last executing test programs: 10.19554296s ago: executing program 4 (id=4381): socket$nl_route(0x10, 0x3, 0x0) (async) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1e5}], 0x1}}], 0x3, 0x2090) mknod$loop(&(0x7f0000000540)='./file0\x00', 0x6090, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) syz_open_procfs$userns(r3, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x2, &(0x7f0000001000)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000a80), &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x4) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', 0x0, &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xb3\x05\x06\xcd\x8b', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000fc0)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='u\x00\x00']}) syz_emit_ethernet(0xb6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c20000020180c200000388a8110081002500880000000000000000000000020000000000000000000000000000000000010000000001000e489ef9fceb1f24f1b777e21fad84a10a8207800819ac742d5d8d69dd44effb5ba93fadb4d0bbc9e7b8237b5ee964bcdb65fb5e04bf8776c7b28549caeeba0b6df8c9c1be7f69b4397c3860b81e56eaeef1f35ca914684bcddc02880b653f973c6a1d40fd51d6ddd93ed419f961047ef297b694a0556015"], &(0x7f0000000740)={0x0, 0x2, [0x129, 0x3fa, 0xfed, 0x100]}) (async) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0x8, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7fd, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) 8.923811847s ago: executing program 4 (id=4388): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000003c000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) readv(r0, &(0x7f0000003180), 0x0) 8.767280983s ago: executing program 3 (id=4390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010026b87aeabbc900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf0000000) 8.590559191s ago: executing program 3 (id=4391): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = io_uring_setup(0x12b1, &(0x7f0000000200)={0x0, 0x9697, 0x80, 0xa, 0x20c}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) r3 = socket$nl_route(0x10, 0x3, 0x0) close_range(r3, r3, 0x6) fanotify_init(0x200, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x521, 0x80000001}, 0x0, 0x0) 7.851540456s ago: executing program 4 (id=4396): r0 = socket$inet6(0xa, 0x800, 0x101) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0xb, 0x284}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0xe63, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000b80)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000000ac0), 0x0, 0x8000}}], 0x1, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r9 = socket$inet(0x2, 0x3, 0x9) recvmmsg(r9, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000080)={0x2000}) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r10, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r10, 0x1) 7.253360151s ago: executing program 3 (id=4398): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='LINE \'\' '], 0xbb) close(r0) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x200000, 0x0, 0x1, 0x1, 0x0, 0x3a}, 0x20) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) sched_setattr(r3, 0x0, 0x0) r4 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000400)="6a82ebbe3f256d41cf768491f2a65957dbe29ecd923853892c2d2f829bcf64e31cd4205a7a9761e08a1ec90b861310d04d157c3b32e1ff8467446755a854ce0266d052dca92541855198984e462c07b356088f701dc4474ccb68f6f69bdf74c29687277505233fa11b9f58690eec4a52fd33c1d974d9dd89969d0fb6db0191869385e6fdf15d11f623ebcc559195629be7de34aff2e9f762c71ca609d318129107d7c238b44d604fa029ac0867b2aecc4859a90039df530718d0a37e23666056cf07608452e2061e05dae130ef5c90ce25bd9ee624b85a", 0xd7}, {&(0x7f0000000600)="1afc43da1c86f391f718c7c5c4650adf94e5301e4d0f5109e240c2b83636f09ea8fc71292a7e0cc131304d6c88bd11d8eb5a84262be6d321580cedad27ad473c2687c3378c562998ef164423052881aaf49679b527a25905f109a5d479417512a2b651c47c3135a2b21abbce7575e8fa911298523dcb83c7fe80731bd48df881e33692d1482976e233a61b5e73c0f8b7eef2adf57c20cfc53f5009a5703c257678b656a2dd45f5296daa44", 0xab}, {&(0x7f00000006c0)="847f819af3f2c7c376f9cf8c79440f7267a1c6785a1232e7b840fd5d7cdccf60a70a24561c669b1b24726ed1351ed1f7e43cd7fd316cd3d09a3b0dc9411325d4481613ad88e7a3c59f2aebe46b77db9a3c04f85b84f505151f58a2c57ba1286644232c75a6b8c652711c34a437d58b0a723b56b115b9145361c9bd2a6661a4f85dceb505ac9e7e4588709f81aac57397aa3323b40184876399acf08519fbe9aa5a38d93e9a34d5131f13a0438107f010435eaa64ac1185f651c8c088fc2a9ac2d804dc254ceeb2dcc5fefd15e6b1f0d9ae8a5ffae42d2aa84e6e863da5e05da4037c12d5dcec29230b14afc5de6ee7a0ed273989c211d898", 0xf8}, {&(0x7f0000000100)="bae76a85fa5bef81feca67732a5a72649f8c43bb493decd52aefc2f42e94c9", 0x1f}, {&(0x7f00000007c0)="bac9610b00ef0da462c588f048b11b21c4289bc99d01bf35902932a34be774f574c0ec973ca5e5e97bbfd0035c1581a21e9dbb7157cceeaf196d374b8528dc427c6dfe86085989f1e791edf3540795af7304f083eb2d008db849ce2a3455e9f198252b331f43bd63c4865dad0bc9f60aba68bcc9004cd86c0df44d4de8f5f263b0e378718b6412119152ac203893153d7413b65675341d18b6bac8a4172b6708456dfaf0d744db83f920d6ff330882403260", 0xb2}, {&(0x7f0000000880)="014e4f766dbe9ef72e4a826e6f01b19ae4e3211013fec9a77b73ebcd8da5e02a04d50d684252bcfa2bf4e9e497694ae2beb33fe9b4329de7f9c58f61acfb0dfda6d3c24698a8cd0d8c1f6d02b9a444ceff6e7d2c8e78f6924a49948648c1e2ee3682deed8c3c6b24efcc7995842052b790aeb5b2b1f9f7e29cf01965b1e5630f", 0x80}, {&(0x7f0000000900)="c6c1b5fa71075ab88417223bf3f2c0e177dde4301a12a12052efd59f4d80b49b23cf4a2ef1b184717fd3acfba741496629d46d4099058a07c3900a670b1c752a36952199bad40b09308eb1d3dcaed4c010d2947838cd60693e4b207d6ae7e80817a77204c2fe0fb666db57d982eadbd5df092ce5d9bc633d9350df3646895a94984d82a0bc5e6ee4", 0x88}, {&(0x7f00000009c0)="591686aeeccdbcf52f3e78d810f5051935d44ee668a873adabba2c956fd477e8ddba699e09e27b61665c3dadfbdaf4dac8f5466ac4c5e006fa5d6ff5f0292385ffea23f2c275235da7ca2372d15edb682ea3c9e49ba7d4dce77cd0f029f12a4c3ef5c4126e071097511aeacd3a613572488c4152c08e4aa7e9179d845b9f600cd5e50ebd63fcf01c275e10949e74cd550e111de182d6a571ad0793c45ceab3fad58f5a251761acc092df0cd3489a1a9c49fd6677da905b77b9280dfbffc7", 0xbe}, {&(0x7f0000000a80)="0df105f1e907987dae3c7729a7ecff08a0cb5eee2d471d1aa1150fddd73dd228d6f4d8d099049bc60c58ad82ba565e42078378931fad33603ac3aefb62be84ff7a04ed1e1bf5", 0x46}], 0x9, &(0x7f0000000c40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90, 0x4000000}}, {{&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d80)="ad9200012631e2d2451510a2e7057f1a56c60456a174", 0x16}, {&(0x7f0000000dc0)="dd1c23356c15006f3f1b26495bd5f083ed209d8db02ff03c4f0899e73d077337e3926dd9518afd908ead530355b66a82311dcdb94875d8f4357e2853cd9841e2ea48cf353d184078942c30e68f225fba4ad8652e436c2f2abc3dbbd5ee2feb4e8939a66212f87b970997f3910681e4a416578ee84abd0c0765d02b", 0x7b}, {&(0x7f0000000e40)="c1f005f9127b450ca262828a68be3a2a1ab83c61962135c270e6a2184113a27427345c6c28379620572661ed3ee1f326b62b1e04a798f6675a84019579dc4978ead54c563061e42ffce30c8276af062bc4ae2123e8dda37688b49f9ec7e83252e824637f7759c35a57392d1ba70a4b4a84abd4a0139b4abf44815538d53b9533d5eab59a61273faacd0a924eec3ec68b3c0a222726d0ca53465d8ca0a9bdd7d2a56ba9b9413788ba720ecf8a5c986f23f6711c042e2196723a3ca3905f049a59e74f32f92dc449d575fb767cdb6d9dd1d2bc36e8bb42b73d", 0xd8}], 0x3, 0x0, 0x0, 0x24000000}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000f80)="78df3f2787b1b5c47819cb6f3b57124e9a607b13a6c366155bc93596ab0f97aad16d88a23ccff2167f86b78dbb88ba12f858c2721f1c00a5e7567a6464d389ab7e21f5b5ca548a281e7346cf83d4b7f89e97621026d078739b661cf24776ed14fdb08394a7f70031b34bae32cd5611cc67a22c20f2d3714cd691ddd14bdb57ac98803a9d495315990fad3bad8e4d489b8ff562f31bef1bb796cb8afc04ff2d4c1d701d72cf3122b74f457813c7b317ff", 0xb0}, {&(0x7f0000001040)="53c839f312338adb417d90c1fab9783606f6", 0x12}, {&(0x7f0000001080)="e97c6dbcdab2b375432953f19a773460321005b7507540ad20cd3da5b690e66d9efd5fd4e13244632b3cffcc1d4f26374cafd9591e2758b8acfb9459acc2fbc0a9a48ecfa96fc715edc8e7d80fc5b829fc5cac38498ce110df290dcf16fc79d1988ce6034ff384709f07ebb0f60a6734f96ace87c2f8a0fa8a8c84f359ae3f5f5f322fdf93a740b9d63b5eb08bb8837676a7adec3295cc338fa72e56a22d525c17b1bdabdb9233f91c6380af1b07d0c222b944c0ad1263b32fea2d95df2cfd8b0513f273f2819ec8933b987cb0ebc73dce6b1a64e5246da0c2f0e3a0d50f16d2e3b5cf3194fa6688d01f05", 0xeb}, {&(0x7f0000001180)="a90c8d9b9ca975ace313e3073f8803cf65b8c155adc41f2006", 0x19}], 0x4, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r1]}}, @rights={{0x24, 0x1, 0x1, [r2, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01, r4}}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}], 0x100, 0x8000}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000017c0)="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", 0xfe}, {&(0x7f00000018c0)="1473d7cbaa992c7d851aa6", 0xb}, {&(0x7f0000001900)="20ccb6c16ee1c8c1fa39e1d42279839f81e478901ab15f9808551ff7271aa72cb77d502f0943b4411f2cfe1935a02d3d19588eea915dc3280632dd5fedf3717882a676f7158d8922ae4e91c47249ab6708189ffe07c9", 0x56}, {&(0x7f0000001980)="637ee90b9deeb7c90fef360949fb96372b246d3f003c26fa3822944dce89d746d9647258ccde007557af5d58c7805af6d18d8ae97a676aa0b2d5683a64556d452579a3fe4a82a91fae9988e98e5df10eb54c8011fc1c43dd1ff6a079eb0505c7f901f5506c819ce91a73202e3ef2c601f3dd891ba7804d68e8c0a9e42d1dd5c311021e0d76a01085ee16cda24ac03f", 0x8f}], 0x4, 0x0, 0x0, 0x4000000}}], 0x4, 0x20000040) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200000, 0x2, 0x0, 0x0, 0x96, 0x8}, 0x5b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004cf000440000400000069078ac1414feac1e000144140a01ac1414bb000000007f00000100000001860600000003000000040000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000590780000"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) poll(&(0x7f0000000000)=[{r10}], 0x1, 0x7780) syz_usb_disconnect(r9) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000500)={0x1, 0x0, [{0x40000070, 0x0, 0x1}]}) 6.061471713s ago: executing program 2 (id=4399): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) fstat(0xffffffffffffffff, &(0x7f0000000780)) getuid() 5.922054452s ago: executing program 0 (id=4400): timer_create(0x0, &(0x7f0000000080)={0x0, 0x22, 0x4, @thr={&(0x7f0000001800)="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", &(0x7f00000000c0)="8a9cf0bd9423233a4585b0188314266923462b55d50b0439ec515f94563ba54fa6334a22d5c0d9f728b4f34ca7286fdd9b16cd1edb8771119919bf496f78e741b84406a285aa1eb8e85730da37a4509f6234300977b0716e"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf64(r0, 0x0, 0x51) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, r0, 0x9000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) fstat(0xffffffffffffffff, &(0x7f0000000780)) getuid() 5.857055025s ago: executing program 1 (id=4401): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x200800, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) syz_fuse_handle_req(r0, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x69015a58, 0xdcd, 0xff, 0x8, 0x3, 0x0, 0x0, 0x40, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipmr_delroute={0x30, 0x19, 0x1, 0x70bd2b, 0x25dfdc01, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x21, 0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000004) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0xc, 0x0, 0x0, {0x800000201005, 0x7, 0x0, 0x8, 0x3, 0x8001, 0x3, 0x35741061, 0x3, 0x2000, 0x9e7, 0xffffffffffffffff, 0x0, 0x40, 0xd}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.651630759s ago: executing program 0 (id=4402): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='LINE \'\' '], 0xbb) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x200000, 0x0, 0x1, 0x1, 0x0, 0x3a}, 0x20) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) sched_setattr(r3, 0x0, 0x0) r4 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000400)="6a82ebbe3f256d41cf768491f2a65957dbe29ecd923853892c2d2f829bcf64e31cd4205a7a9761e08a1ec90b861310d04d157c3b32e1ff8467446755a854ce0266d052dca92541855198984e462c07b356088f701dc4474ccb68f6f69bdf74c29687277505233fa11b9f58690eec4a52fd33c1d974d9dd89969d0fb6db0191869385e6fdf15d11f623ebcc559195629be7de34aff2e9f762c71ca609d318129107d7c238b44d604fa029ac0867b2aecc4859a90039df530718d0a37e23666056cf07608452e2061e05dae130ef5c90ce25bd9ee624b85a", 0xd7}, {&(0x7f0000000600)="1afc43da1c86f391f718c7c5c4650adf94e5301e4d0f5109e240c2b83636f09ea8fc71292a7e0cc131304d6c88bd11d8eb5a84262be6d321580cedad27ad473c2687c3378c562998ef164423052881aaf49679b527a25905f109a5d479417512a2b651c47c3135a2b21abbce7575e8fa911298523dcb83c7fe80731bd48df881e33692d1482976e233a61b5e73c0f8b7eef2adf57c20cfc53f5009a5703c257678b656a2dd45f5296daa44", 0xab}, {&(0x7f00000006c0)="847f819af3f2c7c376f9cf8c79440f7267a1c6785a1232e7b840fd5d7cdccf60a70a24561c669b1b24726ed1351ed1f7e43cd7fd316cd3d09a3b0dc9411325d4481613ad88e7a3c59f2aebe46b77db9a3c04f85b84f505151f58a2c57ba1286644232c75a6b8c652711c34a437d58b0a723b56b115b9145361c9bd2a6661a4f85dceb505ac9e7e4588709f81aac57397aa3323b40184876399acf08519fbe9aa5a38d93e9a34d5131f13a0438107f010435eaa64ac1185f651c8c088fc2a9ac2d804dc254ceeb2dcc5fefd15e6b1f0d9ae8a5ffae42d2aa84e6e863da5e05da4037c12d5dcec29230b14afc5de6ee7a0ed273989c211d898", 0xf8}, {&(0x7f0000000100)="bae76a85fa5bef81feca67732a5a72649f8c43bb493decd52aefc2f42e94c9", 0x1f}, {&(0x7f00000007c0)="bac9610b00ef0da462c588f048b11b21c4289bc99d01bf35902932a34be774f574c0ec973ca5e5e97bbfd0035c1581a21e9dbb7157cceeaf196d374b8528dc427c6dfe86085989f1e791edf3540795af7304f083eb2d008db849ce2a3455e9f198252b331f43bd63c4865dad0bc9f60aba68bcc9004cd86c0df44d4de8f5f263b0e378718b6412119152ac203893153d7413b65675341d18b6bac8a4172b6708456dfaf0d744db83f920d6ff330882403260", 0xb2}, {&(0x7f0000000880)="014e4f766dbe9ef72e4a826e6f01b19ae4e3211013fec9a77b73ebcd8da5e02a04d50d684252bcfa2bf4e9e497694ae2beb33fe9b4329de7f9c58f61acfb0dfda6d3c24698a8cd0d8c1f6d02b9a444ceff6e7d2c8e78f6924a49948648c1e2ee3682deed8c3c6b24efcc7995842052b790aeb5b2b1f9f7e29cf01965b1e5630f", 0x80}, {&(0x7f0000000900)="c6c1b5fa71075ab88417223bf3f2c0e177dde4301a12a12052efd59f4d80b49b23cf4a2ef1b184717fd3acfba741496629d46d4099058a07c3900a670b1c752a36952199bad40b09308eb1d3dcaed4c010d2947838cd60693e4b207d6ae7e80817a77204c2fe0fb666db57d982eadbd5df092ce5d9bc633d9350df3646895a94984d82a0bc5e6ee4", 0x88}, {&(0x7f00000009c0)="591686aeeccdbcf52f3e78d810f5051935d44ee668a873adabba2c956fd477e8ddba699e09e27b61665c3dadfbdaf4dac8f5466ac4c5e006fa5d6ff5f0292385ffea23f2c275235da7ca2372d15edb682ea3c9e49ba7d4dce77cd0f029f12a4c3ef5c4126e071097511aeacd3a613572488c4152c08e4aa7e9179d845b9f600cd5e50ebd63fcf01c275e10949e74cd550e111de182d6a571ad0793c45ceab3fad58f5a251761acc092df0cd3489a1a9c49fd6677da905b77b9280dfbffc7", 0xbe}, {&(0x7f0000000a80)="0df105f1e907987dae3c7729a7ecff08a0cb5eee2d471d1aa1150fddd73dd228d6f4d8d099049bc60c58ad82ba565e42078378931fad33603ac3aefb62be84ff7a04ed1e1bf5", 0x46}], 0x9, &(0x7f0000000c40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x90, 0x4000000}}, {{&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d80)="ad9200012631e2d2451510a2e7057f1a56c60456a174", 0x16}, {&(0x7f0000000dc0)="dd1c23356c15006f3f1b26495bd5f083ed209d8db02ff03c4f0899e73d077337e3926dd9518afd908ead530355b66a82311dcdb94875d8f4357e2853cd9841e2ea48cf353d184078942c30e68f225fba4ad8652e436c2f2abc3dbbd5ee2feb4e8939a66212f87b970997f3910681e4a416578ee84abd0c0765d02b", 0x7b}, {&(0x7f0000000e40)="c1f005f9127b450ca262828a68be3a2a1ab83c61962135c270e6a2184113a27427345c6c28379620572661ed3ee1f326b62b1e04a798f6675a84019579dc4978ead54c563061e42ffce30c8276af062bc4ae2123e8dda37688b49f9ec7e83252e824637f7759c35a57392d1ba70a4b4a84abd4a0139b4abf44815538d53b9533d5eab59a61273faacd0a924eec3ec68b3c0a222726d0ca53465d8ca0a9bdd7d2a56ba9b9413788ba720ecf8a5c986f23f6711c042e2196723a3ca3905f049a59e74f32f92dc449d575fb767cdb6d9dd1d2bc36e8bb42b73d", 0xd8}], 0x3, 0x0, 0x0, 0x24000000}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000f80)="78df3f2787b1b5c47819cb6f3b57124e9a607b13a6c366155bc93596ab0f97aad16d88a23ccff2167f86b78dbb88ba12f858c2721f1c00a5e7567a6464d389ab7e21f5b5ca548a281e7346cf83d4b7f89e97621026d078739b661cf24776ed14fdb08394a7f70031b34bae32cd5611cc67a22c20f2d3714cd691ddd14bdb57ac98803a9d495315990fad3bad8e4d489b8ff562f31bef1bb796cb8afc04ff2d4c1d701d72cf3122b74f457813c7b317ff", 0xb0}, {&(0x7f0000001040)="53c839f312338adb417d90c1fab9783606f6", 0x12}, {&(0x7f0000001080)="e97c6dbcdab2b375432953f19a773460321005b7507540ad20cd3da5b690e66d9efd5fd4e13244632b3cffcc1d4f26374cafd9591e2758b8acfb9459acc2fbc0a9a48ecfa96fc715edc8e7d80fc5b829fc5cac38498ce110df290dcf16fc79d1988ce6034ff384709f07ebb0f60a6734f96ace87c2f8a0fa8a8c84f359ae3f5f5f322fdf93a740b9d63b5eb08bb8837676a7adec3295cc338fa72e56a22d525c17b1bdabdb9233f91c6380af1b07d0c222b944c0ad1263b32fea2d95df2cfd8b0513f273f2819ec8933b987cb0ebc73dce6b1a64e5246da0c2f0e3a0d50f16d2e3b5cf3194fa6688d01f05", 0xeb}, {&(0x7f0000001180)="a90c8d9b9ca975ace313e3073f8803cf65b8c155adc41f2006", 0x19}], 0x4, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01, r4}}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}], 0x100, 0x8000}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000017c0)="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", 0xfe}, {&(0x7f00000018c0)="1473d7cbaa992c7d851aa6", 0xb}, {&(0x7f0000001900)="20ccb6c16ee1c8c1fa39e1d42279839f81e478901ab15f9808551ff7271aa72cb77d502f0943b4411f2cfe1935a02d3d19588eea915dc3280632dd5fedf3717882a676f7158d8922ae4e91c47249ab6708189ffe07c9", 0x56}, {&(0x7f0000001980)="637ee90b9deeb7c90fef360949fb96372b246d3f003c26fa3822944dce89d746d9647258ccde007557af5d58c7805af6d18d8ae97a676aa0b2d5683a64556d452579a3fe4a82a91fae9988e98e5df10eb54c8011fc1c43dd1ff6a079eb0505c7f901f5506c819ce91a73202e3ef2c601f3dd891ba7804d68e8c0a9e42d1dd5c311021e0d76a01085ee16cda24ac03f", 0x8f}], 0x4, 0x0, 0x0, 0x4000000}}], 0x4, 0x20000040) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200000, 0x2, 0x0, 0x0, 0x96, 0x8}, 0x5b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004cf000440000400000069078ac1414feac1e000144140a01ac1414bb000000007f00000100000001860600000003000000040000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000590780000"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) poll(&(0x7f0000000000)=[{r10}], 0x1, 0x7780) syz_usb_disconnect(r9) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000500)={0x1, 0x0, [{0x40000070, 0x0, 0x1}]}) 5.641610173s ago: executing program 1 (id=4403): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) unshare(0x400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) 5.525428681s ago: executing program 4 (id=4404): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000380)={0x2, 0x1, @local}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000040)=0x3, 0x4) r3 = syz_io_uring_complete(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) syz_create_resource$binfmt(&(0x7f0000000000)='./file4\x00') recvmsg$unix(r4, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/114, 0x72}], 0x1}, 0x40002042) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES16=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x48844}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000340)=[{0x1c, '\x00', @buffer={"21e109bbd40fa147332cff67a00000000000000004903e9583d9fa9372c5b05f", 0x20}, 0x4}, {0x2, '\x00', @buffer={"f5afd87efbed0c831dd3fe7de8e6d7623ef47a44b0c02d426b799f77205767bd", 0x20}, 0x2}]}) 5.267216482s ago: executing program 1 (id=4405): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000540)={0x80, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315ee9b6abfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9214a638fe7750bec83bf6ed5b67213fa7d604003fd154ed29e1ff379742c3f0b47faa357d70ee438f901d7645c3f82b76f2ad8e2ac090242081f9635e731a5bfcf142f45295174546180000000079b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bd94899e6b87de5f79d383d040079e0c4898740bbe6e1c1fd3eecfdfe756bc00d08e36655c0000000000000000000000000000000000000000000000000000f300"}) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x82, 0x0, 0x4, 0x101, 0x0, 0x0, 0x0}) sched_setattr(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 5.077297616s ago: executing program 2 (id=4406): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000003c000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) readv(r0, &(0x7f0000003180)=[{0x0}], 0x1) 4.483206913s ago: executing program 1 (id=4407): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000010c0)='fd\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) r3 = socket$alg(0x26, 0x5, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r6, @ANYBLOB="08000b00e000000108000200"], 0x60}}, 0x814) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r7 = accept(r3, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r7, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r9, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x26, 0x0, 0x0, 0x0, 0xfffffffffffffd52}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000003140)=""/153, 0x99}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x2}, 0x9}], 0x4, 0x12040, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 4.468023215s ago: executing program 3 (id=4408): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x1, 0x5}, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080), 0x4) socket(0x22, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) symlink(0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r7, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r11, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r6, @ANYRESDEC=r3, @ANYRESHEX=r8], 0xfffffdef}}, 0x10) recvfrom(r9, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x210001, 0x4) 3.997640467s ago: executing program 2 (id=4409): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f00000001c0)={0x5, 0x8000, 0x6}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(r6, &(0x7f0000000640)='\x00', 0x89901) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpeername(r3, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000200)=0x80) close(r7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x4000, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000000c0)) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r9, 0x0, 0x0, &(0x7f0000000000)="1b81012d4f11f82b1068d3bb1651a59440417bb2c07a6d8e07e5a0db41e54d820e87b1b06af4e693", 0x28) 2.886630391s ago: executing program 0 (id=4410): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xbe7, &(0x7f0000000400)={0x0, 0xe7a8, 0x80, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25022000cb", @ANYRES32=r7, @ANYBLOB="0800040064010102080001007f00000108000200ac14143d080002007f00000108000000e00000010800090003"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000002060108000200000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001400078008000640ffff"], 0x64}}, 0x0) r11 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(r11, 0xc010644f, &(0x7f0000000140)={{0x18, 0x0, 0x0}}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r11, 0xc1105511, &(0x7f0000000100)={{0x8, 0x2, 0x9, 0x61, 'syz0\x00', 0x7}, 0x2, 0x30, 0x0, 0x0, 0x4, 0x4, 'syz0\x00', &(0x7f00000000c0)=['[&,()+!