba99124f7a288cf9359ed623295"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0xffffff83}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23m6.550800477s ago: executing program 0 (id=345): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x101, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c9774b4884c350cb1c9a5209ad334d1c1ccc0f3676272febbe9e396bebb587b58a71faa13bd64ad802f1d49201cb55ab74c60f9b23640d8453ffb5e692eb022997c861fd283e9e1427abe81eebf4049a1b5a1df7b9c8b855753c84a6cc3534761a2f21574e7704e3b1e2b86a5b31fc21147aba99124f7a288cf9359ed623295"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0xffffff83}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x20}}, 0x4004040) 23m3.350644872s ago: executing program 0 (id=353): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000400)) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000200)=0x368, 0x4) r5 = fsopen(&(0x7f0000000180)='xfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) openat$cgroup_ro(r6, &(0x7f0000002100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000002c0)='so5\xc9M\x94\xcb\xe0\xab\xff\xb5\x8d\xca\xb5\\\xf4rc\xfe', &(0x7f0000000040)='c:::\x00', 0x0) r8 = gettid() setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000240)={0x3, 0xff, 0x2, 0x4}, 0x10) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000100)='\x00\x00\x00\xa6\a=', 0x0, r7) tkill(r8, 0xb) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 22m54.752647262s ago: executing program 0 (id=370): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x100) r4 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r4, &(0x7f0000000c00), 0x0, 0x80000000, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0xfffffffe, 0x1d3}, &(0x7f00000000c0), &(0x7f0000000000)) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x3, 0xffe, 0x7fffffff, 0xc, 0x2, 0x4, 0x8, 0xffff, 0x6, 0x5, 0x7ff, 0x830, 0x8, 0x10000, 0x9, 0x800, 0x101, 0x2, 0x8001, 0x7, 0x3, 0x4, 0x5, 0x70f]}) syz_open_dev$MSR(0x0, 0x1, 0x0) 22m53.515186927s ago: executing program 0 (id=373): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) openat$cgroup_ro(r2, &(0x7f0000002100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 22m36.490451643s ago: executing program 33 (id=373): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) openat$cgroup_ro(r2, &(0x7f0000002100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 18m12.307841119s ago: executing program 2 (id=961): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r0, 0x400455c8, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xc9, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x0, 0x5241, 0x0, 0x4, 0x5, 0x6, 0x0, 0x40000, 0x767e, 0x80, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0xff, 0x0, 0x0, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x100000001]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x101, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000300000020"}) 18m11.719576007s ago: executing program 3 (id=963): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 18m11.003923155s ago: executing program 2 (id=964): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_io_uring_setup(0x4ce3, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\b\x006\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240080a0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003500), 0x0, 0x40012) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() syz_usb_connect(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) 18m10.918694792s ago: executing program 3 (id=966): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x100) r4 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r4, &(0x7f0000000c00), 0x0, 0x80000000, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0xfffffffe, 0x1d3}, &(0x7f00000000c0), &(0x7f0000000000)) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x3, 0xffe, 0x7fffffff, 0xc, 0x2, 0x4, 0x8, 0xffff, 0x6, 0x5, 0x7ff, 0x830, 0x8, 0x10000, 0x9, 0x800, 0x101, 0x2, 0x8001, 0x7, 0x3, 0x4, 0x5, 0x70f]}) syz_open_dev$MSR(0x0, 0x1, 0x0) 18m8.385906237s ago: executing program 3 (id=973): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRESDEC], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r4 = openat(0xffffffffffffffff, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) fchown(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0xee00, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge0\x00', @random="142b243c16b6"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge0\x00', @broadcast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB="0f0000003d63de78121d9ad24b40ba2e4ee5479841b2e9805bd9185c57184950751975d1836659421e0e06e81326974348bcf2fa3e61c0b8eca160914436a7d90137aa9a53761d27a45ffd530a0cf7e72d408167bcabe528d14581724220234e07e6c818e56ebc62cc2fc6d4e43c2ebf473a68bfc9767c44fb7640679a21170ff1771f918923e0db7205dc8e3c0b73eea145ce9e2521fef1d1b707b8cb3e91e67dba85ac12cb3751ab30c7f4eef2b6d12d7212fb0f313493bcf83c6c86d2332400a3e58cea082b7e8012e91a0651ba914943eb2038d0a432a57906102110801d00a962c44e13331c63", @ANYRES16=r6, @ANYBLOB="310b2cbd7000ffdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 18m7.206148363s ago: executing program 3 (id=977): socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x20, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) getpid() syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0xffff, 0x100}}) 18m7.040371266s ago: executing program 2 (id=979): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000400)) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000200)=0x368, 0x4) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) openat$cgroup_ro(r6, &(0x7f0000002100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000002c0)='so5\xc9M\x94\xcb\xe0\xab\xff\xb5\x8d\xca\xb5\\\xf4rc\xfe', &(0x7f0000000040)='c:::\x00', 0x0) r8 = gettid() setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000240)={0x3, 0xff, 0x2, 0x4}, 0x10) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000100)='\x00\x00\x00\xa6\a=', 0x0, r7) tkill(r8, 0xb) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 18m5.235148623s ago: executing program 2 (id=984): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r5) 18m2.694157228s ago: executing program 2 (id=989): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1c, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00000000efffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000780)="f4", 0x1}], 0x1}}], 0x1, 0x10) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40001, 0x1c3) 18m1.580001189s ago: executing program 3 (id=992): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m56.364473652s ago: executing program 3 (id=1001): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000100fffe0900010073797a301d0000002c000000030a01020000000000685e65ee3813e6000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008150b4000000000300004802c000180090001007866726d000000001c0002800500030003000000080040000000150800024000a530030900010073797a30000000001400000011000100000000000000"], 0xcc}}, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x80000) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 17m56.155242399s ago: executing program 2 (id=1002): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_clone3(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 17m40.711233791s ago: executing program 34 (id=1001): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000100fffe0900010073797a301d0000002c000000030a01020000000000685e65ee3813e6000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008150b4000000000300004802c000180090001007866726d000000001c0002800500030003000000080040000000150800024000a530030900010073797a30000000001400000011000100000000000000"], 0xcc}}, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x80000) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 17m40.212786491s ago: executing program 35 (id=1002): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_clone3(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 15m25.603963802s ago: executing program 6 (id=1345): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TCSETA(r7, 0x5406, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={0x77359400}, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) io_uring_setup(0x5f4f, &(0x7f00000003c0)={0x0, 0x804, 0x2, 0x1000000, 0xfffbfffe, 0x0, r7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0x1c, 0x0, &(0x7f0000000000)="dc396f0757cf3a8300af3c48d096fbe23092304501ab92a9f029620c", 0x0, 0x3, 0x0, 0xbb, 0x58, &(0x7f0000000400)="69cc74f887124819bca975ceddd4e909c58cc1bb771ca628bf9a11953b76f2a4eaef3ac7881cfeca13a4c3ed45b7373c2c110630b52634ea43df07b269ae8dfcd6515a337f90922bd5f3d026482265d9a4b9ba08da3b710d0a0b554891330d774fa06aecf1aab62d8bc58b72c30b4f034c115614310273b178954af1fd4095e777ff7b7a3987d76010fb67d27bbca2e25017c4757ed3660ce28a577ab432d26bc994cd9561edcc362e55fc61db9f7821581620a169d8df26965b49", &(0x7f00000000c0)="1ad122a71df0debdb5507ac3c6ef050064a20f173a194d827b5a3beacbb65f067b2ed01518edf62cdd6ff359f7f80bac719c2756e24a1730792c7bfadaa224fbb79d37791e3737074c1cc7056ec870a44988a0b2a578d2ad", 0x2, 0x0, 0x9}, 0x50) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000580)={0x2c, r5, 0x1, 0x40, 0x0, {0x3, 0x0, 0x3f00}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x14) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) 15m24.481193304s ago: executing program 6 (id=1348): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000011240)=ANY=[@ANYBLOB="500000000e63dfbf8f1208029716000108b80000000008021100000000000000000200000000640001000006021102dd6300c4c0731b5b0ed343a8f33a61cba23891f899e8454a"], 0x2f) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x121000, 0x0) io_setup(0x401, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x109000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, 0x0) io_uring_setup(0x177d, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008800}, 0x10000040) 15m21.747473685s ago: executing program 6 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1c, &(0x7f0000000680)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00000000efffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000780)="f4", 0x1}], 0x1}}], 0x1, 0x10) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40001, 0x1c3) 15m20.684294282s ago: executing program 6 (id=1358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, 0x0, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0, 0x40000103, 0x0, {0x4}}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x5cb, @dev={0xfe, 0x80, '\x00', 0x1b}}}}, 0x32) getpeername(r5, 0x0, &(0x7f0000000000)) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x101000) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r9, r9], 0x2, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 15m15.739789693s ago: executing program 6 (id=1367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_io_uring_setup(0x7b, 0x0, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0, 0x40000103, 0x0, {0x4}}) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x5cb, @dev={0xfe, 0x80, '\x00', 0x1b}}}}, 0x32) getpeername(r4, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x101000) r7 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r11, r11], 0x2, r9, r10, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 15m7.672168337s ago: executing program 6 (id=1386): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e24, @broadcast}, {0x6, @link_local}, 0x4c, {0x2, 0x4e21, @rand_addr=0x64010102}, 'bond_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x914f989e7507b04d) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) syz_open_dev$vim2m(&(0x7f0000000640), 0xc5, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7401616e7393d0548fe00ab6cf2e7ce3197374", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='&\x00']) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800"], 0x18, 0x4000040}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000900)=""/82, 0x52}], 0x1}, 0x7f}], 0x1, 0x11102, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f000004b680)=""/102356, 0x18fd4, 0x2) clock_getres(0xa, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008"], 0x1c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2040, 0x0) 14m52.521345415s ago: executing program 36 (id=1386): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e24, @broadcast}, {0x6, @link_local}, 0x4c, {0x2, 0x4e21, @rand_addr=0x64010102}, 'bond_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x914f989e7507b04d) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) syz_open_dev$vim2m(&(0x7f0000000640), 0xc5, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7401616e7393d0548fe00ab6cf2e7ce3197374", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='&\x00']) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800"], 0x18, 0x4000040}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000900)=""/82, 0x52}], 0x1}, 0x7f}], 0x1, 0x11102, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f000004b680)=""/102356, 0x18fd4, 0x2) clock_getres(0xa, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008"], 0x1c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2040, 0x0) 12.702542993s ago: executing program 8 (id=4170): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TCSETA(r7, 0x5406, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={0x77359400}, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) io_uring_setup(0x5f4f, &(0x7f00000003c0)={0x0, 0x804, 0x2, 0x1000000, 0xfffbfffe, 0x0, r7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0x1c, 0x0, &(0x7f0000000000)="dc396f0757cf3a8300af3c48d096fbe23092304501ab92a9f029620c", 0x0, 0x3, 0x0, 0xbb, 0x58, &(0x7f0000000400)="69cc74f887124819bca975ceddd4e909c58cc1bb771ca628bf9a11953b76f2a4eaef3ac7881cfeca13a4c3ed45b7373c2c110630b52634ea43df07b269ae8dfcd6515a337f90922bd5f3d026482265d9a4b9ba08da3b710d0a0b554891330d774fa06aecf1aab62d8bc58b72c30b4f034c115614310273b178954af1fd4095e777ff7b7a3987d76010fb67d27bbca2e25017c4757ed3660ce28a577ab432d26bc994cd9561edcc362e55fc61db9f7821581620a169d8df26965b49", &(0x7f00000000c0)="1ad122a71df0debdb5507ac3c6ef050064a20f173a194d827b5a3beacbb65f067b2ed01518edf62cdd6ff359f7f80bac719c2756e24a1730792c7bfadaa224fbb79d37791e3737074c1cc7056ec870a44988a0b2a578d2ad", 0x2, 0x0, 0x9}, 0x50) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000580)={0x28, r5, 0x1, 0x40, 0x0, {0x3, 0x0, 0x3f00}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) 11.077337932s ago: executing program 8 (id=4173): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) 9.534728876s ago: executing program 9 (id=4180): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x11}, 0x0, 0x0}) 8.678244754s ago: executing program 8 (id=4183): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4050000000000007110b200000000000600000000000000950000000000000099b2c958e17222c54e17b242e3c6bacb4cc117ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.553682905s ago: executing program 4 (id=4184): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TCSETA(r7, 0x5406, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={0x77359400}, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) io_uring_setup(0x5f4f, &(0x7f00000003c0)={0x0, 0x804, 0x2, 0x1000000, 0xfffbfffe, 0x0, r7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0x1c, 0x0, &(0x7f0000000000)="dc396f0757cf3a8300af3c48d096fbe23092304501ab92a9f029620c", 0x0, 0x3, 0x0, 0xbb, 0x58, &(0x7f0000000400)="69cc74f887124819bca975ceddd4e909c58cc1bb771ca628bf9a11953b76f2a4eaef3ac7881cfeca13a4c3ed45b7373c2c110630b52634ea43df07b269ae8dfcd6515a337f90922bd5f3d026482265d9a4b9ba08da3b710d0a0b554891330d774fa06aecf1aab62d8bc58b72c30b4f034c115614310273b178954af1fd4095e777ff7b7a3987d76010fb67d27bbca2e25017c4757ed3660ce28a577ab432d26bc994cd9561edcc362e55fc61db9f7821581620a169d8df26965b49", &(0x7f00000000c0)="1ad122a71df0debdb5507ac3c6ef050064a20f173a194d827b5a3beacbb65f067b2ed01518edf62cdd6ff359f7f80bac719c2756e24a1730792c7bfadaa224fbb79d37791e3737074c1cc7056ec870a44988a0b2a578d2ad", 0x2, 0x0, 0x9}, 0x50) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000580)={0x28, r5, 0x1, 0x40, 0x0, {0x3, 0x0, 0x3f00}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) 7.551517075s ago: executing program 4 (id=4186): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES64], 0x0, 0x0, 0x0, 0x0}) 6.344140092s ago: executing program 7 (id=4190): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f7902"], 0x0) 6.147725728s ago: executing program 8 (id=4192): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)=0x7) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xfffffffffffffffe, 0x82524) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, 0x0}}, 0x20) 6.061856294s ago: executing program 5 (id=4193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1fc) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xffff1000, 0xb5, 0xa9c1, 0xeffffdff, 0x0, [{0x2, 0x80, 0x0, '\x00', 0x1}, {0x6, 0xff, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x90, 0x3, '\x00', 0xff}, {0x8, 0x2, 0x5, '\x00', 0x9}, {0x0, 0x60}, {0x0, 0x85, 0xbb}, {0x0, 0x6, 0x2, '\x00', 0xfc}, {0x0, 0xff, 0x0, '\x00', 0xff}, {0xc, 0x4, 0xfe, '\x00', 0x42}, {0x0, 0x2, 0x10}, {0x4, 0x50, 0xb}, {0x0, 0x0, 0x31, '\x00', 0x5}, {0x7, 0x4d}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {0x0, 0x3, 0x0, '\x00', 0xfd}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x3, 0x7, '\x00', 0xa}, {0x90, 0x0, 0xe, '\x00', 0x7}, {0x5, 0xe5}, {0x0, 0x40, 0x0, '\x00', 0x70}, {0x1, 0x0, 0xfe, '\x00', 0xe}, {0x10, 0x2, 0xe, '\x00', 0xf4}]}}) 5.835502222s ago: executing program 5 (id=4194): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r4, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100039042bbd5a002500000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000002c00128008000100677265002000028008001400020000000800040004000000060010004e220000040012000800040000080000"], 0x54}}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd8}, "017cac080f91a39588b9d334787f5bbede229bc710bfe84064342d50f819dcb3aacea8d5edf5ea5dc0fd5600a511a5e8ca030aca7a388754e1e02bcff7b497547fc8bb7df3f74cce86d58cf83087e2f8fe8b0f402f20c34766cfcad832505ebf89ffffc06ad94754c4d7617f5aaddfb0d59a2360fa73bae23d0c06e28d607c329f69f510e9c4fd76397fc031359c8e2489509fc1000efa30dd276ab58825ece31b8f1e8299b592f14a93bdff16d99c4238988216503e9f86324e6b98a616ff87413eabb3859aea66deab6b929dcf9b857cf78b32b6f4c4a1"}, 0xdc) 5.800240715s ago: executing program 9 (id=4195): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 4.818179434s ago: executing program 7 (id=4196): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x24004004) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) 4.438404944s ago: executing program 4 (id=4197): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TCSETA(r7, 0x5406, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={0x77359400}, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) io_uring_setup(0x5f4f, &(0x7f00000003c0)={0x0, 0x804, 0x2, 0x1000000, 0xfffbfffe, 0x0, r7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0x1c, 0x0, &(0x7f0000000000)="dc396f0757cf3a8300af3c48d096fbe23092304501ab92a9f029620c", 0x0, 0x3, 0x0, 0xbb, 0x58, &(0x7f0000000400)="69cc74f887124819bca975ceddd4e909c58cc1bb771ca628bf9a11953b76f2a4eaef3ac7881cfeca13a4c3ed45b7373c2c110630b52634ea43df07b269ae8dfcd6515a337f90922bd5f3d026482265d9a4b9ba08da3b710d0a0b554891330d774fa06aecf1aab62d8bc58b72c30b4f034c115614310273b178954af1fd4095e777ff7b7a3987d76010fb67d27bbca2e25017c4757ed3660ce28a577ab432d26bc994cd9561edcc362e55fc61db9f7821581620a169d8df26965b49", &(0x7f00000000c0)="1ad122a71df0debdb5507ac3c6ef050064a20f173a194d827b5a3beacbb65f067b2ed01518edf62cdd6ff359f7f80bac719c2756e24a1730792c7bfadaa224fbb79d37791e3737074c1cc7056ec870a44988a0b2a578d2ad", 0x2, 0x0, 0x9}, 0x50) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000580)={0x2c, r5, 0x1, 0x40, 0x0, {0x3, 0x0, 0x3f00}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) 2.565764454s ago: executing program 4 (id=4198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}], 0x1, 0xfdef) 2.525813777s ago: executing program 9 (id=4199): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x10c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xc8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x94, 0x1, [@m_mpls={0x40, 0xb, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_BOS={0x5}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x1d, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e695"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x81}, 0x20000001) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.276209437s ago: executing program 4 (id=4200): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000001c0)=@e={0xff, 0x3, 0xc, 0x2, @SEQ_NOTEON=@special, 0x9, 0x7, 0x4}) 2.158569347s ago: executing program 5 (id=4201): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000004ec0)={0x2, &(0x7f0000000000)=[{0x25}, {0x6}]}) 2.098761152s ago: executing program 9 (id=4202): connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000000040)={&(0x7f0000000140)=""/28, 0x1c}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.884149489s ago: executing program 5 (id=4203): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x20000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 1.714360472s ago: executing program 5 (id=4204): r0 = syz_io_uring_setup(0x73e7, &(0x7f00000004c0)={0x0, 0xa219, 0x1000, 0x0, 0x208}, &(0x7f0000000540), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f00000005c0)={0x4}, 0x0) 1.573380514s ago: executing program 9 (id=4205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1fc) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xffff1000, 0xb5, 0xa9c1, 0xeffffdff, 0x0, [{0x2, 0x80, 0x0, '\x00', 0x1}, {0x6, 0xff, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x90, 0x3, '\x00', 0xff}, {0x8, 0x2, 0x5, '\x00', 0x9}, {0x0, 0x60}, {0x0, 0x85, 0xbb}, {0x0, 0x6, 0x2, '\x00', 0xfc}, {0x0, 0xff, 0x0, '\x00', 0xff}, {0xc, 0x4, 0xfe, '\x00', 0x42}, {0x0, 0x2, 0x10}, {0x4, 0x50, 0xb}, {0x0, 0x0, 0x31, '\x00', 0x5}, {0x7, 0x4d}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {0x0, 0x3, 0x0, '\x00', 0xfd}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x3, 0x7, '\x00', 0xa}, {0x90, 0x0, 0xe, '\x00', 0x7}, {0x5, 0xe5}, {0x0, 0x40, 0x0, '\x00', 0x70}, {0x1, 0x0, 0xfe, '\x00', 0xe}, {0x10, 0x2, 0xe, '\x00', 0xf4}]}}) 1.404017868s ago: executing program 7 (id=4206): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001100050000000000000000000700", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c00098008"], 0x34}}, 0x0) 1.329263134s ago: executing program 5 (id=4207): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) unshare(0x24060400) chdir(&(0x7f0000000340)='./cgroup/file0\x00') connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgid(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, 0x0, 0x40448c2) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000040)=@generic={0x1, 0xfffffffffffffffe, 0x6}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 1.272356698s ago: executing program 7 (id=4208): syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in, @in=@multicast2}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0xfffffffc}, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1868, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0xf0f046, 0x7fff}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) 1.216451472s ago: executing program 8 (id=4209): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TCSETA(r7, 0x5406, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={0x77359400}, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) io_uring_setup(0x5f4f, &(0x7f00000003c0)={0x0, 0x804, 0x2, 0x1000000, 0xfffbfffe, 0x0, r7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0x1c, 0x0, &(0x7f0000000000)="dc396f0757cf3a8300af3c48d096fbe23092304501ab92a9f029620c", 0x0, 0x3, 0x0, 0xbb, 0x58, &(0x7f0000000400)="69cc74f887124819bca975ceddd4e909c58cc1bb771ca628bf9a11953b76f2a4eaef3ac7881cfeca13a4c3ed45b7373c2c110630b52634ea43df07b269ae8dfcd6515a337f90922bd5f3d026482265d9a4b9ba08da3b710d0a0b554891330d774fa06aecf1aab62d8bc58b72c30b4f034c115614310273b178954af1fd4095e777ff7b7a3987d76010fb67d27bbca2e25017c4757ed3660ce28a577ab432d26bc994cd9561edcc362e55fc61db9f7821581620a169d8df26965b49", &(0x7f00000000c0)="1ad122a71df0debdb5507ac3c6ef050064a20f173a194d827b5a3beacbb65f067b2ed01518edf62cdd6ff359f7f80bac719c2756e24a1730792c7bfadaa224fbb79d37791e3737074c1cc7056ec870a44988a0b2a578d2ad", 0x2, 0x0, 0x9}, 0x50) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000580)={0x2c, r5, 0x1, 0x40, 0x0, {0x3, 0x0, 0x3f00}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) 966.176113ms ago: executing program 9 (id=4210): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0xa4ca, 0x183801) pipe(&(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c24020800010300", @ANYRES8=r3, @ANYRES16=r0], 0x0) 939.693075ms ago: executing program 7 (id=4211): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}], 0x1, 0xfdef) 201.962203ms ago: executing program 8 (id=4212): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 124.12662ms ago: executing program 4 (id=4213): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4050000000000007110b200000000000600000000000000950000000000000099b2c958e17222c54e17b242e3c6bacb4cc117ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 0s ago: executing program 7 (id=4214): inotify_init() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): number 62 using dummy_hcd [ 1474.227184][ T4576] usb 5-1: no configurations [ 1474.231831][ T4576] usb 5-1: can't read configurations, error -22 [ 1474.385357][ T4576] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1474.429991][ T4576] usb 5-1: no configurations [ 1474.434622][ T4576] usb 5-1: can't read configurations, error -22 [ 1474.445298][ T4576] usb usb5-port1: unable to enumerate USB device [ 1474.455393][T14871] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1474.967825][T19342] lo speed is unknown, defaulting to 1000 [ 1475.324274][T14871] usb 9-1: device descriptor read/64, error -71 [ 1475.665625][T14871] usb usb9-port1: attempt power cycle [ 1476.185475][T14871] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1476.235826][T14871] usb 9-1: device descriptor read/8, error -71 [ 1476.505377][T14871] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1476.555984][T14871] usb 9-1: device descriptor read/8, error -71 [ 1476.605395][ T5025] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1476.770509][T14871] usb usb9-port1: unable to enumerate USB device [ 1477.948759][ T5025] usb 6-1: config 0 has no interfaces? [ 1477.954328][ T5025] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1477.963706][ T5025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.045349][T19370] tipc: Enabling of bearer rejected, already enabled [ 1478.276254][T19367] siw: device registration error -23 [ 1478.293170][ T5025] usb 6-1: config 0 descriptor?? [ 1478.529487][T19378] device syzkaller0 entered promiscuous mode [ 1478.567750][ T4576] usb 6-1: USB disconnect, device number 81 [ 1478.639607][T19381] fuse: Bad value for 'fd' [ 1479.145444][ T4576] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1479.215522][ T5025] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1479.335347][ T4576] usb 5-1: Using ep0 maxpacket: 32 [ 1479.344624][ T4576] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1479.360293][ T4576] usb 5-1: config 0 has no interface number 0 [ 1479.369224][ T4576] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1479.401900][ T4576] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1479.437882][ T4576] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1479.448586][ T4576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.456995][T14871] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1479.465439][ T4576] usb 5-1: Product: syz [ 1479.469954][ T4576] usb 5-1: Manufacturer: syz [ 1479.475710][ T4576] usb 5-1: SerialNumber: syz [ 1479.491552][ T4576] usb 5-1: config 0 descriptor?? [ 1479.636583][ T5025] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1479.665436][ T5025] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.673925][ T5025] usb 10-1: Product: syz [ 1479.678374][ T5025] usb 10-1: Manufacturer: syz [ 1479.683190][ T5025] usb 10-1: SerialNumber: syz [ 1480.276400][ T5025] usb 10-1: config 0 descriptor?? [ 1480.322814][T14871] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1480.376351][T14871] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1480.743449][T14871] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1480.853648][T14871] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1480.914804][T14871] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1480.915013][ T4576] appletouch 5-1:0.85: Geyser mode initialized. [ 1480.968869][T14871] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1480.996291][ T4576] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input187 [ 1481.024543][T14871] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1481.045447][T14871] usb 9-1: Product: syz [ 1481.085551][T14871] usb 9-1: Manufacturer: syz [ 1481.127168][T14871] cdc_wdm 9-1:1.0: skipping garbage [ 1481.134143][T14871] cdc_wdm 9-1:1.0: skipping garbage [ 1481.181531][T14871] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1481.188025][T14871] cdc_wdm 9-1:1.0: Unknown control protocol [ 1481.244256][T10730] usb 5-1: USB disconnect, device number 64 [ 1481.252384][ T5025] usb 10-1: Firmware version (0.0) predates our first public release. [ 1481.289145][ T5025] usb 10-1: Please update to version 0.2 or newer [ 1481.309657][T10730] appletouch 5-1:0.85: input: appletouch disconnected [ 1481.338607][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -75 [ 1481.350309][ T5025] usb 10-1: USB disconnect, device number 73 [ 1481.395349][ T8859] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1481.545318][ T8859] usb 8-1: device descriptor read/64, error -71 [ 1481.550183][T10730] usb 9-1: USB disconnect, device number 68 [ 1481.806543][T19421] fuse: Invalid rootmode [ 1481.825427][ T8859] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1481.874044][T19423] fuse: Bad value for 'fd' [ 1482.005446][ T8859] usb 8-1: device descriptor read/64, error -71 [ 1482.125668][ T8859] usb usb8-port1: attempt power cycle [ 1482.375623][ T5025] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1482.595369][ T8859] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1482.627445][ T5025] usb 6-1: config 0 has no interfaces? [ 1483.076528][ T5025] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1483.091503][ T5025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.117397][ T8859] usb 8-1: device descriptor read/8, error -71 [ 1483.542224][ T5025] usb 6-1: config 0 descriptor?? [ 1484.105909][T19454] lo speed is unknown, defaulting to 1000 [ 1484.774623][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.777517][ T8859] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1484.788519][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.288797][T10730] usb 6-1: USB disconnect, device number 82 [ 1485.346517][ T8859] usb 8-1: device descriptor read/8, error -71 [ 1485.465505][ T8859] usb usb8-port1: unable to enumerate USB device [ 1485.935349][ T8859] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1485.941365][ T6117] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1486.138629][ T6117] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1486.170183][ T6117] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.184514][ T6117] usb 9-1: Product: syz [ 1486.195274][ T6117] usb 9-1: Manufacturer: syz [ 1486.195503][ T8859] usb 8-1: Using ep0 maxpacket: 16 [ 1486.205383][ T6117] usb 9-1: SerialNumber: syz [ 1486.223332][ T6117] usb 9-1: config 0 descriptor?? [ 1486.243857][ T8859] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1486.275671][ T8859] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1486.310581][ T8859] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1486.346676][ T8859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.378167][ T8859] usb 8-1: Product: syz [ 1486.397164][ T8859] usb 8-1: Manufacturer: syz [ 1486.416744][ T8859] usb 8-1: SerialNumber: syz [ 1486.768082][ T8859] usb 8-1: 0:2 : does not exist [ 1487.117026][ T8859] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1487.152375][ T8859] usb 8-1: USB disconnect, device number 20 [ 1487.200108][ T6117] usb 9-1: Firmware version (0.0) predates our first public release. [ 1487.223392][ T6117] usb 9-1: Please update to version 0.2 or newer [ 1487.335503][ T6117] usb 9-1: USB disconnect, device number 69 [ 1487.436393][T14841] udevd[14841]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1488.315573][ T6117] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1488.507086][ T6117] usb 10-1: config 0 has no interfaces? [ 1488.517194][ T6117] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1488.548842][ T6117] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.573589][ T6117] usb 10-1: config 0 descriptor?? [ 1488.815960][ T6117] usb 10-1: USB disconnect, device number 74 [ 1489.895568][T17963] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1490.106943][T17963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.117390][T17963] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1490.126981][T17963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.495487][T17963] usb 6-1: config 0 descriptor?? [ 1490.520156][T17963] pwc: Askey VC010 type 2 USB webcam detected. [ 1490.717515][T17963] pwc: send_video_command error -71 [ 1490.722782][T17963] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1490.745594][T17963] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 1490.754949][T17963] usb 6-1: USB disconnect, device number 83 [ 1490.785457][ T125] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1490.978792][ T125] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1490.988222][ T125] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.996804][ T125] usb 10-1: Product: syz [ 1491.001274][ T125] usb 10-1: Manufacturer: syz [ 1491.006987][ T125] usb 10-1: SerialNumber: syz [ 1491.041358][ T125] usb 10-1: config 0 descriptor?? [ 1491.628895][T19574] lo speed is unknown, defaulting to 1000 [ 1492.819999][ T125] usb 10-1: Firmware version (0.0) predates our first public release. [ 1492.857964][ T125] usb 10-1: Please update to version 0.2 or newer [ 1492.962168][ T125] usb 10-1: USB disconnect, device number 75 [ 1493.627395][T19608] device syzkaller0 entered promiscuous mode [ 1494.195469][ T8859] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1494.386257][ T8859] usb 10-1: device descriptor read/64, error -71 [ 1494.707437][ T8859] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1494.895423][ T8859] usb 10-1: device descriptor read/64, error -71 [ 1495.016491][ T8859] usb usb10-port1: attempt power cycle [ 1495.325387][ T5025] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1495.660444][ T5025] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1495.696624][ T5025] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1495.746726][ T5025] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1495.756739][ T8859] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1495.765586][ T5025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.797532][ T8859] usb 10-1: device descriptor read/8, error -71 [ 1495.816550][ T5025] usb 9-1: config 0 descriptor?? [ 1496.085782][ T8859] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1496.125815][ T8859] usb 10-1: device descriptor read/8, error -71 [ 1496.246927][ T8859] usb usb10-port1: unable to enumerate USB device [ 1496.326529][ T5025] usbhid 9-1:0.0: can't add hid device: -32 [ 1496.345873][ T5025] usbhid: probe of 9-1:0.0 failed with error -32 [ 1496.436538][T19656] tipc: Enabling of bearer rejected, failed to enable media [ 1496.501235][T19657] device syzkaller0 entered promiscuous mode [ 1496.769575][T19665] netlink: 'syz.4.3774': attribute type 1 has an invalid length. [ 1496.777790][T19665] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3774'. [ 1496.935462][ T5025] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1497.125388][ T5025] usb 8-1: Using ep0 maxpacket: 8 [ 1497.157828][ T5025] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1497.168066][ T5025] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.180904][ T5025] usb 8-1: Product: syz [ 1497.185497][ T5025] usb 8-1: Manufacturer: syz [ 1497.190410][ T5025] usb 8-1: SerialNumber: syz [ 1497.223851][ T5025] usb 8-1: config 0 descriptor?? [ 1497.235823][T10730] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1497.480961][ T5025] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1497.525983][T10730] usb 5-1: Using ep0 maxpacket: 8 [ 1497.576579][T10730] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1497.615777][T10730] usb 5-1: config 0 has no interface number 0 [ 1497.662905][T10730] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1497.674804][T10730] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1497.705310][T10730] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1497.724087][T10730] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1497.738351][T10730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.763642][T10730] usb 5-1: config 0 