last executing test programs: 4.977237998s ago: executing program 2 (id=323): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0400"]) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a01fe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffd08000340000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x7) sendmsg$rds(r3, &(0x7f0000001a00)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000880)=""/4089, 0xff9}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) close(0x3) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = socket$rds(0x15, 0x5, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c00078018000180"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) (async) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r9, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="66b9800000c00f326635010000000f30bf44000f4af90f30b80e008ed8650f01c4f30fc7b1001066b8d38fffff0f23c80f21f866350000c0000f23f8ba2000b006ee660f380761e2", 0x48}], 0x1, 0x40, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) r10 = accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@empty, @in=@multicast2}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}}}, &(0x7f0000000200)=0xe8) 4.868609474s ago: executing program 2 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80080) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'macvlan0\x00', @multicast}) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) timer_create(0x3, 0x0, &(0x7f0000000080)) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x8, 0xfffffffd, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x1fffffffffffe, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, {0xffffffffffffffff}, 0x0, 0x6e6bb0}, [@tmpl={0x44, 0x8, [{{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8081}, 0x800) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async, rerun: 64) rt_sigaction(0xe, &(0x7f0000000300)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x18000002, 0x0, {[0xffffffffffff7fff]}}, 0x0, 0x8, &(0x7f0000000280)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x1, 0x0) (async) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r8, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010003002e095e3133ca9a383e7fdabd88228426800000004ac8ece868a033505d212073c459e74eac904d8bc0b2d8646679e0b04bf8df2ef55c3850f51f95f254e807a53e25793ded735a4df0b0838c4ddc50c2be2afc1a6c7306123819d04f8845d8f03000f750204c11bd6a202bbea34cbbc1d5061af30b082e21b450d855e8ca4d986f5c316c2534666a6addf3f6295b72f75fe3fbce9cb237555006fd8195497ebeb392e913868c368b1503a2c919c9a5a07ec1756d452e94c068bd9f45e39df6cbc02945611fe387f5f2a24a631f790337f4a0f5281ecf6d1e50c8d27f68e4e3b7", @ANYRES32=r9, @ANYBLOB="0c009900ff070000740000001400040073797a6b616c6c6572300000000000000800050004000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 4.845550609s ago: executing program 2 (id=325): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) unshare(0x68040200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x20, 0x1405, 0x100, 0x70bd2b, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x80b0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2}], 0x1, 0x40801) recvmsg$qrtr(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/134, 0x86}, {&(0x7f0000000540)=""/24, 0x18}], 0x2, 0x0, 0x0, 0x20}, 0x38, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000180)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)="a1c0ffff000039a9029e2d34161c00006145f0d9", 0x14}], 0x1}}], 0x1, 0x20000880) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) r4 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x0) syz_usb_ep_write(r4, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 4.565117951s ago: executing program 0 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000007060102000000000000000007000007f5ff00000700000015000640fffffffd"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360001000000000904960102502f7e0009050f10200001ff08090470e96808dcdad3090503101000740406090403"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) sync_file_range(r0, 0xfffffffffffffff8, 0x8, 0x6) 2.897145104s ago: executing program 0 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x57}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x24040000) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7023fddbdf253100000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000804) 2.736752548s ago: executing program 0 (id=333): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000001080)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000200)={0x2, 0x0, [{0x0, 0x0, 0x8}, {0x73, 0x0, 0x8}]}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x14, 0x1e4, &(0x7f0000000740)}) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1, 0x4782, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet6(0xa, 0x80000, 0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a2401fd6e000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r7, @ANYBLOB="05"], 0x0) 1.947922234s ago: executing program 1 (id=336): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB="b01100001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200002000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000f50300000000000000020000000000000000000000000000000104000000000000000000000000000002000000000000000300000000200000000000000000000000000000000000000100000000000000440005007f000001000000000000000000000000000000042b0000000a000000fe8000000000000000000000000000aa0000000004000b000000000000000000000000000c1008000810080000810010"], 0x11b0}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 1.808711323s ago: executing program 1 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f080002880100000018f7f5fc7fcede459489a029f786d837138f2f43fbbdd5949f2f11b3cd80dd02cfd8d8128f1199d8588b25aada5311c566a15a2e1e983f462f5479da948efef4ea8979d06c8ca5412e7b022a717518950533cf65ce3aa04411fd609375024acfdb802a5725cce152f677fd5ce95631d14e0e677817a62752d50a86ce12ead310351838e61425e9a86913c1a7ebdd8c1ddf1ed4af9ca8748c57a3c0f890442d2d539dc54af40f429c046b54f2b32e862d3d90038c606b91096beca3bd583ad6913f486943576854974575", 0xff08) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) getsockopt$inet_buf(r1, 0x0, 0x11, &(0x7f0000000040)=""/38, &(0x7f0000000200)=0x26) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=0x0], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000420000/0x3000)=nil, &(0x7f0000e7c000/0x2000)=nil, 0x3000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = userfaultfd(0x801) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, &(0x7f0000000080)) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x280}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x184, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xa, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cbcmac(aes)\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000f1, 0x0, 0x67c7}]}) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="2011040600000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.446470371s ago: executing program 2 (id=339): socket$inet_udplite(0x2, 0x2, 0x88) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/61, 0x3d) 1.368749072s ago: executing program 3 (id=340): syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100002f719bd09c1820422c325ab479c5600e594ed7aab75573ce16d38801020301904000cd220e000faf2eba9ce8fd15cdf449dc2de39f6a6f7a27b33a4471064a371cdc9ca3c7f95f62439d373724ed57b2d8203e7a489d2c157bc09eac4b65fa6d18b344d3a76e9f59133a68dc1791103f459973bc665e5495596f5bde96f19d422d78cbc95d29a38ae141ec0c0718c5392b8d3959da7d332bf4c5bc8a1fe5661ea991"], 0x0) (async) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100002f719bd09c1820422c325ab479c5600e594ed7aab75573ce16d38801020301904000cd220e000faf2eba9ce8fd15cdf449dc2de39f6a6f7a27b33a4471064a371cdc9ca3c7f95f62439d373724ed57b2d8203e7a489d2c157bc09eac4b65fa6d18b344d3a76e9f59133a68dc1791103f459973bc665e5495596f5bde96f19d422d78cbc95d29a38ae141ec0c0718c5392b8d3959da7d332bf4c5bc8a1fe5661ea991"], 0x0) r1 = syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x227e, 0xfffffffffffffffe) eventfd2(0x8, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, @default, @bpq0, 0x5, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}) fstatfs(r2, &(0x7f0000000300)=""/215) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) (async) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f0000000000)={0xfffffffeffffffff, 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58ff90f0", "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304, 0x34}, "f6d0d3f08ab5712f", "ae224a0d7a4a27ff96d9692d2c7408f1", "7209ca5b", "eaeb2dc22759c82f"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304, 0x34}, "f6d0d3f08ab5712f", "ae224a0d7a4a27ff96d9692d2c7408f1", "7209ca5b", "eaeb2dc22759c82f"}, 0x28) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @local, 0xffffffff}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @local, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.281042345s ago: executing program 2 (id=341): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x100000000, 0xb0000000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x3b9ac9ff, 0x0, 0x8, 0x0, 0x2000000000000000, 0x5a6c0ff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x92}, 0x408c0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="01022abd7000fedbdf250f00000021000e006804020004007e15000408"], 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13c0"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x58, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0xfffffffffffffe9a, 0x83, 0x1}}]}, 0x58}}, 0x4050) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.210826511s ago: executing program 1 (id=342): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/dev_mcast\x00') fcntl$setown(0xffffffffffffffff, 0x8, r0) mount(&(0x7f0000000080)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='f2fs\x00', 0x8000, &(0x7f0000000140)='}:!+:-\x00') timer_create(0x2, &(0x7f0000000180)={0x0, 0x29, 0x1, @tid=r0}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f0000000240)) r3 = accept4$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10, 0x800) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, r4, &(0x7f0000000380)={0xd, 0x6, 0x1}) setxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@ng={0x4, 0x17, "eaf671"}, 0x5, 0x3) r5 = socket(0x21, 0x800, 0x2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000480)={0x0, 0x8}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000500)={r6, 0x107a, 0x79, "1b418047abbb2d5d3db7b0018e5631b97eb16546a9689297653c10740e85dc427198b1392b81ecfe2b2f696a7bf66b4f4ae21ff05e613f0deea9d7a00252ed11a0f94350ded42d747cf73c85f3242c1790f3ba4f298264fa7207b9c7da386402b81b28113b097db7d7f6b8d3d3cacfa0d0f6acf533becbebda"}, 0x81) sendto$inet6(r1, &(0x7f00000005c0)="563db631ae86013087701031bb314b2c4d49cb58323c830c139379ac3db6495e1749c7a932cd8173676d828b3c3959f690a6e5453789d88f301ebbd68597c7baada76837ddefdfc8507a22ba47993159cf07abec4832e936d14cb7aef3a90eeeb41288373afc8e329e25d2572dbed21026492bde327b0a70e0564131631427dc", 0x80, 0x4000000, &(0x7f0000000640)={0xa, 0x4e21, 0x10000, @mcast1, 0x800}, 0x1c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000680)=@sack_info={r6, 0x5, 0x40}, &(0x7f00000006c0)=0xc) lsetxattr$trusted_overlay_redirect(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x8, 0x2) truncate(&(0x7f00000007c0)='./file0\x00', 0x8001) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x400200, 0x0) ioctl$PPPIOCSMRU1(r7, 0x40047452, &(0x7f0000000840)=0x20000000) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000880)={0x28, 0x0, 0x2710, @host}, 0x10) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000008c0)={0x8, [0x7, 0x36d, 0x1, 0xa926, 0x6, 0x7, 0x2, 0x4]}, &(0x7f0000000900)=0x14) timer_gettime(r2, &(0x7f0000000940)) recvfrom$inet_nvme(r5, &(0x7f0000000980)=""/129, 0x81, 0x61, &(0x7f0000000a40)=@llc={0x1a, 0x207, 0x4, 0xa, 0x7b, 0x1, @broadcast}, 0x80) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x10, 0x3fb, 0x8, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x4040880) write$P9_RREADLINK(r3, &(0x7f0000000bc0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000e80)={&(0x7f0000000c00), 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x1a0, 0xb, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x74, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x60, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0xd6, 0xd, 0x1, 0x0, "40b47fe132b84a6d2cf1d76c15f2ec84e7a1b5c2827f60e9c84d365dc70cfe5c222078b06100888dc0cee6a1001dd2282cc7bb4bbf7dc503a2b971930eb194294ede8adcd8594f13eba7972033e1c05dfa54502258fd7c8aaf9461847dacfa66b3becc6fedfab2a9598c296aac0bb679af0c1ff65c119628699f9797f203de7c7024af5e35f549ab84357d2265f6515617cf12bda5892873d90e4e147b5de88b94760671ab76c83ded00d2045a9eaa555e15bac04ed51505514cc94463cca9682fdc9edc69f426e6b0d0b71cee2c677e3aff"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1c8}, 