\x00', '^%\x00', '\x00', '\x00'], 0xd}) io_uring_enter(r2, 0x3d0e, 0x4be, 0x43, 0x0, 0x0) 2.608625529s ago: executing program 2 (id=4411): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x15, 0x1, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) pivot_root(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x640100, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000402, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x71, 0x3, 0x8, 0xb47, 0xfffffffffffffffe, 0x8, 0x0, 0x3}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa801, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0x12a20e5527f00a0f, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r8, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r7, 0x3b8b, &(0x7f00000003c0)={0x10, 0x1, r9}) sendmsg$NFT_BATCH(r2, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[], 0x198}, 0x1, 0x0, 0x0, 0x2400c051}, 0x4) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x3, r9, 0x0, 0x3, 0x8e, &(0x7f00000002c0)="11eada93e4f354cbe0d23f7e762545795646c92f01ac2cc25f422d6e6e527d830b1da1928245f64e5282a1f69bb9329abb8eb9993534ef6464f63f8e8741064f14587617fd95fb11f091aa9d3ba52f5c49316d5efeef3868da0e1bc64a347dbac75a136d5699a93adf6d3c16a207b71414a7c61afda9ff90089bbb4e8dec04489d96cfb01faa68de30d3902469b6"}) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r10, &(0x7f0000001600)=""/4103, 0x1007, 0x97) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x4}], 0x2, 0x0, 0x0) 1.991275284s ago: executing program 4 (id=4412): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x2082, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0) syz_io_uring_setup(0x587f, &(0x7f0000000240)={0x0, 0x7c06, 0x4, 0x1, 0x2c1, 0x0, r4}, 0x0, &(0x7f00000000c0)) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x900, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000140)={0x8, 'nicvf0\x00', {'team0\x00'}, 0x1000}) r6 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48800}, 0xc000) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') readlinkat(r8, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)=""/207, 0xcf) r9 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0x1, &(0x7f0000000340)='\x00', 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r7, 0x1000) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1, 0x20, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1.292717652s ago: executing program 3 (id=4413): inotify_init() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) socket$inet(0x2, 0x2, 0x73) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x200000}, 0x0, 0x0) 616.59273ms ago: executing program 0 (id=4414): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r6], 0x50}}, 0x2) 550.412781ms ago: executing program 1 (id=4415): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) unshare(0x400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) 311.809255ms ago: executing program 2 (id=4416): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) unshare(0x400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) 296.846741ms ago: executing program 0 (id=4417): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000540)={0x80, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315ee9b6abfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9214a638fe7750bec83bf6ed5b67213fa7d604003fd154ed29e1ff379742c3f0b47faa357d70ee438f901d7645c3f82b76f2ad8e2ac090242081f9635e731a5bfcf142f45295174546180000000079b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bd94899e6b87de5f79d383d040079e0c4898740bbe6e1c1fd3eecfdfe756bc00d08e36655c0000000000000000000000000000000000000000000000000000f300"}) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x82, 0x0, 0x4, 0x101, 0x0, 0x0, 0x0}) sched_setattr(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 283.782785ms ago: executing program 1 (id=4418): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$usbmon(0x0, 0xfffffffffffffffe, 0x4c4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000280)=""/180, 0xb4}], 0x1, &(0x7f0000000340)=""/215, 0xd7}, 0x800}, {{&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000000440)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/63, 0x3f}, 0x2}, {{&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001680)=""/197, 0xc5}, {&(0x7f0000000580)=""/64, 0x40}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/20, 0x14}, {&(0x7f0000001880)=""/124, 0x7c}, {&(0x7f0000001900)=""/69, 0x45}, {&(0x7f0000001980)=""/26, 0x1a}, {&(0x7f00000019c0)=""/201, 0xc9}, {&(0x7f0000001ac0)=""/88, 0x58}], 0x9, &(0x7f0000001c00)=""/27, 0x1b}, 0x9}, {{&(0x7f0000001c40)=@nl, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001cc0)=""/105, 0x69}, {&(0x7f0000002cc0)=""/223, 0xdf}, {&(0x7f0000001e40)=""/84, 0x54}, {&(0x7f0000001ec0)=""/35, 0x23}, {&(0x7f00000035c0)=""/4102, 0x1006}, {&(0x7f0000002f00)=""/90, 0x5a}], 0x6}, 0x1}, {{&(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003080)=""/230, 0xe6}, {&(0x7f0000003180)=""/132, 0x84}, {&(0x7f0000003240)=""/36, 0x24}, {&(0x7f0000003280)=""/160, 0xa0}, {&(0x7f0000003340)=""/124, 0x7c}], 0x5, &(0x7f0000003440)}, 0xc7d}, {{&(0x7f0000001f40)=@nl=@unspec, 0x80, &(0x7f0000000140)=[{&(0x7f0000001fc0)=""/96, 0x60}, {&(0x7f0000002040)=""/222, 0xde}, {&(0x7f0000002140)=""/225, 0xe1}, {&(0x7f0000002240)=""/132, 0x84}], 0x4, &(0x7f0000002300)=""/204, 0xcc}, 0x1ff}, {{&(0x7f0000002400)=@pppol2tpv3, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002480)=""/9, 0x9}, {&(0x7f00000024c0)=""/193, 0xc1}, {&(0x7f00000025c0)=""/163, 0xa3}, {&(0x7f0000002680)=""/14, 0xe}, {&(0x7f00000026c0)=""/227, 0xe3}, {&(0x7f00000027c0)=""/99, 0x63}, {&(0x7f0000002840)=""/189, 0xbd}, {&(0x7f0000002900)}, {&(0x7f0000002940)=""/34, 0x22}, {&(0x7f0000002980)=""/115, 0x73}], 0xa, &(0x7f0000002ac0)=""/43, 0x2b}, 0x1}], 0x7, 0x10023, 0x0) close(0xffffffffffffffff) mlockall(0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0026}]}) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r9) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 261.882275ms ago: executing program 4 (id=4419): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000003c000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) readv(r0, &(0x7f0000003180)=[{0x0}], 0x1) 132.235899ms ago: executing program 2 (id=4420): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x200000, 0x0, 0x1, 0x1, 0x0, 0x3a}, 0x20) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) sched_setattr(r4, 0x0, 0x0) r5 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000400)="6a82ebbe3f256d41cf768491f2a65957dbe29ecd923853892c2d2f829bcf64e31cd4205a7a9761e08a1ec90b861310d04d157c3b32e1ff8467446755a854ce0266d052dca92541855198984e462c07b356088f701dc4474ccb68f6f69bdf74c29687277505233fa11b9f58690eec4a52fd33c1d974d9dd89969d0fb6db0191869385e6fdf15d11f623ebcc559195629be7de34aff2e9f762c71ca609d318129107d7c238b44d604fa029ac0867b2aecc4859a90039df530718d0a37e23666056cf07608452e2061e05dae130ef5c90ce25bd9ee624b85a", 0xd7}, {&(0x7f0000000600)="1afc43da1c86f391f718c7c5c4650adf94e5301e4d0f5109e240c2b83636f09ea8fc71292a7e0cc131304d6c88bd11d8eb5a84262be6d321580cedad27ad473c2687c3378c562998ef164423052881aaf49679b527a25905f109a5d479417512a2b651c47c3135a2b21abbce7575e8fa911298523dcb83c7fe80731bd48df881e33692d1482976e233a61b5e73c0f8b7eef2adf57c20cfc53f5009a5703c257678b656a2dd45f5296daa44", 0xab}, {&(0x7f00000006c0)="847f819af3f2c7c376f9cf8c79440f7267a1c6785a1232e7b840fd5d7cdccf60a70a24561c669b1b24726ed1351ed1f7e43cd7fd316cd3d09a3b0dc9411325d4481613ad88e7a3c59f2aebe46b77db9a3c04f85b84f505151f58a2c57ba1286644232c75a6b8c652711c34a437d58b0a723b56b115b9145361c9bd2a6661a4f85dceb505ac9e7e4588709f81aac57397aa3323b40184876399acf08519fbe9aa5a38d93e9a34d5131f13a0438107f010435eaa64ac1185f651c8c088fc2a9ac2d804dc254ceeb2dcc5fefd15e6b1f0d9ae8a5ffae42d2aa84e6e863da5e05da4037c12d5dcec29230b14afc5de6ee7a0ed273989c211d898", 0xf8}, {&(0x7f0000000100)="bae76a85fa5bef81feca67732a5a72649f8c43bb493decd52aefc2f42e94c9", 0x1f}, {&(0x7f00000007c0)="bac9610b00ef0da462c588f048b11b21c4289bc99d01bf35902932a34be774f574c0ec973ca5e5e97bbfd0035c1581a21e9dbb7157cceeaf196d374b8528dc427c6dfe86085989f1e791edf3540795af7304f083eb2d008db849ce2a3455e9f198252b331f43bd63c4865dad0bc9f60aba68bcc9004cd86c0df44d4de8f5f263b0e378718b6412119152ac203893153d7413b65675341d18b6bac8a4172b6708456dfaf0d744db83f920d6ff330882403260", 0xb2}, {&(0x7f0000000880)="014e4f766dbe9ef72e4a826e6f01b19ae4e3211013fec9a77b73ebcd8da5e02a04d50d684252bcfa2bf4e9e497694ae2beb33fe9b4329de7f9c58f61acfb0dfda6d3c24698a8cd0d8c1f6d02b9a444ceff6e7d2c8e78f6924a49948648c1e2ee3682deed8c3c6b24efcc7995842052b790aeb5b2b1f9f7e29cf01965b1e5630f", 0x80}, {&(0x7f0000000900)="c6c1b5fa71075ab88417223bf3f2c0e177dde4301a12a12052efd59f4d80b49b23cf4a2ef1b184717fd3acfba741496629d46d4099058a07c3900a670b1c752a36952199bad40b09308eb1d3dcaed4c010d2947838cd60693e4b207d6ae7e80817a77204c2fe0fb666db57d982eadbd5df092ce5d9bc633d9350df3646895a94984d82a0bc5e6ee4", 0x88}, {&(0x7f00000009c0)="591686aeeccdbcf52f3e78d810f5051935d44ee668a873adabba2c956fd477e8ddba699e09e27b61665c3dadfbdaf4dac8f5466ac4c5e006fa5d6ff5f0292385ffea23f2c275235da7ca2372d15edb682ea3c9e49ba7d4dce77cd0f029f12a4c3ef5c4126e071097511aeacd3a613572488c4152c08e4aa7e9179d845b9f600cd5e50ebd63fcf01c275e10949e74cd550e111de182d6a571ad0793c45ceab3fad58f5a251761acc092df0cd3489a1a9c49fd6677da905b77b9280dfbffc7", 0xbe}, {&(0x7f0000000a80)="0df105f1e907987dae3c7729a7ecff08a0cb5eee2d471d1aa1150fddd73dd228d6f4d8d099049bc60c58ad82ba565e42078378931fad33603ac3aefb62be84ff7a04ed1e1bf5", 0x46}], 0x9, &(0x7f0000000c40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r2, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r2, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x90, 0x4000000}}, {{&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d80)="ad9200012631e2d2451510a2e7057f1a56c60456a174", 0x16}, {&(0x7f0000000dc0)="dd1c23356c15006f3f1b26495bd5f083ed209d8db02ff03c4f0899e73d077337e3926dd9518afd908ead530355b66a82311dcdb94875d8f4357e2853cd9841e2ea48cf353d184078942c30e68f225fba4ad8652e436c2f2abc3dbbd5ee2feb4e8939a66212f87b970997f3910681e4a416578ee84abd0c0765d02b", 0x7b}, {&(0x7f0000000e40)="c1f005f9127b450ca262828a68be3a2a1ab83c61962135c270e6a2184113a27427345c6c28379620572661ed3ee1f326b62b1e04a798f6675a84019579dc4978ead54c563061e42ffce30c8276af062bc4ae2123e8dda37688b49f9ec7e83252e824637f7759c35a57392d1ba70a4b4a84abd4a0139b4abf44815538d53b9533d5eab59a61273faacd0a924eec3ec68b3c0a222726d0ca53465d8ca0a9bdd7d2a56ba9b9413788ba720ecf8a5c986f23f6711c042e2196723a3ca3905f049a59e74f32f92dc449d575fb767cdb6d9dd1d2bc36e8bb42b73d", 0xd8}], 0x3, 0x0, 0x0, 0x24000000}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000f80)="78df3f2787b1b5c47819cb6f3b57124e9a607b13a6c366155bc93596ab0f97aad16d88a23ccff2167f86b78dbb88ba12f858c2721f1c00a5e7567a6464d389ab7e21f5b5ca548a281e7346cf83d4b7f89e97621026d078739b661cf24776ed14fdb08394a7f70031b34bae32cd5611cc67a22c20f2d3714cd691ddd14bdb57ac98803a9d495315990fad3bad8e4d489b8ff562f31bef1bb796cb8afc04ff2d4c1d701d72cf3122b74f457813c7b317ff", 0xb0}, {&(0x7f0000001040)="53c839f312338adb417d90c1fab9783606f6", 0x12}, {&(0x7f0000001080)="e97c6dbcdab2b375432953f19a773460321005b7507540ad20cd3da5b690e66d9efd5fd4e13244632b3cffcc1d4f26374cafd9591e2758b8acfb9459acc2fbc0a9a48ecfa96fc715edc8e7d80fc5b829fc5cac38498ce110df290dcf16fc79d1988ce6034ff384709f07ebb0f60a6734f96ace87c2f8a0fa8a8c84f359ae3f5f5f322fdf93a740b9d63b5eb08bb8837676a7adec3295cc338fa72e56a22d525c17b1bdabdb9233f91c6380af1b07d0c222b944c0ad1263b32fea2d95df2cfd8b0513f273f2819ec8933b987cb0ebc73dce6b1a64e5246da0c2f0e3a0d50f16d2e3b5cf3194fa6688d01f05", 0xeb}, {&(0x7f0000001180)="a90c8d9b9ca975ace313e3073f8803cf65b8c155adc41f2006", 0x19}], 0x4, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r3, r0, r1]}}, @rights={{0x24, 0x1, 0x1, [r3, r1, r1, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01, r5}}}, @rights={{0x18, 0x1, 0x1, [r3, r2]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}], 0x100, 0x8000}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000017c0)="ffa1295b44e64cc9387e11b2b59394e6946174f0fb36f760c6311266b0340a8d2265392059fd301cac23b5f8bb5504320f3dadf21c5c0136010c5d4454aaac3dffc627f2ed6a0265af3f45c78dc2f4ba4429eed901edaa8e86409352b6e6113835baf7a156406b4a0536ce499ba5338348cc6c28d2f791b951cd0dbb29d8e5e44503f02d53ecf21c70384aa3ccb381e7ec99ed9e260e3f9ae515682b7a301bc2016d27cf2044c8081e1a9d68443ed2eef208ffe96eb19d63ce524aa2648ac90283863d9b7a9c0a9764448e6dad587c69a32447652658b368a1d9df001d040a0366217877da78d28277d9881abc0ebcbd8490a214e04514cd0613a39ba5e6", 0xfe}, {&(0x7f00000018c0)="1473d7cbaa992c7d851aa6", 0xb}, {&(0x7f0000001900)="20ccb6c16ee1c8c1fa39e1d42279839f81e478901ab15f9808551ff7271aa72cb77d502f0943b4411f2cfe1935a02d3d19588eea915dc3280632dd5fedf3717882a676f7158d8922ae4e91c47249ab6708189ffe07c9", 0x56}, {&(0x7f0000001980)="637ee90b9deeb7c90fef360949fb96372b246d3f003c26fa3822944dce89d746d9647258ccde007557af5d58c7805af6d18d8ae97a676aa0b2d5683a64556d452579a3fe4a82a91fae9988e98e5df10eb54c8011fc1c43dd1ff6a079eb0505c7f901f5506c819ce91a73202e3ef2c601f3dd891ba7804d68e8c0a9e42d1dd5c311021e0d76a01085ee16cda24ac03f", 0x8f}], 0x4, 0x0, 0x0, 0x4000000}}], 0x4, 0x20000040) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200000, 0x2, 0x0, 0x0, 0x96, 0x8}, 0x5b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r6, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004cf000440000400000069078ac1414feac1e000144140a01ac1414bb000000007f00000100000001860600000003000000040000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000590780000"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) poll(&(0x7f0000000000)=[{r11}], 0x1, 0x7780) syz_usb_disconnect(r10) r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f0000000500)={0x1, 0x0, [{0x40000070, 0x0, 0x1}]}) 125.97869ms ago: executing program 0 (id=4421): unshare(0x48060a00) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1227602e205b010000e7d77f40d61244043d2901020301090212000100000000"], 0x0) r0 = socket$kcm(0xa, 0x5, 0x88) unshare(0x2000100) setsockopt$sock_attach_bpf(r0, 0x88, 0xa, &(0x7f00000002c0), 0x4) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) 0s ago: executing program 3 (id=4422): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000380)={0x2, 0x1, @local}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000040)=0x3, 0x4) r3 = syz_io_uring_complete(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) syz_create_resource$binfmt(&(0x7f0000000000)='./file4\x00') recvmsg$unix(r4, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/114, 0x72}], 0x1}, 0x40002042) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES16=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x48844}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000340)=[{0x1c, '\x00', @buffer={"21e109bbd40fa147332cff67a00000000000000004903e9583d9fa9372c5b05f", 0x20}, 0x4}, {0x2, '\x00', @buffer={"f5afd87efbed0c831dd3fe7de8e6d7623ef47a44b0c02d426b799f77205767bd", 0x20}, 0x2}]}) kernel console output (not intermixed with test programs): g attributes in process `syz.0.3935'. [ 1060.425829][T22975] binder: 22972:22975 ioctl c010644f 200000000140 returned -22 [ 1060.434179][T22975] binder: 22972:22975 ioctl c1105511 200000000100 returned -22 [ 1060.442019][ T47] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1060.646923][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 1060.658424][ T47] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1060.671497][ T47] usb 5-1: config 0 has no interface number 0 [ 1060.723217][ T47] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1060.731198][T22355] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1060.810961][ T47] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1060.849982][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.879977][ T47] usb 5-1: Product: syz [ 1060.884191][ T47] usb 5-1: Manufacturer: syz [ 1060.948421][ T47] usb 5-1: SerialNumber: syz [ 1060.969181][ T47] usb 5-1: config 0 descriptor?? [ 1061.005524][T22981] usb usb1: check_ctrlrecip: process 22981 (syz.2.3937) requesting ep 01 but needs 81 [ 1061.025715][T22981] usb usb1: usbfs: process 22981 (syz.2.3937) did not claim interface 0 before use [ 1061.749376][T22984] syzkaller0: entered promiscuous mode [ 1061.755235][T22984] syzkaller0: entered allmulticast mode [ 1061.794078][T22983] tipc: Enabling of bearer rejected, already enabled [ 1061.825824][T22984] tipc: Enabled bearer , priority 0 [ 1061.917203][T22982] tipc: Resetting bearer [ 1061.978047][T22982] tipc: Disabling bearer [ 1062.032546][ T47] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1062.049787][ T47] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1062.063106][ T47] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1062.085091][ T47] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 1062.207563][T22988] netem: incorrect gi model size [ 1062.899840][T22357] usb 2-1: USB disconnect, device number 54 [ 1062.980826][T23003] syzkaller0: entered promiscuous mode [ 1062.988904][T23003] syzkaller0: entered allmulticast mode [ 1063.188085][T23009] FAULT_INJECTION: forcing a failure. [ 1063.188085][T23009] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.338769][T23009] CPU: 1 UID: 0 PID: 23009 Comm: syz.1.3945 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.338800][T23009] Tainted: [L]=SOFTLOCKUP [ 1063.338807][T23009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1063.338819][T23009] Call Trace: [ 1063.338828][T23009] [ 1063.338836][T23009] dump_stack_lvl+0xe8/0x150 [ 1063.338867][T23009] should_fail_ex+0x412/0x560 [ 1063.338898][T23009] should_failslab+0xa8/0x100 [ 1063.338920][T23009] __kmalloc_noprof+0xe8/0x760 [ 1063.338946][T23009] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1063.338965][T23009] ? video_usercopy+0x1b1/0x14b0 [ 1063.338994][T23009] video_usercopy+0x1b1/0x14b0 [ 1063.339020][T23009] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1063.339042][T23009] ? __pfx___video_do_ioctl+0x10/0x10 [ 1063.339068][T23009] ? __pfx_video_usercopy+0x10/0x10 [ 1063.339100][T23009] ? __fget_files+0x2a/0x420 [ 1063.339127][T23009] ? __fget_files+0x2a/0x420 [ 1063.339148][T23009] ? __fget_files+0x3a0/0x420 [ 1063.339182][T23009] v4l2_ioctl+0x18d/0x1e0 [ 1063.339206][T23009] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1063.339227][T23009] __se_sys_ioctl+0xfc/0x170 [ 1063.339249][T23009] do_syscall_64+0x14d/0xf80 [ 1063.339268][T23009] ? trace_irq_disable+0x3b/0x150 [ 1063.339292][T23009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.339311][T23009] ? clear_bhb_loop+0x40/0x90 [ 1063.339333][T23009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.339352][T23009] RIP: 0033:0x7f0437d9bf79 [ 1063.339369][T23009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.339385][T23009] RSP: 002b:00007f0438d2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1063.339407][T23009] RAX: ffffffffffffffda RBX: 00007f0438015fa0 RCX: 00007f0437d9bf79 [ 1063.339421][T23009] RDX: 0000200000000000 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 1063.339433][T23009] RBP: 00007f0438d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.339444][T23009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.339456][T23009] R13: 00007f0438016038 R14: 00007f0438015fa0 R15: 00007f043813fa48 [ 1063.339485][T23009] [ 1063.772121][T23012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.782518][T23012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.093792][T23026] usb usb1: check_ctrlrecip: process 23026 (syz.0.3949) requesting ep 01 but needs 81 [ 1064.126958][T23026] usb usb1: usbfs: process 23026 (syz.0.3949) did not claim interface 0 before use [ 1064.313896][T16663] Buffer I/O error on dev loop5, logical block 4095, async page read [ 1064.666896][T22357] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 1064.822619][T22357] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1064.841507][T22357] usb 2-1: config 0 has no interface number 0 [ 1064.876997][T22357] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1064.913845][T22357] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1064.972350][T22357] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1065.002847][T22357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.035793][T22357] usb 2-1: config 0 descriptor?? [ 1065.134887][T23050] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3954'. [ 1065.146993][T23050] binder: 23045:23050 ioctl c010644f 200000000140 returned -22 [ 1065.155661][T23050] binder: 23045:23050 ioctl c1105511 200000000100 returned -22 [ 1065.331879][ T5831] usb 5-1: USB disconnect, device number 57 [ 1065.348094][T22355] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1065.371197][T23028] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1065.527189][T22357] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1065.538327][T22355] usb 3-1: Using ep0 maxpacket: 16 [ 1065.667880][T22355] usb 3-1: config 0 has no interfaces? [ 1065.683870][T22355] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1065.776916][T22355] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1065.798513][T22355] usb 3-1: Manufacturer: syz [ 1065.879312][T22355] usb 3-1: config 0 descriptor?? [ 1065.884998][ T5831] usb 2-1: USB disconnect, device number 55 [ 1065.886575][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1066.100516][T23059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1067.208498][T23073] SET target dimension over the limit! [ 1067.336287][T23077] input: syz1 as /devices/virtual/input/input63 [ 1067.578482][T23084] usb usb1: check_ctrlrecip: process 23084 (syz.4.3965) requesting ep 01 but needs 81 [ 1067.652426][T23084] usb usb1: usbfs: process 23084 (syz.4.3965) did not claim interface 0 before use [ 1067.780838][T22355] usb 3-1: USB disconnect, device number 18 [ 1068.452875][T16663] Buffer I/O error on dev loop5, logical block 4095, async page read [ 1068.503705][T23108] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1068.574572][T23117] netem: incorrect gi model size [ 1068.592801][T23117] netem: change failed [ 1068.716890][T22353] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 1069.024460][T23113] "syz.3.3974" (23113) uses obsolete ecb(arc4) skcipher [ 1069.075639][T22353] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1069.124677][T22353] usb 2-1: config 0 has no interface number 0 [ 1069.162772][T22353] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1069.222749][T22353] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1069.283979][T22353] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1069.324589][T22353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.404185][T22353] usb 2-1: config 0 descriptor?? [ 1069.440104][T23114] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1069.520687][T22353] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1069.797083][ T5831] usb 2-1: USB disconnect, device number 56 [ 1069.803122][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1069.832293][T23130] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1069.913718][T23132] FAULT_INJECTION: forcing a failure. [ 1069.913718][T23132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.981825][T23132] CPU: 1 UID: 0 PID: 23132 Comm: syz.0.3979 Tainted: G L syzkaller #0 PREEMPT(full) [ 1069.981870][T23132] Tainted: [L]=SOFTLOCKUP [ 1069.981877][T23132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1069.981889][T23132] Call Trace: [ 1069.981901][T23132] [ 1069.981910][T23132] dump_stack_lvl+0xe8/0x150 [ 1069.981942][T23132] should_fail_ex+0x412/0x560 [ 1069.981973][T23132] _copy_from_user+0x2d/0xb0 [ 1069.981996][T23132] do_sock_getsockopt+0x165/0x3f0 [ 1069.982019][T23132] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1069.982039][T23132] ? __fget_files+0x3a0/0x420 [ 1069.982063][T23132] ? __fget_files+0x2a/0x420 [ 1069.982092][T23132] __x64_sys_getsockopt+0x1a4/0x240 [ 1069.982119][T23132] do_syscall_64+0x14d/0xf80 [ 1069.982139][T23132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.982159][T23132] ? clear_bhb_loop+0x40/0x90 [ 1069.982181][T23132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.982200][T23132] RIP: 0033:0x7f0c6b19bf79 [ 1069.982219][T23132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.982236][T23132] RSP: 002b:00007f0c6bfe8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1069.982256][T23132] RAX: ffffffffffffffda RBX: 00007f0c6b415fa0 RCX: 00007f0c6b19bf79 [ 1069.982271][T23132] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000003 [ 1069.982283][T23132] RBP: 00007f0c6bfe8090 R08: 00002000000010c0 R09: 0000000000000000 [ 1069.982295][T23132] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1069.982307][T23132] R13: 00007f0c6b416038 R14: 00007f0c6b415fa0 R15: 00007f0c6b53fa48 [ 1069.982337][T23132] [ 1070.020281][T23136] usb usb1: check_ctrlrecip: process 23136 (syz.3.3981) requesting ep 01 but needs 81 [ 1070.215488][T23136] usb usb1: usbfs: process 23136 (syz.3.3981) did not claim interface 0 before use [ 1070.337258][T22357] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1070.468375][ T5144] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1070.486899][T22357] usb 3-1: Using ep0 maxpacket: 32 [ 1070.504911][T22357] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1071.127048][T22357] usb 3-1: config 0 has no interface number 0 [ 1071.134493][T22357] usb 3-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1071.156634][T22357] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1071.190912][T22357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.200840][T22357] usb 3-1: Product: syz [ 1071.205160][T22357] usb 3-1: Manufacturer: syz [ 1071.229082][T22357] usb 3-1: SerialNumber: syz [ 1071.238829][T22357] usb 3-1: config 0 descriptor?? [ 1071.955191][T23160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3985'. [ 1072.858590][T23168] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3989'. [ 1073.161271][ T5831] usb 3-1: USB disconnect, device number 19 [ 1073.318794][T23180] usb usb1: check_ctrlrecip: process 23180 (syz.2.3994) requesting ep 01 but needs 81 [ 1073.360562][T23180] usb usb1: usbfs: process 23180 (syz.2.3994) did not claim interface 0 before use [ 1073.506425][T16663] Buffer I/O error on dev loop5, logical block 4095, async page read [ 1073.707845][T23198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1073.897159][T22353] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 1073.967750][ T5144] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1074.093614][T22353] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1074.115025][T22353] usb 2-1: config 0 has no interface number 0 [ 1074.143077][T22353] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1074.173988][T22353] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1074.203913][T22353] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1074.236886][T22353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.266583][T22353] usb 2-1: config 0 descriptor?? [ 1074.284799][T23188] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1074.318701][T22353] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1074.367292][T22344] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1074.566922][T22344] usb 5-1: Using ep0 maxpacket: 32 [ 1074.587707][T22344] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1074.692526][T22344] usb 5-1: config 0 has no interface number 0 [ 1074.709759][T22344] usb 5-1: config 0 interface 132 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 1074.744818][ T47] usb 2-1: USB disconnect, device number 57 [ 1074.744936][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1074.765049][T22344] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1074.847272][T22344] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1074.866541][T22344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.886870][T22344] usb 5-1: Product: syz [ 1074.891237][T22344] usb 5-1: Manufacturer: syz [ 1074.896751][T22344] usb 5-1: SerialNumber: syz [ 1074.928976][T22344] usb 5-1: config 0 descriptor?? [ 1075.068648][T16654] Buffer I/O error on dev loop5, logical block 4095, async page read [ 1075.481510][T23220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4005'. [ 1076.415848][T23230] usb usb1: check_ctrlrecip: process 23230 (syz.2.4009) requesting ep 01 but needs 81 [ 1076.428335][T23230] usb usb1: usbfs: process 23230 (syz.2.4009) did not claim interface 0 before use [ 1076.575528][T23234] netlink: 'syz.3.4011': attribute type 49 has an invalid length. [ 1076.712396][T23239] ipvlan2: entered promiscuous mode [ 1077.130674][T23249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1077.241663][T22344] usb 5-1: USB disconnect, device number 58 [ 1077.469580][T23253] kAFS: unable to lookup cell 'ÿ' [ 1078.299864][T23257] SET target dimension over the limit! [ 1078.543235][T16663] Buffer I/O error on dev loop5, logical block 4095, async page read [ 1078.753200][T23274] netem: incorrect gi model size [ 1078.758418][T23274] netem: change failed [ 1078.877993][T22355] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 1079.244895][T23282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1079.364263][T22355] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1079.377522][T22355] usb 3-1: config 0 has no interface number 0 [ 1079.383652][T22355] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1079.401911][T22355] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1079.431204][T22355] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1079.473987][T22355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.490563][T23279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4021'. [ 1079.506048][T22355] usb 3-1: config 0 descriptor?? [ 1079.516188][T23268] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1079.596184][T22355] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1080.215572][T22353] usb 3-1: USB disconnect, device number 20 [ 1080.221990][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1080.403429][T23295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1080.442669][ T5831] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1080.548060][T22353] hid-generic 0009:0002:0004.0046: unexpected long global item [ 1080.558465][T22353] hid-generic 0009:0002:0004.0046: probe with driver hid-generic failed with error -22 [ 1080.600307][T16663] Buffer I/O error on dev loop5, logical block 4095, async page read [ 1080.627511][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 1080.635628][ T5831] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1080.646637][ T5831] usb 5-1: config 0 has no interface number 0 [ 1080.655322][ T5831] usb 5-1: config 0 interface 132 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 1080.671658][ T5831] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1080.686969][ T5831] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1080.717018][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.754446][ T5831] usb 5-1: Product: syz [ 1080.807081][ T5831] usb 5-1: Manufacturer: syz [ 1080.811773][ T5831] usb 5-1: SerialNumber: syz [ 1080.825535][ T5831] usb 5-1: config 0 descriptor?? [ 1081.551470][T23322] netem: incorrect gi model size [ 1081.561744][T23322] netem: change failed [ 1081.944211][T23331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4037'. [ 1082.243658][T23343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4041'. [ 1082.253112][T23343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4041'. [ 1082.271672][T15557] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.282038][T15557] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.382688][T15553] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.771123][T15553] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.780222][T15553] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1082.789236][T15553] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.803503][T23343] hub 1-0:1.0: USB hub found [ 1082.809727][T23343] hub 1-0:1.0: 1 port detected [ 1083.224628][T22353] usb 5-1: USB disconnect, device number 59 [ 1083.672723][T23351] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1083.755521][T16663] Buffer I/O error on dev loop5, logical block 4095, async page read [ 1084.014330][T23357] FAULT_INJECTION: forcing a failure. [ 1084.014330][T23357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.053243][T23357] CPU: 1 UID: 0 PID: 23357 Comm: syz.0.4046 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.053275][T23357] Tainted: [L]=SOFTLOCKUP [ 1084.053281][T23357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1084.053294][T23357] Call Trace: [ 1084.053302][T23357] [ 1084.053311][T23357] dump_stack_lvl+0xe8/0x150 [ 1084.053349][T23357] should_fail_ex+0x412/0x560 [ 1084.053381][T23357] _copy_from_user+0x2d/0xb0 [ 1084.053403][T23357] sctp_getsockopt_probe_interval+0x10a/0x730 [ 1084.053432][T23357] ? __pfx_sctp_getsockopt_probe_interval+0x10/0x10 [ 1084.053468][T23357] ? sctp_getsockopt+0x12f/0xb90 [ 1084.053489][T23357] ? __local_bh_enable_ip+0xd0/0x130 [ 1084.053517][T23357] sctp_getsockopt+0x72e/0xb90 [ 1084.053536][T23357] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1084.053563][T23357] do_sock_getsockopt+0x2d3/0x3f0 [ 1084.053683][T23357] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1084.053705][T23357] ? __fget_files+0x3a0/0x420 [ 1084.053729][T23357] ? __fget_files+0x2a/0x420 [ 1084.053759][T23357] __x64_sys_getsockopt+0x1a4/0x240 [ 1084.053787][T23357] do_syscall_64+0x14d/0xf80 [ 1084.053807][T23357] ? trace_irq_disable+0x3b/0x150 [ 1084.053832][T23357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.053851][T23357] ? clear_bhb_loop+0x40/0x90 [ 1084.053874][T23357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.053894][T23357] RIP: 0033:0x7f0c6b19bf79 [ 1084.053914][T23357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.053932][T23357] RSP: 002b:00007f0c6bfe8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1084.053952][T23357] RAX: ffffffffffffffda RBX: 00007f0c6b415fa0 RCX: 00007f0c6b19bf79 [ 1084.053967][T23357] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000003 [ 1084.053979][T23357] RBP: 00007f0c6bfe8090 R08: 00002000000010c0 R09: 0000000000000000 [ 1084.053992][T23357] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1084.054005][T23357] R13: 00007f0c6b416038 R14: 00007f0c6b415fa0 R15: 00007f0c6b53fa48 [ 1084.054033][T23357] [ 1084.406884][T22344] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 1084.572844][T23364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1084.656842][T22344] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1084.665797][T22344] usb 4-1: config 0 has no interface number 0 [ 1084.672710][T22344] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1084.684353][T22344] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1084.700423][T22344] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1084.710091][T22344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.734412][T22344] usb 4-1: config 0 descriptor?? [ 1084.740456][T23347] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1084.772676][T22344] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1084.889509][T22355] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1085.011032][T22353] usb 4-1: USB disconnect, device number 71 [ 1085.011032][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1085.050553][T22355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.063145][T22355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.074587][T22355] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1085.085729][T22355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.113574][T22355] usb 2-1: config 0 descriptor?? [ 1085.359592][T16663] Buffer I/O error on dev loop5, logical block 4095, async page read [ 1085.434551][T22355] usbhid 2-1:0.0: can't add hid device: -71 [ 1085.454986][T22355] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1085.485337][T22355] usb 2-1: USB disconnect, device number 58 [ 1085.800451][T22355] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1085.833901][T23396] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1085.848049][T22353] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1085.883387][ T5144] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 1085.891520][T23395] usb usb1: check_ctrlrecip: process 23395 (syz.2.4056) requesting ep 01 but needs 81 [ 1086.276129][T23395] usb usb1: usbfs: process 23395 (syz.2.4056) did not claim interface 0 before use [ 1086.277224][T22355] usb 2-1: Using ep0 maxpacket: 32 [ 1086.290762][T22353] usb 5-1: Using ep0 maxpacket: 16 [ 1086.305061][T22353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.359567][T22353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.369699][T22355] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1086.379014][T22355] usb 2-1: config 0 has no interface number 0 [ 1086.406903][T22355] usb 2-1: config 0 interface 132 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 1086.412822][T23398] SET target dimension over the limit! [ 1086.426913][T22353] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1086.441469][T22355] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1086.453036][T22353] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1086.476926][T22353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.487755][T22355] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1086.501325][T22355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.512654][T22353] usb 5-1: config 0 descriptor?? [ 1086.552162][T22355] usb 2-1: Product: syz [ 1086.556377][T22355] usb 2-1: Manufacturer: syz [ 1086.569087][T22355] usb 2-1: SerialNumber: syz [ 1086.588413][T22355] usb 2-1: config 0 descriptor?? [ 1086.975794][T22353] HID 045e:07da: Invalid code 65791 type 1 [ 1087.057247][T22353] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0047/input/input68 [ 1087.070715][T23417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4059'. [ 1087.146124][T22353] microsoft 0003:045E:07DA.0047: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1088.107546][T22355] usb 5-1: USB disconnect, device number 60 [ 1088.296607][T23430] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 1088.303494][T23430] PKCS7: Only support pkcs7_signedData type [ 1088.504149][T16101] usb 2-1: USB disconnect, device number 59 [ 1088.577550][T23434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1088.653918][T22355] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 1088.860779][T22355] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1088.870690][T22355] usb 4-1: config 0 has no interface number 0 [ 1088.881302][T22355] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1088.902032][T22355] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1088.915074][T22355] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1088.925228][T22355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.950520][T22355] usb 4-1: config 0 descriptor?? [ 1088.957591][T23430] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1088.995011][T22355] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1089.075845][T23441] kAFS: unable to lookup cell 'ÿ' [ 1089.724274][T23449] usb usb1: check_ctrlrecip: process 23449 (syz.1.4068) requesting ep 01 but needs 81 [ 1089.753243][T23449] usb usb1: usbfs: process 23449 (syz.1.4068) did not claim interface 0 before use [ 1090.377694][ T29] audit: type=1804 audit(1771271050.848:765): pid=23469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4075" name="/newroot/237/file1" dev="tmpfs" ino=1258 res=1 errno=0 [ 1090.614277][ T29] audit: type=1326 audit(1771271051.088:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.4.