descriptor?? [ 1497.782955][T10730] ldusb 5-1:0.55: Interrupt in endpoint not found [ 1497.822814][T19679] loop2: detected capacity change from 0 to 7 [ 1497.832031][T14839] loop2: [ 1497.835026][T14839] loop2: partition table partially beyond EOD, truncated [ 1497.845032][T19679] loop2: [ 1497.854499][T19679] loop2: partition table partially beyond EOD, truncated [ 1497.941652][ T8859] usb 9-1: USB disconnect, device number 70 [ 1498.006045][T10730] usb 5-1: USB disconnect, device number 65 [ 1498.111092][ T5025] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -32 [ 1498.435400][ T8859] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1498.636993][ T8859] usb 9-1: config 0 has no interfaces? [ 1498.653210][ T8859] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1498.694434][ T8859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.720369][ T8859] usb 9-1: config 0 descriptor?? [ 1500.163580][T14871] usb 9-1: USB disconnect, device number 71 [ 1500.428119][ T5025] usb 8-1: USB disconnect, device number 21 [ 1500.508807][T19709] netlink: 'syz.4.3787': attribute type 1 has an invalid length. [ 1500.516870][T19709] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3787'. [ 1500.613237][T19712] tipc: Enabling of bearer rejected, failed to enable media [ 1501.411905][T19734] loop2: detected capacity change from 0 to 7 [ 1501.422288][T19734] loop2: [ 1501.425529][T19734] loop2: partition table partially beyond EOD, truncated [ 1501.545490][ T5025] usb 9-1: new full-speed USB device number 72 using dummy_hcd [ 1501.725384][ T22] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1501.762009][ T5025] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.773940][ T5025] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1501.808021][ T5025] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1501.838284][ T5025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.862320][ T5025] usb 9-1: config 0 descriptor?? [ 1501.922634][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.951630][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.987669][ T22] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1501.997542][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.018675][ T22] usb 6-1: config 0 descriptor?? [ 1502.440034][T19748] lo speed is unknown, defaulting to 1000 [ 1502.477668][T10730] usb 9-1: USB disconnect, device number 72 [ 1502.918785][ T22] usbhid 6-1:0.0: can't add hid device: -32 [ 1502.924837][ T22] usbhid: probe of 6-1:0.0 failed with error -32 [ 1502.965396][ T5025] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1503.135999][ T5025] usb 8-1: device descriptor read/64, error -71 [ 1503.446842][ T5025] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1503.689325][ T5025] usb 8-1: device descriptor read/64, error -71 [ 1503.747578][T19761] netlink: 'syz.8.3800': attribute type 1 has an invalid length. [ 1503.761122][T19761] netlink: 1 bytes leftover after parsing attributes in process `syz.8.3800'. [ 1503.816465][ T5025] usb usb8-port1: attempt power cycle [ 1503.876951][T10730] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1504.065627][T10730] usb 10-1: Using ep0 maxpacket: 8 [ 1504.096236][T10730] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1504.125724][ T4576] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1504.182992][T10730] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.192929][T10730] usb 10-1: Product: syz [ 1504.201236][T10730] usb 10-1: Manufacturer: syz [ 1504.207101][T10730] usb 10-1: SerialNumber: syz [ 1504.254788][ T5025] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1504.318074][ T5025] usb 8-1: device descriptor read/8, error -71 [ 1504.368734][ T4576] usb 5-1: config 0 has no interfaces? [ 1504.382905][T10730] usb 10-1: config 0 descriptor?? [ 1504.423610][ T4576] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1504.519553][ T4576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.525544][ T22] usb 6-1: USB disconnect, device number 84 [ 1504.576096][ T4576] usb 5-1: config 0 descriptor?? [ 1504.605299][ T5025] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1504.670189][ T5025] usb 8-1: device descriptor read/8, error -71 [ 1504.681131][T10730] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1504.796747][ T22] usb 5-1: USB disconnect, device number 66 [ 1504.807507][ T5025] usb usb8-port1: unable to enumerate USB device [ 1504.904234][ T4416] tipc: Left network mode [ 1505.125434][ T5025] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1505.435325][ T5025] usb 9-1: Using ep0 maxpacket: 16 [ 1505.443303][ T5025] usb 9-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1505.454331][ T5025] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1505.465752][ T5025] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1505.475030][ T5025] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.492891][ T5025] usb 9-1: Product: syz [ 1505.543888][ T5025] usb 9-1: Manufacturer: syz [ 1505.551163][ T5025] usb 9-1: SerialNumber: syz [ 1505.862279][ T5025] usb 9-1: 0:2 : does not exist [ 1505.872148][ T5025] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1505.893953][ T5025] usb 9-1: USB disconnect, device number 73 [ 1506.015455][T13775] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1506.288562][T14839] udevd[14839]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.487673][T13775] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.628295][T13775] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1506.641756][T13775] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1506.644161][T19796] lo speed is unknown, defaulting to 1000 [ 1506.651994][T13775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.667647][T13775] usb 5-1: config 0 descriptor?? [ 1506.855027][T10730] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 1506.884873][T10730] usb 10-1: USB disconnect, device number 80 [ 1506.893503][ T8859] usb 5-1: USB disconnect, device number 67 [ 1507.449223][T19804] device sit0 entered promiscuous mode [ 1507.482044][T19804] netlink: 'syz.7.3812': attribute type 1 has an invalid length. [ 1507.550855][T19804] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3812'. [ 1507.679271][T19806] loop2: detected capacity change from 0 to 7 [ 1507.689587][T14841] loop2: [ 1507.692590][T14841] loop2: partition table partially beyond EOD, truncated [ 1507.738358][T19806] loop2: [ 1507.752513][T19806] loop2: partition table partially beyond EOD, truncated [ 1507.834333][T19815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3814'. [ 1508.652474][ T125] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1508.865906][T10730] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1508.895833][ T125] usb 6-1: Using ep0 maxpacket: 8 [ 1508.936051][ T125] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1509.658786][ T8859] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1509.865514][ T8859] usb 10-1: device descriptor read/64, error -71 [ 1509.868245][ T125] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1509.895676][T10730] usb 5-1: config 0 has no interfaces? [ 1509.905913][T10730] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1509.917029][T10730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.925440][ T125] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1510.121025][T10730] usb 5-1: config 0 descriptor?? [ 1510.134972][ T125] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1510.145426][ T8859] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1510.194647][ T125] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1510.227036][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.242221][ T125] usb 6-1: Product: syz [ 1510.249777][ T125] usb 6-1: Manufacturer: syz [ 1510.254422][ T125] usb 6-1: SerialNumber: syz [ 1510.285550][T19821] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1510.308152][ T8859] usb 10-1: device descriptor read/64, error -71 [ 1510.325504][T19842] lo speed is unknown, defaulting to 1000 [ 1510.396752][ T4576] usb 5-1: USB disconnect, device number 68 [ 1510.425646][ T8859] usb usb10-port1: attempt power cycle [ 1510.590502][ T125] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input193 [ 1510.634373][ T3624] bcm5974 6-1:1.0: could not read from device [ 1510.765845][ T3624] bcm5974 6-1:1.0: could not read from device [ 1510.829973][ T3624] bcm5974 6-1:1.0: could not read from device [ 1510.895297][ T5025] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1511.002497][ T8859] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1511.131137][ T3624] bcm5974 6-1:1.0: could not read from device [ 1511.144039][ T8859] usb 10-1: device descriptor read/8, error -71 [ 1511.260021][ T125] usb 6-1: USB disconnect, device number 85 [ 1511.325720][ T4416] device hsr_slave_0 left promiscuous mode [ 1511.354053][ T5025] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.364634][ T5025] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1511.374054][ T5025] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1511.383611][ T4416] device hsr_slave_1 left promiscuous mode [ 1511.384087][ T5025] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.403219][ T5025] usb 8-1: config 0 descriptor?? [ 1511.435843][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1511.443305][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.482391][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1511.493082][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.502745][ T4416] device bridge_slave_1 left promiscuous mode [ 1511.509240][ T8859] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1511.519632][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.533830][ T4416] device bridge_slave_0 left promiscuous mode [ 1511.542214][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.555742][ T8859] usb 10-1: device descriptor read/8, error -71 [ 1511.585154][ T4416] device team0 left promiscuous mode [ 1511.591399][ T4416] device team_slave_0 left promiscuous mode [ 1511.597799][ T4416] device team_slave_1 left promiscuous mode [ 1511.665853][ T22] usb 8-1: USB disconnect, device number 26 [ 1511.675122][ T4416] device veth1_macvtap left promiscuous mode [ 1511.681996][ T8859] usb usb10-port1: unable to enumerate USB device [ 1511.693126][ T4416] device veth0_macvtap left promiscuous mode [ 1511.701553][ T4416] device veth1_vlan left promiscuous mode [ 1511.708516][ T4416] device veth0_vlan left promiscuous mode [ 1511.735526][ T7] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1511.755721][ T5025] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1511.881120][ T4416] team0 (unregistering): Port device batadv1 removed [ 1511.905423][ T7] usb 9-1: device descriptor read/64, error -71 [ 1511.970161][ T5025] usb 5-1: Using ep0 maxpacket: 8 [ 1512.016559][ T5025] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1512.042541][ T5025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.051175][ T5025] usb 5-1: Product: syz [ 1512.055525][ T5025] usb 5-1: Manufacturer: syz [ 1512.060223][ T5025] usb 5-1: SerialNumber: syz [ 1512.078673][ T5025] usb 5-1: config 0 descriptor?? [ 1512.185285][ T7] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1512.398654][ T5025] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1512.425474][ T7] usb 9-1: device descriptor read/64, error -71 [ 1512.554712][ T7] usb usb9-port1: attempt power cycle [ 1512.620777][T19872] fuse: Bad value for 'group_id' [ 1513.026039][ T7] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1513.253937][ T7] usb 9-1: device descriptor read/8, error -71 [ 1513.555750][ T7] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1513.606329][ T7] usb 9-1: device descriptor read/8, error -71 [ 1513.621610][ T5025] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1513.648185][ T5025] usb 5-1: USB disconnect, device number 69 [ 1513.745503][ T7] usb usb9-port1: unable to enumerate USB device [ 1515.001823][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 1515.053207][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 1515.521900][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1516.084962][ T4416] bond0 (unregistering): Released all slaves [ 1516.174832][T19856] netlink: 'syz.5.3828': attribute type 1 has an invalid length. [ 1516.183194][T19856] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3828'. [ 1516.192925][ T4331] lo speed is unknown, defaulting to 1000 [ 1516.653186][T19917] fuse: Bad value for 'group_id' [ 1516.785527][ T8859] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1516.855397][ T4331] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1516.992148][ T8859] usb 9-1: config 0 has no interfaces? [ 1517.065841][ T8859] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1517.077010][ T8859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.221695][ T8859] usb 9-1: config 0 descriptor?? [ 1517.295270][ T4331] usb 5-1: Using ep0 maxpacket: 8 [ 1517.302932][ T4331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1517.328985][ T4331] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1517.341014][ T4331] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1517.466845][ T4331] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1517.492536][ T4331] usb 5-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1517.525763][ T4331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.550317][ T4331] usb 5-1: Product: syz [ 1517.554711][ T4331] usb 5-1: Manufacturer: syz [ 1517.575042][ T4331] usb 5-1: SerialNumber: syz [ 1517.632006][T19907] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1517.791396][ T9231] usb 9-1: USB disconnect, device number 78 [ 1517.850277][ T4331] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input195 [ 1517.895907][ T4331] usb 5-1: USB disconnect, device number 70 [ 1517.904074][ T3624] bcm5974 5-1:1.0: could not read from device [ 1518.305337][ T22] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1520.415013][ T22] usb 8-1: Using ep0 maxpacket: 8 [ 1520.960526][ T22] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1520.965100][T19956] device sit0 entered promiscuous mode [ 1520.969711][ T22] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.983285][ T22] usb 8-1: Product: syz [ 1520.987579][ T22] usb 8-1: Manufacturer: syz [ 1520.992208][ T22] usb 8-1: SerialNumber: syz [ 1520.998809][ T22] usb 8-1: config 0 descriptor?? [ 1521.028630][T19956] netlink: 'syz.9.3851': attribute type 1 has an invalid length. [ 1521.185384][T19956] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3851'. [ 1521.272504][T19961] fuse: Bad value for 'group_id' [ 1522.525393][T19964] tipc: Enabling of bearer rejected, already enabled [ 1522.600144][T19959] lo speed is unknown, defaulting to 1000 [ 1522.605983][T19959] lo speed is unknown, defaulting to 1000 [ 1522.612020][T19959] lo speed is unknown, defaulting to 1000 [ 1522.622402][T19959] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1522.637773][ T22] dvb_usb_rtl28xxu 8-1:0.0: chip type detection failed -71 [ 1522.641280][T19959] lo speed is unknown, defaulting to 1000 [ 1522.645059][ T22] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 1522.651897][T19959] lo speed is unknown, defaulting to 1000 [ 1522.665102][T19959] lo speed is unknown, defaulting to 1000 [ 1522.671511][T19959] lo speed is unknown, defaulting to 1000 [ 1522.677936][T19959] lo speed is unknown, defaulting to 1000 [ 1522.684262][T19959] lo speed is unknown, defaulting to 1000 [ 1522.690718][T19959] lo speed is unknown, defaulting to 1000 [ 1522.697149][T19959] lo speed is unknown, defaulting to 1000 [ 1522.703538][T19959] lo speed is unknown, defaulting to 1000 [ 1522.842993][ T22] usb 8-1: USB disconnect, device number 27 [ 1524.554715][T19993] tipc: Enabling of bearer rejected, failed to enable media [ 1524.594418][T19993] device syzkaller0 entered promiscuous mode [ 1524.898343][ T22] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1524.906617][ T4323] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1525.395689][ T4323] usb 10-1: Using ep0 maxpacket: 8 [ 1525.852953][T20011] lo speed is unknown, defaulting to 1000 [ 1526.171099][ T4323] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1526.196723][ T22] usb 9-1: config 0 has no interfaces? [ 1526.202412][ T22] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1526.212003][ T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.221385][ T4323] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1526.356414][ T22] usb 9-1: config 0 descriptor?? [ 1526.361594][ T4323] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1526.374328][ T4323] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1526.385607][T10730] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1526.398150][ T4323] usb 10-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1526.413787][ T4323] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.429984][ T4323] usb 10-1: Product: syz [ 1526.434913][ T4323] usb 10-1: Manufacturer: syz [ 1526.574101][ T4323] usb 10-1: SerialNumber: syz [ 1526.585763][T19997] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1526.595736][T10730] usb 5-1: Using ep0 maxpacket: 8 [ 1526.612517][T10730] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1526.656730][T10730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.664905][T10730] usb 5-1: Product: syz [ 1526.673920][T10730] usb 5-1: Manufacturer: syz [ 1526.681781][T10730] usb 5-1: SerialNumber: syz [ 1526.692059][ T9231] usb 9-1: USB disconnect, device number 79 [ 1528.039441][T20022] tipc: Enabling of bearer rejected, already enabled [ 1528.095471][T10730] usb 5-1: config 0 descriptor?? [ 1528.163135][T10730] usb 5-1: can't set config #0, error -71 [ 1528.316306][T10730] usb 5-1: USB disconnect, device number 71 [ 1528.339490][ T4323] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input198 [ 1528.363885][ T3624] bcm5974 10-1:1.0: could not read from device [ 1528.380731][ T3624] bcm5974 10-1:1.0: could not read from device [ 1528.426391][ T3624] bcm5974 10-1:1.0: could not read from device [ 1528.427990][ T4323] usb 10-1: USB disconnect, device number 85 [ 1528.513567][ T3624] bcm5974 10-1:1.0: could not read from device [ 1528.920415][T20045] loop2: detected capacity change from 0 to 7 [ 1529.152084][T15672] Dev loop2: unable to read RDB block 7 [ 1529.381057][T15672] loop2: unable to read partition table [ 1529.447739][T15672] loop2: partition table beyond EOD, truncated [ 1529.494124][T20045] Dev loop2: unable to read RDB block 7 [ 1529.507564][T20045] loop2: unable to read partition table [ 1529.548091][T20045] loop2: partition table beyond EOD, truncated [ 