0x1, 0x0, 0x0, 0x4044}, 0x4008000) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000001fc0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/4096, 0x1000, 0x1, &(0x7f0000001ec0)=""/254, 0xfe}, &(0x7f0000002000)=0x40) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000002040)={0x9, 0x7, 0x5, 0x0, 0x0, [{{r1}}, {{r9}, 0xfffffffffffffff7}, {{r7}, 0x318}, {}, {{r9}, 0x6}]}) 1.104787887s ago: executing program 0 (id=343): r0 = socket$tipc(0x1e, 0x5, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@l={0x92, 0xe, 0xc0}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xef4f}]}}}]}]}], {0x14}}, 0x78}}, 0x20040800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8044}, 0x0) 1.100744458s ago: executing program 3 (id=344): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffd, 0x8000) close_range(0xffffffffffffffff, r0, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x311400, 0x0) read(r1, &(0x7f0000000080)=""/114, 0x72) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000100)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0xfffffffffffffffc, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000140)={0xc, {0x57, "e64354f30b2f7d4647037f9fc61908f34cd6c11887bedddbe384da1a74d0005c3c850e3cabfa3e9fe5a246d0c6bb4e7a43f9c115ded1985520c8c331203d1f3d24c8dda99a80ead86c088b706ad3a5e971327d3b3e34e6"}}, 0x5d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x20004080) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000340)={r2, 0x671e, 0x1, "3e388f0523767d6a5ee94403257bd938b8afa9ba0c674e504f9c185e32deb5d93385d8b2e548eb26396ccdee99bf67da0ecce00819b9b9cd6f1a7e45025a863b2c42ee56312471ad2cb1ef52cf1c312c4beb133440216321771405182d541781668afaa1416a1fd813676462a2715dec4253ac4c"}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000003c0)=0x1, &(0x7f0000000400)=0x2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x80) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10004040) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000680), &(0x7f00000006c0)={0x0, 0xfb, 0x3e, 0x1, 0x1, "f4f32657f302a71fd1d8be3526326c0c", "32ab252fa12a73f8f3d16ee24b353f38eaf659a922ff52f78af248c8e881c3c680af7d151a16b34c06"}, 0x3e, 0x0) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000700), 0x4) fstat(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000007c0)) write$binfmt_script(r1, &(0x7f0000000800)={'#! ', './file0', [{0x20, '/dev/dri/card#\x00'}, {0x20, '/dev/dri/card#\x00'}, {0x20, '-('}], 0xa, "814c8866573d061c606dbab2a8648811a8f8c03180b16e9939fabd5becd672f07751afb0be82795a2f477e05f84fb92b3ff18f46435d4f36c552a14832b7fd4fbd12988d0d23b7ab294df6796daa48bde407eed8ed8b23fcd566731e2c0283485d4fd19c91d418b536527156e00d4d972030e65c3a62e0feb82b12b450da3f41ab17df22563529348a3ee669f871db473ca9d42ec9d29a71a59b894da9288f8e8b6f761d6eaba79afadefa455245aaf8be18b02969a822fc6d5a75abc89aa34f87e4a1e6c5104d47e41bc4b05fc7db8b8224605a7a97a9d566beaffeaac2bcaf7b129455c4014bdc5175841d6323d22115ac855219faecc167fbe477d66b93f603e32d497c47514bf83ad00de8797771f9d99ac5ee3eed21c31ee0209bf39df12b473c6e58136cd405483d33c6b99723b493b9f8e6f2098bd3b8dffa34387bb8451ce2cf26eca145ad6e848c8699a1ec369e0d4954d1302ee201036d42f3e49cbac4b95877f9cec91b43185f91ac305bcf8782ab88776afe8a464dd26cd529d9119b02173c1845ae268f903914b5303311a09cd722cd098bc831bb9b420ec5503dee43c8651ebf909938c25a256d20a5fd5cf95d422e2680efe4bccf77e6e0e63e3e8322b3e8d0b31f3af1125d6bcf1955de009f6ff3872c3bd7411ca3616ffb5d5ae39680ad04b55a8ff05a23d964e723740666c4a64c801c8a5f7b770c45d2730d37779ae2e26d842d7b93f4ec85aaaa50ead6bcb4608b078ee0de1b04e21d8c50f8ac339862bc7a90a4312f1ebdc032b1f00c8ce97acd24e28afde370bb3e8fd9599c6340cf0acf09242ab517d4fb83eb27cd342f902fcac11967f6315b2338be0465875bed919c9db4acd2cb058c947af53a0ae69308c3d89e0435039da8ad7f38402e01d19a45094b4621250068cba1e146758c4f0b01c8d7c2f11204ee46a92da9fada7933d9bfab28458bccaa572bc63153881a94f60d56ee5da8b57df4cef98b315ae45cd3613b9dddc57e0016249bbe8593e788df31ef42ed9dac7a30340057d49828126a21413a8e7ea9aba43289ac681a1ea950e3dd9a82b368ef569a9174116b41475f16cfb2c0210503ea2436a01fbddf50c8f9d9442e983c0d8f4b37b0e709fb44a7cc3e40a5f7906441ecaa7244dc6dc87a298e4ef4eccd39d3c606b50dd8c6cc42a9ffee20b691d0ea152b72964f013705b381fb96480ed8dfb034a315857b886a9ace01e16ea354fcd384f2a3747db1af7cbd4f9f70bc30d4d0e94d4e76bb9851010c64becc27513c67771e32378da5522504807f9dde4585ae70083216d2fd7a85555d5c93fe3a8c53f3817b2b085c35dc2dee1c2928866e11843e2a225136d80f6ce89b8e048504767a81039c586ea32133a772069f909c193bd7d7cb420e176f6b04f71ed1bd1acd0c2225de24f04326bc834854cfe69ae8faeecb28abb8e1133d0207a258654b50f7d3a337ec302c1be64698a00743426e46ea89f070fe8bb90c37affdb191ec8feba6a46f36371ce9e9e2a215f2eebf25832b1f4892c7586b84b22858d3f1add92dca5c5a58e356a22577fb658804de218cc65579bd8565814775e81cf3b929ca87f058751183174a78ea06c38b2fa5f580b78a0530f74253aeed6d5d31eee2c4dc7537c844e07adcfeefd4790bb72b9503db5f02415caf7750b99854996130ac7ba438c3469cbe93ed4b8fb7b636f990b87add69bca4f9e98900b922b6bc01644c8e24be2b150f7614a2ec3836b1043cb7a883d5369e78ef6755cc736e6a317d5fb06426d643d6ef325c16fb0d1767477706fc9f11fdb0ee4f020f14ff271260194e76e6bda2c538019babbd204d3445db292d8794bf9167b8c30c17a11e67dd2ccc7e707950307afbfad45c77e2c6ece7bf3fcc81a0585d2377614bc0962048d2eb453ef2e2ab350507659047298b3f4e3e369da1b8f92554e5980069722815c2ac8334ca857f3fc5750e24298204607a6ef954b9b84f568b1ee19728cd1b5067c493f8ceab21d0a2a2d93b9604b5e97aea4efe9587897aca1fa6654af5cc56079a2b603a47103072e602a72c78126550902ab34cb0368d95cfba320cb30a7d835cef5a1a6c21b739287075528a8deab29a05e0567c161bdbd26f138a72187b5be9e0107a89c37c70e7f2aab8f418a28592c7362450c92b4c8eef1436996b5bc9f23105fb47dadddc6b2c379b6e39969f4471c81c95b132209d29b04225c3afc6dec686f637e1c50f2bc9aba73d37a3b50497c07e90bf9b7ef318a51a92afd20f0c9d64bdc4c715e16ccc31325a7f1b369d14f0f6d3f5e9380da9bef5937a8312f27622ceced3df6ced86a043ace06fff4b9df432553f8b767573bfb51512f0071fdd2f8bd5a138382d33d385e7f39e7b870d25c02616a682cafbad2c44dee3b3d644a6e1eb2aaef1c5852e6a2817591c5c14e8e69fc857a55b02f56055439a55a8063b3663fbaf779b934661b1a88a340e611f525dbfcfa5a785a164354f6a60ea634ac0d158140baf4c7acab5071c57baec226d29001435083b8b0ce9a09447bd550dd2e2e4b777db46a64b2f2923d6a65beea9f53064dd958de2f49dd28625c3029cdd2b0bc5d50dd55f6246617a5749b4fc246e27481adb9e3815d9bb9754192b6e045580f2f895ee25bd82da26d80cabaf626db31618f080cb5844bb9969ad83d193bc0cf784e4caca0c2ad855ad407a0ae25f358ca2780528beab890d3c7dbc164463d03b864bd2eba17c02f9af47eb5ed0e432c4b09a78f46aa530c58ac1c5ff086c5c1cade85a42d7b8832d21ea73e65fdb117f948ac6eea1933dda05a091de6e66de8ecdb47f2c7865b6bd084ffcbff386ba86ce5832bb137d02104fc8062fcb742d62727fe31ca61a1ec954aee8f8d14a4b2334b1159670970b0fb6821b26697d5973fa37b067041f4ff1257171a1be09707987310d525a55adad80c501765acaac6a8c4e0be06d828884212ba45918f347e798442060d27bc2bd64385a2e85e7ea97300d86572c2e7b41291c4f4fbfce80cc81e8a925bf28dda4180a11a7f63c4b908244281c3992db5addda75a06744ee2d94ae940defcfd99f3473c67142c32544b76c24ad66f64f3e11d43e3aa704fe4f2e9ef1ec7d514e11064daba92398f914307dcbaa4fe9c067629fb2bbd3fe55942957a750d6513b9620970d41b432ba7d6d1a2b099a82033d25a295c333aef25504407335428a55bedce67f889594bef3b4022cb7a3071c7d975deec756e11ab02c6d2c0f6185fdd2a09955cae4fcf93de8b9df7fbf88f0286ccb6b01c532d4ffcefd2d10bd47b9a4992baca805bab9e7151a776e0403e0e1bbe1e553d31a9a521112f06f15bdece86e8475652a71085297e4bfeb15da971977505ac75886fb20a06b999340cdc3c2ff7e2a2231a385f8a7c88ff454e94cb44b74f8bb9c27a029250f271db90c18001ee07652cc730ac33a6a0ef754514a31e9e870eadf690c3f2055a53986218da4583c42429027f7f7e41cc4ae6f5777261eb1fd0d17d7ae1105b14824ef0a832a14e6704577e0f6da79f421b37aafa7e8d69aa2efa1eabf5df67243eab5248f3fbae1b8da2603e978a0d62b15b144840505c845506cc8596f8d2cf6975dd3cca73f5c5df633b2fec79987b003c8e5b31fbc1380b4a6f67c8dc7aea78013fc62f5c9fda9da68a4c0a2b34d29a5767405c2f496eba02ebf40874048d68bec061330aac111b0c7017c0dd1f42f978a34874197577d47af75943d03ac7b308221ea4e9c9276c344b2f9f65850d39db28fbee8347020e82ba21d0d29b51ae94a0296cc794ceb528648912d7831f0959f4190392bc2398f46135aa2085bcae072170eaf694317f6d2ca013c4da7add2680263b7c0a78b011110f379df8d4283d64dfc90313058f44a626730562dce82b6ca6560048987d88a660d8b880e021083544fdb5b9c0be4b2c72f77ca1a20a9e00563a113f81c60df2553171791c3a966ff568a53b07168e865dc8aec59d746811d3b2e46f11831f58947271e40d78755037bd3b7c95535e76074e9a8f2b84203163a88985ec1dd885af9c4e227826b30cb32e2a8731f8035ecb2f5896dff79920884aa8d98896792e2b1a87bfd04911d880627dbed226244a9b37df6e32c3ab9724a561907943cf519b2c7f3866191e56c345814e11926a2e5893227a1241fec2ae451ae5ea0be6d209aa34068a106528b2affbda12763014f66f187c846e0bb0a3185ffc30b707cceeba1a7e63aed9f2bc56235eacabda596099b416e82966d2301470529ebf51beb8c8d407d4b878ececb83417bdc534b942a47f696055662ce8538c4cc87eb4ebf074fcd6f54a7ca6ea9bbdd563bac87d61c3734db3f3200de26753c50be88409677e13c357dc75104484f15b7369011ec64c01c3ff45237fcec516e59b9f71fa6be6a5cebdc6e679255f46a5139e8e071d2999b0e3d33b0b4d137aaedc48b498e5c402280045d4d5eafc307ea8fbd1a90a94b302b01cc76d0a7c33b5ba2c858c0377a2c9e6440371c681454c3e2fce0b6bc66151d2cd705ea2e29efff8147e6e36cca7afd2c1026005a8e13bf0f67c0e92e6b9770002b3adacdc2573be8d7d9968c6a9e02f9c801a558cd187686502276c543f17b83ed7d5e14f9d356d3f55fc2a333505c58cc9803ef7b93f07c713dad1904be3012eac91f08f7467b0a2367a53732a3c077776d707dee7cdcc25ab64ffb54f67a41bda92e25696269584cbd7a4ffcc5765f1680fc6e57a5954409eba7c7ce0f0ab73391b6654cd99c8fc0f61f77ecce1f5078a686d848ee793d6bbe4e1e88857c95bd73ca3369ed87b1180d3489e92b5fb7a332073e24e81c56acf126194899fac6867b888df5b41f1c854661b8c78c08b356d0f1a35e8c91908929cca9df6de5e1675671a4017215a06a56da7b9e8e97895ca337ccd69c0e80b63498d9f6387a77bf18aaabe8279c27a14a7292a9699c011db34102a8b0799d2c808c13834dcb3cb23b4cfc72d5acb27c6ad53db9c9520c685ab2b728daec7c76dae9f5cbd4757b45f77c549dda33afe992d850596d5f376576f41fc6986ede0c73cd96bffbe9a133819ff67db1884c3e29a1f0a33a3168e1e86f905b542c27fde3c716916a480dcc3981447381908a60f47734074b5a9146025c3aa6c8b5f0da5520676d83d375b2462cbf9c1476658b2bc69eebf8da245f2c1d8511bf293438ef2a6bbdc56a92b881597c7a75a7a596436907557d16c1178ac3d8a3acebb02d71aa22d407815aea53bc4212b74588af30e73706cb4a5348faac650f52acfe81dc287316adcbcb3a10746f77c4609ac94590d9fb763dd7c51ec86eb2d3b6594131f3bdc2d56b6877ed5b043d035241f6edb8074021b10b73cfa4605135b7a89333263b52d6f52a115388dba7275c33625a47b470c90185a245520b675de99b6fd3c144e8c96d8b714043b676018146b8a2003735c1f4b2a2d9da6c0ef338d86fb4eee5e21ebe1fe63ffd6964b2272287c087fa67edc314a6d029fdd763fe02c70d0d7cf2385e455b660a548121d3d957808d530a2efb4be323c41a3b78d6d11bdb271a95653997cd8e5287e87b1775f2b33f263134248112b5f0b0210fb9b0903d0a37175f354a53ceef0fb13f3caca64ce897f0f358f901702b04318bf5b147fe4f70bc836008c7122e15539604c40cb566119e76646efe414f9957931a0d8bef5ed872f53dc3524eacbd23d2ef3ba0a3e9bb4aca88c2396891b990cf94dc6bc296987525021961e573"}, 0x102e) r9 = fcntl$getown(r6, 0x9) sendmsg$nl_generic(r1, &(0x7f0000001c00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001880)={0x30c, 0x13, 0x30a, 0x70bd2a, 0x25dfdbfb, {0xe}, [@typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="69080c2324c7d70b13e895a05e67e95270c4bb4f85d0ecf000df4c25174c4ff3cf2ecd831941cbc3c515fabdccca55c6cd1b803d1eaedb15a31559b9cad0917941f1ba94f96432b29919a40872128272f17b4daf0896d767301701c7b3561bc4690a402d30c718a7f081dd0e9c3a6897a7c034e59740d57cca3db3362124d609081cf057beca0efe38b150f4f7b35689b6554d15264f6a0e821cac4bc5bec3cb257315f5aba371d658440d52f99d63c0794a130d4b83f77f6556ff27e0c57294b59a6342b89624d94f7158f8d42eb429c206df66bba20de95ec6bbd9", @generic="19ee42789ab780f0b932959b7f4df6a4370b7276924f2783fa6239e76980457ea45f3c7a02749e4ca08592f74525261bcf620b4e5e2e8c25c0a782bb56e447", @generic="e204fe06fcd26d36b9814c5d4c0d44a67207a8ef2735039c34cae9a2aee913e5b35a7da6836003382ad6e0b331bd548ee8c1e491d1c830b56127b284654be1b74ce257038ab8aa4087978f1bbe8416104d2e04486b40ef780c5c0428319fa22e744e866c80bbedf2bcf1f25d5258fb8a1ad1e108e0dac7afc9ef5b2b0e138bd309233d25d88fa7ba296995e3b5b11bc427e340f9dc2f66889f425cc3b620c4c8415d41239e19fc43710c65387f3bd603b4dcb2db102a3ee7db60b7d04723f2ed15558b24de75fc24ff6aa594e9f2c8db27aa0a53484f84959d583217c2", @generic="6c57ea37228e591c61a6962e4930def72d859961ed54f4b3ed8d2a8312115c9000583e996191aa4b8c6421c093ccfce11c9547ea6ded711cfdfe37cfe24c0ceb9361ddf632e1dbb8df79bd9051e4143b", @generic="a2ead48fa0359b8d33810e275d9a0be6ab69dcdb194b02861a6db7bba6729b6728f07ab88a8cacaedb6ab15445ddd04745142f060473c928ce7df86dbdaeb26d3448955f034b76bbc2efcc9aed45afcb453a", @typed={0x8, 0x14d, 0x0, 0x0, @pid=r9}, @generic="c785fd26f581f81ae439f7a82d890f8943f3f40b9a7ce90f62f037cf586b27d0d9473a2b7bdb8eecf719d14a2f6358b4183bf01c56adc41ea7c9a2f052cf7b8295f2637aa26d2fa1f3b01c8887"]}, 0x30c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000001c40), 0xc, 