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0b40b9bd77 code=0x7ffc0000 [ 1090.699903][ T29] audit: type=1326 audit(1771271051.088:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.4.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b40b9bf79 code=0x7ffc0000 [ 1090.782404][ T29] audit: type=1326 audit(1771271051.088:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.4.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0b40b58d11 code=0x7ffc0000 [ 1090.886026][ T29] audit: type=1326 audit(1771271051.088:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.4.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f0b40b9bf79 code=0x7ffc0000 [ 1090.959215][ T29] audit: type=1326 audit(1771271051.088:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.4.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f0b40b9bf79 code=0x7ffc0000 [ 1091.010890][ T29] audit: type=1326 audit(1771271051.088:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.4.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f0b40b9bf79 code=0x7ffc0000 [ 1091.096469][ T29] audit: type=1326 audit(1771271051.088:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.4.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b40b9bf79 code=0x7ffc0000 [ 1091.145759][ T29] audit: type=1326 audit(1771271051.088:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.4.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f0b40b9bf79 code=0x7ffc0000 [ 1091.238449][T16101] usb 4-1: USB disconnect, device number 72 [ 1091.278041][T23480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1091.297306][ T29] audit: type=1326 audit(1771271051.088:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.4.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f0b40b9bf79 code=0x7ffc0000 [ 1091.516413][T23488] usb usb1: check_ctrlrecip: process 23488 (syz.3.4081) requesting ep 01 but needs 81 [ 1091.544743][T23488] usb usb1: usbfs: process 23488 (syz.3.4081) did not claim interface 0 before use [ 1091.681211][T23484] kAFS: unable to lookup cell 'ÿ' [ 1092.019403][T23495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4083'. [ 1092.286945][T16101] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1092.368863][T23507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1092.437001][T22355] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1092.489133][T16101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.505175][T16101] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1092.536284][T23512] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 1092.543322][T23512] PKCS7: Only support pkcs7_signedData type [ 1092.600672][T16101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.651520][T16101] usb 4-1: config 0 descriptor?? [ 1092.662313][T22355] usb 3-1: Using ep0 maxpacket: 8 [ 1092.707961][T22355] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1092.720723][T22355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1092.735492][T22355] usb 3-1: Product: syz [ 1092.741753][T22355] usb 3-1: Manufacturer: syz [ 1092.746382][T22355] usb 3-1: SerialNumber: syz [ 1092.771164][T22355] usb 3-1: config 0 descriptor?? [ 1092.785948][T22355] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1092.826858][T22354] usb 1-1: new low-speed USB device number 117 using dummy_hcd [ 1092.854614][T23522] netlink: 'syz.4.4093': attribute type 11 has an invalid length. [ 1092.867534][T16101] usbhid 4-1:0.0: can't add hid device: -71 [ 1092.905185][T16101] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1092.924578][T23522] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4093'. [ 1092.929871][T16101] usb 4-1: USB disconnect, device number 73 [ 1092.971442][T23523] netlink: 'syz.4.4093': attribute type 11 has an invalid length. [ 1092.979882][T23523] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4093'. [ 1093.017437][T23523] netlink: 'syz.4.4093': attribute type 11 has an invalid length. [ 1093.027589][T23523] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4093'. [ 1093.047700][T22354] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1093.055853][T22354] usb 1-1: config 0 has no interface number 0 [ 1093.077032][T22357] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1093.113295][T22354] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1093.124476][T22354] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1093.136900][T22354] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1093.154938][T22354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.213881][T22354] usb 1-1: config 0 descriptor?? [ 1093.229582][T22355] gspca_sq905: bulk read fail (-22) len 0/4 [ 1093.235610][T22355] sq905 3-1:0.0: probe with driver sq905 failed with error -5 [ 1093.256433][T23512] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1093.257269][T22357] usb 2-1: Using ep0 maxpacket: 16 [ 1093.285326][T22354] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1093.344041][T22357] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1093.366638][T22357] usb 2-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 1093.382950][T22357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.393428][T22357] usb 2-1: Product: syz [ 1093.398028][T22357] usb 2-1: Manufacturer: 妸產ﵪá»ãž•ê…˜ï¶æ¬†ãŽ®ç±©ç»¿ì›”䚙嘞쾬㷱ìꂨⴼï¡å–‡î…´î¿î›®á‚²â¾“矿짓봾Ѩè¨é³œç·§ë­±ï¯†è „锘逻å…텼德泓ꖳ昜ï°âž¨á½¾ä¨¦å‚闄䉸鞜Ջ⎱ë„ìºì™˜æ‚—唕焈â”쳂æ¼â§…塘쎩鎻귖뜳쿔喡ﲭæ¤ã‡¥î’¤å’„쨿框배áƒâ•½ë¿¸æ¤Œì®¤î•ªå’•Ó¶à»‹ä§ŸäŠä’§á…걧㧱ì¸ê‰›Ø«ç¸¯íƒ¹îƒ­ä®‘쀥ᤩî°ä£ˆ [ 1093.408592][ T5831] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1093.435516][T22357] usb 2-1: SerialNumber: syz [ 1093.439427][T16101] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1093.695500][T16101] usb 4-1: Using ep0 maxpacket: 32 [ 1093.709561][T16101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.724292][T16101] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1093.769363][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 1093.809602][T23521] fuse: Bad value for 'fd' [ 1093.833891][T16101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.842562][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 1093.875149][T16101] usb 4-1: config 0 descriptor?? [ 1093.889562][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1093.936255][T16101] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1093.947049][ T5831] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1093.968692][T16101] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 1093.978215][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.008773][ T5831] usb 5-1: config 0 descriptor?? [ 1094.715019][T22354] usb 4-1: USB disconnect, device number 74 [ 1094.741254][T22354] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 1095.238166][T16101] usb 3-1: USB disconnect, device number 21 [ 1095.603261][T22354] usb 1-1: USB disconnect, device number 117 [ 1095.609546][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1095.790498][ T5831] usbhid 5-1:0.0: can't add hid device: -71 [ 1095.818077][ T5831] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1095.885152][ T5831] usb 5-1: USB disconnect, device number 61 [ 1095.914389][T22357] usbhid 2-1:1.0: can't add hid device: -71 [ 1095.921164][T22357] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1095.967111][T16101] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1095.981696][T22357] usb 2-1: USB disconnect, device number 60 [ 1096.148851][T16101] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 1096.165546][T16101] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1096.173886][T16101] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 1096.184474][T16101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.206600][T16101] usb 3-1: config 0 descriptor?? [ 1096.222291][T23537] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1096.372334][ T5831] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1096.505013][T23555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1096.512241][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1096.512257][ T29] audit: type=1326 audit(1771271056.858:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a119bf79 code=0x7ffc0000 [ 1096.904216][ T29] audit: type=1326 audit(1771271056.858:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f55a119bf79 code=0x7ffc0000 [ 1096.929091][ T29] audit: type=1326 audit(1771271056.858:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a119bf79 code=0x7ffc0000 [ 1096.952797][ T29] audit: type=1326 audit(1771271056.858:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55a115c84e code=0x7ffc0000 [ 1096.954402][ T5831] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1096.994770][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.045455][ T5831] usb 5-1: Product: syz [ 1097.053773][ T5831] usb 5-1: Manufacturer: syz [ 1097.080035][ T5831] usb 5-1: SerialNumber: syz [ 1097.097299][T16101] kye 0003:0458:5014.0048: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1097.114689][ T29] audit: type=1326 audit(1771271056.858:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a119bf79 code=0x7ffc0000 [ 1097.160637][T16101] kye 0003:0458:5014.0048: hidraw0: USB HID v0.01 Device [HID 0458:5014] on usb-dummy_hcd.2-1/input0 [ 1097.186903][T16101] kye 0003:0458:5014.0048: tablet-enabling feature report not found [ 1097.201020][T16101] kye 0003:0458:5014.0048: tablet enabling failed [ 1097.241961][ T29] audit: type=1326 audit(1771271056.858:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f55a119bf79 code=0x7ffc0000 [ 1097.309181][T23537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.320443][T23537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.346409][ T29] audit: type=1326 audit(1771271056.858:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a119bf79 code=0x7ffc0000 [ 1097.351779][T16101] usb 3-1: USB disconnect, device number 22 [ 1097.444271][ T29] audit: type=1326 audit(1771271056.858:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f55a119bf79 code=0x7ffc0000 [ 1097.465394][ T5831] rtl8150 5-1:1.0: couldn't reset the device [ 1097.479930][ T5831] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1097.496935][T22357] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1097.506516][ T5831] usb 5-1: USB disconnect, device number 62 [ 1097.524873][ T29] audit: type=1326 audit(1771271056.858:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a119bf79 code=0x7ffc0000 [ 1097.589559][ T29] audit: type=1326 audit(1771271056.858:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f55a119bf79 code=0x7ffc0000 [ 1097.660211][T22357] usb 4-1: Using ep0 maxpacket: 32 [ 1097.671408][T22357] usb 4-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5 [ 1097.680792][T22357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.689270][T22357] usb 4-1: Product: syz [ 1097.693454][T22357] usb 4-1: Manufacturer: syz [ 1097.703526][T22357] usb 4-1: SerialNumber: syz [ 1097.711043][T22357] usb 4-1: config 0 descriptor?? [ 1097.725143][T22357] gspca_main: mars-2.14.0 probing 093a:050f [ 1097.850598][T23569] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4105'. [ 1097.864412][T23569] binder: 23565:23569 ioctl c010644f 200000000140 returned -22 [ 1097.873515][T23569] binder: 23565:23569 ioctl c1105511 200000000100 returned -22 [ 1097.919908][T22357] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1097.937904][T23570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.965155][T23570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.034876][T16101] usb 4-1: USB disconnect, device number 75 [ 1098.186884][T22357] usb 2-1: Using ep0 maxpacket: 32 [ 1098.209616][T22357] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1098.247218][T22357] usb 2-1: config 0 has no interface number 0 [ 1098.259186][T23578] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 1098.265975][T23578] PKCS7: Only support pkcs7_signedData type [ 1098.304063][T22357] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1098.332659][T22357] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1098.348791][T22357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.363893][T22357] usb 2-1: Product: syz [ 1098.435549][T23582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4108'. [ 1098.493637][T22357] usb 2-1: Manufacturer: syz [ 1098.505015][T22357] usb 2-1: SerialNumber: syz [ 1098.523073][T22357] usb 2-1: config 0 descriptor?? [ 1098.547475][T22354] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 1098.808896][T22354] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1098.822202][T22354] usb 3-1: config 0 has no interface number 0 [ 1098.831527][T22354] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1098.860192][T22354] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1098.887684][T22354] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1098.914527][T22354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.956701][T22354] usb 3-1: config 0 descriptor?? [ 1098.972951][T22357] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1099.032358][T23578] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1099.046381][T22357] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1099.103800][T22357] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1099.124278][T22354] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1099.138193][T22357] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 1099.968776][T23599] ipvlan2: entered promiscuous mode [ 1100.443749][T23607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.535709][T23597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.546679][T23597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.765450][T23609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4116'. [ 1101.606517][ T47] usb 3-1: USB disconnect, device number 23 [ 1102.051602][T22354] usb 2-1: USB disconnect, device number 61 [ 1102.375708][ T5144] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1102.393108][T23636] FAULT_INJECTION: forcing a failure. [ 1102.393108][T23636] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1102.437895][T23636] CPU: 0 UID: 0 PID: 23636 Comm: syz.3.4121 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.437925][T23636] Tainted: [L]=SOFTLOCKUP [ 1102.437933][T23636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1102.437944][T23636] Call Trace: [ 1102.437953][T23636] [ 1102.437961][T23636] dump_stack_lvl+0xe8/0x150 [ 1102.437992][T23636] should_fail_ex+0x412/0x560 [ 1102.438023][T23636] get_futex_key+0x1ac/0x1690 [ 1102.438054][T23636] ? __pfx_get_futex_key+0x10/0x10 [ 1102.438074][T23636] ? __lock_acquire+0x6b5/0x2cf0 [ 1102.438105][T23636] futex_wake+0x114/0x580 [ 1102.438132][T23636] ? __lock_acquire+0x6b5/0x2cf0 [ 1102.438157][T23636] ? __pfx_futex_wake+0x10/0x10 [ 1102.438180][T23636] ? exit_mm_release+0x1a/0x30 [ 1102.438203][T23636] do_futex+0x395/0x420 [ 1102.438223][T23636] ? __pfx_do_futex+0x10/0x10 [ 1102.438242][T23636] ? __might_fault+0xaf/0x130 [ 1102.438264][T23636] mm_release+0x103/0x290 [ 1102.438284][T23636] exit_mm+0x51/0x220 [ 1102.438297][T23636] ? unwind_deferred_task_exit+0x67/0xa0 [ 1102.438319][T23636] do_exit+0x62e/0x2310 [ 1102.438339][T23636] ? __pfx_do_exit+0x10/0x10 [ 1102.438355][T23636] ? do_raw_spin_lock+0x12b/0x2f0 [ 1102.438376][T23636] do_group_exit+0x21b/0x2d0 [ 1102.438390][T23636] ? _raw_spin_unlock_irq+0x23/0x50 [ 1102.438414][T23636] get_signal+0x1284/0x1330 [ 1102.438446][T23636] arch_do_signal_or_restart+0xbc/0x830 [ 1102.438465][T23636] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1102.438495][T23636] exit_to_user_mode_loop+0x86/0x480 [ 1102.438511][T23636] ? rcu_is_watching+0x15/0xb0 [ 1102.438533][T23636] do_syscall_64+0x32d/0xf80 [ 1102.438548][T23636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.438563][T23636] ? clear_bhb_loop+0x40/0x90 [ 1102.438581][T23636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.438596][T23636] RIP: 0033:0x7f55a119bf79 [ 1102.438610][T23636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.438623][T23636] RSP: 002b:00007f55a2057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 1102.438647][T23636] RAX: 000000000000000e RBX: 00007f55a1416180 RCX: 00007f55a119bf79 [ 1102.438658][T23636] RDX: 0000000000080000 RSI: 000000000000000e RDI: 000000000000000d [ 1102.438667][T23636] RBP: 00007f55a2057090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.438676][T23636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.438686][T23636] R13: 00007f55a1416218 R14: 00007f55a1416180 R15: 00007f55a153fa48 [ 1102.438708][T23636] [ 1102.759835][T23639] fuse: Bad value for 'group_id' [ 1102.764821][T23639] fuse: Bad value for 'group_id' [ 1103.103394][T22354] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1103.406830][T22354] usb 2-1: Using ep0 maxpacket: 8 [ 1103.407146][ T47] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1103.478660][T22354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1103.616882][T22354] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1103.626051][T22354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.654593][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 1103.733415][T22354] usb 2-1: config 0 descriptor?? [ 1103.779969][ T47] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1103.810158][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.841533][ T47] usb 1-1: Product: syz [ 1103.870881][ T47] usb 1-1: Manufacturer: syz [ 1103.897926][ T47] usb 1-1: SerialNumber: syz [ 1103.923838][ T47] usb 1-1: config 0 descriptor?? [ 1103.953736][ T47] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1104.194398][T22354] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1104.627342][T23650] tipc: Enabling of bearer rejected, already enabled [ 1105.136946][T22355] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1105.219223][ T47] usb 1-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 1105.299687][T22355] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1105.346095][T22355] usb 4-1: config 0 has no interface number 0 [ 1105.380484][T22355] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1105.431883][T22355] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 29284, setting to 64 [ 1105.477204][T22355] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1105.493841][T22355] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1105.516743][T22355] usb 4-1: Product: syz [ 1105.527080][T22355] usb 4-1: SerialNumber: syz [ 1105.546941][T22355] usb 4-1: config 0 descriptor?? [ 1105.561586][T23654] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1105.598715][T22355] cm109 4-1:0.8: invalid payload size 64, expected 4 [ 1105.609833][T22355] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input71 [ 1105.717426][T22357] usb 2-1: USB disconnect, device number 62 [ 1105.798731][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1106.061042][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1106.068306][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1106.075445][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1106.082593][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1106.089853][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1106.096996][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1106.104113][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1106.111278][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1106.118444][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1106.125589][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1106.135668][T22357] usb 4-1: USB disconnect, device number 76 [ 1106.141622][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1106.203432][T22357] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1106.268852][ T47] usb 1-1: USB disconnect, device number 118 [ 1106.302785][ T47] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 1106.323997][ T47] ssu100 1-1:0.0: device disconnected [ 1106.772995][T23680] FAULT_INJECTION: forcing a failure. [ 1106.772995][T23680] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.809459][T23680] CPU: 1 UID: 0 PID: 23680 Comm: syz.0.4138 Tainted: G L syzkaller #0 PREEMPT(full) [ 1106.809483][T23680] Tainted: [L]=SOFTLOCKUP [ 1106.809487][T23680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1106.809494][T23680] Call Trace: [ 1106.809499][T23680] [ 1106.809504][T23680] dump_stack_lvl+0xe8/0x150 [ 1106.809524][T23680] should_fail_ex+0x412/0x560 [ 1106.809545][T23680] should_failslab+0xa8/0x100 [ 1106.809558][T23680] __kvmalloc_node_noprof+0x178/0x8a0 [ 1106.809569][T23680] ? aa_file_perm+0x12d/0x1630 [ 1106.809578][T23680] ? seq_read_iter+0x202/0xe10 [ 1106.809593][T23680] seq_read_iter+0x202/0xe10 [ 1106.809609][T23680] ? __asan_memset+0x22/0x50 [ 1106.809627][T23680] seq_read+0x367/0x480 [ 1106.809641][T23680] ? __pfx_seq_read+0x10/0x10 [ 1106.809658][T23680] ? rw_verify_area+0x2a6/0x4d0 [ 1106.809673][T23680] ? __pfx_seq_read+0x10/0x10 [ 1106.809684][T23680] vfs_read+0x20c/0xa70 [ 1106.809698][T23680] ? fdget_pos+0x246/0x320 [ 1106.809712][T23680] ? ksys_write+0x1e6/0x270 [ 1106.809728][T23680] ? __pfx___mutex_lock+0x10/0x10 [ 1106.809741][T23680] ? __pfx_vfs_read+0x10/0x10 [ 1106.809756][T23680] ? __fget_files+0x2a/0x420 [ 1106.809771][T23680] ? __fget_files+0x3a0/0x420 [ 1106.809784][T23680] ? __fget_files+0x2a/0x420 [ 1106.809801][T23680] ksys_read+0x150/0x270 [ 1106.809817][T23680] ? __pfx_ksys_read+0x10/0x10 [ 1106.809838][T23680] do_syscall_64+0x14d/0xf80 [ 1106.809849][T23680] ? trace_irq_disable+0x3b/0x150 [ 1106.809862][T23680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.809873][T23680] ? clear_bhb_loop+0x40/0x90 [ 1106.809885][T23680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.809895][T23680] RIP: 0033:0x7f0c6b19bf79 [ 1106.809906][T23680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.809916][T23680] RSP: 002b:00007f0c6bfe8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1106.809928][T23680] RAX: ffffffffffffffda RBX: 00007f0c6b415fa0 RCX: 00007f0c6b19bf79 [ 1106.809936][T23680] RDX: 00000000000000a9 RSI: 0000200000000040 RDI: 0000000000000004 [ 1106.809943][T23680] RBP: 00007f0c6bfe8090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.809949][T23680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.809955][T23680] R13: 00007f0c6b416038 R14: 00007f0c6b415fa0 R15: 00007f0c6b53fa48 [ 1106.809971][T23680] [ 1107.341920][ T47] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1107.503620][ T47] usb 3-1: device descriptor read/64, error -71 [ 1107.590630][T23694] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4142'. [ 1107.603106][T23694] binder: 23687:23694 ioctl c010644f 200000000140 returned -22 [ 1107.612045][T23694] binder: 23687:23694 ioctl c1105511 200000000100 returned -22 [ 1107.827520][T16101] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1107.887351][ T47] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1108.004856][T16101] usb 2-1: Using ep0 maxpacket: 16 [ 1108.024423][ T47] usb 3-1: device descriptor read/64, error -71 [ 1108.074653][T16101] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1108.095415][T16101] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1108.128971][T16101] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1108.162479][T16101] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1108.201831][ T47] usb usb3-port1: attempt power cycle [ 1108.218955][T16101] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1108.219861][T23700] syzkaller1: entered promiscuous mode [ 1108.249091][T23700] syzkaller1: entered allmulticast mode [ 1108.260664][T16101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.271969][T23700] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 1108.347708][T16101] usb 2-1: Product: syz [ 1108.356855][T16101] usb 2-1: Manufacturer: syz [ 1108.361546][T16101] usb 2-1: SerialNumber: syz [ 1108.566889][ T47] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1108.588018][T16101] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1108.607931][ T47] usb 3-1: device descriptor read/8, error -71 [ 1108.794692][T16101] usb 2-1: USB disconnect, device number 63 [ 1108.825226][T16101] usblp0: removed [ 1108.861816][ T47] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1108.983661][ T47] usb 3-1: device descriptor read/8, error -71 [ 1109.115281][ T47] usb usb3-port1: unable to enumerate USB device [ 1109.357670][T23715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1110.137076][T22357] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1110.198819][T23727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1110.319669][T22357] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1110.336431][T22357] usb 3-1: config 0 has no interface number 0 [ 1110.372082][T22357] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1110.412023][T22357] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 29284, setting to 64 [ 1110.452375][T22357] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1110.462360][T22357] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1110.482545][T22357] usb 3-1: Product: syz [ 1110.555835][T23734] netlink: 'syz.1.4157': attribute type 11 has an invalid length. [ 1110.563937][T23734] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4157'. [ 1110.575374][T22357] usb 3-1: SerialNumber: syz [ 1110.591116][T22357] usb 3-1: config 0 descriptor?? [ 1110.601070][T23719] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1110.610340][T22357] cm109 3-1:0.8: invalid payload size 64, expected 4 [ 1110.634256][T22357] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input74 [ 1110.720276][T23735] netlink: 'syz.1.4157': attribute type 11 has an invalid length. [ 1110.735000][T23735] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4157'. [ 1110.744476][T23735] netlink: 'syz.1.4157': attribute type 11 has an invalid length. [ 1110.752430][T23735] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4157'. [ 1110.833462][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1111.046905][T16101] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1111.158402][ C0] cm109_urb_ctl_callback: 20 callbacks suppressed [ 1111.158419][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1111.172082][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1111.179323][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1111.186683][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1111.193953][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1111.201155][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1111.208376][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1111.215562][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1111.225563][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1111.237428][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1111.253466][T22357] usb 3-1: USB disconnect, device number 28 [ 1111.259736][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1111.304538][T16101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 1111.344335][T22357] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1111.374451][T16101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 1111.437271][T16101] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1111.472121][T16101] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1111.481841][T16101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.502417][T16101] usb 2-1: config 0 descriptor?? [ 1112.073655][T23737] syz.3.4158 (23737): drop_caches: 2 [ 1112.209731][T23756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4164'. [ 1112.315934][T23765] usb usb1: check_ctrlrecip: process 23765 (syz.0.4168) requesting ep 01 but needs 81 [ 1112.342823][T23765] usb usb1: usbfs: process 23765 (syz.0.4168) did not claim interface 0 before use [ 1112.885330][T23771] Cannot find del_set index 2 as target [ 1113.525778][T16101] usbhid 2-1:0.0: can't add hid device: -71 [ 1113.535709][T16101] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1113.561916][T16101] usb 2-1: USB disconnect, device number 64 [ 1113.750597][T23786] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1113.781159][T23786] syzkaller1: linktype set to 776 [ 1113.851796][T23786] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4177'. [ 1113.901710][T23786] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4177'. [ 1113.957567][T23790] usb usb1: check_ctrlrecip: process 23790 (syz.2.4180) requesting ep 01 but needs 81 [ 1113.986942][T23790] usb usb1: usbfs: process 23790 (syz.2.4180) did not claim interface 0 before use [ 1114.047235][T16101] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1114.140978][T23791] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1114.167476][T23791] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1114.201744][T23791] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1114.232068][T16101] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1114.247030][T23791] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1114.256886][T16101] usb 4-1: config 0 has no interface number 0 [ 1114.263049][T16101] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1114.275329][T23791] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1114.307016][T16101] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 29284, setting to 64 [ 1114.326559][T16101] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1114.336534][T16101] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1114.345225][T16101] usb 4-1: Product: syz [ 1114.351975][T16101] usb 4-1: SerialNumber: syz [ 1114.370023][T16101] usb 4-1: config 0 descriptor?? [ 1114.376541][T23784] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1114.391711][T16101] cm109 4-1:0.8: invalid payload size 64, expected 4 [ 1114.420246][T16101] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input77 [ 1114.594166][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1114.627282][T23809] netlink: 'syz.0.4186': attribute type 11 has an invalid length. [ 1114.635256][T23809] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1114.645776][T23809] netlink: 'syz.0.4186': attribute type 11 has an invalid length. [ 1114.653734][T23809] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1114.663311][T23809] netlink: 'syz.0.4186': attribute type 11 has an invalid length. [ 1114.671234][T23809] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1114.704800][T23808] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 1114.711835][T23808] PKCS7: Only support pkcs7_signedData type [ 1114.824344][T16101] usb 4-1: USB disconnect, device number 77 [ 1114.830387][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1114.896370][T16101] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1114.976907][T22354] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1115.036489][ T5831] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 1115.164927][T22354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 1115.187581][T22354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 1115.209413][T23813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1115.218508][T22354] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1115.249588][ T5831] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1115.258042][ T5831] usb 5-1: config 0 has no interface number 0 [ 1115.273179][T22354] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1115.282587][ T5831] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1115.335289][T22354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.355746][T22354] usb 1-1: config 0 descriptor?? [ 1115.365661][ T5831] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1115.433102][ T5831] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1115.496843][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.557939][T23819] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4189'. [ 1115.570211][T23819] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4189'. [ 1115.581700][T23819] binder: 23814:23819 ioctl c010644f 200000000140 returned -22 [ 1115.589900][T23819] binder: 23814:23819 ioctl c1105511 200000000100 returned -22 [ 1115.755401][ T5831] usb 5-1: config 0 descriptor?? [ 1115.907524][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.915100][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.923673][T23808] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1115.956583][ T5831] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1116.085493][T23826] syzkaller0: entered promiscuous mode [ 1116.097947][T23826] syzkaller0: entered allmulticast mode [ 1116.172347][ T5144] Bluetooth: hci5: command 0x0406 tx timeout [ 1116.188759][T23826] tipc: Enabled bearer , priority 0 [ 1116.214177][T23825] tipc: Resetting bearer [ 1116.296388][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 1116.302674][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 1116.359969][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout [ 1116.363732][T18608] Bluetooth: hci0: command 0x0406 tx timeout [ 1116.437293][T23825] tipc: Disabling bearer [ 1117.621379][T16101] usb 5-1: USB disconnect, device number 63 [ 1117.627471][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1117.727163][T22355] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1117.896937][T22355] usb 2-1: Using ep0 maxpacket: 8 [ 1117.909009][T22355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1117.920537][T22355] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1117.931378][T22355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.943050][T22355] usb 2-1: config 0 descriptor?? [ 1118.055408][T22354] usbhid 1-1:0.0: can't add hid device: -71 [ 1118.065299][T22354] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1118.125150][T22354] usb 1-1: USB disconnect, device number 119 [ 1118.166022][T22355] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1118.415774][T23849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4200'. [ 1118.705245][T23853] FAULT_INJECTION: forcing a failure. [ 1118.705245][T23853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1118.759890][T23853] CPU: 1 UID: 0 PID: 23853 Comm: syz.2.4202 Tainted: G L syzkaller #0 PREEMPT(full) [ 1118.759909][T23853] Tainted: [L]=SOFTLOCKUP [ 1118.759913][T23853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1118.759920][T23853] Call Trace: [ 1118.759925][T23853] [ 1118.759931][T23853] dump_stack_lvl+0xe8/0x150 [ 1118.759950][T23853] should_fail_ex+0x412/0x560 [ 1118.759968][T23853] _copy_to_iter+0x404/0x17d0 [ 1118.759992][T23853] ? __pfx__copy_to_iter+0x10/0x10 [ 1118.760007][T23853] ? get_pid_task+0x20/0x1f0 [ 1118.760023][T23853] ? get_pid_task+0x20/0x1f0 [ 1118.760036][T23853] ? get_pid_task+0x20/0x1f0 [ 1118.760054][T23853] ? proc_single_show+0x15b/0x190 [ 1118.760071][T23853] seq_read_iter+0xbf5/0xe10 [ 1118.760091][T23853] seq_read+0x367/0x480 [ 1118.760106][T23853] ? __pfx_seq_read+0x10/0x10 [ 1118.760122][T23853] ? rw_verify_area+0x2a6/0x4d0 [ 1118.760137][T23853] ? __pfx_seq_read+0x10/0x10 [ 1118.760148][T23853] vfs_read+0x20c/0xa70 [ 1118.760162][T23853] ? fdget_pos+0x246/0x320 [ 1118.760176][T23853] ? ksys_write+0x1e6/0x270 [ 1118.760193][T23853] ? __pfx___mutex_lock+0x10/0x10 [ 1118.760207][T23853] ? __pfx_vfs_read+0x10/0x10 [ 1118.760223][T23853] ? __fget_files+0x2a/0x420 [ 1118.760238][T23853] ? __fget_files+0x3a0/0x420 [ 1118.760250][T23853] ? __fget_files+0x2a/0x420 [ 1118.760267][T23853] ksys_read+0x150/0x270 [ 1118.760283][T23853] ? __pfx_ksys_read+0x10/0x10 [ 1118.760304][T23853] do_syscall_64+0x14d/0xf80 [ 1118.760314][T23853] ? trace_irq_disable+0x3b/0x150 [ 1118.760328][T23853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.760338][T23853] ? clear_bhb_loop+0x40/0x90 [ 1118.760351][T23853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.760361][T23853] RIP: 0033:0x7f50c6d9bf79 [ 1118.760372][T23853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.760381][T23853] RSP: 002b:00007f50c7bc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1118.760393][T23853] RAX: ffffffffffffffda RBX: 00007f50c7015fa0 RCX: 00007f50c6d9bf79 [ 1118.760401][T23853] RDX: 00000000000000a9 RSI: 0000200000000040 RDI: 0000000000000004 [ 1118.760408][T23853] RBP: 00007f50c7bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.760414][T23853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1118.760420][T23853] R13: 00007f50c7016038 R14: 00007f50c7015fa0 R15: 00007f50c713fa48 [ 1118.760436][T23853] [ 1119.254385][T23857] tipc: Enabling of bearer rejected, already enabled [ 1119.573708][T23865] vlan3: entered promiscuous mode [ 1119.598300][T23865] vlan3: entered allmulticast mode [ 1119.629027][T23865] hsr_slave_1: entered allmulticast mode [ 1120.030659][T23874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4206'. [ 1120.187388][T23876] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4207'. [ 1120.202998][T23876] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4207'. [ 1120.215551][T23876] binder: 23872:23876 ioctl c010644f 200000000140 returned -22 [ 1120.227802][T23876] binder: 23872:23876 ioctl c1105511 200000000100 returned -22 [ 1120.450075][T23881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1120.702717][T22354] usb 