1529.597342][T20045] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1530.485838][T13775] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1530.743697][T13775] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1530.753427][T13775] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.792909][T13775] usb 10-1: Product: syz [ 1530.811376][T13775] usb 10-1: Manufacturer: syz [ 1530.822016][T13775] usb 10-1: SerialNumber: syz [ 1530.830558][T13775] usb 10-1: config 0 descriptor?? [ 1530.995432][ T5025] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1531.003170][ T8859] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1531.010878][ T22] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1531.165254][ T5025] usb 9-1: device descriptor read/64, error -71 [ 1531.175388][ T9231] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1531.197611][ T8859] usb 6-1: config 0 has no interfaces? [ 1531.203261][ T22] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1531.212179][ T8859] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1531.221426][ T22] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1531.231868][ T8859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.239956][ T22] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1531.250225][ T22] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1531.262660][ T8859] usb 6-1: config 0 descriptor?? [ 1531.267852][ T22] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1531.282465][ T22] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1531.292280][ T22] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1531.300493][ T22] usb 8-1: Product: syz [ 1531.304697][ T22] usb 8-1: Manufacturer: syz [ 1531.312907][ T22] cdc_wdm 8-1:1.0: skipping garbage [ 1531.318239][ T22] cdc_wdm 8-1:1.0: skipping garbage [ 1531.325706][ T22] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1531.331685][ T22] cdc_wdm 8-1:1.0: Unknown control protocol [ 1531.375367][ T9231] usb 5-1: Using ep0 maxpacket: 8 [ 1531.383016][ T9231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1531.391995][ T9231] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1531.403774][ T9231] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1531.415000][ T9231] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1531.423739][ T9231] usb 5-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1531.432881][ T9231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.435367][ T5025] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1531.441117][ T9231] usb 5-1: Product: syz [ 1531.457917][ T9231] usb 5-1: Manufacturer: syz [ 1531.463091][ T9231] usb 5-1: SerialNumber: syz [ 1531.478372][T20075] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1531.495679][ T22] usb 6-1: USB disconnect, device number 86 [ 1531.531576][T13775] usb 10-1: Firmware version (0.0) predates our first public release. [ 1531.545441][T13775] usb 10-1: Please update to version 0.2 or newer [ 1531.599340][T13775] usb 10-1: USB disconnect, device number 86 [ 1531.605820][ T5025] usb 9-1: device descriptor read/64, error -71 [ 1531.693276][ T9231] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input199 [ 1531.705039][ T3624] bcm5974 5-1:1.0: could not read from device [ 1531.718749][ T3624] bcm5974 5-1:1.0: could not read from device [ 1531.721807][ T9231] usb 5-1: USB disconnect, device number 72 [ 1531.727779][ T5025] usb usb9-port1: attempt power cycle [ 1532.088773][T20080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3883'. [ 1532.155423][ T5025] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1532.209188][ T5025] usb 9-1: device descriptor read/8, error -71 [ 1532.505395][ T5025] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1532.550187][ T5025] usb 9-1: device descriptor read/8, error -71 [ 1532.706546][ T5025] usb usb9-port1: unable to enumerate USB device [ 1533.792010][ T125] usb 8-1: USB disconnect, device number 28 [ 1534.031873][T20110] loop2: detected capacity change from 0 to 7 [ 1534.070696][T14841] Dev loop2: unable to read RDB block 7 [ 1534.080732][T14841] loop2: unable to read partition table [ 1534.094514][T14841] loop2: partition table beyond EOD, truncated [ 1534.234766][T20115] device syzkaller0 entered promiscuous mode [ 1534.248515][T20110] Dev loop2: unable to read RDB block 7 [ 1534.257441][T20110] loop2: unable to read partition table [ 1534.263212][T20110] loop2: partition table beyond EOD, truncated [ 1534.297934][T20110] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1535.165478][ T125] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1535.453396][T13775] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1535.459717][ T125] usb 6-1: config 0 has no interfaces? [ 1535.569494][ T125] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1535.744865][T13775] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1535.755325][T13775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.764446][T13775] usb 5-1: Product: syz [ 1535.769482][T13775] usb 5-1: Manufacturer: syz [ 1535.774199][T13775] usb 5-1: SerialNumber: syz [ 1535.787049][T13775] usb 5-1: config 0 descriptor?? [ 1535.805234][ T125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.832052][ T125] usb 6-1: config 0 descriptor?? [ 1536.061172][ T9231] usb 6-1: USB disconnect, device number 87 [ 1536.195274][ T6117] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1536.375404][ T6117] usb 8-1: Using ep0 maxpacket: 8 [ 1536.383419][ T6117] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1536.410393][ T6117] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1536.442289][ T6117] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1536.454521][ T6117] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1536.475670][ T6117] usb 8-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1536.489826][T13775] usb 5-1: Firmware version (0.0) predates our first public release. [ 1536.497287][ T6117] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.506315][T13775] usb 5-1: Please update to version 0.2 or newer [ 1536.513580][ T6117] usb 8-1: Product: syz [ 1536.521223][ T6117] usb 8-1: Manufacturer: syz [ 1536.530382][ T6117] usb 8-1: SerialNumber: syz [ 1536.553068][T20140] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1536.567084][T13775] usb 5-1: USB disconnect, device number 73 [ 1536.773018][ T6117] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input200 [ 1536.813790][ T3624] bcm5974 8-1:1.0: could not read from device [ 1536.824575][ T3624] bcm5974 8-1:1.0: could not read from device [ 1536.849038][ T6117] usb 8-1: USB disconnect, device number 29 [ 1538.147857][T20175] device syzkaller0 entered promiscuous mode [ 1538.205266][T13775] usb 10-1: new full-speed USB device number 87 using dummy_hcd [ 1538.427688][T13775] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1538.468966][T13775] usb 10-1: config 0 has no interface number 0 [ 1538.476125][T13775] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1538.491319][T13775] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.503632][T13775] usb 10-1: config 0 descriptor?? [ 1538.512803][T13775] usb 10-1: selecting invalid altsetting 1 [ 1538.552328][T13775] dvb_ttusb_budget: ttusb_init_controller: error [ 1538.559003][T13775] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1538.645234][ T5025] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1538.855564][ T5025] usb 5-1: Using ep0 maxpacket: 8 [ 1538.888005][ T5025] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1538.905378][ T5025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.914154][ T5025] usb 5-1: Product: syz [ 1538.922037][ T5025] usb 5-1: Manufacturer: syz [ 1538.928609][ T5025] usb 5-1: SerialNumber: syz [ 1538.948397][ T5025] usb 5-1: config 0 descriptor?? [ 1539.183428][ T5025] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1539.505589][T13775] DVB: Unable to find symbol cx22700_attach() [ 1539.692346][T13775] DVB: Unable to find symbol tda10046_attach() [ 1539.701025][T13775] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1539.719630][T13775] usb 10-1: USB disconnect, device number 87 [ 1539.895334][ T8859] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1540.085375][ T8859] usb 8-1: Using ep0 maxpacket: 8 [ 1540.098660][ T8859] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1540.106775][T13775] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1540.117582][ T8859] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1540.130171][ T8859] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1540.142770][ T8859] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1540.171250][ T8859] usb 8-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1540.181353][ T8859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.190029][ T8859] usb 8-1: Product: syz [ 1540.197069][ T8859] usb 8-1: Manufacturer: syz [ 1540.201878][ T8859] usb 8-1: SerialNumber: syz [ 1540.237758][T20195] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1540.321160][T13775] usb 10-1: config 0 has no interfaces? [ 1540.327083][T13775] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1540.339426][T13775] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.370206][T13775] usb 10-1: config 0 descriptor?? [ 1540.375993][ T22] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1540.484579][ T5025] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1540.511874][ T5025] usb 5-1: USB disconnect, device number 74 [ 1540.550805][ T8859] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input201 [ 1540.616021][ T22] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1540.627287][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.644805][ T8859] usb 8-1: USB disconnect, device number 30 [ 1540.657771][ T3624] bcm5974 8-1:1.0: could not read from device [ 1540.690544][ T22] usb 9-1: Product: syz [ 1540.704951][ T22] usb 9-1: Manufacturer: syz [ 1540.719119][ T22] usb 9-1: SerialNumber: syz [ 1540.747821][ T22] usb 9-1: config 0 descriptor?? [ 1540.918428][T10730] usb 10-1: USB disconnect, device number 88 [ 1541.453844][ T22] usb 9-1: Firmware version (0.0) predates our first public release. [ 1541.462716][ T22] usb 9-1: Please update to version 0.2 or newer [ 1541.475593][T10730] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1541.566800][ T22] usb 9-1: USB disconnect, device number 84 [ 1541.605484][ T8859] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 1541.635311][T10730] usb 8-1: device descriptor read/64, error -71 [ 1541.807592][ T8859] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1541.823332][ T8859] usb 6-1: config 0 has no interface number 0 [ 1541.830005][ T8859] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1541.839473][ T8859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.855109][ T8859] usb 6-1: config 0 descriptor?? [ 1541.868606][ T8859] usb 6-1: selecting invalid altsetting 1 [ 1541.874563][ T8859] dvb_ttusb_budget: ttusb_init_controller: error [ 1541.881959][ T8859] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1541.915380][T10730] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1542.068663][ T8859] DVB: Unable to find symbol cx22700_attach() [ 1542.085413][T10730] usb 8-1: device descriptor read/64, error -71 [ 1542.125842][ T8859] DVB: Unable to find symbol tda10046_attach() [ 1542.132226][ T8859] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1542.156155][ T8859] usb 6-1: USB disconnect, device number 88 [ 1542.215758][T10730] usb usb8-port1: attempt power cycle [ 1542.305715][ T9231] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1542.639234][ T9231] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1542.772559][T10730] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1542.781207][ T9231] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1542.791734][ T9231] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1542.812169][ T9231] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1542.823482][ T9231] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1542.836243][T10730] usb 8-1: device descriptor read/8, error -71 [ 1542.861140][ T9231] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1542.882601][ T9231] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1542.891591][ T9231] usb 10-1: Product: syz [ 1542.905643][ T9231] usb 10-1: Manufacturer: syz [ 1542.949383][ T9231] cdc_wdm 10-1:1.0: skipping garbage [ 1542.954738][ T9231] cdc_wdm 10-1:1.0: skipping garbage [ 1542.968191][ T9231] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1542.974243][ T9231] cdc_wdm 10-1:1.0: Unknown control protocol [ 1543.090975][T20256] loop2: detected capacity change from 0 to 7 [ 1543.105511][T10730] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1543.116955][T20256] Dev loop2: unable to read RDB block 7 [ 1543.122674][T20256] loop2: unable to read partition table [ 1543.136287][T10730] usb 8-1: device descriptor read/8, error -71 [ 1543.142609][T20256] loop2: partition table beyond EOD, truncated [ 1543.157964][T20256] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1543.265519][T10730] usb usb8-port1: unable to enumerate USB device [ 1543.325282][ T9231] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1543.515460][ T9231] usb 9-1: Using ep0 maxpacket: 8 [ 1543.522468][ T9231] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1543.531519][ T9231] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1543.547043][ T9231] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1543.555355][ T8859] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1543.559650][ T9231] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1543.583031][ T9231] usb 9-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1543.592714][ T9231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.600813][ T9231] usb 9-1: Product: syz [ 1543.605015][ T9231] usb 9-1: Manufacturer: syz [ 1543.609706][ T9231] usb 9-1: SerialNumber: syz [ 1543.623739][T20252] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1543.758693][ T8859] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.769127][ T8859] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1543.778546][ T8859] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1543.788378][ T8859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.804855][ T8859] usb 5-1: config 0 descriptor?? [ 1543.839574][ T9231] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input202 [ 1543.855139][ T3624] bcm5974 9-1:1.0: could not read from device [ 1543.862457][ T3624] bcm5974 9-1:1.0: could not read from device [ 1543.881028][ T9231] usb 9-1: USB disconnect, device number 85 [ 1543.894962][ T3624] bcm5974 9-1:1.0: could not read from device [ 1543.995322][ T22] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1544.131423][T14839] udevd[14839]: Error opening device "/dev/input/event4": No such file or directory [ 1544.143180][T14839] udevd[14839]: Unable to EVIOCGABS device "/dev/input/event4" [ 1544.151137][T14839] udevd[14839]: Unable to EVIOCGABS device "/dev/input/event4" [ 1544.159594][T14839] udevd[14839]: Unable to EVIOCGABS device "/dev/input/event4" [ 1544.168704][T14839] udevd[14839]: Unable to EVIOCGABS device "/dev/input/event4" [ 1544.176916][T14839] udevd[14839]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1544.177309][ T22] usb 6-1: config 0 has no interfaces? [ 1544.224386][ T3639] udevd[3639]: worker [14839] terminated by signal 6 (Aborted) [ 1544.237487][ T3639] udevd[3639]: worker [14839] failed while handling '/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input202/event4' [ 1544.263678][ T22] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1544.272891][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.312113][ T22] usb 6-1: config 0 descriptor?? [ 1544.621766][ T9231] usb 6-1: USB disconnect, device number 89 [ 1544.955807][T20277] fuse: Bad value for 'fd' [ 1545.612653][ T6117] usb 10-1: USB disconnect, device number 89 [ 1545.822626][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.822661][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.136584][T10730] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1546.175421][ T6117] usb 10-1: new full-speed USB device number 90 using dummy_hcd [ 1546.548153][ T6117] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1546.548183][ T6117] usb 10-1: config 0 has no interface number 0 [ 1546.548220][ T6117] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1546.548288][ T6117] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.554066][ T125] usb 5-1: USB disconnect, device number 75 [ 1546.562110][ T6117] usb 10-1: config 0 descriptor?? [ 1546.568202][T10730] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1546.568223][T10730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.568238][T10730] usb 6-1: Product: syz [ 1546.568249][T10730] usb 6-1: Manufacturer: syz [ 1546.568259][T10730] usb 6-1: SerialNumber: syz [ 1546.569425][T10730] usb 6-1: config 0 descriptor?? [ 1546.572173][ T6117] usb 10-1: selecting invalid altsetting 1 [ 1546.572299][ T6117] dvb_ttusb_budget: ttusb_init_controller: error [ 1546.572308][ T6117] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1546.798541][T20300] fuse: Unknown parameter 'grou00000000000000000000' [ 1546.821961][ T6117] DVB: Unable to find symbol cx22700_attach() [ 1546.995380][ T6117] DVB: Unable to find symbol tda10046_attach() [ 1546.995396][ T6117] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1547.001659][ T6117] usb 10-1: USB disconnect, device number 90 [ 1547.005983][T20303] device syzkaller0 entered promiscuous mode [ 1547.553263][T10730] usb 6-1: Firmware version (0.0) predates our first public release. [ 1547.578116][T10730] usb 6-1: Please update to version 0.2 or newer [ 1547.670320][T10730] usb 6-1: USB disconnect, device number 90 [ 1547.785283][ T8859] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1547.802545][T20318] fuse: Bad value for 'fd' [ 1547.875259][ T22] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1547.895351][T17589] Bluetooth: hci4: command 0x0406 tx timeout [ 1547.945313][ T8859] usb 5-1: device descriptor read/64, error -71 [ 1548.000445][T20310] hub 9-0:1.0: USB hub found [ 1548.008469][T20310] hub 9-0:1.0: 1 port detected [ 1548.078674][ T22] usb 10-1: Using ep0 maxpacket: 8 [ 1548.086227][ T22] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1548.126428][ T22] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1548.155740][ T22] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1548.190906][ T22] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1548.213967][ T22] usb 10-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1548.235256][ T8859] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1548.253140][ T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.283690][ T22] usb 10-1: Product: syz [ 1548.293558][ T22] usb 10-1: Manufacturer: syz [ 1548.312478][ T22] usb 10-1: SerialNumber: syz [ 1548.328634][T20316] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1548.405460][ T8859] usb 5-1: device descriptor read/64, error -71 [ 1548.525473][ T8859] usb usb5-port1: attempt power cycle [ 1548.554739][ T22] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input203 [ 1548.568716][ T3624] bcm5974 10-1:1.0: could not read from device [ 1548.604353][T15672] bcm5974 10-1:1.0: could not read from device [ 1548.626725][ T22] usb 10-1: USB disconnect, device number 91 [ 1548.628639][T10730] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1548.653580][ T3624] bcm5974 10-1:1.0: could not read from device [ 1548.766110][ T125] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1548.835337][T10730] usb 6-1: Using ep0 maxpacket: 32 [ 1548.842279][T10730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.853935][T10730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1548.865051][T10730] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1548.884033][T15672] udevd[15672]: Error opening device "/dev/input/event4": No such file or directory [ 1548.899715][T10730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.920331][T15672] udevd[15672]: Unable to EVIOCGABS device "/dev/input/event4" [ 1548.920494][T10730] usb 6-1: config 0 descriptor?? [ 1548.955300][ T8859] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1548.963694][ T125] usb 9-1: config 0 has no interfaces? [ 1548.969885][ T125] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1548.994729][ T125] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.016120][ T125] usb 9-1: config 0 descriptor?? [ 1549.021097][ T8859] usb 5-1: device descriptor read/8, error -71 [ 1549.236370][ T125] usb 9-1: USB disconnect, device number 86 [ 1549.289200][ T8859] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1549.339254][T10730] ft260 0003:0403:6030.0021: unknown main item tag 0x7 [ 1549.346178][ T8859] usb 5-1: device descriptor read/8, error -71 [ 1549.373132][T10730] ft260 0003:0403:6030.0021: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1549.475970][ T8859] usb usb5-port1: unable to enumerate USB device [ 1550.117305][T10730] ft260 0003:0403:6030.0021: failed to retrieve chip version [ 1550.130411][T10730] ft260: probe of 0003:0403:6030.0021 failed with error -71 [ 1550.180119][T10730] usb 6-1: USB disconnect, device number 91 [ 1550.399025][T20341] fido_id[20341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1550.415486][ T4330] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 1550.586263][T20348] fuse: Unknown parameter 'grou00000000000000000000' [ 1550.616945][ T4330] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1550.653129][ T4330] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1550.700084][ T4330] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1550.730538][ T4330] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1550.796288][ T4330] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1550.818032][T20355] device syzkaller0 entered promiscuous mode [ 1550.833333][ T4330] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1550.857117][ T4330] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1550.878279][ T4330] usb 9-1: Product: syz [ 1550.887806][ T4330] usb 9-1: Manufacturer: syz [ 1550.927676][ T4330] cdc_wdm 9-1:1.0: skipping garbage [ 1550.932938][ T4330] cdc_wdm 9-1:1.0: skipping garbage [ 1550.986122][ T4330] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1550.992074][ T4330] cdc_wdm 9-1:1.0: Unknown control protocol [ 1551.255603][ T22] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1551.278373][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1551.285023][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1551.291454][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1551.298061][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1551.304636][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1551.311248][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1551.317511][T10730] usb 9-1: USB disconnect, device number 87 [ 1551.364872][T20337] cdc_wdm 9-1:1.0: Tx URB error: -19 [ 1551.425234][T13775] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 1551.448845][ T22] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1551.464579][ T22] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.481531][ T22] usb 8-1: Product: syz [ 1551.489310][ T22] usb 8-1: Manufacturer: syz [ 1551.493931][ T22] usb 8-1: SerialNumber: syz [ 1551.516863][ T22] usb 8-1: config 0 descriptor?? [ 1551.615324][T13775] usb 10-1: Using ep0 maxpacket: 8 [ 1551.622636][T13775] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1551.642083][T13775] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1551.661496][T13775] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1551.675347][ T8859] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1551.693570][T13775] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1551.707110][T13775] usb 10-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1551.723188][T13775] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.732632][T13775] usb 10-1: Product: syz [ 1551.740396][T13775] usb 10-1: Manufacturer: syz [ 1551.745296][T13775] usb 10-1: SerialNumber: syz [ 1551.762253][T20366] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1551.878069][ T8859] usb 6-1: config 0 has no interfaces? [ 1551.883710][ T8859] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1551.911670][ T8859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.941796][ T8859] usb 6-1: config 0 descriptor?? [ 1551.989617][T13775] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input204 [ 1552.013364][ T3624] bcm5974 10-1:1.0: could not read from device [ 1552.025352][ T3624] bcm5974 10-1:1.0: could not read from device [ 1552.043624][T13775] usb 10-1: USB disconnect, device number 92 [ 1552.052839][ T3624] bcm5974 10-1:1.0: could not read from device [ 1552.185591][ T8859] usb 6-1: USB disconnect, device number 92 [ 1552.947042][ T22] usb 8-1: Firmware version (0.0) predates our first public release. [ 1552.955718][ T22] usb 8-1: Please update to version 0.2 or newer [ 1553.349520][T20393] fuse: Unknown parameter 'grou00000000000000000000' [ 1553.425695][ T125] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1553.465590][ T22] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1553.590808][ T4330] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 1553.635964][ T125] usb 6-1: Using ep0 maxpacket: 16 [ 1553.646341][ T22] usb 10-1: device descriptor read/64, error -71 [ 1553.664609][ T125] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1553.710017][ T125] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.724263][ T125] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 1553.818185][ T125] usb 6-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1553.871109][ T125] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1553.880032][ T4330] usb 9-1: Using ep0 maxpacket: 32 [ 1553.914814][ T4330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.935513][ T22] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1553.936535][ T125] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1553.973184][ T4330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1553.986723][ T4330] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1554.014179][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.043399][ T4330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.054183][ T125] usb 6-1: Product: syz [ 1554.073827][ T125] usb 6-1: Manufacturer: syz [ 1554.086138][ T22] usb 10-1: device descriptor read/64, error -71 [ 1554.118639][ T125] usb 6-1: SerialNumber: syz [ 1554.185029][ T4330] usb 9-1: config 0 descriptor?? [ 1554.208767][ T22] usb usb10-port1: attempt power cycle [ 1554.211455][T20387] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1554.263011][ T8859] usb 8-1: USB disconnect, device number 35 [ 1554.434792][ T125] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input205 [ 1554.615267][ T22] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 1554.631914][ T4330] ft260 0003:0403:6030.0022: unknown main item tag 0x7 [ 1554.653500][ T4330] ft260 0003:0403:6030.0022: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 1554.656827][ T22] usb 10-1: device descriptor read/8, error -71 [ 1554.805287][ T8859] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1554.946418][ T22] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1554.986802][ T22] usb 10-1: device descriptor read/8, error -71 [ 1555.007757][ T8859] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.045730][ T8859] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1555.070241][ T8859] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.131035][ T8859] usb 8-1: config 0 descriptor?? [ 1555.161134][ T125] usb 6-1: USB disconnect, device number 93 [ 1555.161163][ C1] bcm5974 6-1:1.0: trackpad urb failed: -19 [ 1555.173667][ T22] usb usb10-port1: unable to enumerate USB device [ 1555.180283][ T125] bcm5974 6-1:1.0: could not read from device [ 1555.204310][ T8859] pwc: Askey VC010 type 2 USB webcam detected. [ 1555.214491][ T4330] ft260 0003:0403:6030.0022: failed to retrieve chip version [ 1555.233706][ T4330] ft260: probe of 0003:0403:6030.0022 failed with error -71 [ 1555.272216][ T4330] usb 9-1: USB disconnect, device number 88 [ 1555.408029][T20408] fido_id[20408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1555.411856][ T8859] pwc: send_video_command error -71 [ 1555.445527][ T8859] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1555.453410][ T8859] Philips webcam: probe of 8-1:0.0 failed with error -71 [ 1555.481099][ T8859] usb 8-1: USB disconnect, device number 36 [ 1555.660944][T20410] fuse: Bad value for 'fd' [ 1556.191663][ T8859] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1556.255366][ T22] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1556.412141][ T8859] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.445332][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 1556.463732][ T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.511221][ T8859] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1556.566624][ T22] usb 6-1: config 0 has no interfaces? [ 1556.602593][ T8859] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.751050][ T22] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1556.762634][ T8859] usb 8-1: config 0 descriptor?? [ 1556.767694][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.776584][ T22] usb 6-1: Product: syz [ 1556.781178][ T22] usb 6-1: Manufacturer: syz [ 1556.797355][ T8859] pwc: Askey VC010 type 2 USB webcam detected. [ 1556.805750][ T22] usb 6-1: SerialNumber: syz [ 1556.827441][ T22] usb 6-1: config 0 descriptor?? [ 1557.297456][T20440] siw: device registration error -23 [ 1558.005598][ T8859] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1558.024417][ T8859] pwc: recv_control_msg error -32 req 02 val 2700 [ 1558.034995][ T8859] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1558.044620][ T8859] pwc: recv_control_msg error -32 req 04 val 1000 [ 1558.095308][ T8859] pwc: recv_control_msg error -32 req 04 val 1300 [ 1558.112456][ T8859] pwc: recv_control_msg error -32 req 04 val 1400 [ 1558.123950][ T8859] pwc: recv_control_msg error -32 req 02 val 2000 [ 1558.131399][ T8859] pwc: recv_control_msg error -32 req 02 val 2100 [ 1558.146555][ T8859] pwc: recv_control_msg error -32 req 04 val 1500 [ 1558.154370][ T8859] pwc: recv_control_msg error -32 req 02 val 2500 [ 1558.204773][ T8859] pwc: recv_control_msg error -32 req 02 val 2400 [ 1558.226715][ T8859] pwc: recv_control_msg error -32 req 02 val 2600 [ 1558.253970][ T8859] pwc: recv_control_msg error -32 req 02 val 2900 [ 1558.276545][ T8859] pwc: recv_control_msg error -71 req 02 val 2800 [ 1558.304201][ T8859] pwc: recv_control_msg error -71 req 04 val 1100 [ 1558.334876][ T8859] pwc: recv_control_msg error -71 req 04 val 1200 [ 1558.360167][ T8859] pwc: Registered as video103. [ 1558.367064][ T8859] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input206 [ 1558.382385][ T8859] usb 8-1: USB disconnect, device number 37 [ 1558.591792][T20451] fuse: Bad value for 'fd' [ 1558.605224][ T9231] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1558.797091][ T9231] usb 5-1: config 0 has no interfaces? [ 1558.803383][ T9231] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1558.839343][T20455] netlink: 'syz.8.3984': attribute type 1 has an invalid length. [ 1558.841987][ T9231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.861540][ T9231] usb 5-1: config 0 descriptor?? [ 1558.909437][T20455] netlink: 1 bytes leftover after parsing attributes in process `syz.8.3984'. [ 1559.101273][ T9231] usb 5-1: USB disconnect, device number 80 [ 1559.145480][ T8859] usb 6-1: USB disconnect, device number 94 [ 1562.749831][T20479] siw: device registration error -23 [ 1563.115411][ T22] usb 9-1: new full-speed USB device number 89 using dummy_hcd [ 1563.334408][ T22] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1563.342755][ T22] usb 9-1: config 0 has no interface number 0 [ 1563.352728][ T22] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1563.363625][ T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.421858][ T22] usb 9-1: config 0 descriptor?? [ 1563.453006][ T22] usb 9-1: selecting invalid altsetting 1 [ 1563.464234][ T22] dvb_ttusb_budget: ttusb_init_controller: error [ 1563.473355][ T22] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1564.456895][T20503] fuse: Unknown parameter '0x0000000000000004' [ 1564.463190][ T22] DVB: Unable to find symbol cx22700_attach() [ 1564.559027][T20507] netlink: 'syz.9.3996': attribute type 1 has an invalid length. [ 1564.591706][T20507] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3996'. [ 1564.702984][ T22] DVB: Unable to find symbol tda10046_attach() [ 1564.715044][ T22] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1564.775441][ T22] usb 9-1: USB disconnect, device number 89 [ 1565.155334][ T125] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 1566.325305][T20523] tipc: Enabling of bearer rejected, already enabled [ 1566.865485][ T22] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1566.927421][T20533] siw: device registration error -23 [ 1567.225545][ T22] usb 9-1: Using ep0 maxpacket: 32 [ 1567.239739][ T22] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.422529][ T125] usb 10-1: config 0 has no interfaces? [ 1567.428258][ T125] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1567.428288][ T125] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.430431][ T125] usb 10-1: config 0 descriptor?? [ 1567.540305][ T22] usb 9-1: config 0 has no interfaces? [ 1567.565564][ T9231] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1567.639479][ T22] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1567.661609][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.672888][ T22] usb 9-1: Product: syz [ 1567.682712][ T22] usb 9-1: Manufacturer: syz [ 1567.689089][ T22] usb 9-1: SerialNumber: syz [ 1567.719632][ T22] usb 9-1: config 0 descriptor?? [ 1567.757128][ T9231] usb 6-1: Using ep0 maxpacket: 8 [ 1568.120286][ T9231] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1568.139053][ T6117] usb 10-1: USB disconnect, device number 97 [ 1568.147019][ T9231] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1568.176544][ T9231] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1568.187978][ T9231] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1568.206766][ T125] usb 9-1: USB disconnect, device number 90 [ 1568.218729][ T9231] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1568.266111][ T9231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.274349][ T9231] usb 6-1: Product: syz [ 1568.279391][ T9231] usb 6-1: Manufacturer: syz [ 1568.284025][ T9231] usb 6-1: SerialNumber: syz [ 1568.288786][ T4330] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1568.308932][T20530] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1568.559905][ T4330] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.645343][ T125] usb 9-1: new full-speed USB device number 91 using dummy_hcd [ 1568.682765][ T9231] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input207 [ 1568.694158][ T4330] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1568.878106][ T4330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.880123][ T3624] bcm5974 6-1:1.0: could not read from device [ 1568.890100][ T9231] usb 6-1: USB disconnect, device number 95 [ 1568.900376][ T4330] usb 8-1: config 0 descriptor?? [ 1568.944301][ T4330] pwc: Askey VC010 type 2 USB webcam detected. [ 1568.971813][ T125] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1568.985607][ T125] usb 9-1: config 0 has no interface number 0 [ 1568.994594][ T125] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1569.010302][ T125] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.021949][ T125] usb 9-1: config 0 descriptor?? [ 1569.047978][T20556] fuse: Unknown parameter '0x0000000000000004' [ 1569.056728][ T125] usb 9-1: selecting invalid altsetting 1 [ 1569.062626][ T125] dvb_ttusb_budget: ttusb_init_controller: error [ 1569.078717][ T125] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1569.135790][ T4330] pwc: send_video_command error -71 [ 1569.141070][ T4330] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1569.153484][ T4330] Philips webcam: probe of 8-1:0.0 failed with error -71 [ 1569.163255][ T4330] usb 8-1: USB disconnect, device number 38 [ 1569.222702][ T125] DVB: Unable to find symbol cx22700_attach() [ 1569.265400][ T8859] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1569.322461][ T125] DVB: Unable to find symbol tda10046_attach() [ 1569.332141][T20562] netlink: 'syz.4.4011': attribute type 1 has an invalid length. [ 1569.340181][T20562] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4011'. [ 1569.353938][ T125] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1569.369247][ T125] usb 9-1: USB disconnect, device number 91 [ 1569.486228][ T8859] usb 10-1: Using ep0 maxpacket: 16 [ 1569.494359][ T8859] usb 10-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1569.514886][ T8859] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1569.693593][ T8859] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1569.702818][ T8859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.711254][ T8859] usb 10-1: Product: syz [ 1569.715767][ T8859] usb 10-1: Manufacturer: syz [ 1569.720482][ T8859] usb 