0x2000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000002e40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002e00)={&(0x7f0000001cc0)={0x1104, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc5, 0x10}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10bc, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8001}}, {0xa4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa0, 0x1, "b97f8c031f92d7631da9e3574991fa31ceae3b00fcc206942cb092cdf1486d0810802d254014459d4daa38a12c355399148265aa1984d5b18611b214db38c55791e672b4c3034865110c0e8c3373f2abcf4431337123c107f42c2a37a795718f1a493972a0f859ef0dcc2a0b73706e58c4f98a6960f1288df8fad07023a2e9171b30990adbd2541890855638234dd1256781ba31229b131d632c0f49"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x15, 0x1, "4e532e147f2cc32dd8b0cd67ccf0a87826"}}]}]}, 0x1104}}, 0x4040080) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) syz_fuse_handle_req(r10, &(0x7f0000002ec0)="836d568554c0892c44f0d4940e4e4d2915ce28f9b14ceca681567f3ca8b7f27b429dd5dbdb4ea9873fd59a129110c5d7c543ca54f27620637551c60f69cedf2236157e70b881cc646299555a43cd790c2b90c578604a0da0deed285394127dfc03b0690d43627ef0596eb77feca3d18e36899858c4517cacd884fcda077bb5a0a7f55d3a6556f73c7133b43182164122f84b877d669351bb75027d3dcc6610d5b72525825551c113afaff255ba9e70e2302e265c2832a37641afa23fd1528db400b4038e62a06e79fd1b64e3699157153804ae7119c3b1d8b749c026c5b416fea639e86c5985159fda39711da7958932edfdc1b65a80382af2db511d72474a45a601190c575803592a909ef818bc322b7a61e2aacb6338d4fe5e546a180e1b73c571d9900b29c6e0c2ef61e3343040d8c6543a87bd05ff1044fa9336cf1671931659e33fbe9b6f7027ebc1099912a808b51c091927efda9b8546da98c476a5a9e3d012e18a2bb6012bf30c1e82dc3fe74550709b1305f727f1ee48ad1ca6225e91561c6fbbe2fb60042116f70cd52af1a0a4b863ce9207890a637c223a92966f473960cc1ab43d8a5da237d1d6e0e9767fd0aafa33dc6374288ae8b8ac4c84e396f3316ec1393fb103752295eaa097bfe872d8c59657cd98b0a5b0d57383da9187d8fc08602690dbe32ab92e7e8aaea067062a10f95280e510fedb5a34c3c6233cc8cf16ceeb058f6216292343d9c90577c99c2c2abb8513a3fabea04cf6dd0cfba8d99b66c87487282c72d496db3bf32493d9a680b4a2ec00e3e0ca8d924b5c8bc663a8952292042c1178bbd92ad02d7ea9a315a06d7061708bc8dcce4b1c2b750ca15ed9b11c1f8c59dbe8e6119fba780cc9c42e77d23758ab30b4d5745882841a2b4be9bd8c36fc8b00dabee17de8a25cab0ee6dc4570b2cb3180c5ebf861071e1471e59af6692260bdbfefb39ec2000cb2c01627551c7885f6cce354ddec26e9deee5db2ccbce2e00ad45b7edabb6d2f4bf6c03ee61836004f2a11a0403eb445ac3e1c8d933ecc64d632ecb4a5d3dc0e56639cb2e206de606886948f5f65c68d898061bb662f95025396f8a5a5f6516225f8497162473f0555fb76d08ec9ba7b58fecd9934822e07de2732a30c1511aa1af25f17a12cd1e8523789acdae22d0cff332b96537d267100876017c438594c7cbe28ce4c85e07d2fea022470772e97b5fb6da3c79bf20e84e0980077978d57b66dc112851a7de1c3f3f60285652c519cd5edf5589527b98e64e4164d1ed6bea2e951e8ced13190c1d0f12f759341859b6aa9554c6c5c73d4cb926df3ad7d10383b60bf367cb0fcf88136945d829212ee3deccc29800f84a478a9233c223c9784f2f355dabdaa2b8d267a7edc6c11899f07d8bb9eea3a4cf75cff3c91e1e36da97ad023179ea2488710c58224ed0d3ddb7018d93d40a815313f677e05df367188bc5cc4308eba7dba00e27c883cea83d1e632882365bc629b3f9b0d8f763b9340ee559a32e527dfdd51ab0c3494ee0db27a19eff284578b16d1c2374d42e8581cf985ac7c647b01cb344a263a000129624ba92e5eaf9b09a172c4cc29e741cbc4e0b7f3b76b96b1afd0d7760d723f66f31c363599ae47efb55acf32f6aaf805f71d8a90e1587807841cf72f73d8e43a67380ce4ecfae2a94b9bfbc25df43ce59b3cd71ab7bcf8244fa216af9969ba1f6e11ed7ddfc2d68be5de93d64fd58e5cd61db4be04812b40387aed01a5c03d68e36eb07f8cd649ab064c08f7677ec8bc9786e41e2c50b56ccdbc47f89d9900f7de8e15c78d3aff5f0876c4644424f9bffdf2986df5b5c69fe21594446a2cc8145fe56f2981136fc551167fbd38f56c367a912518a159650c8cacdfdc4c44bbe7d15c7ce9d9fe4afd12c90651e011a344714e2dfcf5d1e5c011ab60219d14d072d87eb5ebdc1167cf97c3daf01c8c632621abbd0b769db5f00417425295e36399ca9179eb75e57274d9e174e38c1e1d5a585234d7626b9699273f07a91423b6f83823b4de0e07c9788fe434bb68cc2561f890075969cd7712944ebf6b398c8cf2e109df9fb6aacb7c05e8a38d4626c0708d302472985ca39a7fdce0193c7c272b32c4120d542b3bbaa51c903a1f7c7fe05234567e51bd670b7cf77b7e8ba904642641dc308a89c38a375f293ba51baa38333f4e4b433e37f7e13f0b21e6d736e8fce9bec2ee05396a188b38d067a7c34d07533b49e62c3ffdebcc945c29497f0b3d524dc303dca65d698ce971bd2fb16562a18094887b47d10dd74c2a3eed4e7eb589286a3c9ee7160079296500d386582f3443e57a978f21d07a40622c070f350d5434e07133005130a025d2c8d176a3881f2babd09dc450c684eea9777a2ccfd47242275cb9f6ad6be97654ecfd7bd3f1bdcf3042890995adda0a6ebc6af688ada1bf650905d61984581ae9537a5750d298fc970a4d5b7a4ddc5eb000868cb48dc365bd21df4c59f44e0ed6c334811e48bc54f465cc32bfd79c4c031204b6e7195e1843783467b2a677bad973c88ea0a0fe5c93ed82ae132c4d0ec3a4603a194920bc2d0e19c91cd674155bf775340d05b1a8c3441a4671e4058cde91a510a6bbb7d3c72030d84549f4c4fcdaf206169221717914b9487319b084860abd2790f377680dce87da4f48d23b914f38ad4c704ef71e20023dc92c94bd9491c9e8e63e9e5ec4f9e95ce1384f377858983d8ac6326dd63ad7408cfe107c721784b94800040904a91b9bd71accd5cfba1bbf9d1e026e37f841790859cb0b1369bc6f5452a7a8ac42a959a15887ca27fb209117346aad3503bff6db30c7abb0cdb61421e14c83717c7dc1345bc1bfebcf1de0e506c29bc728b8797398fbf823fa7a2dba41fc9a62fb2f45c2a30b58b5d03866ae7720b88210f046fb0166e3f466ffbb6fa9809e133eb8feb3fcd0db55e965d0c7496d935489b1b348f8b78d51d71ea066d118befcee7fd5ec8e753fac5b118562da12352484873b543dc5724fa5df572d586e52fb03d8437fd243ec2aa1b4f55bcf41c3ab4b057fbb8e53f322688620aa352f11e624596d56546565253b5516ef3979e744f038e647adcdab61c2d8a47bdc13f670b2e034a919e78139a2c9e91be980999280f0eca9ae66f714bc089a7527466daad6df58798183310be7ef149e88958d2243d1cb291b99eaf72e0b559e6b684b1f680310267c56997382445a9c410df7540f41ce88b94a6a3765fbedb55749e9f8811f66e45d0f50e421764d1f77112ddcec05c4f29cae7a151fc6c013503785c187e709ca541b4f366fbe508e08a517a9609a334c8f5b81dcdb761a5e8baf2bb434d50ba897078e5186583de923260c24c9213fac89db7952b111f89ec1f355ad58eb3ae2cbf79ee518347ff72bb502407eb1eb70cde106918adccd3f7b8c6ed1c515225630a3aeeb989c93265bdef255006acb525be143f7ca4bfbd1a60c400874c87e303b71c98654c9ef369c4e8d0a2afa544e5a9d6d8cf7ca59dd93518d671a5b40347beaf8464c6a550ac41e648dad14a8840e3f17c3d4cfd5533de759860ca0b203795312438f6b951cd1d83e85f6a8900e37f8c8b0f83b8c5aa14b12a16fab18e8548f19245325980bb7c680e139fa27bfb06823baa191ca9fc620be6f8645a61d7a66d57536b0def47efe6c89807ec33a91ffcc1ced83e031da8b17942722cf8f0d4f4650f9bb5c21202777546dad49a3a48f2b88cbb3137ee6bd8908530ee3e2b8e190498a18c070bf7975669e9ee73b48afec05e5d3a42978cac840f87d64e840a936f0f75ba416ad0fe1f882795e1b0dbef5860a3803653f1adbe1d5d6575ac79a8d9f0850aed6e3dc31c58fb01dbcf5aec16e66abf647a4ef4990e26e79279246c80f40ec25281e56fdd96c9a16ce886f0d60cc6d148b3ad50489e71b6afde973645218ebbf0fcc252b4abff3e75fd024b5d51b34e67230c749f1662b51a9f5b8326b79e25775db3ade92925c54c74f4ba3d62ded9abf52257157c19174a842e2730aa9b630533553430240516fc2b7655d03808c4f495dc91dd48c90a53f902a724e604720223fd2e026d6f5aa88d97787ac4be770b46a091ff874d392a6b3f5744dfe18d28a90139a760d18007f9032f7af0f4b2b11a7443afd4da7683b5798e65bc33561acce907328da2cc9f443c185126711ba2fc6d8c415ce8d21f5229b0f7bde4722268b4b3ea4031582e03540ed3fb001ef6fc9398a89b1ca92e9b49494d9a2e6a322fca72fc741cede470898d853eb0e2ba1b48d27c2ee8ef04772365aa5fd5f9470692d2b05f4b36dc5de2d6b2e9e14bc651b0d2da0133e2323d199ab099e0a6b83c0bdd274ebbb7aab4763442935d3bfeac668a2f8edd390d0b24791f04082f85edeb7b31f6b6a1682e859a548d97f096d3a8ed950a2f255e815c9a9ed6f16a820229c4f147d1d9fdc3859db6b89eca2c26d517450d2efddfe18f29cdad1e4f2287aeaeb59f39b92430ed6af15dec8b898ab4e8321bcb4357be666a82e60ed40aa0f14cdbb7b11e2fa3a24b5d3dea3663c38e5249a4ba9bbd64389117fcec332da573d2d31c31731c6854e24da2ff2c508e4155492b2e7f73ac2c58a78577171aee93f9f28279806db98a09979ad470f1becc5e72845a6b61ff03f89cfae8f25d8b09586aa3c4ca9fd0568bd64de01c5d38a440f01db4b0e35606ccc737f4ceaa0424cd3bc5130fa18d2920811b495520f730a4eb5e265e20cf2107285165afbde40c4410e9204a1183fc0a85e5d550d3234e2409b3ad568fff64cacbe33998ed69265d999438952260dcb9fc4225688d9e86c8db640cfc794946ac4554de1627dfd4be306ac26b62d4abbc8cac76ca3444eeb41adea6744d52582e059cb0e1bedecef50c3732b76ece1446a29baaf379d742de95a4c21507225ad72161bffc5a50e180cfa90f532944ecb365d663f779ce47735a10456bde4bbf99b22f3027d561c7f8b62aab366886db97599c3838219f3243dedd090d45d737efb5cae0ff3ddac60eec2540e9bfae17552f0e168bfebb174ab54375e41cc9914e39cab0028501ec9e912165e2b43764eac7d746ebcb4d9cdd68587e319aeac666cabf858b74fb7a3d29084c1aceba5ca635d9341fbb06c6887309d824c144f9a65a6bdf1c577605fe8344fa89b472d617b4ad2f0ffaae3bf06ecd766ad24bfb8d43dcf8dda4897bbe17871ba7a0ff8d994f9290dcb29e69f44d1d93df66974dcab094dbfcb81fb010aad1800ea2c2ecacbbad8d57c557cc53ff2b6c8148cb68a31d93f63d05a3ac3416678ebfd88cc0018fc03bec133f78268dee96df44a87eba507415967f187d0d0283d9699ccbb6b0f7aebac9b28a49fa04716df2f4dee15e7d587042d922dc1dfb8feb28a0e822952d900154b2bc3d0fb396c0fe5df83f3f420b313431628dfa56e6b6924c71bbdef138e71090c66735c9bf90e98ed0900c604efe61da5f379f5fd1e8dbfb14e45df1af20773a4149ecb17373ae19c2b2e9a11edb81aab46f212c37c4780517c0dfe43a782c450bc6f60c37f5dddfcb3f9d5fa97bd9041f7b77c571dd17e80b7c8ca89d2229d4d52e570c3dd53c66d1f6a5eaa5424eb0ced28aed6d67b5536291d3a095e5bf200643c9c45828000e179db89ff5367ab0fbb565e827c09ee2157554e5330c73cb8c7c77a82353f8092f3905666dd653cbe7fdb891405a09b3f064fb66c74e59eb5ddc97eba90816bbe4f9bc4da8907998718f56313728dcc1091583ea285bfa1a1bf161c2bd94f25afbbf43f6ed9c5bb5a43cfcb8b2f9ea434aab9505b5f2bb0288e5e81aac4294ee0c0b7e0e2150bc7258cf1d5064f609606a77f9a8a8772ff10c93066c68ef2eb323049a18d29e5e41f0503612025d235c2127d1f7b7aaca4cc20f1464a21be141a6660a9aa43d0d3e319a5827721aba0544a6077496953716a0ecd3c033b367f2be62373c2e18a7154f02476f5858a3f6c3882c8f2ec4fd5577474584c592290a5d08fc3f8fa24d2525f4c70ebed1ec72d42f4255bef52118fcec24235e92a2daeda2c931ee00a10d373a840eb3cb04e786b888a7f74a98e225ec3ac6251fc0a101bb159032c40679ab7e87696bb7bae9a891b569daf065c164c57e71adc8719829ac3327d05551adb65017d9417d7d8f1b0d4f0422c9af9b2ddacaeb5f924e92b1f4fc192b4c71d37f85e87be415df6094bd032cc8eb0336cc52c38ece67eae851b8f54228eb5042dd2a9e9657918006d5c8223a1a27510a8f0013ccd300ab1b8b6079dd28fbec3ccacc660b1b3458530d85674371c4ddd395775417c85ba99aa551064663086f965e304cb5a90fae8ce70c63d66c9552e86f2bc3cad3066276a9ad394b5ab07fb1b4a8637d594da740db2cfd26b7abf748fc2c010f048cb1a7b2718efbc18809408464b1a5f0767aae476a5b565407d5863b9e46c1e3f031e6de2ca33dea460b67c4b0c9a82dea732342d55bbb85f1e40cbd6532df916bb5c2775121aa9045b15186dabda6423cba871d8e9166245410de1a3e083b3d39769cc82073bcea86859788d66c1b3559563ef7bd6bc3677527dfa0176191740ad1c45a510abbbd328374c612840ab79b38e3fde5a31dae13057c444eed5c3b49ec8bc619bf0fd675ecf5477bb8c6c6cd43e5b720762fdfe3fe6512b2d7024db022546e7b9388942e372692b2c7c91dd1bc04029ef9bebd82f97c2964aca594d7c2d18181254674bae75338a53dc6180652939e7b94e0f624fd31c0d90d05893a9f5da6d5b7a163b4ea28e354537329ce92064db9f6158108aeaa2d5834e569687929008ea6897efb2d149882fd9f2a87e6f56f0abbc1f2d7ab72af0a358f3a56e4d03c3f14db5dc32719f18473f1b17dde99e1c9b6e09fc15eae3dbafe1c38e5079839d6b07f76d5614818ae3ccbf63220fd4540c86af77378bb73b3ac912af60a57ea1d4dae976deec34e3770dd492ef47a560fbad5bc1303f84a449421c339335290210d7362ffc0cbdc5c183ec9b8d90789052de1d976010ac002570869055005eab349917c41b77dfb0b2ecb182d10c71161985c73a765038956419620f8ba1dccf7e122aa1dd5d6a6c80b043724de98a9b3cb4f7dc5c566534c7210d6c311edf41858cdecd261c7fe26d42849e19d9cd30e29396631888f90376c1bcec359475753f0591df09f0cea7a1dedf507e550357465032ec1e39c406c4dd0a59cfe90a2985616726299601b12878edce197b00d3955cc87551c13460283788e6325811b70b58878a901e312ef50fe82b3835f02953d04875c5b9ce66f7010bc38190f29e87ea2b0f2eb3d6c4d6bda7bae294d2d45c8d3908b7aac38710712390ee17bdb87aa5b2b6d648ac307ead66e7dc040d1219731d783dddaf9d487456830459127fcb208785f1d99d13c1d9c61cf3457b34686b106a41157855c9ca2d5e9e16b181c1d558ef72c2b160d50f93159ecb7f360158f45af9a1a159414364e23a094b258b391c55abb1ce21c1338de1ab8d91e7a4828a1eb37847ad53911d87c45fc186696bd57ad681b3267f079fd8ad75bd65112bdec177cc861971fa2b5b7e976e15abad9ce06152c318e3265d6f8209d1c47894c4b6fa45a39282800c96c3f3e95c4dab981718dff679975bd471069734b0186368117533f4b47d4ba66fbec93ddb91eac0fb470f42fd40e9a98a33d8809e5ba718a5c758a37a1dc9621608e557c321126a6b7957c20ac72c89017a8d33592684a2c8a0ba235c11423cb6615fa2791a11e0738dbe68936908d87993d9ad1e067b98be11a814d7dcd48926c172e6500e51e2ef5775f8f0629e5c1ca64477ad2f1c97882ff666fba3f243264bc7cd900e3787f067b66663dc2ddff172b39a9d04a8d17c6558b2f49248c3e2e10a39c680bb47a6959228f9990514ef933576db0b31a64cca0e171740e2172a798a453c773bcdbc1ee13806c9b56c79450832aacaa289f937c7868a39f0928f8d624b56515761ead37a2810d4071f256f9024cbefe40fb19f12e26d3b544709067c0c74b6aa43720143da95935c9c25c5c121832cc3d6df340c1506da4a4279743d0205ffc2ce423bc90acbf30a987b9209b9ed20ea88bb2dadb7eb424f12bb5a8b453eb1ad0f33e6d1e9196cfa6e75ec5288f5496287a62d5b255f9475cb5a0986783509318bc672e86dea94848f6bbb944643dd485999991afd0961862e4b3464fdf253e1d26ed1db26e5a909da1f2b59dae7042cb0c5ce1754afd833b1e34b843266be8c2ec256036b73cd5964b7285d3ea131912688bb0de8f1c3c663b30645b737b06321180e7c6fed27d3f8b5f5f9c046946b95c65dc03b794a2e97a782902ebee3e6f735aa06e848bec6d23d1c