2-1: USB disconnect, device number 65 [ 1120.960441][T23885] netlink: 'syz.1.4209': attribute type 11 has an invalid length. [ 1121.008168][T23885] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4209'. [ 1121.047099][T23887] netlink: 'syz.1.4209': attribute type 11 has an invalid length. [ 1121.087425][T23887] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4209'. [ 1121.139946][T23887] netlink: 'syz.1.4209': attribute type 11 has an invalid length. [ 1121.158313][T23887] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4209'. [ 1121.536323][T22344] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1121.751797][T22344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 1121.824153][T22344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 1121.824368][T23891] usb usb1: check_ctrlrecip: process 23891 (syz.0.4210) requesting ep 01 but needs 81 [ 1121.862786][T23891] usb usb1: usbfs: process 23891 (syz.0.4210) did not claim interface 0 before use [ 1121.882446][T22344] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1121.920535][T22344] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1121.950119][T22344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.984503][T22344] usb 2-1: config 0 descriptor?? [ 1122.767128][T22355] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1122.858293][T23906] syzkaller0: entered promiscuous mode [ 1122.880624][T23906] syzkaller0: entered allmulticast mode [ 1122.933841][T22355] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1123.003002][T22355] usb 5-1: can't read configurations, error -22 [ 1123.247092][T22355] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1123.347410][T22354] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1123.449373][T22355] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1123.465220][T22355] usb 5-1: can't read configurations, error -22 [ 1123.490492][T22355] usb usb5-port1: attempt power cycle [ 1123.516901][T22354] usb 1-1: Using ep0 maxpacket: 8 [ 1123.527246][T22354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1123.538542][T22354] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1123.557896][T22354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.570441][T23917] Cannot find del_set index 2 as target [ 1123.600045][T22354] usb 1-1: config 0 descriptor?? [ 1123.856950][T22355] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1123.881419][T22355] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1123.889444][T22355] usb 5-1: can't read configurations, error -22 [ 1123.916152][T22344] usbhid 2-1:0.0: can't add hid device: -71 [ 1123.922307][T22344] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1123.941279][T22344] usb 2-1: USB disconnect, device number 66 [ 1124.004387][T22354] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1124.036907][T22355] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1124.076338][T22355] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1124.085158][T22355] usb 5-1: can't read configurations, error -22 [ 1124.092447][T22355] usb usb5-port1: unable to enumerate USB device [ 1124.182743][T18608] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1124.619850][T23931] tipc: Enabled bearer , priority 10 [ 1124.754174][T22355] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1124.946097][T22355] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1124.955323][T22355] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.971287][T22355] usb 4-1: config 8 has no interface number 0 [ 1124.986514][T22355] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1125.002881][T23938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4227'. [ 1125.029331][T22355] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1125.046318][T22355] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1125.064900][T22355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.163698][T22355] ir_toy 4-1:8.177: required endpoints not found [ 1125.616930][T16101] tipc: Node number set to 2537008694 [ 1126.257808][T22355] usb 1-1: USB disconnect, device number 120 [ 1126.436820][T22356] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1126.509848][T23956] usb usb1: check_ctrlrecip: process 23956 (syz.0.4234) requesting ep 01 but needs 81 [ 1126.540335][T23956] usb usb1: usbfs: process 23956 (syz.0.4234) did not claim interface 0 before use [ 1126.599575][T23962] netlink: 'syz.4.4233': attribute type 11 has an invalid length. [ 1126.607508][T23962] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4233'. [ 1126.617705][T23962] netlink: 'syz.4.4233': attribute type 11 has an invalid length. [ 1126.625583][T23962] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4233'. [ 1126.634818][T23962] netlink: 'syz.4.4233': attribute type 11 has an invalid length. [ 1126.642994][T23962] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4233'. [ 1126.699581][T23961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4235'. [ 1126.710581][T22356] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1126.720235][T22356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.769731][T22356] usb 2-1: Product: syz [ 1126.782333][T22356] usb 2-1: Manufacturer: syz [ 1126.799818][T22356] usb 2-1: SerialNumber: syz [ 1126.926895][T22355] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1127.011480][T22344] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1127.039380][T23950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.067489][T23950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.131799][T22355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 1127.152471][T22355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 1127.164121][T22355] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1127.184546][T22355] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1127.197004][T22356] rtl8150 2-1:1.0: couldn't reset the device [ 1127.207915][T22356] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1127.215764][T22355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.242843][T22355] usb 5-1: config 0 descriptor?? [ 1127.244477][T22344] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1127.261988][T22356] usb 2-1: USB disconnect, device number 67 [ 1127.274756][T22344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.291421][T22344] usb 3-1: Product: syz [ 1127.314379][T22344] usb 3-1: Manufacturer: syz [ 1127.327263][T22344] usb 3-1: SerialNumber: syz [ 1127.352793][T22357] usb 4-1: USB disconnect, device number 78 [ 1127.366631][T22344] usb 3-1: config 0 descriptor?? [ 1127.515490][T23974] vlan3: entered promiscuous mode [ 1127.533092][T23974] vlan3: entered allmulticast mode [ 1127.558725][T23974] hsr_slave_1: entered allmulticast mode [ 1127.608532][T22356] usb 3-1: USB disconnect, device number 29 [ 1128.155079][T23982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4241'. [ 1128.214642][T22344] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1128.406957][T22344] usb 4-1: Using ep0 maxpacket: 8 [ 1128.420129][T22344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1128.441842][T22344] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1128.493588][T22344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.532590][T22344] usb 4-1: config 0 descriptor?? [ 1128.953466][T22344] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1129.132839][T23997] usb usb1: check_ctrlrecip: process 23997 (syz.2.4246) requesting ep 01 but needs 81 [ 1129.168413][T23997] usb usb1: usbfs: process 23997 (syz.2.4246) did not claim interface 0 before use [ 1129.614532][T22355] usbhid 5-1:0.0: can't add hid device: -71 [ 1129.646941][T22355] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1129.667558][T22355] usb 5-1: USB disconnect, device number 68 [ 1129.829891][T24002] tipc: Enabled bearer , priority 10 [ 1130.896582][T24012] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 1130.948222][T22355] tipc: Node number set to 103079639 [ 1130.958285][T24012] PKCS7: Only support pkcs7_signedData type [ 1130.966212][T24014] syzkaller0: entered promiscuous mode [ 1130.991216][T24014] syzkaller0: entered allmulticast mode [ 1131.089176][T22355] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 1131.248678][T22355] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1131.258669][T22355] usb 5-1: config 0 has no interface number 0 [ 1131.264789][T22355] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1131.287371][T22356] usb 4-1: USB disconnect, device number 79 [ 1131.314078][T22344] hid-generic 0000:000E:0000.0049: item fetching failed at offset 0/1 [ 1131.360893][T22355] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1131.369447][T22344] hid-generic 0000:000E:0000.0049: probe with driver hid-generic failed with error -22 [ 1131.378287][T22355] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1131.390865][T22355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.421635][T22355] usb 5-1: config 0 descriptor?? [ 1131.444609][T24011] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1131.467539][T22355] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1131.958835][ T5831] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1132.101459][ T5831] usb 4-1: device descriptor read/64, error -71 [ 1132.266209][T24039] usb usb1: check_ctrlrecip: process 24039 (syz.0.4257) requesting ep 01 but needs 81 [ 1132.276574][T24039] usb usb1: usbfs: process 24039 (syz.0.4257) did not claim interface 0 before use [ 1132.359400][ T5831] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1132.502218][ T5831] usb 4-1: device descriptor read/64, error -71 [ 1133.049498][ T5831] usb usb4-port1: attempt power cycle [ 1133.270360][T22344] usb 5-1: USB disconnect, device number 69 [ 1133.276926][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1133.387379][ T5831] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1133.417644][ T5831] usb 4-1: device descriptor read/8, error -71 [ 1133.592939][T24051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1133.676882][ T5831] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1133.697549][ T5831] usb 4-1: device descriptor read/8, error -71 [ 1133.831562][ T5831] usb usb4-port1: unable to enumerate USB device [ 1134.859415][T22356] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1135.021531][T22356] usb 5-1: Using ep0 maxpacket: 16 [ 1135.030594][T22356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.042907][T22356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.061119][T22356] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1135.078687][T22356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.113924][T22356] usb 5-1: config 0 descriptor?? [ 1135.341281][T24070] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 1135.348116][T24070] PKCS7: Only support pkcs7_signedData type [ 1135.579688][T22356] kye 0003:0458:5013.004A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1135.602202][T24074] usb usb1: check_ctrlrecip: process 24074 (syz.0.4268) requesting ep 01 but needs 81 [ 1135.618634][T22356] kye 0003:0458:5013.004A: unknown main item tag 0x2 [ 1135.637481][T24074] usb usb1: usbfs: process 24074 (syz.0.4268) did not claim interface 0 before use [ 1135.648698][T22356] kye 0003:0458:5013.004A: item fetching failed at offset 4/5 [ 1135.671699][T22356] kye 0003:0458:5013.004A: parse failed [ 1135.706927][T22356] kye 0003:0458:5013.004A: probe with driver kye failed with error -22 [ 1135.726839][ T5831] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1135.734540][T22344] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 1135.897720][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 1135.933154][T22344] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1135.950595][T22344] usb 3-1: config 0 has no interface number 0 [ 1135.965846][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1135.990977][T22344] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1136.032023][ T5831] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1136.102285][T22344] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1136.117250][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.160295][T22344] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1136.176088][ T5831] usb 2-1: config 0 descriptor?? [ 1136.192763][T24084] SET target dimension over the limit! [ 1136.208462][T22344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.291126][T22344] usb 3-1: config 0 descriptor?? [ 1136.317311][T24070] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1136.369987][T22344] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1136.501943][ T5831] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1136.514140][T24088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4274'. [ 1137.264943][T24098] tipc: Enabling of bearer rejected, already enabled [ 1137.364334][T24104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4277'. [ 1137.717343][T22356] usb 5-1: USB disconnect, device number 70 [ 1138.916430][T22356] usb 3-1: USB disconnect, device number 30 [ 1138.922484][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1139.004445][T22344] usb 2-1: USB disconnect, device number 68 [ 1139.240921][T24127] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 1139.546890][T22344] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1139.577137][T22357] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1139.727968][T22344] usb 2-1: Using ep0 maxpacket: 32 [ 1139.734978][T22344] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1139.746965][T22357] usb 4-1: Using ep0 maxpacket: 32 [ 1139.753991][T22357] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1139.765732][T22357] usb 4-1: config 0 has no interface number 0 [ 1139.798106][T22344] usb 2-1: config 0 has no interface number 0 [ 1139.804239][T22344] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1139.837568][T22357] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1139.848389][T22357] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1139.868283][T22344] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1139.881708][T22357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.890116][T22344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.898389][T22344] usb 2-1: Product: syz [ 1139.898864][T22357] usb 4-1: Product: syz [ 1139.902645][T22344] usb 2-1: Manufacturer: syz [ 1139.916213][T22344] usb 2-1: SerialNumber: syz [ 1139.924230][T22357] usb 4-1: Manufacturer: syz [ 1139.929525][T22344] usb 2-1: config 0 descriptor?? [ 1139.938024][T22357] usb 4-1: SerialNumber: syz [ 1139.942646][T22344] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1139.942677][T22344] em28xx 2-1:0.132: Video interface 132 found: isoc [ 1139.966922][T16101] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1140.001257][T22356] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1140.035184][T22357] usb 4-1: config 0 descriptor?? [ 1140.174061][T22356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 1140.185570][T16101] usb 1-1: Using ep0 maxpacket: 16 [ 1140.190968][T22356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33136, setting to 1024 [ 1140.206046][T22356] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 1140.215425][T22356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.228226][T16101] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1140.238777][T16101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.256531][T22356] usb 5-1: config 0 descriptor?? [ 1140.261687][T16101] usb 1-1: Product: syz [ 1140.265882][T16101] usb 1-1: Manufacturer: syz [ 1140.272476][T16101] usb 1-1: SerialNumber: syz [ 1140.291886][T16101] usb 1-1: config 0 descriptor?? [ 1140.306024][T16101] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1140.350832][T22344] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1140.430540][T22344] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1140.439419][T22344] em28xx 2-1:0.132: board has no eeprom [ 1140.454430][T22357] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1140.483880][T22357] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1140.516276][T22344] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1140.525412][T22344] em28xx 2-1:0.132: analog set to isoc mode. [ 1140.530724][T22357] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1140.533796][ T47] em28xx 2-1:0.132: Registering V4L2 extension [ 1140.548915][T22357] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 1140.550366][T16101] gp8psk: usb in 128 operation failed. [ 1140.566322][T22344] usb 2-1: USB disconnect, device number 69 [ 1140.600261][T22344] em28xx 2-1:0.132: Disconnecting em28xx [ 1140.606067][T16101] gp8psk: usb in 137 operation failed. [ 1140.612546][T16101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1140.626377][T16101] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1140.637843][T16101] usb 1-1: media controller created [ 1140.660825][T16101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1140.693605][T16101] gp8psk_fe: Frontend revision 1 attached [ 1140.706903][T16101] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1140.715678][T16101] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1140.790192][T22356] usbhid 5-1:0.0: can't add hid device: -71 [ 1140.816721][T22356] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1140.817673][T16101] gp8psk: usb in 138 operation failed. [ 1140.825422][T16101] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1140.851732][ T47] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1140.855841][T22356] usb 5-1: USB disconnect, device number 71 [ 1140.871779][ T47] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1140.899331][ T47] em28xx 2-1:0.132: No AC97 audio processor [ 1140.911354][T16101] gp8psk: found Genpix USB device pID = 201 (hex) [ 1140.950397][ T47] usb 2-1: Decoder not found [ 1140.957290][ T47] em28xx 2-1:0.132: failed to create media graph [ 1140.973896][ T47] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1141.014286][ T47] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1141.033571][T22344] em28xx 2-1:0.132: Closing input extension [ 1141.051561][T22344] em28xx 2-1:0.132: Freeing device [ 1141.278626][T24159] kAFS: unable to lookup cell 'ÿ' [ 1141.397353][T22356] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1141.459787][T24157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.469005][T24157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.628111][T22344] usb 1-1: USB disconnect, device number 121 [ 1141.650272][T22356] usb 3-1: device descriptor read/64, error -71 [ 1141.891476][T22356] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1141.939262][T22344] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1142.086830][T22356] usb 3-1: device descriptor read/64, error -71 [ 1142.197021][T22356] usb usb3-port1: attempt power cycle [ 1142.227164][T22353] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1142.246820][T22357] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1142.306862][T22344] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1142.386893][T22353] usb 5-1: Using ep0 maxpacket: 8 [ 1142.396018][T22353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1142.415097][T22357] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1142.430164][T22357] usb 2-1: config 0 has no interface number 0 [ 1142.438088][T22353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1142.453524][T22357] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1142.475616][T22353] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1142.489427][T22344] usb 1-1: Using ep0 maxpacket: 8 [ 1142.497490][T22357] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 29284, setting to 64 [ 1142.498882][T22344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1142.521254][T22353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1142.536026][T22353] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1142.546285][T22356] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1142.546425][T22344] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1142.567028][T22344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.576072][T22353] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1142.579115][T22344] usb 