10-1: SerialNumber: syz [ 1569.726460][ T4330] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1569.929432][T20573] tipc: Enabling of bearer rejected, already enabled [ 1569.979285][ T8859] usb 10-1: 0:2 : does not exist [ 1570.173283][ T8859] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1570.506483][ T8859] usb 10-1: USB disconnect, device number 98 [ 1570.698889][ T4330] usb 8-1: device descriptor read/all, error -71 [ 1570.865583][T13775] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1571.055472][T13775] usb 6-1: Using ep0 maxpacket: 32 [ 1571.084980][T13775] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.176369][ T8859] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1571.360020][T13775] usb 6-1: config 0 has no interfaces? [ 1571.506918][ T8859] usb 10-1: config 0 has no interfaces? [ 1571.512837][ T8859] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1571.527824][T13775] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1571.551524][ T8859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.565104][T13775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.615134][T13775] usb 6-1: Product: syz [ 1571.619661][T13775] usb 6-1: Manufacturer: syz [ 1571.638641][ T8859] usb 10-1: config 0 descriptor?? [ 1571.657053][T14841] udevd[14841]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1571.658301][T13775] usb 6-1: SerialNumber: syz [ 1571.721979][T13775] usb 6-1: config 0 descriptor?? [ 1572.258370][ T125] usb 10-1: USB disconnect, device number 99 [ 1572.491989][T20599] fuse: Unknown parameter '0x0000000000000004' [ 1572.629425][T20602] fuse: Unknown parameter 'group_i00000000000000000000' [ 1572.736998][T20607] netlink: 'syz.4.4023': attribute type 1 has an invalid length. [ 1572.744811][T20607] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4023'. [ 1573.055228][ T8859] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1573.145570][ T22] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1573.217940][T20619] tipc: Enabling of bearer rejected, already enabled [ 1573.275679][ T8859] usb 8-1: Using ep0 maxpacket: 8 [ 1573.305322][T13775] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1573.359298][ T22] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1573.394062][ T8859] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1573.428494][ T22] usb 5-1: config 0 has no interface number 0 [ 1573.462278][ T8859] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1573.485658][ T22] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1573.614607][ T8859] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1573.645780][T13775] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.693563][ T4330] usb 6-1: USB disconnect, device number 96 [ 1573.761034][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.769213][T13775] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1573.783123][ T8859] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1573.790843][ T22] usb 5-1: config 0 descriptor?? [ 1573.797255][T13775] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.808485][ T22] usb 5-1: selecting invalid altsetting 1 [ 1573.814331][ T22] dvb_ttusb_budget: ttusb_init_controller: error [ 1573.956347][ T22] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1573.966199][T13775] usb 10-1: config 0 descriptor?? [ 1573.972671][ T8859] usb 8-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1573.983904][T13775] pwc: Askey VC010 type 2 USB webcam detected. [ 1573.998108][ T8859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.148474][ T8859] usb 8-1: Product: syz [ 1574.153842][ T8859] usb 8-1: Manufacturer: syz [ 1574.225428][T20631] siw: device registration error -23 [ 1574.257300][ T8859] usb 8-1: SerialNumber: syz [ 1574.897024][T13775] pwc: send_video_command error -71 [ 1574.907245][T13775] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1574.960079][T13775] Philips webcam: probe of 10-1:0.0 failed with error -71 [ 1574.984123][T20604] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1575.038168][T13775] usb 10-1: USB disconnect, device number 100 [ 1575.206605][ T8859] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input208 [ 1575.227318][ T3624] bcm5974 8-1:1.0: could not read from device [ 1575.248944][ T8859] usb 8-1: USB disconnect, device number 41 [ 1575.261289][ T3624] bcm5974 8-1:1.0: could not read from device [ 1575.295935][ T3624] bcm5974 8-1:1.0: could not read from device [ 1575.381619][ T22] DVB: Unable to find symbol cx22700_attach() [ 1575.535276][T13775] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1575.814609][T13775] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.830752][T13775] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1575.843604][T13775] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.866488][T13775] usb 10-1: config 0 descriptor?? [ 1575.884879][T13775] pwc: Askey VC010 type 2 USB webcam detected. [ 1575.890478][T20646] fuse: Unknown parameter '0x0000000000000004' [ 1576.075306][ T22] DVB: Unable to find symbol tda10046_attach() [ 1576.085318][ T22] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1576.115589][ T22] usb 5-1: USB disconnect, device number 81 [ 1576.229956][T20653] netlink: 'syz.8.4035': attribute type 1 has an invalid length. [ 1576.251150][T20657] fuse: Unknown parameter 'group_i00000000000000000000' [ 1576.258365][T20653] netlink: 1 bytes leftover after parsing attributes in process `syz.8.4035'. [ 1576.283219][T13775] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1576.300868][T13775] pwc: recv_control_msg error -32 req 02 val 2700 [ 1576.316152][T13775] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1576.340996][T13775] pwc: recv_control_msg error -32 req 04 val 1000 [ 1576.349585][T13775] pwc: recv_control_msg error -32 req 04 val 1300 [ 1576.361589][T13775] pwc: recv_control_msg error -32 req 04 val 1400 [ 1576.374179][T13775] pwc: recv_control_msg error -32 req 02 val 2000 [ 1576.381768][T13775] pwc: recv_control_msg error -32 req 02 val 2100 [ 1576.424983][T13775] pwc: recv_control_msg error -32 req 04 val 1500 [ 1576.442516][T13775] pwc: recv_control_msg error -32 req 02 val 2500 [ 1576.457675][T13775] pwc: recv_control_msg error -32 req 02 val 2400 [ 1576.470596][T13775] pwc: recv_control_msg error -32 req 02 val 2600 [ 1576.635383][ T125] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1576.805019][T13775] pwc: recv_control_msg error -71 req 02 val 2800 [ 1576.812538][T13775] pwc: recv_control_msg error -71 req 04 val 1100 [ 1576.819420][T13775] pwc: recv_control_msg error -71 req 04 val 1200 [ 1576.829561][T13775] pwc: Registered as video103. [ 1576.836581][T13775] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input209 [ 1576.846849][ T125] usb 6-1: config 0 has no interfaces? [ 1576.850715][T13775] usb 10-1: USB disconnect, device number 101 [ 1576.852386][ T125] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1577.054271][T20674] tipc: Enabling of bearer rejected, already enabled [ 1577.658476][ T125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.675509][ T125] usb 6-1: config 0 descriptor?? [ 1577.821226][T20680] device syzkaller0 entered promiscuous mode [ 1578.021048][T13775] usb 6-1: USB disconnect, device number 97 [ 1578.680093][T20693] fuse: Unknown parameter '0x0000000000000004' [ 1579.059554][T20697] siw: device registration error -23 [ 1579.153835][T20700] fuse: Unknown parameter 'group_id00000000000000000000' [ 1579.572061][T20707] netlink: 'syz.8.4049': attribute type 1 has an invalid length. [ 1579.601607][T20707] netlink: 1 bytes leftover after parsing attributes in process `syz.8.4049'. [ 1579.645284][ T7] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1579.857191][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 1579.867047][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1579.893042][ T7] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1579.974188][ T7] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1580.020141][ T7] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1580.203951][T20721] tipc: Enabling of bearer rejected, already enabled [ 1580.964970][ T7] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1581.293212][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.337609][ T7] usb 6-1: Product: syz [ 1581.407769][ T7] usb 6-1: Manufacturer: syz [ 1581.412429][ T7] usb 6-1: SerialNumber: syz [ 1581.418411][T20733] fuse: Unknown parameter '0x0000000000000004' [ 1581.504161][T20704] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1581.547688][T20735] tipc: Enabled bearer , priority 0 [ 1581.572892][T20735] tipc: Resetting bearer [ 1581.585433][T20737] fuse: Unknown parameter 'group_id00000000000000000000' [ 1581.637061][T20734] tipc: Disabling bearer [ 1581.755375][ T9231] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1581.804358][ T7] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input210 [ 1581.978170][ T3624] bcm5974 6-1:1.0: could not read from device [ 1581.991104][ T3624] bcm5974 6-1:1.0: could not read from device [ 1582.008834][ T3624] bcm5974 6-1:1.0: could not read from device [ 1582.019522][ T3624] bcm5974 6-1:1.0: could not read from device [ 1582.072828][ T9231] usb 9-1: config 0 has no interfaces? [ 1582.134868][ T9231] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1582.204874][ T7] usb 6-1: USB disconnect, device number 98 [ 1582.356915][ T9231] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.392810][ T9231] usb 9-1: config 0 descriptor?? [ 1582.557216][T20752] netlink: 'syz.4.4062': attribute type 1 has an invalid length. [ 1582.565008][T20752] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4062'. [ 1582.667187][ T5025] usb 9-1: USB disconnect, device number 92 [ 1582.794975][T20761] fuse: Bad value for 'fd' [ 1583.189397][T20769] siw: device registration error -23 [ 1584.375652][T20778] fuse: Unknown parameter 'fd0x0000000000000004' [ 1584.813405][T20788] tipc: Enabled bearer , priority 0 [ 1584.836419][T20793] tipc: Enabling of bearer rejected, already enabled [ 1584.892052][T20788] tipc: Resetting bearer [ 1584.927122][T20786] tipc: Disabling bearer [ 1584.975238][ T9231] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1585.333249][ T9231] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1585.355352][ T9231] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1585.370390][ T9231] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1585.390003][ T9231] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.411865][ T9231] usb 8-1: config 0 descriptor?? [ 1585.722309][T20804] netlink: 'syz.4.4077': attribute type 1 has an invalid length. [ 1585.757792][T20804] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4077'. [ 1585.788781][T20806] fuse: Bad value for 'fd' [ 1585.842302][ T9231] usbhid 8-1:0.0: can't add hid device: -32 [ 1585.853850][ T9231] usbhid: probe of 8-1:0.0 failed with error -32 [ 1585.945846][ T125] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 1586.135530][ T125] usb 9-1: Using ep0 maxpacket: 8 [ 1586.143182][ T125] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1586.326455][T20813] siw: device registration error -23 [ 1586.910855][ T9231] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 1586.975343][ T125] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1587.073567][ T125] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1587.150565][ T9231] usb 10-1: config 0 has no interfaces? [ 1587.193732][ T9231] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1587.247514][ T125] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1587.291046][ T9231] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.460997][ T125] usb 9-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1587.545075][ T9231] usb 10-1: config 0 descriptor?? [ 1587.563204][ T125] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.589405][ T125] usb 9-1: Product: syz [ 1587.593875][ T125] usb 9-1: Manufacturer: syz [ 1587.609584][ T125] usb 9-1: SerialNumber: syz [ 1587.619484][T13775] usb 8-1: USB disconnect, device number 42 [ 1587.628097][T20801] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1587.718831][T20826] fuse: Unknown parameter 'fd0x0000000000000004' [ 1587.968214][ T125] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input211 [ 1588.148623][ T3624] bcm5974 9-1:1.0: could not read from device [ 1588.275024][ T6117] usb 10-1: USB disconnect, device number 102 [ 1588.364463][ T125] usb 9-1: USB disconnect, device number 93 [ 1588.535242][ T9231] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1588.616597][T20847] fuse: Bad value for 'fd' [ 1588.639090][T20845] netlink: 'syz.8.4089': attribute type 1 has an invalid length. [ 1588.651831][T20845] netlink: 1 bytes leftover after parsing attributes in process `syz.8.4089'. [ 1588.727852][ T9231] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1588.750896][ T9231] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1588.762450][ T9231] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1588.781477][ T9231] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1588.799574][ T9231] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1588.824062][ T9231] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1588.834151][ T9231] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1588.842800][ T9231] usb 6-1: Product: syz [ 1588.847820][ T9231] usb 6-1: Manufacturer: syz [ 1588.856753][ T9231] cdc_wdm 6-1:1.0: skipping garbage [ 1588.862109][ T9231] cdc_wdm 6-1:1.0: skipping garbage [ 1588.867454][ T9231] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 1589.045291][T13775] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 1589.075303][ T5025] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1589.076257][ T9231] usb 6-1: USB disconnect, device number 99 [ 1589.235933][T13775] usb 10-1: device descriptor read/64, error -71 [ 1589.305487][ T5025] usb 9-1: Using ep0 maxpacket: 16 [ 1589.646944][ T5025] usb 9-1: config 0 has an invalid interface number: 145 but max is 0 [ 1589.662007][ T5025] usb 9-1: config 0 has no interface number 0 [ 1589.676455][ T5025] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1589.701674][ T5025] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.725028][ T5025] usb 9-1: Product: syz [ 1589.729925][ T5025] usb 9-1: Manufacturer: syz [ 1589.734919][ T5025] usb 9-1: SerialNumber: syz [ 1589.765926][ T5025] usb 9-1: config 0 descriptor?? [ 1589.786040][ T5025] hub 9-1:0.145: bad descriptor, ignoring hub [ 1589.795390][T13775] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 1589.804894][ T5025] hub: probe of 9-1:0.145 failed with error -5 [ 1589.815019][ T5025] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.145/input/input212 [ 1589.834733][T20863] fuse: Unknown parameter 'fd0x0000000000000004' [ 1589.955342][T13775] usb 10-1: device descriptor read/64, error -71 [ 1590.096419][T13775] usb usb10-port1: attempt power cycle [ 1590.425473][ T125] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1590.515335][T13775] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 1590.535489][T17963] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1590.545966][T13775] usb 10-1: device descriptor read/8, error -71 [ 1590.615374][ T125] usb 6-1: Using ep0 maxpacket: 32 [ 1590.622045][ T125] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1590.630406][ T125] usb 6-1: config 0 has no interface number 0 [ 1590.635318][ T22] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1590.636824][ T125] usb 6-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1590.660996][ T125] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1590.670098][ T125] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1590.679172][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.687286][ T125] usb 6-1: Product: syz [ 1590.691479][ T125] usb 6-1: Manufacturer: syz [ 1590.696203][ T125] usb 6-1: SerialNumber: syz [ 1590.702303][ T125] usb 6-1: config 0 descriptor?? [ 1590.710214][ T125] appletouch 6-1:0.85: Could not find int-in endpoint [ 1590.717095][ T125] appletouch: probe of 6-1:0.85 failed with error -5 [ 1590.724272][ T125] usbhid 6-1:0.85: couldn't find an input interrupt endpoint [ 1590.736577][T17963] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1590.754261][T17963] usb 5-1: config 0 has no interface number 0 [ 1590.760712][T17963] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1590.769994][T17963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.786647][T17963] usb 5-1: config 0 descriptor?? [ 1590.793780][T17963] usb 5-1: selecting invalid altsetting 1 [ 1590.802430][T17963] dvb_ttusb_budget: ttusb_init_controller: error [ 1590.808947][T17963] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1590.817573][T13775] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 1590.836878][ T22] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1590.847837][ T22] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1590.858631][ T22] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1590.872756][T13775] usb 10-1: device descriptor read/8, error -71 [ 1590.905532][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.936399][ T22] usb 8-1: config 0 descriptor?? [ 1590.978147][T17963] DVB: Unable to find symbol cx22700_attach() [ 1590.995572][T13775] usb usb10-port1: unable to enumerate USB device [ 1591.063793][T17963] DVB: Unable to find symbol tda10046_attach() [ 1591.070153][T17963] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1591.085474][T17963] usb 5-1: USB disconnect, device number 82 [ 1591.115412][ T3624] usb 9-1: reset high-speed USB device number 94 using dummy_hcd [ 1591.147844][ T3624] usb 9-1: device reset changed ep0 maxpacket size! [ 1591.159113][T10730] usb 9-1: USB disconnect, device number 94 [ 1591.325385][T10730] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1591.507107][T10730] usb 9-1: config 0 has no interfaces? [ 1591.512690][T10730] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1591.522185][T10730] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.532302][T10730] usb 9-1: config 0 descriptor?? [ 1591.551863][ T22] usbhid 8-1:0.0: can't add hid device: -32 [ 1591.560189][ T22] usbhid: probe of 8-1:0.0 failed with error -32 [ 1591.622016][T20886] tipc: Enabled bearer , priority 0 [ 1591.629349][T20886] device syzkaller0 entered promiscuous mode [ 1591.653273][T20885] tipc: Resetting bearer [ 1591.687841][T20885] tipc: Disabling bearer [ 1591.748960][ T22] usb 9-1: USB disconnect, device number 95 [ 1593.045277][ T22] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1593.085254][T17963] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1593.173449][ T9231] usb 6-1: USB