1e49efd9dc7515631a277ba2f28ee38530178e37c55ee53353396274da2cf57fc3e11d9f956cba3e885d4c8fbeb81abc33d7cc30c8a43731f824f82c37b9c58345027b99c379c887df5b8d4c00a05b6f7c650699b901a09a24274f4616c119528e3c5da21abf8466da866764126a2c3f292d1adf0a5eceb56f5865493e00fe338a24d3dd21d7521f15638ab4f79b97511258685647b4d3f05c25c435ea87a9d967bd2377f5a97328f4383827e5c03b7ecdd2f4f9e49f3d8336aabdb7b0ac44bdf8a339e1574a406b6adb4848567f26290fad4df313807dfeb4fe4b9020e30af87df2e65447ec500e757713df6af9447dc38acf7d1c5cfd7cc42317a729200a5a1d2e3367b4635d8e5cfa7a9182a9b34756e5caab21820aa88b13c080b7e12219fb0b22bfde1129f44a6a79458c04a67fc4ff59586d518b9c778e2702fc37fd23eedda26ebac1dcffb8835de8bfc64728ce9c53d2fbae4c43aff030946c260fec934855eba86aa1b27c9162a38e1fc7965f02f308e58cc0c8417019c301372fee60ad59ddb6e993dbcb7533af8cb8743c35902396ab63131c2ae157944d722da10aff7852de03e181a747671448a6e1351ea56fd186288f45120ea432955bac8d07c31c57808bcd98a9963f33830bb5ca352eac6a6c1ebc28d85570ccd8c23bba70528b964cac1a98fcbe5fd2bf6c176ff57046c727b6bd2c355a201cb989259d57ab8efb2de12a14d073fb4a580d6b8f8c83edbf9677b960f9d0c8d3f639d11186f7165cd1a93e18907dd787e46ae767d033bc86e0f620a56338924c3d42faa0400a94c4ee33af4bd7f1d95599a3ba8d52adc18866f06ce2e7014124bbfce36672be752f471011676a2a9323234fab400422801b4a8e9df4ebdf063cd0849f8a777da28875a0cb48258effd87c1cf363c62cdd2282ed1b8bffc3a26a69513bb93fb02ae71074ebf277b72e5734a9e1aa06119831547f9d06a8f68e7ed562f870727c4789900a8f6acb7973b69dc29ad6bb22a227b54f413cf00ee07d33823e40ef090bce42bf3ed28c620a676770134e12d8a9d34a1f9d76bdc1f44a5968467f2d19e73b709adfb2646d8206ddf508f3704ca4739b6b6561bf8e2aacf69dca6432c665440ad6e2243b41191f531c63e0bed4eb2add4fa8f216dc0df86bef62655ab78704723105961d7617fd4681bfbd2a1088b021ecb0736fef980376a4fdd7bc851476ebc37ec9dd6292c3cd6f44394b3c6996b152b89d7b2aab4a054569a64b27e15e2d7382e85f652492417703638ad0d60fda013c42d74c90fc10793fe241689b98e45eedd30e5dac6131b07a0a55928325955cb79be2a84b9a7d439674f25cfc419cf6311a970a9a1d9e9cf8587265852c1651d2d1dae53d74eecdb0fb8314ff5811482a0cb224be6c36a7be74d0129fb73255db68b4e3f657d995111e4d8b2b87d62ca045bd25d53cf03b9d64249cea6d6400e0f1c008a018618a8310b68ca324fe68030ef8fec1adb7ac68ff93df30d263c7ffbb79ac0ef1e18fd7d4334a6b37d7f7e8a4b176aecc64825e58d5a07fafba2f5d3af13d93d1876c1f1768b90bb6914b0081e66b39f010e2338a5ba945abeda5247899a53688fd9e80cb3161993b40ef6a491a52b28fb5edad3ada07adc2544d19e620f2b162d43b17446d1e95c443894d1433b1a22aa0ca07919002f002895040d4d45081675e1517ecc8cbc2cb36a6c321c675cc6eea29839a97727747cf39ea1df99e476aa13d2670d515eefbcde19af85fdabeb990e2307627613681462cd429cf548e27be7261fd25faf9af2b1e475320e23b2b01ba3f182fe6bd80067332493b4ca3aa9fe9ab10e16c267b78f46bab6b33bf3ddafb603e3259b358733fa4f41cd87cf42ff6ed57089ead7291a19a8b1d84137661f5dde9acdc1db657746da666a5c10835aa018b71bcdcf04999e2c1a8734370c7905f8f630d2ca721f7acc00f1117308ddb466550c0ed4f81d0c95fbab2c48aa5607f3fa01c8c768ae9e28126284a1d7e185207f1610b20f359e3365c38eff8e494f94254f6cfb6b1f3fdbc03cbb419ce9ea2c317a479dcc608191d3767134ed7a34e62293262741def433f4c71c0d1b453cfcfc179d0a4ba52214a831e3088e1a5a0b140ab25c9fc09247145efd6ce33d0c572dec3fa1ae03300e3867cb6c0d8397cb790a8208f0ce2b929fc6b7db86f972f32742c285976388dca54d669414698421d7567993dcd4bc54591a8a8ae0b8bf6e35332b2c5a19e4c5718db45b29cee6abd69a856e0c86d0a4e6f14dcec0c72132b75d864f3e2f8b92bcb3be2b243d30f26285c2a41f02a8aa2ca498ca4fb4aa1151c06312b0f2505a4bed1bfcfddf5dada4481925116818b430bc9a3a6197c34b2890b54636d738d93f8d5f4afa0dd7028a87010c6505094d474f00a776404ab62fb5fac6002b175e4273dbcc5fb0128fd6c5c506681ea80b3c36def10ed576f80c4c26da26488395e91ff0175be618da9d76f3b24f2d438423c348105c4f9e90ed0d6706852491e5723e81976993b615575cfc6836b2008d53307e414d5ef25458252735635d0047f9fc8da67e1f331c6a4ec73f793615687689b410a7e6d0817336362661e6743251f4f6239903b021e4589b4f8f176c81caba7030425fdec8fb8635881fe0fc02a31aa40dda74b8a431132586b671541f5776fe6829beee3f1924fd7a3365bd6f6d6898766a05b89d46fd05fa56bb419227d3bc6eec5ca4ce379f2f424f3b00ca8c71f3f059bf665e18fa6c2abd8da19f439b9de2959a269e1e585615a5f32123d48b861d107c3940f6f2807ce58af7284f53f6e49a0426779bd5aabd1364b4a3b6688f894716c960f9d5038f88b46095f86dc1c7f8d11687f0be3902e7ed60b957a2c2d669abe3b3d049f8c215c50062223d701e7143bfe79faeeab8c8b853e3f3c4756bbb724524e77e4c79146790f51f05f9a8fbab1c2f34075912e4ab4abd9a5992423b01f1f48c3582c5f7043d98914f61e950955ade0e23fa4942cf2594e986168db3da1b57c38d8f26464b739bd96ae62af75d77eff703a8ccfa4f4e095cce1b12d1ade0c58582c8ca5eefca1679e7e3792f2973fdc0721950143b70b32fdc2ee62dd3088b68ccfd2bc91fdff7bbda40c4b77af21dbbaf39aa4a39105e5", 0x2000, &(0x7f0000005980)={&(0x7f0000004ec0)={0x50, 0x0, 0xcb, {0x7, 0x2b, 0x0, 0x12000000, 0xfff7, 0x9, 0x10000, 0xd3a, 0x0, 0x0, 0x10, 0x4}}, &(0x7f0000004f40)={0x18, 0x0, 0x8, {0x9}}, &(0x7f0000004f80)={0x18, 0x0, 0x7, {0xe}}, &(0x7f0000004fc0)={0x18, 0x0, 0x7, {0x8}}, &(0x7f0000005000)={0x18, 0x0, 0x7, {0xe}}, &(0x7f0000005040)={0x28, 0x0, 0x7, {{0x9, 0x10001, 0x1, r9}}}, &(0x7f0000005080)={0x60, 0xfffffffffffffffe, 0x4, {{0x6, 0x9c, 0xaa38, 0x2, 0x400, 0xd0f, 0x6e8d5cf, 0x3}}}, &(0x7f0000005100)={0x18, 0x0, 0x3, {0x5}}, &(0x7f0000005140)={0x16, 0x0, 0x2, {'\xff\xff\xff\xff\xff\xff'}}, &(0x7f0000005180)={0x20, 0x0, 0x7fffffff}, &(0x7f00000051c0)={0x78, 0x0, 0x5, {0x10, 0x381, 0x0, {0x6, 0x8000000000000000, 0x9, 0x2, 0x8001, 0x1, 0x1, 0x3, 0x7, 0xc000, 0x3f, r7, r8, 0x82, 0x9}}}, &(0x7f0000005240)={0x90, 0x0, 0x1, {0x6, 0x6, 0x1, 0xab, 0x1, 0x2, {0x0, 0x4, 0x81, 0x3, 0xffffffffffffffff, 0x7, 0x5, 0x5a4, 0xffffffff, 0x1000, 0x2, r7, r8, 0x8, 0x1}}}, &(0x7f0000005300)={0x160, 0x0, 0x2, [{0x3, 0xd, 0x13, 0x5, '/dev/snd/controlC#\x00'}, {0x5, 0x1b76, 0x7, 0x6, '-+}-^!\''}, {0x0, 0xf2, 0x2, 0xe40, '-('}, {0x2, 0x5b, 0x16, 0x8, 'trusted.overlay.upper\x00'}, {0x5, 0xb, 0x4, 0x6, '\\^z%'}, {0x2, 0x9, 0x2, 0x5, '-('}, {0x0, 0x7, 0x0, 0x2}, {0x0, 0x1, 0x1, 0x31e, '['}, {0x4, 0x100, 0x0, 0x1ff}, {0x1, 0x596, 0x6, 0x10000, ']\\!$:-'}]}, &(0x7f0000005480)={0x2a0, 0x0, 0xf4, [{{0x5, 0x2, 0x7, 0xb37, 0x4c17363, 0x4, {0x6, 0x2, 0x2, 0x3, 0xffffffffffff8721, 0x2, 0xef02, 0x84, 0x8, 0x2000, 0x0, r7, r8, 0x1, 0x9}}, {0x0, 0xfff, 0x6, 0x7, '\xff\xff\xff\xff\xff\xff'}}, {{0x6, 0x3, 0x9, 0x100, 0x1, 0x7fff, {0x1, 0x800, 0x6, 0x1ec, 0x40, 0x9, 0x6, 0x6, 0x10001, 0x0, 0x1, r7, r8, 0x100}}, {0x2, 0x0, 0x3, 0x6, '#! '}}, {{0x3, 0x3, 0x0, 0x0, 0x0, 0xfffffff9, {0x0, 0x5, 0x5, 0x5, 0x9, 0x2, 0x7dcf, 0xffff0001, 0x1, 0xc000, 0x0, r7, r8, 0xfffffff6, 0x6}}, {0x6, 0x100000001, 0x16, 0xfffffff9, 'trusted.overlay.upper\x00'}}, {{0x2, 0x2, 0xfffffffffffffffe, 0x2, 0x7, 0x5, {0x65, 0x10, 0x5, 0xffffffffa2bfaaed, 0x7, 0x3, 0x5, 0xfffffffd, 0xa51, 0x2000, 0x3, 0xee01, r8, 0x7c, 0xfe1}}, {0x6, 0x83, 0x7, 0x80000001, 'batadv\x00'}}]}, &(0x7f0000005740)={0xa0, 0x0, 0x9, {{0x4, 0x1, 0x5, 0x80000000, 0xc, 0x0, {0x5, 0x1, 0x27, 0x7ff, 0x7, 0xffffffffffffffad, 0x1ff, 0x5, 0x3ff, 0x5000, 0x0, r7, r8, 0x7, 0x5}}, {0x0, 0xe}}}, &(0x7f0000005800)={0x20, 0x0, 0x7, {0x9, 0x4, 0xc0, 0xffff3670}}, &(0x7f0000005840)={0x130, 0x0, 0x10, {0x401, 0x1, 0x0, '\x00', {0x8000, 0x9, 0x7, 0x7, r7, r8, 0x2000, '\x00', 0x0, 0x7, 0xf, 0x7, {0xfffffffffffffff8, 0x6}, {0x526, 0x3ed}, {0x5, 0x3}, {0x4, 0x7}, 0x7, 0x0, 0x5, 0xd9}}}}) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000005a80)) 1.015759407s ago: executing program 2 (id=345): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b00010000000009040000012e6d0a150905ff27"], 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000002) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x5, 0x20, 0x60, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x7, 0x40, {0x7, 0x25, 0x1, 0x80, 0x26, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0xfb, 0x58, {0x7, 0x25, 0x1, 0x80, 0x1c, 0x8}}}}}}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x2, 0xfcec, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x15, 0x3, 0x0, 0x2, 0x8, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x57, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xf, 0x6, 0x1}}]}}}]}}]}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040001}, 0x1) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d80)=0x14, 0x800) pread64(r4, &(0x7f0000000dc0)=""/134, 0x86, 0x8) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000007c0), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000ac0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) close(r8) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) syz_usb_control_io(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000b00)=ANY=[@ANYBLOB="2025050000000506000000b62c3fb0418288fdd6ce4b5ac38e78ca700fee4f7374aa5d0a32a5481f0a2dadcbe5c191c8c5b5d700aabbd6fa8a170bd310993ffdfc33a19367ff528970609b428de2baa5432f22d42a994ac2013a1852ecc99200717c51aab137867e4a8081447ac076aa07a58b9c02586e9eeb04467190182c6ed6946e94663e96c18e28bfacd5c8756633d6018def6ec28ad796c43c811d4c1e3c9abc8ee7026b964e282f4be78f3c649aedc8a88ed1dedb"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}}, 0x40) syz_usb_control_io$hid(r2, &(0x7f0000000d00)={0x24, &(0x7f0000000000)={0x20, 0x9, 0x39, {0x39, 0x0, "97d9a0bf56c974a0e257b3f0685c3540709e26adef8e5872d54db6155e32ca28d81c29799609d700b3dc5406a6173b2012fbd982bbf19f"}}, &(0x7f0000000040)={0x0, 0x3, 0x63, @string={0x63, 0x3, "78062d644bb8e516aeb6ec72a6682f730df8fe394ab9a30db577afbd1f2ea35831be6eb9bcec8300a6758002c606715d4193ea77fd08ccb72eec24d03bfba9dcab443de5d6fee27e9cda32f4e0d8b7a8639e390b1f4ca1e7a1c137bc0281e223b2"}}, &(0x7f00000000c0)={0x0, 0x22, 0x12, {[@local=@item_012={0x0, 0x2, 0x0, "f3"}, @local=@item_4={0x3, 0x2, 0x3, "73838ac1"}, @global=@item_4={0x3, 0x1, 0x5, "24679dc0"}, @local=@item_012={0x2, 0x2, 0x0, "c63e"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x5b2}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="4016e4000000c30b1cf992bfcdd599cb61ea15161e05f5a371c050ccb8a4252ac3945734cb374328b55747d2e76fe814431984e6b3402326f1661aee13ea4b1bbe21396998cab23e8c0d8478293e726bac8dfcbaea432b84ac6108805d7611bd1c23d75101ac8083ab39c92692cc1b343ba64880145c7fd4f5e150607e1f1133a4d9019a500f1129b728b872aba98c9dd1ab222508645fbed5ef4af438f0795dca11aa3a9b5ab69fe7d1184ba2f3cdd4c2a87dbb7d3f41e73262d458ad34cc7bc68c332ae1bb77280cc267b8644fa8b20512f19b95109f361a53723302a9ecc98b808f02cacb696fec06"], &(0x7f0000000180)={0x0, 0xa, 0x1, 0xdb}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x92}, &(0x7f00000003c0)={0x20, 0x1, 0x2d, "a72e1903c306dcc5cd4ef1f6697823def729380b09a236557a5abd3bf012a81184532252363bf42ad7ca75f4a6747a8b8a7692c83b8d0d45f9a6ad9daa74d84178d1fae0b3b748f66b31e5606d02675a868461948014abc2658a80e23134eaf243bcb3c07e55747edb0015a52ccbc5202cd0a3c65222e4a9db899f3305c4dc093651f0872b0f9f8b16ae4e51656d43f3df00d59b243f9574d15ffe790f0a77f9f60146cdbaab"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xfd}}) 944.327441ms ago: executing program 1 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESDEC], 0x5a) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000070601030000000000000000020000010500010007"], 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x44) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1011082}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x3, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000040) 860.754927ms ago: executing program 3 (id=347): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=ANY=[@ANYBLOB="1800000042000701fe09fffffbdbdf2504"], 0x18}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000) write(r1, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000000200000000008001d0040000000", 0x24) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e14", 0x1a}, {&(0x7f0000000600)="9084f1c3d5fa9e1cf6086296b34162dc239aa8dd", 0x14}], 0x2}, 0x4000840) socket$kcm(0x10, 0x2, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) dup(r2) (async) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=ANY=[@ANYBLOB="1800000042000701fe09fffffbdbdf2504"], 0x18}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000) (async) write(r1, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000000200000000008001d0040000000", 0x24) (async) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e14", 0x1a}, {&(0x7f0000000600)="9084f1c3d5fa9e1cf6086296b34162dc239aa8dd", 0x14}], 0x2}, 0x4000840) (async) 824.280635ms ago: executing program 0 (id=348): r0 = socket(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000180)={0x82, 0x0, 0x0, 0x0}) 702.718108ms ago: executing program 1 (id=349): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl730\x00', [0x4f27, 0x8, 0x10000, 0x10000004, 0x8, 0xfffffbf9, 0x0, 0x40000000, 0x4800000, 0x100100, 0xfffffff9, 0x1, 0x4, 0xfffffffe, 0x403, 0xf, 0xfffffffc, 0x0, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e52, 0x400000b, 0xfff, 0x38, 0x8, 0x7, 0x8000000, 