1-1: config 0 descriptor?? [ 1142.585331][T22357] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1142.610356][T22353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.618906][T22357] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1142.629663][T22356] usb 3-1: device descriptor read/8, error -71 [ 1142.645439][T22357] usb 2-1: Product: syz [ 1142.655740][T22353] usb 5-1: config 0 descriptor?? [ 1142.662805][T22357] usb 2-1: SerialNumber: syz [ 1142.706921][T22357] usb 2-1: config 0 descriptor?? [ 1142.713845][T24175] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 1142.745753][T18608] Bluetooth: hci4: urb ffff888078471000 submission failed (90) [ 1142.773853][T22357] cm109 2-1:0.8: invalid payload size 64, expected 4 [ 1142.791118][T22357] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input79 [ 1142.827452][T22344] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1142.866927][T22356] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1142.897587][T22356] usb 3-1: device descriptor read/8, error -71 [ 1142.925510][T22344] usb 5-1: USB disconnect, device number 72 [ 1142.969253][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1143.047577][T22357] usb 4-1: USB disconnect, device number 84 [ 1143.069582][T22356] usb usb3-port1: unable to enumerate USB device [ 1143.191900][ C0] cm109_urb_ctl_callback: 43 callbacks suppressed [ 1143.191923][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1143.206856][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1143.214383][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1143.221621][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1143.229436][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1143.236925][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1143.244119][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1143.251286][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1143.258567][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1143.265694][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1143.272857][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1143.281907][T22356] usb 2-1: USB disconnect, device number 70 [ 1143.301022][T22356] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1143.466421][T24181] tipc: Enabling of bearer rejected, already enabled [ 1143.546978][T24178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4298'. [ 1143.801938][T22344] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1144.417065][T16101] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1144.576906][T16101] usb 5-1: Using ep0 maxpacket: 32 [ 1144.591882][T16101] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1144.610235][T16101] usb 5-1: config 0 has no interface number 0 [ 1144.628967][T16101] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1144.672616][T16101] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1144.687746][T16101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.701323][T16101] usb 5-1: Product: syz [ 1144.708171][T16101] usb 5-1: Manufacturer: syz [ 1144.715409][T16101] usb 5-1: SerialNumber: syz [ 1144.731329][T16101] usb 5-1: config 0 descriptor?? [ 1144.748072][T16101] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1144.915530][T16101] em28xx 5-1:0.132: Video interface 132 found: isoc [ 1145.029654][T22356] usb 1-1: USB disconnect, device number 122 [ 1145.199963][T24202] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1145.289382][T16101] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1145.362801][T16101] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1145.386384][T16101] em28xx 5-1:0.132: board has no eeprom [ 1145.476975][T16101] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1145.484844][T16101] em28xx 5-1:0.132: analog set to isoc mode. [ 1145.496870][ T47] em28xx 5-1:0.132: Registering V4L2 extension [ 1145.537119][T16101] usb 5-1: USB disconnect, device number 73 [ 1145.544454][T16101] em28xx 5-1:0.132: Disconnecting em28xx [ 1145.619687][T24209] kAFS: unable to lookup cell 'ÿ' [ 1145.748540][T22344] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1145.792900][ T47] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1145.812696][ T47] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1145.831787][ T47] em28xx 5-1:0.132: No AC97 audio processor [ 1145.856448][ T47] usb 5-1: Decoder not found [ 1145.866091][ T47] em28xx 5-1:0.132: failed to create media graph [ 1145.879470][ T47] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1145.920054][ T47] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1145.929195][T22344] usb 4-1: Using ep0 maxpacket: 32 [ 1145.937158][T22344] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1145.948918][T16101] em28xx 5-1:0.132: Closing input extension [ 1145.954924][T22344] usb 4-1: config 0 has no interface number 0 [ 1145.967691][T16101] em28xx 5-1:0.132: Freeing device [ 1145.972907][T22344] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1145.999298][T22344] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1146.010497][T22344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.019282][T22344] usb 4-1: Product: syz [ 1146.024702][T22344] usb 4-1: Manufacturer: syz [ 1146.029936][T22344] usb 4-1: SerialNumber: syz [ 1146.059875][T22344] usb 4-1: config 0 descriptor?? [ 1146.156902][T22356] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1146.169210][T24226] syzkaller0: entered promiscuous mode [ 1146.186003][T24226] syzkaller0: entered allmulticast mode [ 1146.225186][T24226] tipc: Enabled bearer , priority 0 [ 1146.268216][T24225] tipc: Resetting bearer [ 1146.334294][T22356] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1146.353416][T22356] usb 2-1: config 0 has no interface number 0 [ 1146.359850][T22356] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1146.382010][T22356] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 29284, setting to 64 [ 1146.398414][T24225] tipc: Disabling bearer [ 1146.407630][T22356] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1146.421024][T22356] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1146.449423][T22356] usb 2-1: Product: syz [ 1146.463503][T22356] usb 2-1: SerialNumber: syz [ 1146.479378][T22356] usb 2-1: config 0 descriptor?? [ 1146.492127][T22344] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1146.497978][T24219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1146.519372][T22344] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1146.523370][T22356] cm109 2-1:0.8: invalid payload size 64, expected 4 [ 1146.541282][T22356] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input81 [ 1146.546800][T22344] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1146.572134][T22344] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 1146.781373][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1146.846655][T24238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1146.936699][T24241] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1146.949146][T22356] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1147.035998][T22353] usb 2-1: USB disconnect, device number 71 [ 1147.042055][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1147.108524][T22353] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1147.181402][T22356] usb 1-1: Using ep0 maxpacket: 8 [ 1147.269882][T22356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1147.456410][T22356] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1147.478479][T22356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.520394][T22356] usb 1-1: config 0 descriptor?? [ 1147.553215][T24244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.564247][T24244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.825652][T22356] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1148.017655][T24252] ipvlan2: entered promiscuous mode [ 1148.507859][T24261] tipc: Enabling of bearer rejected, already enabled [ 1148.917506][T22356] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1149.013239][T24267] netlink: 'syz.2.4324': attribute type 11 has an invalid length. [ 1149.022425][T24267] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4324'. [ 1149.045613][T24267] netlink: 'syz.2.4324': attribute type 11 has an invalid length. [ 1149.055073][T24267] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4324'. [ 1149.071643][T24267] netlink: 'syz.2.4324': attribute type 11 has an invalid length. [ 1149.211242][T22353] usb 4-1: USB disconnect, device number 86 [ 1149.257663][T22356] usb 2-1: Using ep0 maxpacket: 32 [ 1149.273193][T22356] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1149.285045][T22356] usb 2-1: config 0 has no interface number 0 [ 1149.303628][T22356] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1149.341876][T22356] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1149.355946][T22356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.373832][T22356] usb 2-1: Product: syz [ 1149.383981][T22356] usb 2-1: Manufacturer: syz [ 1149.394123][T22356] usb 2-1: SerialNumber: syz [ 1149.408030][T22356] usb 2-1: config 0 descriptor?? [ 1149.430371][T24267] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4324'. [ 1149.439488][T22356] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1149.466875][T22356] em28xx 2-1:0.132: Video interface 132 found: isoc [ 1149.597031][T22353] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1149.746885][T22357] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1149.813321][T22353] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1149.831310][T22356] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1149.875415][T22353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.886120][T22353] usb 4-1: Product: syz [ 1149.898856][T22353] usb 4-1: Manufacturer: syz [ 1149.903513][T22353] usb 4-1: SerialNumber: syz [ 1149.935083][T22356] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1149.979874][T22356] em28xx 2-1:0.132: board has no eeprom [ 1150.017466][T22357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 1150.031743][T22357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 1150.061701][T22356] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1150.089863][T22357] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1150.107796][T22356] em28xx 2-1:0.132: analog set to isoc mode. [ 1150.126801][T22355] em28xx 2-1:0.132: Registering V4L2 extension [ 1150.138749][T22356] usb 2-1: USB disconnect, device number 72 [ 1150.156851][T22357] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1150.177111][T22356] em28xx 2-1:0.132: Disconnecting em28xx [ 1150.205855][T22357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.283220][T24280] fuse: Bad value for 'fd' [ 1150.413139][T22353] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1150.450830][T22353] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1150.465170][T22357] usb 3-1: config 0 descriptor?? [ 1150.482545][ T1732] usb 1-1: USB disconnect, device number 123 [ 1150.646527][T22355] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1150.653903][T22355] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1150.664456][T22355] em28xx 2-1:0.132: No AC97 audio processor [ 1150.699167][T22355] usb 2-1: Decoder not found [ 1150.703850][T22355] em28xx 2-1:0.132: failed to create media graph [ 1150.716030][T22355] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1150.728384][T22355] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1151.096926][T22356] em28xx 2-1:0.132: Closing input extension [ 1151.119721][T22356] em28xx 2-1:0.132: Freeing device [ 1151.713932][T24269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.723810][T24269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.975974][T22353] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1152.006690][T22353] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1152.435719][T22353] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 1152.450441][T22357] usbhid 3-1:0.0: can't add hid device: -71 [ 1152.456518][T22357] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1152.496913][T22353] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1152.510126][T22357] usb 3-1: USB disconnect, device number 35 [ 1152.524796][T22353] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1152.558918][T22353] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1152.573190][T22353] usb 4-1: USB disconnect, device number 87 [ 1152.741722][T24310] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1152.936988][ T47] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1153.010272][T24314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1153.137036][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 1153.144279][ T47] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1153.152865][ T47] usb 2-1: config 0 has no interface number 0 [ 1153.165910][ T47] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1153.241504][ T47] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1153.251371][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.259616][ T47] usb 2-1: Product: syz [ 1153.264014][ T47] usb 2-1: Manufacturer: syz [ 1153.269352][ T47] usb 2-1: SerialNumber: syz [ 1153.286972][ T47] usb 2-1: config 0 descriptor?? [ 1153.826919][ T47] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1153.857253][ T47] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1153.897345][ T47] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1153.937142][ T47] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 1154.474777][ T47] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1154.676602][T24334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.685395][T24334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.874185][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 1154.892180][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1154.948340][ T47] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1154.996323][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.049703][ T47] usb 4-1: config 0 descriptor?? [ 1155.140528][T24346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1155.270970][ T47] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1155.476912][T22353] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1155.677579][T22353] usb 5-1: Using ep0 maxpacket: 16 [ 1155.686103][T22353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1155.708775][T22353] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1155.728496][T22353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.754350][T22353] usb 5-1: Product: syz [ 1155.796213][T22353] usb 5-1: Manufacturer: syz [ 1156.002564][T22353] usb 5-1: SerialNumber: syz [ 1156.010149][T24352] tipc: Enabling of bearer rejected, already enabled [ 1156.069329][T22353] usb 5-1: config 0 descriptor?? [ 1156.078647][T22353] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1156.108718][T24353] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4349'. [ 1156.120665][T24353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4349'. [ 1156.131376][T24353] binder: 24349:24353 ioctl c010644f 200000000140 returned -22 [ 1156.139440][T24353] binder: 24349:24353 ioctl c1105511 200000000100 returned -22 [ 1156.247282][T22353] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1156.803073][T24355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4350'. [ 1156.813139][T24355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4350'. [ 1156.906874][T22357] usb 2-1: USB disconnect, device number 73 [ 1157.577859][T22353] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1157.642448][T22353] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1157.670378][T22357] usb 4-1: USB disconnect, device number 88 [ 1157.722009][T22353] em28xx 5-1:0.0: board has no eeprom [ 1157.741202][T24373] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1157.857385][T22353] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1157.873357][T22353] em28xx 5-1:0.0: dvb set to bulk mode. [ 1157.881548][T22356] em28xx 5-1:0.0: Binding DVB extension [ 1158.057328][T22356] em28xx 5-1:0.0: Registering input extension [ 1158.130687][T22344] usb 5-1: USB disconnect, device number 74 [ 1158.138709][T22344] em28xx 5-1:0.0: Disconnecting em28xx [ 1158.272107][T22344] em28xx 5-1:0.0: Closing input extension [ 1158.334537][T22344] em28xx 5-1:0.0: Freeing device [ 1158.386897][T22356] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1158.501199][T24394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1158.552951][T22356] usb 1-1: device descriptor read/64, error -71 [ 1158.560865][T16101] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1158.717943][T16101] usb 2-1: Using ep0 maxpacket: 32 [ 1158.727755][T16101] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1158.737037][T16101] usb 2-1: config 0 has no interface number 0 [ 1158.748774][T16101] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1158.771263][T16101] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1158.785333][T16101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.797121][T22356] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1158.813749][T16101] usb 2-1: Product: syz [ 1158.821742][T16101] usb 2-1: Manufacturer: syz [ 1158.838033][T16101] usb 2-1: SerialNumber: syz [ 1158.860763][T16101] usb 2-1: config 0 descriptor?? [ 1158.916856][ T47] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 1158.926812][T22356] usb 1-1: device descriptor read/64, error -71 [ 1159.043399][T22356] usb usb1-port1: attempt power cycle [ 1159.085579][ T47] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1159.108777][ T47] usb 4-1: config 0 has no interface number 0 [ 1159.128427][ T47] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1159.181589][ T47] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1159.225107][ T47] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1159.234208][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.246331][ T47] usb 4-1: config 0 descriptor?? [ 1159.279922][T24395] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1159.297172][T16101] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1159.336828][T16101] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1159.352681][ T47] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1159.379119][T16101] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1159.397013][T22356] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1159.425426][T16101] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 1159.437675][T22356] usb 1-1: device descriptor read/8, error -71 [ 1159.605662][T24399] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4364'. [ 1159.617710][T24399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4364'. [ 1159.629654][T24399] binder: 24396:24399 ioctl c010644f 200000000140 returned -22 [ 1159.638263][T24399] binder: 24396:24399 ioctl c1105511 200000000100 returned -22 [ 1159.671886][T16101] usb 4-1: USB disconnect, device number 89 [ 1159.677939][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1159.686900][T22356] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1159.707589][T22356] usb 1-1: device descriptor read/8, error -71 [ 1159.817611][T22356] usb usb1-port1: unable to enumerate USB device [ 1160.233607][T24406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.242937][T24406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.515024][T18608] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1160.930067][T24418] fuse: Bad value for 'fd' [ 1160.933184][T24419] fuse: Bad value for 'fd' [ 1161.666426][T24430] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1161.741906][T22357] usb 2-1: USB disconnect, device number 