disconnect, device number 100 [ 1593.221376][T20916] tipc: Enabled bearer , priority 0 [ 1593.236982][ T22] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1593.245669][T20916] device syzkaller0 entered promiscuous mode [ 1593.260328][ T22] usb 9-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1593.276952][T17963] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.287529][ T22] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1593.296761][ T22] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1593.298823][T20915] tipc: Resetting bearer [ 1593.314474][ T22] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1593.332990][T17963] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1593.343261][T17963] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 1593.351637][T17963] usb 5-1: Manufacturer: syz [ 1593.356532][T17963] usb 5-1: SerialNumber: syz [ 1593.361795][ T22] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1593.363100][T20915] tipc: Disabling bearer [ 1593.372329][ T22] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1593.384965][ T22] usb 9-1: Product: syz [ 1593.398586][T17963] usb 5-1: config 0 descriptor?? [ 1593.403948][ T22] usb 9-1: Manufacturer: syz [ 1593.429428][ T22] cdc_wdm 9-1:1.0: skipping garbage [ 1593.435006][ T22] cdc_wdm 9-1:1.0: skipping garbage [ 1593.441160][ T22] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 1593.471214][ T9231] usb 8-1: USB disconnect, device number 43 [ 1593.666086][ T22] usb 9-1: USB disconnect, device number 96 [ 1593.816431][T17963] usb 5-1: USB disconnect, device number 83 [ 1594.081608][ T9231] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 1594.357313][ T9231] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1594.370792][ T9231] usb 8-1: config 0 has no interface number 0 [ 1594.387734][ T9231] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1594.425377][ T9231] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.445347][ T6117] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1594.496118][ T9231] usb 8-1: config 0 descriptor?? [ 1594.521524][ T9231] usb 8-1: selecting invalid altsetting 1 [ 1594.533289][ T9231] dvb_ttusb_budget: ttusb_init_controller: error [ 1594.550984][ T9231] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1594.656654][ T6117] usb 10-1: config 0 has no interfaces? [ 1594.664322][ T6117] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1594.687142][ T6117] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.699737][ T9231] DVB: Unable to find symbol cx22700_attach() [ 1594.708820][ T6117] usb 10-1: config 0 descriptor?? [ 1594.824250][ T9231] DVB: Unable to find symbol tda10046_attach() [ 1594.831426][ T9231] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1594.842931][ T9231] usb 8-1: USB disconnect, device number 44 [ 1594.923143][ T125] usb 10-1: USB disconnect, device number 107 [ 1595.025397][T17963] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1595.065433][ T6117] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1595.205301][T17963] usb 6-1: Using ep0 maxpacket: 8 [ 1595.213168][T17963] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1595.222101][T17963] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1595.233509][T17963] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1595.248458][ T6117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.263131][T17963] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1595.267952][ T6117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1595.280715][ T6117] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1595.291622][ T6117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.317888][ T6117] usb 5-1: config 0 descriptor?? [ 1595.323015][T17963] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1595.345040][T17963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.362009][T17963] usb 6-1: Product: syz [ 1595.366724][T17963] usb 6-1: Manufacturer: syz [ 1595.373517][T17963] usb 6-1: SerialNumber: syz [ 1595.382343][T20946] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1595.666887][T17963] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input213 [ 1595.694690][ T3624] bcm5974 6-1:1.0: could not read from device [ 1595.765717][T17963] usb 6-1: USB disconnect, device number 101 [ 1595.845434][ T22] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1596.154124][ T6117] usbhid 5-1:0.0: can't add hid device: -32 [ 1596.155376][ T22] usb 9-1: Using ep0 maxpacket: 8 [ 1596.169894][ T6117] usbhid: probe of 5-1:0.0 failed with error -32 [ 1596.171868][ T22] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1596.189566][ T22] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.201037][ T22] usb 9-1: config 0 has no interface number 0 [ 1596.207306][ T22] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1596.218082][ T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.281052][ T22] usb 9-1: config 0 descriptor?? [ 1596.302422][ T22] ldusb 9-1:0.55: Interrupt in endpoint not found [ 1596.370997][T20962] fuse: Invalid rootmode [ 1596.510802][T17963] usb 9-1: USB disconnect, device number 97 [ 1597.016198][T17963] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1597.219639][T17963] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1597.229115][T17963] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.241617][T17963] usb 8-1: Product: syz [ 1597.253888][T17963] usb 8-1: Manufacturer: syz [ 1597.280510][T17963] usb 8-1: SerialNumber: syz [ 1597.307167][T17963] usb 8-1: config 0 descriptor?? [ 1597.376153][ T9231] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1597.579158][ T9231] usb 9-1: config 0 has no interfaces? [ 1597.586752][ T9231] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1597.634364][ T9231] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.672809][ T9231] usb 9-1: config 0 descriptor?? [ 1597.718331][T20987] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4140'. [ 1597.861584][ T9231] usb 5-1: USB disconnect, device number 84 [ 1597.920678][ T6117] usb 9-1: USB disconnect, device number 98 [ 1597.963094][T17963] usb 8-1: Firmware version (0.0) predates our first public release. [ 1597.979301][T17963] usb 8-1: Please update to version 0.2 or newer [ 1598.072300][T17963] usb 8-1: USB disconnect, device number 45 [ 1598.145347][ T22] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1598.325461][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 1598.334094][ T22] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1598.347914][ T22] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1598.360005][ T22] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1598.527987][ T22] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1598.540105][ T22] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1598.549344][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.557943][ T22] usb 6-1: Product: syz [ 1598.562154][ T22] usb 6-1: Manufacturer: syz [ 1598.575221][ T22] usb 6-1: SerialNumber: syz [ 1598.614050][T20989] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1598.773796][T21000] siw: device registration error -23 [ 1598.961703][ T22] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input214 [ 1599.358533][ T3624] bcm5974 6-1:1.0: could not read from device [ 1599.386891][ T3624] bcm5974 6-1:1.0: could not read from device [ 1599.394465][ T22] usb 6-1: USB disconnect, device number 102 [ 1599.409165][ T3624] bcm5974 6-1:1.0: could not read from device [ 1599.663391][T21014] tipc: Enabled bearer , priority 0 [ 1599.692672][T21014] device syzkaller0 entered promiscuous mode [ 1599.720249][T21014] tipc: Resetting bearer [ 1599.757758][T21013] tipc: Resetting bearer [ 1599.830379][T21013] tipc: Disabling bearer [ 1599.861990][T21020] fuse: Bad value for 'fd' [ 1599.906050][T21021] fuse: root generation should be zero [ 1600.095295][T17963] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1600.162459][T21033] fuse: Bad value for 'rootmode' [ 1600.295256][T17963] usb 6-1: Using ep0 maxpacket: 8 [ 1600.302793][T17963] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1600.459531][T17963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.470353][T17963] usb 6-1: config 0 has no interface number 0 [ 1600.477267][T17963] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1600.489051][T17963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.506447][T17963] usb 6-1: config 0 descriptor?? [ 1600.522740][T17963] ldusb 6-1:0.55: Interrupt in endpoint not found [ 1601.755344][T21046] tipc: Enabling of bearer rejected, already enabled [ 1601.933600][T17963] usb 6-1: USB disconnect, device number 103 [ 1602.235425][ T6117] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 1602.425283][T13775] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1602.438593][ T6117] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1602.479215][ T6117] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.503371][ T6117] usb 10-1: Product: syz [ 1602.544056][ T6117] usb 10-1: Manufacturer: syz [ 1602.551794][ T6117] usb 10-1: SerialNumber: syz [ 1602.605345][T13775] usb 9-1: Using ep0 maxpacket: 8 [ 1602.645352][T17963] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1602.655012][T13775] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1602.834049][T13775] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1602.850462][T13775] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1602.862229][T17963] usb 5-1: Using ep0 maxpacket: 32 [ 1603.071348][T13775] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1603.083775][T17963] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1603.098548][T13775] usb 9-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1603.118424][ T6117] usb 10-1: config 0 descriptor?? [ 1603.125269][T17963] usb 5-1: config 0 has no interface number 0 [ 1603.156259][T17963] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1603.175187][T13775] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.194907][T13775] usb 9-1: Product: syz [ 1603.199251][T17963] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1603.211122][T13775] usb 9-1: Manufacturer: syz [ 1603.215813][T13775] usb 9-1: SerialNumber: syz [ 1603.222690][T17963] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1603.251885][T21050] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1603.264336][T17963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.272996][T17963] usb 5-1: Product: syz [ 1603.278099][T17963] usb 5-1: Manufacturer: syz [ 1603.282853][T17963] usb 5-1: SerialNumber: syz [ 1603.321407][T17963] usb 5-1: config 0 descriptor?? [ 1603.409850][T17963] appletouch 5-1:0.85: Could not find int-in endpoint [ 1603.438581][T17963] appletouch: probe of 5-1:0.85 failed with error -5 [ 1603.460268][T17963] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 1603.483721][T13775] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input215 [ 1603.519824][ T3624] bcm5974 9-1:1.0: could not read from device [ 1603.550627][ T3624] bcm5974 9-1:1.0: could not read from device [ 1603.550915][T21065] fuse: Bad value for 'fd' [ 1603.591962][T13775] usb 9-1: USB disconnect, device number 99 [ 1603.602828][ T3624] bcm5974 9-1:1.0: could not read from device [ 1603.655807][ T3624] bcm5974 9-1:1.0: could not read from device [ 1603.700313][T21067] tipc: Enabled bearer , priority 0 [ 1603.708192][T21067] device syzkaller0 entered promiscuous mode [ 1603.727430][T21067] tipc: Resetting bearer [ 1603.734614][T21066] tipc: Resetting bearer [ 1603.765816][T21066] tipc: Disabling bearer [ 1603.779619][T21069] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4166'. [ 1603.793099][ T6117] usb 10-1: Firmware version (0.0) predates our first public release. [ 1603.806451][ T6117] usb 10-1: Please update to version 0.2 or newer [ 1603.868140][ T6117] usb 10-1: USB disconnect, device number 108 [ 1603.897268][T21073] fuse: Bad value for 'rootmode' [ 1603.897744][T20636] udevd[20636]: Error opening device "/dev/input/event4": No such file or directory [ 1603.964111][T20636] udevd[20636]: Unable to EVIOCGABS device "/dev/input/event4" [ 1603.995928][T20636] udevd[20636]: Unable to EVIOCGABS device "/dev/input/event4" [ 1604.038000][T20636] udevd[20636]: Unable to EVIOCGABS device "/dev/input/event4" [ 1604.049082][T20636] udevd[20636]: Unable to EVIOCGABS device "/dev/input/event4" [ 1604.977326][T21078] tipc: Enabling of bearer rejected, already enabled [ 1604.994262][T13775] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1605.079512][T21086] tipc: Enabling of bearer rejected, already enabled [ 1605.627490][ T6117] usb 5-1: USB disconnect, device number 85 [ 1605.769550][T13775] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1605.782104][T13775] usb 6-1: config 0 has no interface number 0 [ 1605.793185][T13775] usb 6-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=56.19 [ 1605.803012][T13775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.812037][T13775] usb 6-1: Product: syz [ 1605.838291][T13775] usb 6-1: Manufacturer: syz [ 1605.868156][T13775] usb 6-1: SerialNumber: syz [ 1605.876401][T13775] usb 6-1: config 0 descriptor?? [ 1605.910781][T13775] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 1605.920818][T17963] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1605.931246][T13775] dvb-usb: bulk message failed: -22 (2/0) [ 1605.938329][T13775] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1605.947751][T13775] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 1605.958256][T13775] usb 6-1: media controller created [ 1606.033090][T13775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1606.048024][T13775] usb 6-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)... [ 1606.063143][T13775] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1606.127076][T17963] usb 8-1: Using ep0 maxpacket: 8 [ 1606.243056][T17963] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1606.265819][T17963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.320214][T17963] usb 8-1: config 0 has no interface number 0 [ 1606.341967][T17963] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1606.355251][T17963] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.390512][T17963] usb 8-1: config 0 descriptor?? [ 1606.426061][T17963] ldusb 8-1:0.55: Interrupt in endpoint not found [ 1606.614698][T17963] usb 8-1: USB disconnect, device number 46 [ 1606.869149][T21116] fuse: Bad value for 'fd' [ 1606.905306][T13775] rc_core: IR keymap rc-dtt200u not found [ 1606.911258][T13775] Registered IR keymap rc-empty [ 1606.945396][T13775] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1606.993124][T13775] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input216 [ 1607.086056][T13775] dvb-usb: schedule remote query interval to 300 msecs. [ 1607.113599][T13775] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 1607.228059][T13775] usb 6-1: USB disconnect, device number 104 [ 1607.265178][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.271527][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.358063][T21120] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4178'. [ 1607.417361][T13775] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 1607.543700][T21126] fuse: Bad value for 'rootmode' [ 1607.607321][ T9231] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 1607.809084][ T9231] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.847215][ T9231] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1607.929921][ T9231] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.963840][ T9231] usb 10-1: config 0 descriptor?? [ 1607.974768][ T9231] pwc: Askey VC010 type 2 USB webcam detected. [ 1608.095231][T13775] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1608.175593][ T9231] pwc: send_video_command error -71 [ 1608.185794][ T9231] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1608.193567][ T9231] Philips webcam: probe of 10-1:0.0 failed with error -71 [ 1608.234066][ T9231] usb 10-1: USB disconnect, device number 109 [ 1608.265329][T13775] usb 6-1: device descriptor read/64, error -71 [ 1608.615643][T13775] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1608.680330][T21140] tipc: Enabling of bearer rejected, already enabled [ 1608.692626][T21140] siw: device registration error -23 [ 1608.895566][T13775] usb 6-1: device descriptor read/64, error -71 [ 1609.029181][T13775] usb usb6-port1: attempt power cycle [ 1609.177483][ T4330] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 1609.366925][ T4330] usb 9-1: Using ep0 maxpacket: 32 [ 1609.380068][ T4330] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1609.389582][ T9231] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 1609.403866][ T4330] usb 9-1: config 0 has no interface number 0 [ 1609.413410][ T4330] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1609.429513][ T4330] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1609.442703][ T4330] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1609.464501][ T4330] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1609.479418][ T4330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.490350][ T4330] usb 9-1: Product: syz [ 1609.493875][T21149] fuse: Bad value for 'fd' [ 1609.494544][ T4330] usb 9-1: Manufacturer: syz [ 1609.504074][ T4330] usb 9-1: SerialNumber: syz [ 1609.521058][ T4330] usb 9-1: config 0 descriptor?? [ 1609.565502][T13775] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1609.586566][ T9231] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.597698][ T9231] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1609.606970][ T9231] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.615626][T17963] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1609.626480][ T9231] usb 10-1: config 0 descriptor?? [ 1609.628747][T13775] usb 6-1: device descriptor read/8, error -71 [ 1609.643966][ T9231] pwc: Askey VC010 type 2 USB webcam detected. [ 1609.817753][T17963] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.828116][T17963] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1609.837943][T17963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.848673][T17963] usb 5-1: config 0 descriptor?? [ 1609.856961][T17963] pwc: Askey VC010 type 2 USB webcam detected. [ 1609.915350][T13775] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1609.932814][ T4330] appletouch 9-1:0.85: Geyser mode initialized. [ 1609.942207][ T4330] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input217 [ 1609.958496][T13775] usb 6-1: device descriptor read/8, error -71 [ 1610.039563][ T9231] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1610.046640][ T9231] pwc: recv_control_msg error -32 req 02 val 2700 [ 1610.053793][ T9231] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1610.069528][T17963] pwc: send_video_command error -71 [ 1610.069539][ T9231] pwc: recv_control_msg error -32 req 04 val 1000 [ 1610.078742][T17963] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1610.089657][T13775] usb usb6-port1: unable to enumerate USB device [ 1610.089720][ T9231] pwc: recv_control_msg error -32 req 04 val 1300 [ 1610.109273][T17963] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 1610.113824][ T9231] pwc: recv_control_msg error -32 req 04 val 1400 [ 1610.120178][T17963] usb 5-1: USB disconnect, device number 86 [ 1610.137281][ T4330] usb 9-1: USB disconnect, device number 100 [ 1610.151725][ T9231] pwc: recv_control_msg error -32 req 02 val 2000 [ 1610.168663][ T4330] appletouch 9-1:0.85: input: appletouch disconnected [ 1610.180439][ T9231] pwc: recv_control_msg error -32 req 02 val 2100 [ 1610.200252][ T9231] pwc: recv_control_msg error -32 req 04 val 1500 [ 1610.209304][ T9231] pwc: recv_control_msg error -32 req 02 val 2500 [ 1610.226348][ T9231] pwc: recv_control_msg error -32 req 02 val 2400 [ 1610.434515][ T9231] pwc: recv_control_msg error -71 req 02 val 2900 [ 1610.451755][ T9231] pwc: recv_control_msg error -71 req 02 val 2800 [ 1610.459107][ T9231] pwc: recv_control_msg error -71 req 04 val 1100 [ 1610.466793][ T9231] pwc: recv_control_msg error -71 req 04 val 1200 [ 1610.496824][ T9231] pwc: Registered as video103. [ 1610.513425][ T9231] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input218 [ 1610.549869][ T9231] usb 10-1: USB disconnect, device number 110 [ 1610.635384][T17963] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1610.815324][ T22] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1610.827766][T17963] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.839268][T17963] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1610.848482][T17963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.869304][T17963] usb 5-1: config 0 descriptor?? [ 1610.881881][T17963] pwc: Askey VC010 type 2 USB webcam detected. [ 1611.005235][ T22] usb 8-1: Using ep0 maxpacket: 8 [ 1611.017809][ T22] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1611.037093][ T22] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.067747][ T22] usb 8-1: config 0 has no interface number 0 [ 1611.074032][ T22] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1611.112857][ T22] usb 8-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1611.145300][ T22] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1611.165283][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.213739][ T22] usb 8-1: config 0 descriptor?? [ 1611.239270][ T22] ldusb 8-1:0.55: Interrupt in endpoint not found [ 1611.288249][T17963] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1611.296525][T17963] pwc: recv_control_msg error -32 req 02 val 2700 [ 1611.308143][T17963] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1611.318555][T17963] pwc: recv_control_msg error -32 req 04 val 1000 [ 1611.328276][T17963] pwc: recv_control_msg error -32 req 04 val 1300 [ 1611.340089][T17963] pwc: recv_control_msg error -32 req 04 val 1400 [ 1611.352665][T17963] pwc: recv_control_msg error -32 req 02 val 2000 [ 1611.395071][T17963] pwc: recv_control_msg error -32 req 02 val 2100 [ 1611.415234][ T9231] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 1611.415947][T17963] pwc: recv_control_msg error -32 req 04 val 1500 [ 1611.462708][ T22] usb 8-1: USB disconnect, device number 47 [ 1611.468794][T17963] pwc: recv_control_msg error -32 req 02 val 2500 [ 1611.486261][T17963] pwc: recv_control_msg error -32 req 02 val 2400 [ 1611.496019][T17963] pwc: recv_control_msg error -32 req 02 val 2600 [ 1611.619068][ T9231] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1611.630048][ T9231] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1611.650057][ T9231] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1611.668490][ T9231] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1611.691976][ T9231] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1611.703584][T17963] pwc: recv_control_msg error -71 req 02 val 2800 [ 1611.714988][T17963] pwc: recv_control_msg error -71 req 04 val 1100 [ 1611.730029][T17963] pwc: recv_control_msg error -71 req 04 val 1200 [ 1611.752389][T17963] pwc: Registered as video103. [ 1611.754178][ T9231] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1611.772988][T17963] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input219 [ 1611.802301][ T9231] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1611.832704][ T9231] usb 10-1: Product: syz [ 1611.851703][T17963] usb 5-1: USB disconnect, device number 87 [ 1611.866940][ T9231] usb 10-1: Manufacturer: syz [ 1611.935997][ T9231] cdc_wdm 10-1:1.0: skipping garbage [ 1611.941353][ T9231] cdc_wdm 10-1:1.0: skipping garbage [ 1611.981676][ T9231] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1612.013605][ T9231] cdc_wdm 10-1:1.0: Unknown control protocol [ 1612.237558][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1612.244305][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1612.255245][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1612.261991][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1612.275377][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1612.282314][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1612.288830][ T9231] usb 10-1: USB disconnect, device number 111 [ 1613.995328][T21190] tipc: Enabling of bearer rejected, already enabled [ 1614.075035][T21188] siw: device registration error -23 [ 1614.795772][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 1614.795786][ T27] audit: type=1326 audit(1753856376.797:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21201 comm="syz.5.4201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30fd98e9a9 code=0x0 [ 1614.913674][T21204] loop2: detected capacity change from 0 to 7 [ 1614.959818][T21155] Dev loop2: unable to read RDB block 7 [ 1614.968837][T21155] loop2: unable to read partition table [ 1614.990433][T21155] loop2: partition table beyond EOD, truncated [ 1615.005356][ T9231] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1615.027515][T21204] Dev loop2: unable to read RDB block 7 [ 1615.038836][T21204] loop2: unable to read partition table [ 1615.067119][T21204] loop2: partition table beyond EOD, truncated [ 1615.092674][T21204] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1615.206845][ T9231] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.253630][ T9231] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1615.296290][ T9231] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1615.365352][ T9231] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1615.415332][ T9231] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1615.446981][ T9231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.484785][ T9231] usb 5-1: invalid MIDI out EP 0 [ 1615.624995][ T9231] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1615.694694][T15672] udevd[15672]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1615.736315][ T9231] usb 5-1: USB disconnect, device number 88 [ 1616.015610][T17963] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1616.095690][T21229] tipc: Enabling of bearer rejected, already enabled [ 1616.185310][ T22] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 1616.371515][T17963] usb 6-1: config 0 has no interfaces? [ 1616.485307][ T22] usb 10-1: Using ep0 maxpacket: 16 [ 1616.638945][ T22] usb 10-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1616.650254][ T22] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1616.687409][ T22] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1616.713607][ T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.745710][ T22] usb 10-1: Product: syz [ 1616.750082][ T22] usb 10-1: Manufacturer: syz [ 1616.754817][ T22] usb 10-1: SerialNumber: syz [ 1616.761731][T17963] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1616.790324][T17963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.818670][T17963] usb 6-1: Product: syz [ 1616.823597][T17963] usb 6-1: Manufacturer: syz [ 1616.835629][T17963] usb 6-1: SerialNumber: syz [ 1616.843414][T17963] usb 6-1: config 0 descriptor?? [ 1616.917346][T21239] [ 1616.919747][T21239] ====================================================== [ 1616.926778][T21239] WARNING: possible circular locking dependency detected [ 1616.933822][T21239] 6.1.147-syzkaller #0 Not tainted [ 1616.938932][T21239] ------------------------------------------------------ [ 1616.945952][T21239] syz.7.4214/21239 is trying to acquire lock: [ 1616.952034][T21239] ffff888030ae7958 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 1616.961766][T21239] [ 1616.961766][T21239] but task is already holding lock: [ 1616.969144][T21239] ffff888075ac08e0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 1616.980036][T21239] [ 1616.980036][T21239] which lock already depends on the new lock. [ 1616.980036][T21239] [ 1616.990455][T21239] [ 1616.990455][T21239] the existing dependency chain (in reverse order) is: [ 1616.999460][T21239] [ 1616.999460][T21239] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 1617.008149][T21239] down_write+0x36/0x60 [ 1617.012830][T21239] process_measurement+0x33c/0x1a10 [ 1617.018559][T21239] ima_file_mmap+0x104/0x150 [ 1617.023769][T21239] __se_sys_remap_file_pages+0x53e/0x770 [ 1617.029934][T21239] do_syscall_64+0x4c/0xa0 [ 1617.034872][T21239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1617.041291][T21239] [ 1617.041291][T21239] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 1617.049280][T21239] __lock_acquire+0x2cf8/0x7c50 [ 1617.054764][T21239] lock_acquire+0x1b4/0x490 [ 1617.059802][T21239] down_read_killable+0x4c/0x340 [ 1617.065268][T21239] mmap_read_lock_killable+0x1d/0x60 [ 1617.071081][T21239] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1617.076813][T21239] do_user_addr_fault+0x2db/0xb10 [ 1617.082364][T21239] exc_page_fault+0x60/0x100 [ 1617.087493][T21239] asm_exc_page_fault+0x22/0x30 [ 1617.092891][T21239] fault_in_readable+0x13e/0x1f0 [ 1617.098358][T21239] fault_in_iov_iter_readable+0xbb/0x2e0 [ 1617.104552][T21239] generic_perform_write+0x1d2/0x560 [ 1617.110379][T21239] __generic_file_write_iter+0x172/0x430 [ 1617.116548][T21239] generic_file_write_iter+0xab/0x2e0 [ 1617.122452][T21239] vfs_write+0x44c/0x960 [ 1617.127221][T21239] ksys_write+0x143/0x240 [ 1617.132114][T21239] do_syscall_64+0x4c/0xa0 [ 1617.137072][T21239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1617.143510][T21239] [ 1617.143510][T21239] other info that might help us debug this: [ 1617.143510][T21239] [ 1617.153743][T21239] Possible unsafe locking scenario: [ 1617.153743][T21239] [ 1617.161193][T21239] CPU0 CPU1 [ 1617.166558][T21239] ---- ---- [ 1617.171921][T21239] lock(&sb->s_type->i_mutex_key#12); [ 1617.177398][T21239] lock(&mm->mmap_lock); [ 1617.184250][T21239] lock(&sb->s_type->i_mutex_key#12); [ 1617.192237][T21239] lock(&mm->mmap_lock); [ 1617.196570][T21239] [ 1617.196570][T21239] *** DEADLOCK *** [ 1617.196570][T21239] [ 1617.204710][T21239] 3 locks held by syz.7.4214/21239: [ 1617.209917][T21239] #0: ffff8880790ca368 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 1617.219182][T21239] #1: ffff888027ed0460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 1617.228080][T21239] #2: ffff888075ac08e0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 1617.239404][T21239] [ 1617.239404][T21239] stack backtrace: [ 1617.245316][T21239] CPU: 1 PID: 21239 Comm: syz.7.4214 Not tainted 6.1.147-syzkaller #0 [ 1617.253470][T21239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1617.263535][T21239] Call Trace: [ 1617.266816][T21239] [ 1617.269751][T21239] dump_stack_lvl+0x168/0x22e [ 1617.274465][T21239] ? load_image+0x3b0/0x3b0 [ 1617.278980][T21239] ? show_regs_print_info+0x12/0x12 [ 1617.284179][T21239] ? print_circular_bug+0x12b/0x1a0 [ 1617.289406][T21239] check_noncircular+0x274/0x310 [ 1617.294351][T21239] ? add_chain_block+0x940/0x940 [ 1617.299289][T21239] ? lockdep_lock+0xdc/0x1e0 [ 1617.303877][T21239] ? __lock_acquire+0x12e5/0x7c50 [ 1617.308913][T21239] ? _find_first_zero_bit+0xcf/0x100 [ 1617.314228][T21239] __lock_acquire+0x2cf8/0x7c50 [ 1617.319096][T21239] ? verify_lock_unused+0x140/0x140 [ 1617.324306][T21239] ? verify_lock_unused+0x140/0x140 [ 1617.329511][T21239] ? memset+0x1e/0x40 [ 1617.333523][T21239] lock_acquire+0x1b4/0x490 [ 1617.338052][T21239] ? mmap_read_lock_killable+0x1d/0x60 [ 1617.343529][T21239] ? read_lock_is_recursive+0x10/0x10 [ 1617.348912][T21239] ? cmp_ex_search+0x1a/0x70 [ 1617.353515][T21239] ? bsearch+0x8a/0xb0 [ 1617.357593][T21239] ? fault_in_readable+0x13e/0x1f0 [ 1617.362709][T21239] ? search_extable+0x8c/0xd0 [ 1617.367390][T21239] ? trim_init_extable+0x3b0/0x3b0 [ 1617.372506][T21239] ? mmap_read_lock_killable+0x1d/0x60 [ 1617.377975][T21239] down_read_killable+0x4c/0x340 [ 1617.382918][T21239] ? mmap_read_lock_killable+0x1d/0x60 [ 1617.388384][T21239] mmap_read_lock_killable+0x1d/0x60 [ 1617.393685][T21239] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1617.398888][T21239] do_user_addr_fault+0x2db/0xb10 [ 1617.403935][T21239] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1617.409183][T21239] exc_page_fault+0x60/0x100 [ 1617.413792][T21239] asm_exc_page_fault+0x22/0x30 [ 1617.418658][T21239] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 1617.424391][T21239] Code: 78 eb c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 57 eb c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 3a eb [ 1617.444011][T21239] RSP: 0018:ffffc9000da07a90 EFLAGS: 00050287 [ 1617.450076][T21239] RAX: ffffffff81bbdb89 RBX: 0000000000001000 RCX: 0000000000080000 [ 1617.458054][T21239] RDX: ffffc90016890000 RSI: 0000000000074f9a RDI: 0000000000074f9b [ 1617.466033][T21239] RBP: 0000000000000000 R08: ffff888055f35940 R09: 0000000000000002 [ 1617.474016][T21239] R10: 0000000000000006 R11: 0000000000000002 R12: 000020000044c000 [ 1617.481983][T21239] R13: dffffc0000000000 R14: 000020000044a240 R15: 000020000044b000 [ 1617.489966][T21239] ? fault_in_readable+0x139/0x1f0 [ 1617.495089][T21239] fault_in_iov_iter_readable+0xbb/0x2e0 [ 1617.500731][T21239] generic_perform_write+0x1d2/0x560 [ 1617.506021][T21239] ? atime_needs_update+0x780/0x780 [ 1617.511237][T21239] ? generic_file_direct_write+0x660/0x660 [ 1617.517049][T21239] ? __file_remove_privs+0x5b0/0x5b0 [ 1617.522336][T21239] ? preempt_count_add+0x8d/0x190 [ 1617.527363][T21239] ? rwsem_write_trylock+0x12f/0x1b0 [ 1617.532654][T21239] ? clear_nonspinnable+0x60/0x60 [ 1617.537686][T21239] ? generic_write_checks_count+0x3d9/0x4c0 [ 1617.543591][T21239] __generic_file_write_iter+0x172/0x430 [ 1617.549227][T21239] generic_file_write_iter+0xab/0x2e0 [ 1617.554606][T21239] vfs_write+0x44c/0x960 [ 1617.558870][T21239] ? file_end_write+0x250/0x250 [ 1617.563755][T21239] ? __fget_files+0x44a/0x4d0 [ 1617.568443][T21239] ? __fdget_pos+0x2ae/0x360 [ 1617.573040][T21239] ? ksys_write+0x71/0x240 [ 1617.577465][T21239] ksys_write+0x143/0x240 [ 1617.581809][T21239] ? __ia32_sys_read+0x80/0x80 [ 1617.586578][T21239] ? lockdep_hardirqs_on+0x94/0x140 [ 1617.591795][T21239] do_syscall_64+0x4c/0xa0 [ 1617.596219][T21239] ? clear_bhb_loop+0x60/0xb0 [ 1617.600898][T21239] ? clear_bhb_loop+0x60/0xb0 [ 1617.605577][T21239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1617.611482][T21239] RIP: 0033:0x7f012078e9a9 [ 1617.615922][T21239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1617.635531][T21239] RSP: 002b:00007f01205ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1617.643941][T21239] RAX: ffffffffffffffda RBX: 00007f01209b5fa0 RCX: 00007f012078e9a9 [ 1617.651918][T21239] RDX: 000000000208e24b RSI: 0000200000000240 RDI: 0000000000000004 [ 1617.659894][T21239] RBP: 00007f0120810d69 R08: 0000000000000000 R09: 0000000000000000 [ 1617.667887][T21239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1617.675892][T21239] R13: 0000000000000000 R14: 00007f01209b5fa0 R15: 00007ffeb6cc0708 [ 1617.683912][T21239] [ 1617.699419][ T22] usb 10-1: 0:2 : does not exist [ 1617.732087][ T22] usb 10-1: USB disconnect, device number 112 [ 1617.755171][ T9231] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 1617.865192][ T4330] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1617.956479][ T9231] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1617.966470][T21155] udevd[21155]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1617.984809][ T9231] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1617.997280][ T9231] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1618.007052][ T9231] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1618.018332][ T9231] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1618.031142][ T9231] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1618.040890][ T9231] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1618.049107][ T9231] usb 9-1: Product: syz [ 1618.053542][ T9231] usb 9-1: Manufacturer: syz [ 1618.058311][ T4330] usb 5-1: Using ep0 maxpacket: 32 [ 1618.065275][ T4330] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1618.074780][ T4330] usb 5-1: config 0 has no interface number 0 [ 1618.082314][ T9231] cdc_wdm 9-1:1.0: skipping garbage [ 1618.087834][ T4330] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1618.105297][ T9231] cdc_wdm 9-1:1.0: skipping garbage [ 1618.115465][ T4330] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1618.125574][ T9231] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1618.131491][ T9231] cdc_wdm 9-1:1.0: Unknown control protocol [ 1618.138927][ T4330] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1618.147940][ T4330] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1618.157054][ T4330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.165060][ T4330] usb 5-1: Product: syz [ 1618.169315][ T4330] usb 5-1: Manufacturer: syz [ 1618.173925][ T4330] usb 5-1: SerialNumber: syz [ 1618.183785][ T4330] usb 5-1: config 0 descriptor?? [ 1618.241725][ T22] usb 6-1: USB disconnect, device number 109 [ 1618.345441][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1618.345566][T17963] usb 9-1: USB disconnect, device number 101 [ 1618.352071][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1618.352110][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1618.593375][ T4330] appletouch 5-1:0.85: Geyser mode initialized. [ 1618.600528][ T4330] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input220 [ 1618.798161][T17963] usb 5-1: USB disconnect, device number 89 [ 1618.809807][T17963] appletouch 5-1:0.85: input: appletouch disconnected