0xfffffffb]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000040a0300000000000000000003000006480004800800024073b506d7080002405ede1b5e080002402eaaf1ab080001400000000308000140000000010800024021d2abde14000300677265746170300000000000000000004c0008800c00014000000000000000050c000140000000007fffffff0c00024000000000000000090c00024000000000000000060c00024000000000000000080c0001400038dd2b5c0000000c0002400000000000000001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000001600)=0x1e) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x20000) syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') ioctl$VHOST_GET_VRING_ENDIAN(r6, 0x4028af11, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7}, 0x18) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000002c0)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0xb}, r7}, 0xc) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x9, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a3000000000400000001b0a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xf8}}, 0x0) 556.926159ms ago: executing program 0 (id=350): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5418, 0x7fffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x40, 0x31, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000002c0)="fb149d84f90000000000000088a8704b88a8", 0x36, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 479.244101ms ago: executing program 3 (id=351): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000001c0)={{r1}}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d702c0004997422084ba34eb82f5c30b58afb029009e6000043ac7ab53df71755b2e6ca3f99f596000000000e0097383c19c5c699d8bc8a6a0ef652b077da8797fef8302478ffbc03676e8a03e7f700de5031e5e41499bb7675e3a555c65887c72647cad23b4af6c5fb7d27bfc33a27533e79b5d544e612eb19013064b107bf9fa60aa489c5d17790c0a89e87ad8cdc12cc81122a4e57330c3c4c045c81d9f2460248742494d6bf037f5feb1e30caabf6672adb2ecc5b975cf1083802d02953a4cd47203232d4f061c862fbd534f3304f3c063219a06fed"]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc0046209, &(0x7f0000001340)) (async) shmctl$IPC_SET(0x0, 0x1, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4048018) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) (async) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r0, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0xfffffffffffffdf9}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x36, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ppoll(&(0x7f0000000340)=[{r6, 0x2}], 0x1, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7fffffffffffffff]}, 0x8) (async, rerun: 64) sync_file_range(0xffffffffffffffff, 0x5, 0x7, 0x7) (rerun: 64) 415.066005ms ago: executing program 3 (id=352): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0xa, 0x80000, 0x10000000000002) r2 = socket(0x1e, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc00864e2, 0x0) socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x60a80, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESOCT=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0d83, 0x0) setuid(0xee01) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x1, 0x40, 0x5, 0xffffffffffffffff}) mprotect(&(0x7f0000005000/0x4000)=nil, 0x4000, 0xc64bf3de8c95b8d6) timer_settime(0x0, 0x0, &(0x7f0000000240), 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40815}, 0x4050) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0xb, 0x200, 0x7fff, 0x10}}) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1f000000030000000d"]) accept4(r7, 0x0, 0x0, 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e25, @remote}, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}, 0x81}, @in6={0xa, 0x4e21, 0xfffffff7, @mcast1, 0xfffffff9}], 0x48) fcntl$setstatus(r7, 0x4, 0x6c00) 248.894464ms ago: executing program 3 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, &(0x7f0000000000)=0x51) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 0s ago: executing program 1 (id=354): ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sysfs$1(0x7ffffffe, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sync() sync() sync() ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 7] Registered device Elgato EyeTV DTT Deluxe [ 83.832806][ T10] usb 1-1: device descriptor read/64, error -71 [ 83.956176][ T10] usb usb1-port1: attempt power cycle [ 83.958701][ T5947] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.971671][ T5871] usb 3-1: USB disconnect, device number 2 [ 84.011913][ T5871] Unregistered device Elgato EyeTV DTT Deluxe [ 84.014969][ T5871] as10x_usb: device has been disconnected [ 84.303613][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.323841][ T10] usb 1-1: device descriptor read/8, error -71 [ 84.542869][ T5913] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.565305][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 84.611404][ T10] usb 1-1: device descriptor read/8, error -71 [ 84.654225][ T5857] usb 2-1: USB disconnect, device number 2 [ 84.694667][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.708753][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.729904][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.740706][ T5913] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 84.762707][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.773108][ T10] usb usb1-port1: unable to enumerate USB device [ 84.774075][ T5913] usb 4-1: config 0 descriptor?? [ 84.800986][ T5913] rndis_host 4-1:0.0: skipping garbage [ 84.809536][ T5913] usb 4-1: bad CDC descriptors [ 84.990173][ T5870] usb 4-1: USB disconnect, device number 3 [ 85.112874][ T5857] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.203582][ T5833] Bluetooth: hci3: command tx timeout [ 85.264113][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.273998][ T5857] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 85.284469][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.295194][ T5857] usb 3-1: config 0 descriptor?? [ 85.533063][ T5833] Bluetooth: hci0: command tx timeout [ 85.714496][ T5857] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 86.655528][ T794] cfg80211: failed to load regulatory.db [ 86.723783][ T5857] usb 3-1: USB disconnect, device number 3 [ 86.803280][ T5834] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.803996][ T5833] Bluetooth: hci4: command 0x1003 tx timeout [ 87.233970][ T6014] process 'syz.3.38' launched '/dev/fd/4' with NULL argv: empty string added [ 87.492660][ T793] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.654217][ T5913] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.661796][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 87.674893][ T793] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 87.691728][ T793] usb 2-1: config 0 has no interface number 0 [ 87.705310][ T793] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 87.709527][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31'. [ 87.714760][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.714791][ T793] usb 2-1: Product: syz [ 87.714806][ T793] usb 2-1: Manufacturer: syz [ 87.714819][ T793] usb 2-1: SerialNumber: syz [ 87.744035][ T793] usb 2-1: config 0 descriptor?? [ 87.749191][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31'. [ 87.755623][ T793] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 87.822667][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 87.836152][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 87.849658][ T5913] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 87.859354][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.867891][ T5913] usb 3-1: Product: syz [ 87.872194][ T5913] usb 3-1: Manufacturer: syz [ 87.877362][ T5913] usb 3-1: SerialNumber: syz [ 87.892955][ T5913] usb 3-1: config 0 descriptor?? [ 87.905370][ T5913] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 87.914858][ T5913] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 87.979693][ T793] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 88.000484][ T793] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 88.385299][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 88.393455][ T24] usb 2-1: USB disconnect, device number 3 [ 88.410986][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 88.423321][ T6037] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 88.441918][ T6037] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 88.446104][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 88.472913][ T24] quatech2 2-1:0.51: device disconnected [ 88.527709][ T5913] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 89.137126][ T5913] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 89.151674][ T5913] em28xx 3-1:0.0: board has no eeprom [ 89.242148][ T5913] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 89.270528][ T5913] em28xx 3-1:0.0: dvb set to bulk mode. [ 89.280678][ T5885] em28xx 3-1:0.0: Binding DVB extension [ 89.309094][ T5913] usb 3-1: USB disconnect, device number 4 [ 89.360566][ T5913] em28xx 3-1:0.0: Disconnecting em28xx [ 89.389855][ T5885] em28xx 3-1:0.0: Registering input extension [ 89.401331][ T5913] em28xx 3-1:0.0: Closing input extension [ 89.468067][ T5913] em28xx 3-1:0.0: Freeing device [ 89.483113][ T793] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.522281][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 89.532665][ T5834] Bluetooth: hci2: command tx timeout [ 89.543048][ T794] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.564056][ T6059] warning: `syz.0.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.670084][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.702619][ T793] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 89.702752][ T794] usb 4-1: Using ep0 maxpacket: 16 [ 89.711687][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.740660][ T793] usb 2-1: config 0 descriptor?? [ 89.759777][ T794] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.797034][ T794] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.818025][ T794] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.827978][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.836561][ T794] usb 4-1: Product: syz [ 89.840907][ T794] usb 4-1: Manufacturer: syz [ 89.859196][ T794] usb 4-1: SerialNumber: syz [ 89.867641][ T6066] binder: 6063:6066 ioctl 40044591 0 returned -22 [ 89.935485][ T6065] binder: 6063:6065 ioctl c0306201 200000000040 returned -14 [ 90.013093][ T6069] netlink: set zone limit has 8 unknown bytes [ 90.111295][ T794] usb 4-1: 0:2 : does not exist [ 90.128099][ T794] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 90.182850][ T794] usb 4-1: USB disconnect, device number 4 [ 90.195092][ T793] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 90.232793][ T30] audit: type=1326 audit(1762602335.084:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.2.46" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d58f6c9 code=0x0 [ 90.276070][ T5870] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 90.452704][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 90.460427][ T5870] usb 1-1: config 0 has an invalid interface number: 248 but max is 0 [ 90.468690][ T5870] usb 1-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config [ 90.479000][ T5870] usb 1-1: config 0 has no interface number 0 [ 90.486800][ T5870] usb 1-1: too many endpoints for config 0 interface 248 altsetting 214: 153, using maximum allowed: 30 [ 90.498331][ T5870] usb 1-1: config 0 interface 248 altsetting 214 has 0 endpoint descriptors, different from the interface descriptor's value: 153 [ 90.511829][ T5870] usb 1-1: config 0 interface 248 has no altsetting 0 [ 90.520717][ T5870] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 90.530090][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.538151][ T5870] usb 1-1: Product: syz [ 90.542316][ T5870] usb 1-1: Manufacturer: syz [ 90.546959][ T5870] usb 1-1: SerialNumber: syz [ 90.554227][ T5870] usb 1-1: config 0 descriptor?? [ 90.790902][ T5870] usb 1-1: USB disconnect, device number 6 [ 90.881527][ T6085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.897874][ T6085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.010184][ T6091] ======================================================= [ 91.010184][ T6091] WARNING: The mand mount option has been deprecated and [ 91.010184][ T6091] and is ignored by this kernel. Remove the mand [ 91.010184][ T6091] option from the mount to silence this warning. [ 91.010184][ T6091] ======================================================= [ 91.049486][ T6091] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 91.073942][ T6093] Zero length message leads to an empty skb [ 91.102012][ T6091] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 91.144079][ T6090] delete_channel: no stack [ 91.239424][ T793] usb 2-1: USB disconnect, device number 4 [ 91.266250][ T6100] MTD: Attempt to mount non-MTD device "./file0" [ 91.276480][ T6100] ./file0: Can't open blockdev [ 91.662986][ T5870] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.672797][ T793] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 91.733811][ T794] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.795894][ T5870] usb 3-1: device descriptor read/64, error -71 [ 91.813628][ T793] usb 1-1: device descriptor read/64, error -71 [ 91.882744][ T794] usb 4-1: Using ep0 maxpacket: 16 [ 91.891624][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 91.904403][ T794] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 91.913526][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.921503][ T794] usb 4-1: Product: syz [ 91.925712][ T794] usb 4-1: Manufacturer: syz [ 91.930313][ T794] usb 4-1: SerialNumber: syz [ 91.936925][ T794] usb 4-1: config 0 descriptor?? [ 91.944413][ T794] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 91.953683][ T794] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 92.042664][ T5870] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 92.052661][ T793] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 92.092649][ T5885] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.182645][ T793] usb 1-1: device descriptor read/64, error -71 [ 92.192646][ T5870] usb 3-1: device descriptor read/64, error -71 [ 92.242705][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 92.252106][ T5885] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 92.261485][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.270627][ T5885] usb 2-1: Product: syz [ 92.274845][ T5885] usb 2-1: Manufacturer: syz [ 92.279441][ T5885] usb 2-1: SerialNumber: syz [ 92.290811][ T5885] r8152-cfgselector 2-1: Unknown version 0x0000 [ 92.297369][ T793] usb usb1-port1: attempt power cycle [ 92.303123][ T5885] r8152-cfgselector 2-1: config 0 descriptor?? [ 92.313338][ T5870] usb usb3-port1: attempt power cycle [ 92.514527][ T5885] r8152-cfgselector 2-1: Unknown version 0x0000 [ 92.521416][ T5885] r8152-cfgselector 2-1: bad CDC descriptors [ 92.548494][ T794] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 92.642688][ T793] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 92.662669][ T5870] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 92.663227][ T793] usb 1-1: device descriptor read/8, error -71 [ 92.683889][ T5870] usb 3-1: device descriptor read/8, error -71 [ 92.718052][ T5885] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 92.912699][ T793] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 92.932668][ T5870] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 92.933230][ T793] usb 1-1: device descriptor read/8, error -71 [ 92.953106][ T5870] usb 3-1: device descriptor read/8, error -71 [ 92.966869][ T794] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 92.974973][ T794] em28xx 4-1:0.0: board has no eeprom [ 93.051295][ T794] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 93.059210][ T794] em28xx 4-1:0.0: dvb set to bulk mode. [ 93.062919][ T793] usb usb1-port1: unable to enumerate USB device [ 93.065217][ T5870] usb usb3-port1: unable to enumerate USB device [ 93.077980][ T5857] em28xx 4-1:0.0: Binding DVB extension [ 93.087300][ T794] usb 4-1: USB disconnect, device number 5 [ 93.103753][ T794] em28xx 4-1:0.0: Disconnecting em28xx [ 93.137362][ T5857] em28xx 4-1:0.0: Registering input extension [ 93.144049][ T794] em28xx 4-1:0.0: Closing input extension [ 93.158092][ T794] em28xx 4-1:0.0: Freeing device [ 93.497486][ T793] IPVS: starting estimator thread 0... [ 93.506156][ T6121] openvswitch: netlink: Flow key attr not present in new flow. [ 93.602862][ T6122] IPVS: using max 32 ests per chain, 76800 per kthread [ 93.773059][ T5913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.922761][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 93.929432][ T5913] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 93.938300][ T793] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 93.946145][ T5913] usb 4-1: config 179 has no interface number 0 [ 93.953235][ T5913] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 93.964389][ T5913] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 93.975676][ T5913] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.987205][ T5913] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 93.998607][ T5913] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 94.011905][ T5913] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 94.021003][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.032327][ T6124] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.145744][ T793] usb 2-1: descriptor type invalid, skip [ 94.151520][ T793] usb 2-1: descriptor type invalid, skip [ 94.157351][ T793] usb 2-1: descriptor type invalid, skip [ 94.163757][ T793] usb 2-1: not running at top speed; connect to a high speed hub [ 94.173542][ T793] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.183856][ T793] usb 2-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.196827][ T793] usb 2-1: config 1 interface 0 has no altsetting 0 [ 94.205820][ T793] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.215000][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.223107][ T793] usb 2-1: Product: syz [ 94.227316][ T793] usb 2-1: Manufacturer: syz [ 94.231925][ T793] usb 2-1: SerialNumber: syz [ 94.491972][ T6128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.500791][ T6128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.605204][ T793] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 94.620543][ T793] usb 2-1: USB disconnect, device number 6 [ 94.704214][ T6141] 9p: Bad value for 'rfdno' [ 94.812686][ T794] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 94.952707][ T794] usb 3-1: device descriptor read/64, error -71 [ 95.192678][ T794] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 95.211699][ T6146] fuse: Unknown parameter 'rootmo00000000000tp\Πn–Ân000040000' [ 95.322992][ T794] usb 3-1: device descriptor read/64, error -71 [ 95.433389][ T794] usb usb3-port1: attempt power cycle [ 95.752680][ T5913] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 95.782696][ T794] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 95.803254][ T794] usb 3-1: device descriptor read/8, error -71 [ 95.922730][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 95.931055][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 95.943813][ T5913] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.953093][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.961122][ T5913] usb 1-1: Product: syz [ 95.965369][ T5913] usb 1-1: Manufacturer: syz [ 95.970012][ T5913] usb 1-1: SerialNumber: syz [ 95.977717][ T5913] usb 1-1: config 0 descriptor?? [ 95.988407][ T5913] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 95.997926][ T5913] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 96.042717][ T794] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 96.063262][ T794] usb 3-1: device descriptor read/8, error -71 [ 96.175091][ T794] usb usb3-port1: unable to enumerate USB device [ 96.530221][ T6135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.579987][ T793] usb 4-1: USB disconnect, device number 6 [ 96.580042][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 96.594180][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 96.606373][ T5913] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 97.024785][ T5913] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 97.034054][ T5913] em28xx 1-1:0.0: board has no eeprom [ 97.092626][ T5913] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 97.100505][ T5913] em28xx 1-1:0.0: dvb set to bulk mode. [ 97.106317][ T5885] em28xx 1-1:0.0: Binding DVB extension [ 97.122725][ T5913] usb 1-1: USB disconnect, device number 11 [ 97.130059][ T5913] em28xx 1-1:0.0: Disconnecting em28xx [ 97.169415][ T5885] em28xx 1-1:0.0: Registering input extension [ 97.176895][ T5913] em28xx 1-1:0.0: Closing input extension [ 97.187983][ T5913] em28xx 1-1:0.0: Freeing device [ 97.594516][ T6171] netlink: 'syz.0.75': attribute type 46 has an invalid length. [ 97.602339][ T6171] netlink: 'syz.0.75': attribute type 28 has an invalid length. [ 97.712984][ T5885] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 97.864246][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.875730][ T5885] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.902127][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.937150][ T5885] usb 4-1: config 0 descriptor?? [ 97.955920][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 98.071625][ T6191] sp0: Synchronizing with TNC [ 98.237065][ T6196] netlink: 'syz.0.83': attribute type 25 has an invalid length. [ 98.360116][ T5885] pwc: recv_control_msg error -32 req 02 val 2b00 [ 98.367888][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.377657][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.392051][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.401214][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.416016][ T5885] pwc: recv_control_msg error -32 req 02 val 2700 [ 98.424173][ T5885] pwc: recv_control_msg error -32 req 02 val 2c00 [ 98.431376][ T5885] pwc: recv_control_msg error -32 req 04 val 1000 [ 98.482359][ T5870] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 98.642736][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 98.647364][ T5885] pwc: recv_control_msg error -71 req 04 val 1400 [ 98.659924][ T5885] pwc: recv_control_msg error -71 req 02 val 2000 [ 98.667839][ T5885] pwc: recv_control_msg error -71 req 02 val 2100 [ 98.673140][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 98.676772][ T5885] pwc: recv_control_msg error -71 req 04 val 1500 [ 98.686692][ T5870] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.694022][ T5885] pwc: recv_control_msg error -71 req 02 val 2500 [ 98.700352][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.708327][ T5885] pwc: recv_control_msg error -71 req 02 val 2400 [ 98.721257][ T5885] pwc: recv_control_msg error -71 req 02 val 2600 [ 98.730615][ T793] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 98.732684][ T5870] usb 3-1: Product: syz [ 98.742344][ T5870] usb 3-1: Manufacturer: syz [ 98.743024][ T5885] pwc: recv_control_msg error -71 req 02 val 2900 [ 98.747031][ T5870] usb 3-1: SerialNumber: syz [ 98.763573][ T5870] usb 3-1: config 0 descriptor?? [ 98.777339][ T5870] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 98.787075][ T5870] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 98.788978][ T5885] pwc: recv_control_msg error -71 req 02 val 2800 [ 98.800851][ T5885] pwc: recv_control_msg error -71 req 04 val 1100 [ 98.809128][ T5885] pwc: recv_control_msg error -71 req 04 val 1200 [ 98.826084][ T5885] pwc: Registered as video103. [ 98.847007][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 98.882660][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 98.895115][ T5885] usb 4-1: USB disconnect, device number 7 [ 98.908468][ T793] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 98.927695][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.955866][ T793] usb 2-1: Product: syz [ 98.960258][ T793] usb 2-1: Manufacturer: syz [ 98.973211][ T793] usb 2-1: SerialNumber: syz [ 98.991842][ T793] usb 2-1: config 0 descriptor?? [ 99.022425][ T793] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 99.245595][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 99.344774][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 99.381110][ T5870] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 99.525700][ T9] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 99.535683][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.547543][ T9] usb 1-1: Product: syz [ 99.551744][ T9] usb 1-1: Manufacturer: syz [ 99.557221][ T9] usb 1-1: SerialNumber: syz [ 99.570826][ T9] usb 1-1: config 0 descriptor?? [ 99.586265][ T9] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 012 [ 99.816789][ T5870] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 99.825018][ T5870] em28xx 3-1:0.0: board has no eeprom [ 99.826880][ T793] ssu100 2-1:0.0: probe with driver ssu100 failed with error -32 [ 99.843444][ T5857] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 99.892656][ T5870] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 99.900612][ T5870] em28xx 3-1:0.0: dvb set to bulk mode. [ 99.906508][ T794] em28xx 3-1:0.0: Binding DVB extension [ 99.933477][ T5870] usb 3-1: USB disconnect, device number 13 [ 99.961543][ T5870] em28xx 3-1:0.0: Disconnecting em28xx [ 99.986843][ T794] em28xx 3-1:0.0: Registering input extension [ 99.998054][ T5870] em28xx 3-1:0.0: Closing input extension [ 100.012918][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 100.024177][ T5857] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 