74 [ 1161.751538][T22353] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1162.091005][T24436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1162.222124][T22353] usb 5-1: config 0 has an invalid interface number: 53 but max is 0 [ 1162.235954][T22353] usb 5-1: config 0 has no interface number 0 [ 1162.242742][T22353] usb 5-1: config 0 interface 53 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1162.257004][T22353] usb 5-1: config 0 interface 53 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1162.268377][T22353] usb 5-1: config 0 interface 53 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1162.279893][T22353] usb 5-1: config 0 interface 53 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1162.295278][T22353] usb 5-1: config 0 interface 53 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 1162.344003][T22353] usb 5-1: config 0 interface 53 altsetting 8 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1162.393502][T22353] usb 5-1: config 0 interface 53 altsetting 8 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1162.399779][T24442] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4377'. [ 1162.436062][T24442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4377'. [ 1162.458383][T24442] binder: 24439:24442 ioctl c010644f 200000000140 returned -22 [ 1162.466829][T24442] binder: 24439:24442 ioctl c1105511 200000000100 returned -22 [ 1162.476834][T22357] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1162.497025][T22353] usb 5-1: config 0 interface 53 has no altsetting 0 [ 1162.596453][T22353] usb 5-1: New USB device found, idVendor=105b, idProduct=ac5a, bcdDevice=1c.c8 [ 1162.605908][T22353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.616838][T22353] usb 5-1: Product: syz [ 1162.621179][T22353] usb 5-1: Manufacturer: syz [ 1162.632791][T22353] usb 5-1: SerialNumber: syz [ 1162.680626][T22353] usb 5-1: config 0 descriptor?? [ 1162.712726][T22357] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1162.733938][T22357] usb 3-1: config 0 has no interface number 0 [ 1162.743708][T22357] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1162.777201][T22357] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 29284, setting to 64 [ 1162.822657][T22357] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1162.836515][T22357] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1162.847222][T22357] usb 3-1: Product: syz [ 1162.851614][T22357] usb 3-1: SerialNumber: syz [ 1162.926999][T22357] usb 3-1: config 0 descriptor?? [ 1162.954213][T24438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1162.973819][T22353] usb 5-1: USB disconnect, device number 75 [ 1162.980808][T22357] cm109 3-1:0.8: invalid payload size 64, expected 4 [ 1163.021789][T22357] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input88 [ 1163.193202][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1163.434430][ C0] cm109_urb_ctl_callback: 142 callbacks suppressed [ 1163.434455][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1163.434837][ T47] usb 3-1: USB disconnect, device number 36 [ 1163.441002][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1163.566597][ T47] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1163.706891][ T5831] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 1163.862532][ T5831] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1163.882396][ T5831] usb 1-1: config 0 has no interface number 0 [ 1163.935201][ T5831] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1164.005028][ T5831] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1164.036344][ T5831] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1164.056677][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.108069][ T5831] usb 1-1: config 0 descriptor?? [ 1164.147723][T24452] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1164.237321][ T5831] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1164.443670][T22353] usb 1-1: USB disconnect, device number 2 [ 1164.449658][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1164.926695][T24480] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4386'. [ 1164.973947][T24481] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1165.807180][T24496] usb usb1: check_ctrlrecip: process 24496 (syz.1.4393) requesting ep 01 but needs 81 [ 1165.822303][T24496] usb usb1: usbfs: process 24496 (syz.1.4393) did not claim interface 0 before use [ 1166.038215][T24505] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4394'. [ 1166.051868][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4394'. [ 1166.063427][T24505] binder: 24498:24505 ioctl c010644f 200000000140 returned -22 [ 1166.100735][T24508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1166.200552][T24512] binder: 24498:24512 ioctl c1105511 200000000100 returned -22 [ 1167.213307][T16663] Buffer I/O error on dev loop5, logical block 4095, async page read [ 1167.376784][ T5831] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 1167.540778][ T5831] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1167.556854][ T5831] usb 4-1: config 0 has no interface number 0 [ 1167.583388][ T5831] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1167.617148][ T5831] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1167.696830][ T5831] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1167.712414][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.787308][ T5831] usb 4-1: config 0 descriptor?? [ 1167.837097][T24527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1167.863341][ T5831] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1168.235684][ T47] usb 4-1: USB disconnect, device number 90 [ 1168.235766][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1169.017366][T22344] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 1169.188540][T22344] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1169.196610][T22344] usb 1-1: config 0 has no interface number 0 [ 1169.203590][T22344] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1169.214887][T22344] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1169.226084][T22344] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1169.235416][T22344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.249019][T22344] usb 1-1: config 0 descriptor?? [ 1169.254658][T24544] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1169.297904][T22344] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1169.616245][T24554] netlink: 'syz.1.4407': attribute type 11 has an invalid length. [ 1169.624254][T24554] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4407'. [ 1169.634553][T24554] netlink: 'syz.1.4407': attribute type 11 has an invalid length. [ 1169.642709][T24554] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4407'. [ 1169.651967][T24554] netlink: 'syz.1.4407': attribute type 11 has an invalid length. [ 1169.660136][T24554] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4407'. [ 1169.721773][T22344] usb 1-1: USB disconnect, device number 3 [ 1169.727823][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1169.981008][ T5831] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1170.190664][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.238947][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.309876][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1170.986963][ T5831] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1171.014281][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.039757][ T5831] usb 2-1: config 0 descriptor?? [ 1171.487780][T24573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1171.622172][T24574] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4410'. [ 1171.633231][T24574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4410'. [ 1171.643284][T24574] binder: 24569:24574 ioctl c010644f 200000000140 returned -22 [ 1171.651228][T24574] binder: 24569:24574 ioctl c1105511 200000000100 returned -22 [ 1173.292377][ T5831] usbhid 2-1:0.0: can't add hid device: -71 [ 1173.302823][ T5831] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1173.351613][ T5831] usb 2-1: USB disconnect, device number 75 [ 1173.681471][T24590] usb usb1: check_ctrlrecip: process 24590 (syz.0.4417) requesting ep 01 but needs 81 [ 1173.719224][T24590] usb usb1: usbfs: process 24590 (syz.0.4417) did not claim interface 0 before use [ 1173.865648][T16663] Buffer I/O error on dev loop5, logical block 4095, async page read [ 1173.956880][ T5831] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1174.028285][T22357] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1174.040468][T24602] ================================================================== [ 1174.048565][T24602] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x350 [ 1174.056212][T24602] Read of size 8 at addr ffff88802be5ea18 by task syz.3.4422/24602 [ 1174.064106][T24602] [ 1174.066439][T24602] CPU: 1 UID: 0 PID: 24602 Comm: syz.3.4422 Tainted: G L syzkaller #0 PREEMPT(full) [ 1174.066468][T24602] Tainted: [L]=SOFTLOCKUP [ 1174.066475][T24602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1174.066489][T24602] Call Trace: [ 1174.066497][T24602] [ 1174.066506][T24602] dump_stack_lvl+0xe8/0x150 [ 1174.066536][T24602] print_report+0xba/0x230 [ 1174.066559][T24602] ? dvb_device_open+0xc4/0x350 [ 1174.066581][T24602] kasan_report+0x117/0x150 [ 1174.066602][T24602] ? dvb_device_open+0xc4/0x350 [ 1174.066627][T24602] dvb_device_open+0xc4/0x350 [ 1174.066647][T24602] ? do_raw_spin_unlock+0xf5/0x210 [ 1174.066668][T24602] chrdev_open+0x4cd/0x5e0 [ 1174.066690][T24602] ? __pfx_chrdev_open+0x10/0x10 [ 1174.066709][T24602] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1174.066736][T24602] ? __pfx_chrdev_open+0x10/0x10 [ 1174.066755][T24602] do_dentry_open+0x785/0x14e0 [ 1174.066781][T24602] vfs_open+0x3b/0x340 [ 1174.066803][T24602] ? path_openat+0x2df0/0x3860 [ 1174.066832][T24602] path_openat+0x2e08/0x3860 [ 1174.066866][T24602] ? __pfx_stack_trace_save+0x10/0x10 [ 1174.066888][T24602] ? stack_depot_save_flags+0x33/0x810 [ 1174.066919][T24602] ? __pfx_path_openat+0x10/0x10 [ 1174.066946][T24602] ? __x64_sys_openat+0x138/0x170 [ 1174.066969][T24602] ? do_syscall_64+0x14d/0xf80 [ 1174.066990][T24602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.067013][T24602] ? __lock_acquire+0x6b5/0x2cf0 [ 1174.067040][T24602] do_file_open+0x23e/0x4a0 [ 1174.067070][T24602] ? __pfx_do_file_open+0x10/0x10 [ 1174.067107][T24602] ? _raw_spin_unlock+0x28/0x50 [ 1174.067134][T24602] ? alloc_fd+0x64b/0x6c0 [ 1174.067161][T24602] do_sys_openat2+0x113/0x200 [ 1174.067186][T24602] ? __pfx_do_sys_openat2+0x10/0x10 [ 1174.067213][T24602] ? __task_pid_nr_ns+0x28/0x490 [ 1174.067243][T24602] __x64_sys_openat+0x138/0x170 [ 1174.067269][T24602] do_syscall_64+0x14d/0xf80 [ 1174.067289][T24602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.067309][T24602] ? clear_bhb_loop+0x40/0x90 [ 1174.067331][T24602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.067351][T24602] RIP: 0033:0x7f55a115c84e [ 1174.067370][T24602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1174.067397][T24602] RSP: 002b:00007f55a2098b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1174.067420][T24602] RAX: ffffffffffffffda RBX: 00007f55a20996c0 RCX: 00007f55a115c84e [ 1174.067436][T24602] RDX: 0000000000000002 RSI: 00007f55a2098c00 RDI: ffffffffffffff9c [ 1174.067451][T24602] RBP: 00007f55a2098c00 R08: 0000000000000000 R09: 0000000000000000 [ 1174.067465][T24602] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1174.067479][T24602] R13: 00007f55a1416038 R14: 00007f55a1415fa0 R15: 00007f55a153fa48 [ 1174.067502][T24602] [ 1174.067510][T24602] [ 1174.343098][T24602] Allocated by task 1: [ 1174.347162][T24602] kasan_save_track+0x3e/0x80 [ 1174.351843][T24602] __kasan_kmalloc+0x93/0xb0 [ 1174.356416][T24602] __kmalloc_cache_noprof+0x31c/0x660 [ 1174.361778][T24602] dvb_register_device+0x2fd/0x2210 [ 1174.366962][T24602] dvb_register_frontend+0x649/0x950 [ 1174.372231][T24602] vidtv_bridge_probe+0x9aa/0xf80 [ 1174.377240][T24602] platform_probe+0xf9/0x190 [ 1174.381816][T24602] really_probe+0x267/0xaf0 [ 1174.386305][T24602] __driver_probe_device+0x18c/0x320 [ 1174.391574][T24602] driver_probe_device+0x4f/0x240 [ 1174.396586][T24602] __driver_attach+0x3e7/0x710 [ 1174.401336][T24602] bus_for_each_dev+0x23b/0x2c0 [ 1174.406176][T24602] bus_add_driver+0x345/0x670 [ 1174.410837][T24602] driver_register+0x23a/0x320 [ 1174.415589][T24602] vidtv_bridge_init+0x28/0x50 [ 1174.420340][T24602] do_one_initcall+0x250/0x8d0 [ 1174.425113][T24602] do_initcall_level+0x104/0x190 [ 1174.430037][T24602] do_initcalls+0x59/0xa0 [ 1174.434347][T24602] kernel_init_freeable+0x2a6/0x3e0 [ 1174.439531][T24602] kernel_init+0x1d/0x1d0 [ 1174.443849][T24602] ret_from_fork+0x51e/0xb90 [ 1174.448427][T24602] ret_from_fork_asm+0x1a/0x30 [ 1174.453181][T24602] [ 1174.455487][T24602] Freed by task 24542: [ 1174.459532][T24602] kasan_save_track+0x3e/0x80 [ 1174.464203][T24602] kasan_save_free_info+0x46/0x50 [ 1174.469211][T24602] __kasan_slab_free+0x5c/0x80 [ 1174.473954][T24602] kfree+0x1c1/0x630 [ 1174.477834][T24602] dvb_device_open+0x2cd/0x350 [ 1174.482581][T24602] chrdev_open+0x4cd/0x5e0 [ 1174.486982][T24602] do_dentry_open+0x785/0x14e0 [ 1174.491728][T24602] vfs_open+0x3b/0x340 [ 1174.495781][T24602] path_openat+0x2e08/0x3860 [ 1174.500369][T24602] do_file_open+0x23e/0x4a0 [ 1174.504861][T24602] do_sys_openat2+0x113/0x200 [ 1174.509525][T24602] __x64_sys_openat+0x138/0x170 [ 1174.514367][T24602] do_syscall_64+0x14d/0xf80 [ 1174.518941][T24602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.524816][T24602] [ 1174.527124][T24602] The buggy address belongs to the object at ffff88802be5ea00 [ 1174.527124][T24602] which belongs to the cache kmalloc-256 of size 256 [ 1174.541158][T24602] The buggy address is located 24 bytes inside of [ 1174.541158][T24602] freed 256-byte region [ffff88802be5ea00, ffff88802be5eb00) [ 1174.554849][T24602] [ 1174.557166][T24602] The buggy address belongs to the physical page: [ 1174.563576][T24602] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2be5e [ 1174.572318][T24602] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1174.580803][T24602] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1174.588337][T24602] page_type: f5(slab) [ 1174.592304][T24602] raw: 00fff00000000040 ffff88813fea3b40 dead000000000122 0000000000000000 [ 1174.600869][T24602] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1174.609438][T24602] head: 00fff00000000040 ffff88813fea3b40 dead000000000122 0000000000000000 [ 1174.618093][T24602] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1174.626837][T24602] head: 00fff00000000001 ffffea0000af9781 00000000ffffffff 00000000ffffffff [ 1174.635488][T24602] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1174.644133][T24602] page dumped because: kasan: bad access detected [ 1174.650536][T24602] page_owner tracks the page as allocated [ 1174.656232][T24602] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13229738160, free_ts 0 [ 1174.675920][T24602] post_alloc_hook+0x231/0x280 [ 1174.680678][T24602] get_page_from_freelist+0x24dc/0x2580 [ 1174.686223][T24602] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1174.692014][T24602] allocate_slab+0x77/0x660 [ 1174.696502][T24602] refill_objects+0x331/0x3c0 [ 1174.701168][T24602] __pcs_replace_empty_main+0x2b9/0x620 [ 1174.706700][T24602] __kmalloc_cache_noprof+0x392/0x660 [ 1174.712066][T24602] bus_add_driver+0x162/0x670 [ 1174.716728][T24602] driver_register+0x23a/0x320 [ 1174.721482][T24602] usb_register_driver+0x1e4/0x390 [ 1174.726592][T24602] do_one_initcall+0x250/0x8d0 [ 1174.731380][T24602] do_initcall_level+0x104/0x190 [ 1174.736313][T24602] do_initcalls+0x59/0xa0 [ 1174.740634][T24602] kernel_init_freeable+0x2a6/0x3e0 [ 1174.745817][T24602] kernel_init+0x1d/0x1d0 [ 1174.750138][T24602] ret_from_fork+0x51e/0xb90 [ 1174.754718][T24602] page_owner free stack trace missing [ 1174.760065][T24602] [ 1174.762374][T24602] Memory state around the buggy address: [ 1174.767985][T24602] ffff88802be5e900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1174.776028][T24602] ffff88802be5e980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1174.784070][T24602] >ffff88802be5ea00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1174.792110][T24602] ^ [ 1174.796940][T24602] ffff88802be5ea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1174.804982][T24602] ffff88802be5eb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1174.813018][T24602] ================================================================== [ 1174.839024][T24602] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1174.846273][T24602] CPU: 0 UID: 0 PID: 24602 Comm: syz.3.4422 Tainted: G L syzkaller #0 PREEMPT(full) [ 1174.857216][T24602] Tainted: [L]=SOFTLOCKUP [ 1174.861518][T24602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1174.871547][T24602] Call Trace: [ 1174.874805][T24602] [ 1174.877717][T24602] vpanic+0x56c/0xa60 [ 1174.881683][T24602] ? __pfx_vpanic+0x10/0x10 [ 1174.886162][T24602] ? __pfx___schedule+0x10/0x10 [ 1174.890994][T24602] panic+0xc5/0xd0 [ 1174.894694][T24602] ? __pfx_panic+0x10/0x10 [ 1174.899099][T24602] ? preempt_schedule_thunk+0x16/0x30 [ 1174.904500][T24602] ? dvb_device_open+0xc4/0x350 [ 1174.909362][T24602] check_panic_on_warn+0x89/0xb0 [ 1174.914297][T24602] ? dvb_device_open+0xc4/0x350 [ 1174.919129][T24602] end_report+0x73/0x180 [ 1174.923355][T24602] ? dvb_device_open+0xc4/0x350 [ 1174.928187][T24602] kasan_report+0x128/0x150 [ 1174.932676][T24602] ? dvb_device_open+0xc4/0x350 [ 1174.937528][T24602] dvb_device_open+0xc4/0x350 [ 1174.942197][T24602] ? do_raw_spin_unlock+0xf5/0x210 [ 1174.947312][T24602] chrdev_open+0x4cd/0x5e0 [ 1174.951727][T24602] ? __pfx_chrdev_open+0x10/0x10 [ 1174.956658][T24602] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1174.962975][T24602] ? __pfx_chrdev_open+0x10/0x10 [ 1174.967906][T24602] do_dentry_open+0x785/0x14e0 [ 1174.972671][T24602] vfs_open+0x3b/0x340 [ 1174.976742][T24602] ? path_openat+0x2df0/0x3860 [ 1174.981509][T24602] path_openat+0x2e08/0x3860 [ 1174.986097][T24602] ? __pfx_stack_trace_save+0x10/0x10 [ 1174.991470][T24602] ? stack_depot_save_flags+0x33/0x810 [ 1174.996930][T24602] ? __pfx_path_openat+0x10/0x10 [ 1175.001878][T24602] ? __x64_sys_openat+0x138/0x170 [ 1175.006916][T24602] ? do_syscall_64+0x14d/0xf80 [ 1175.011687][T24602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.017759][T24602] ? __lock_acquire+0x6b5/0x2cf0 [ 1175.022701][T24602] do_file_open+0x23e/0x4a0 [ 1175.027219][T24602] ? __pfx_do_file_open+0x10/0x10 [ 1175.032254][T24602] ? _raw_spin_unlock+0x28/0x50 [ 1175.037110][T24602] ? alloc_fd+0x64b/0x6c0 [ 1175.041435][T24602] do_sys_openat2+0x113/0x200 [ 1175.046106][T24602] ? __pfx_do_sys_openat2+0x10/0x10 [ 1175.051299][T24602] ? __task_pid_nr_ns+0x28/0x490 [ 1175.056232][T24602] __x64_sys_openat+0x138/0x170 [ 1175.061112][T24602] do_syscall_64+0x14d/0xf80 [ 1175.065703][T24602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.071752][T24602] ? clear_bhb_loop+0x40/0x90 [ 1175.076415][T24602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.082296][T24602] RIP: 0033:0x7f55a115c84e [ 1175.086699][T24602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1175.106296][T24602] RSP: 002b:00007f55a2098b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1175.114700][T24602] RAX: ffffffffffffffda RBX: 00007f55a20996c0 RCX: 00007f55a115c84e [ 1175.122658][T24602] RDX: 0000000000000002 RSI: 00007f55a2098c00 RDI: ffffffffffffff9c [ 1175.130614][T24602] RBP: 00007f55a2098c00 R08: 0000000000000000 R09: 0000000000000000 [ 1175.138576][T24602] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1175.146539][T24602] R13: 00007f55a1416038 R14: 00007f55a1415fa0 R15: 00007f55a153fa48 [ 1175.154527][T24602] [ 1175.157894][T24602] Kernel Offset: disabled [ 1175.162211][T24602] Rebooting in 86400 seconds..