100.032312][ T5857] usb 4-1: config 0 has no interface number 0 [ 100.043579][ T5870] em28xx 3-1:0.0: Freeing device [ 100.059108][ T5857] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30 [ 100.069206][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.080589][ T5857] usb 4-1: Product: syz [ 100.087424][ T5857] usb 4-1: Manufacturer: syz [ 100.092144][ T5857] usb 4-1: SerialNumber: syz [ 100.099183][ T5857] usb 4-1: config 0 descriptor?? [ 100.108259][ T5857] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 100.241710][ T9] i2c i2c-1: failure reading functionality [ 100.252093][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 100.263526][ T9] usb 1-1: USB disconnect, device number 12 [ 100.622663][ T793] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 100.711275][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.720149][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.752738][ T793] usb 3-1: device descriptor read/64, error -71 [ 100.930578][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.939844][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.992653][ T793] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 101.092773][ T5870] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 101.115336][ T5857] usb 4-1: USB disconnect, device number 8 [ 101.132742][ T793] usb 3-1: device descriptor read/64, error -71 [ 101.222660][ T5870] usb 1-1: device descriptor read/64, error -71 [ 101.252901][ T793] usb usb3-port1: attempt power cycle [ 101.462706][ T5870] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 101.491479][ T5913] usb 2-1: USB disconnect, device number 7 [ 101.592724][ T5870] usb 1-1: device descriptor read/64, error -71 [ 101.592813][ T793] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 101.623500][ T793] usb 3-1: device descriptor read/8, error -71 [ 101.665781][ T6234] batadv_slave_1: entered promiscuous mode [ 101.702929][ T5870] usb usb1-port1: attempt power cycle [ 101.882693][ T793] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 101.892684][ T5913] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 101.903089][ T793] usb 3-1: device descriptor read/8, error -71 [ 101.912652][ T5857] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 102.012828][ T793] usb usb3-port1: unable to enumerate USB device [ 102.042668][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 102.042795][ T5870] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 102.057479][ T5913] usb 2-1: config 144 has too many interfaces: 184, using maximum allowed: 32 [ 102.066454][ T5913] usb 2-1: config 144 has an invalid descriptor of length 239, skipping remainder of the config [ 102.073496][ T5870] usb 1-1: device descriptor read/8, error -71 [ 102.076938][ T5913] usb 2-1: config 144 has 0 interfaces, different from the descriptor's value: 184 [ 102.079430][ T5913] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 102.084449][ T5857] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.093157][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.104071][ T5857] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.112311][ T5913] usb 2-1: Product: syz [ 102.121385][ T5857] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.130996][ T5913] usb 2-1: Manufacturer: syz [ 102.135984][ T5857] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 102.146132][ T5913] usb 2-1: SerialNumber: syz [ 102.149761][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.174426][ T5857] usb 4-1: config 0 descriptor?? [ 102.322670][ T5870] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 102.343165][ T5870] usb 1-1: device descriptor read/8, error -71 [ 102.368764][ T6230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'. [ 102.393032][ T6234] netlink: 'syz.3.97': attribute type 4 has an invalid length. [ 102.413709][ T793] usb 4-1: USB disconnect, device number 9 [ 102.422391][ T6233] batadv_slave_1: left promiscuous mode [ 102.458604][ T5870] usb usb1-port1: unable to enumerate USB device [ 102.484737][ T5913] usb 2-1: USB disconnect, device number 8 [ 103.080993][ T6239] dlm: plock device version mismatch: kernel (1.2.0), user (1.6.16) [ 103.812686][ T5870] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 103.982921][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 104.010629][ T5870] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 104.023477][ T5870] usb 3-1: config 0 has no interface number 0 [ 104.029611][ T5870] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.041532][ T5870] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 104.057034][ T5870] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 104.066824][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 104.076492][ T5870] usb 3-1: Product: syz [ 104.080670][ T5870] usb 3-1: SerialNumber: syz [ 104.095606][ T5870] usb 3-1: config 0 descriptor?? [ 104.115744][ T5870] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 104.125812][ T5870] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input11 [ 104.252703][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 104.259298][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.105'. [ 104.284849][ T5857] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 104.388045][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.398468][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.423023][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 104.430986][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.442351][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.452356][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 104.459646][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.474656][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.484281][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.496201][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.507471][ T5857] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 104.519084][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.528623][ T9] usb 2-1: config 0 descriptor?? [ 104.534552][ T5857] usb 1-1: Product: syz [ 104.543676][ T5857] usb 1-1: Manufacturer: syz [ 104.548521][ T5857] usb 1-1: SerialNumber: syz [ 104.564325][ T5857] usb 1-1: config 0 descriptor?? [ 104.577740][ T5857] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 104.588920][ T5857] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 104.951012][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 104.960185][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 104.967602][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 104.988260][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input12 [ 105.085646][ T9] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 105.165834][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.179752][ T5857] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 105.225841][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.290699][ T5913] usb 2-1: USB disconnect, device number 9 [ 105.302241][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.311025][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.323856][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.331725][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.339294][ T9] usb 3-1: USB disconnect, device number 18 [ 105.345324][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.345352][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 105.441831][ T9] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 105.609148][ T5857] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 105.631197][ T5857] em28xx 1-1:0.0: board has no eeprom [ 105.682840][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 105.702637][ T5857] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 105.710557][ T5857] em28xx 1-1:0.0: dvb set to bulk mode. [ 105.722887][ T794] em28xx 1-1:0.0: Binding DVB extension [ 105.752326][ T5857] usb 1-1: USB disconnect, device number 17 [ 105.779779][ T5857] em28xx 1-1:0.0: Disconnecting em28xx [ 105.790237][ T794] em28xx 1-1:0.0: Registering input extension [ 105.797936][ T5857] em28xx 1-1:0.0: Closing input extension [ 105.806437][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 105.836466][ T5857] em28xx 1-1:0.0: Freeing device [ 105.847801][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 105.861145][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 105.880952][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 105.900370][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.919685][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.929706][ T24] usb 4-1: Product: syz [ 105.942657][ T24] usb 4-1: Manufacturer: syz [ 105.947280][ T24] usb 4-1: SerialNumber: syz [ 105.967187][ T24] usb 4-1: config 0 descriptor?? [ 105.972789][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 105.980256][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.984960][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 105.989571][ T9] usb 3-1: config 0 has no interface number 0 [ 105.999615][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 106.007325][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 106.023234][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.031288][ T9] usb 3-1: Product: syz [ 106.035629][ T9] usb 3-1: Manufacturer: syz [ 106.040250][ T9] usb 3-1: SerialNumber: syz [ 106.047724][ T9] usb 3-1: config 0 descriptor?? [ 106.055341][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 106.242876][ T793] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 106.255289][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.264505][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.392651][ T793] usb 2-1: Using ep0 maxpacket: 8 [ 106.404917][ T793] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 106.418859][ T793] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 106.429296][ T793] usb 2-1: config 6 has no interface number 0 [ 106.437300][ T793] usb 2-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.459162][ T793] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 106.468504][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.476913][ T793] usb 2-1: Product: syz [ 106.481461][ T793] usb 2-1: Manufacturer: syz [ 106.495286][ T793] usb 2-1: SerialNumber: syz [ 106.513921][ T793] hso 2-1:6.2: Failed to find INT IN ep [ 106.581258][ T24] em28xx 4-1:0.0: chip ID is em2710 [ 106.627739][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 106.649739][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 106.782857][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 106.796530][ T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 106.813499][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 106.823101][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 106.824544][ T793] usb 3-1: USB disconnect, device number 19 [ 106.849355][ T24] usb 4-1: USB disconnect, device number 10 [ 106.871950][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 106.878223][ T793] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 106.892210][ T24] em28xx 4-1:0.0: Freeing device [ 106.912242][ T793] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 106.931237][ T793] quatech2 3-1:0.51: device disconnected [ 106.981119][ T9] usb 2-1: USB disconnect, device number 10 [ 107.410276][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 107.592671][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 107.673198][ T793] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 107.704122][ T6332] binder: BC_ATTEMPT_ACQUIRE not supported [ 107.709948][ T6332] binder: 6331:6332 ioctl c0306201 2000000001c0 returned -22 [ 107.742689][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 107.755358][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.774780][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 107.782853][ T794] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 107.787464][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 107.802052][ T6335] netlink: 'syz.1.125': attribute type 10 has an invalid length. [ 107.804910][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 107.804935][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 107.807373][ T24] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 107.824748][ T6335] team0: Device tunl0 is of different type [ 107.836223][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 107.859512][ T24] usb 4-1: Product: syz [ 107.864325][ T24] usb 4-1: Manufacturer: syz [ 107.868935][ T24] usb 4-1: SerialNumber: syz [ 107.873616][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 107.880385][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.892491][ T793] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 107.903177][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.911506][ T793] usb 1-1: Product: syz [ 107.915933][ T793] usb 1-1: Manufacturer: syz [ 107.920561][ T793] usb 1-1: SerialNumber: syz [ 107.927096][ T24] usb 4-1: config 0 descriptor?? [ 107.933787][ T794] usb 3-1: device descriptor read/64, error -71 [ 107.936344][ T793] usb 1-1: config 0 descriptor?? [ 107.962355][ T793] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 107.972755][ T793] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 108.137309][ T24] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 108.144200][ T24] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 108.182687][ T794] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 108.242658][ T5885] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 108.314531][ T794] usb 3-1: device descriptor read/64, error -71 [ 108.343314][ T24] radio-si470x 4-1:0.0: software version 218, hardware version 221 [ 108.351226][ T24] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 108.392638][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 108.398949][ T5885] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 108.412886][ T5885] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 108.423202][ T5885] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.423696][ T794] usb usb3-port1: attempt power cycle [ 108.433230][ T5885] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.433319][ T5885] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.433341][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.548241][ T24] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 108.565191][ T793] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 108.640087][ T5885] usb 2-1: GET_CAPABILITIES returned 0 [ 108.645796][ T5885] usbtmc 2-1:16.0: can't read capabilities [ 108.808133][ T794] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 108.833694][ T794] usb 3-1: device descriptor read/8, error -71 [ 108.950230][ T24] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 108.958975][ T24] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 108.979898][ T793] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 108.988642][ T793] em28xx 1-1:0.0: board has no eeprom [ 108.997391][ T24] usb 4-1: USB disconnect, device number 11 [ 109.073532][ T794] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 109.073540][ T793] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 109.073563][ T793] em28xx 1-1:0.0: dvb set to bulk mode. [ 109.096791][ T794] usb 3-1: device descriptor read/8, error -71 [ 109.097773][ T5885] em28xx 1-1:0.0: Binding DVB extension [ 109.112935][ T793] usb 1-1: USB disconnect, device number 18 [ 109.129980][ T793] em28xx 1-1:0.0: Disconnecting em28xx [ 109.158038][ T5885] em28xx 1-1:0.0: Registering input extension [ 109.165105][ T793] em28xx 1-1:0.0: Closing input extension [ 109.180137][ T793] em28xx 1-1:0.0: Freeing device [ 109.213010][ T794] usb usb3-port1: unable to enumerate USB device [ 109.411403][ T6342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.421143][ T6342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.596077][ T6355] cgroup: Unknown subsys name '' [ 109.691477][ T6359] netlink: 'syz.1.132': attribute type 21 has an invalid length. [ 109.699407][ T6359] netlink: 164 bytes leftover after parsing attributes in process `syz.1.132'. [ 109.711859][ T6359] netlink: 'syz.1.132': attribute type 21 has an invalid length. [ 109.720917][ T6359] netlink: 164 bytes leftover after parsing attributes in process `syz.1.132'. [ 109.763271][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 109.832690][ T793] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 109.935026][ T9] usb 4-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 109.945671][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.955801][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.964955][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.973079][ T9] usb 4-1: SerialNumber: syz [ 109.985397][ T793] usb 1-1: config 1 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.996679][ T793] usb 1-1: config 1 interface 0 has no altsetting 0 [ 110.006667][ T793] usb 1-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 110.018499][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.026733][ T793] usb 1-1: Product: syz [ 110.030908][ T793] usb 1-1: Manufacturer: à¡¡ [ 110.035568][ T793] usb 1-1: SerialNumber: syz [ 110.192222][ T9] usb 4-1: 0:2 : does not exist [ 110.197319][ T9] usb 4-1: unit 160 not found! [ 110.213837][ T9] usb 4-1: USB disconnect, device number 12 [ 110.241919][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.676829][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.686282][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.696250][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.706238][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.858661][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.867668][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.879051][ T793] usbhid 1-1:1.0: can't add hid device: -71 [ 110.889617][ T793] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 110.900330][ T793] usb 1-1: USB disconnect, device number 19 [ 110.932665][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 111.082930][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 111.088204][ T5857] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 111.098127][ T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 111.106284][ T9] usb 3-1: config 0 has no interface number 0 [ 111.112374][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.123371][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.133566][ T9] usb 3-1: config 0 interface 85 has no altsetting 0 [ 111.144202][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 111.153324][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.161321][ T9] usb 3-1: Product: syz [ 111.166584][ T9] usb 3-1: Manufacturer: syz [ 111.171191][ T9] usb 3-1: SerialNumber: syz [ 111.179064][ T9] usb 3-1: config 0 descriptor?? [ 111.243599][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 111.265492][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.273889][ T6382] tipc: Started in network mode [ 111.280877][ T6382] tipc: Node identity 9adb62225352, cluster identity 4711 [ 111.283528][ T5857] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.297771][ T6382] tipc: Enabled bearer , priority 0 [ 111.304283][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.306429][ T6383] tipc: Enabling of bearer rejected, already enabled [ 111.312497][ T5857] usb 4-1: Product: syz [ 111.325029][ T5857] usb 4-1: Manufacturer: syz [ 111.329681][ T5857] usb 4-1: SerialNumber: syz [ 111.331395][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.348353][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.358959][ T6381] tipc: Disabling bearer [ 111.362333][ T5857] usb 4-1: config 0 descriptor?? [ 111.376039][ T5857] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.385890][ T5857] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 111.588907][ T9] appletouch 3-1:0.85: Failed to request geyser raw mode [ 111.596291][ T9] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 111.614253][ T9] usb 3-1: USB disconnect, device number 24 [ 111.682687][ T5885] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 111.834575][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.844964][ T5885] usb 1-1: config 11 has an invalid interface number: 250 but max is 0 [ 111.853363][ T5885] usb 1-1: config 11 has no interface number 0 [ 111.860046][ T5885] usb 1-1: config 11 interface 250 altsetting 74 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 111.871494][ T5885] usb 1-1: config 11 interface 250 has no altsetting 0 [ 111.880672][ T5885] usb 1-1: New USB device found, idVendor=10cf, idProduct=8062, bcdDevice=30.c5 [ 111.889781][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.898436][ T5885] usb 1-1: Product: syz [ 111.902694][ T5885] usb 1-1: Manufacturer: syz [ 111.907316][ T5885] usb 1-1: SerialNumber: syz [ 111.976476][ T5857] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 112.178698][ T5885] vmk80xx 1-1:11.250: driver 'vmk80xx' failed to auto-configure device. [ 112.207946][ T5885] usb 1-1: USB disconnect, device number 20 [ 112.231806][ T6399] netlink: 52 bytes leftover after parsing attributes in process `syz.2.142'. [ 112.406333][ T5857] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 112.415962][ T5857] em28xx 4-1:0.0: board has no eeprom [ 112.431429][ T6401] netlink: 'syz.1.144': attribute type 27 has an invalid length. [ 112.482707][ T5870] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 112.492633][ T5857] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 112.500463][ T5857] em28xx 4-1:0.0: dvb set to bulk mode. [ 112.506778][ T9] em28xx 4-1:0.0: Binding DVB extension [ 112.535957][ T5857] usb 4-1: USB disconnect, device number 13 [ 112.552242][ T5857] em28xx 4-1:0.0: Disconnecting em28xx [ 112.560631][ T9] em28xx 4-1:0.0: Registering input extension [ 112.568911][ T5857] em28xx 4-1:0.0: Closing input extension [ 112.586352][ T5857] em28xx 4-1:0.0: Freeing device [ 112.643601][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 112.650376][ T5870] usb 3-1: too many configurations: 61, using maximum allowed: 8 [ 112.659923][ T5870] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 112.667593][ T5870] usb 3-1: can't read configurations, error -61 [ 112.802760][ T5870] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 112.961229][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 112.985213][ T5870] usb 3-1: too many configurations: 61, using maximum allowed: 8 [ 113.003453][ T5885] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 113.019070][ T5870] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 113.030224][ T6415] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 113.031279][ T5870] usb 3-1: can't read configurations, error -61 [ 113.046023][ T5870] usb usb3-port1: attempt power cycle [ 113.192692][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 113.204563][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.226345][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.246569][ T5885] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 113.255798][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.271030][ T5885] usb 1-1: config 0 descriptor?? [ 113.282497][ T6422] loop5: detected capacity change from 0 to 7 [ 113.311820][ T6277] Dev loop5: unable to read RDB block 7 [ 113.317743][ T6277] loop5: unable to read partition table [ 113.323777][ T6277] loop5: partition table beyond EOD, truncated [ 113.342413][ T6422] Dev loop5: unable to read RDB block 7 [ 113.348574][ T6422] loop5: unable to read partition table [ 113.354595][ T6422] loop5: partition table beyond EOD, truncated [ 113.360786][ T6422] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 113.442728][ T5870] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 113.454010][ T793] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 113.463477][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 113.473031][ T5870] usb 3-1: too many configurations: 61, using maximum allowed: 8 [ 113.498049][ T5870] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 113.512621][ T5870] usb 3-1: can't read configurations, error -61 [ 113.537293][ T5885] usbhid 1-1:0.0: can't add hid device: -71 [ 113.546879][ T5885] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 113.557949][ T5885] usb 1-1: USB disconnect, device number 21 [ 113.592304][ T6428] netlink: 72 bytes leftover after parsing attributes in process `syz.1.152'. [ 113.624570][ T793] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 113.634565][ T793] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 113.647525][ T793] usb 4-1: config 8 has no interface number 0 [ 113.653044][ T5870] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 113.654062][ T793] usb 4-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 113.692010][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 113.706271][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 113.711782][ T793] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 113.712184][ T5870] usb 3-1: too many configurations: 61, using maximum allowed: 8 [ 113.722204][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.736377][ T6434] bridge_slave_1: left allmulticast mode [ 113.738817][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.743965][ T6434] bridge_slave_1: left promiscuous mode [ 113.755275][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.761662][ T5870] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 113.768567][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.782792][ T793] usb 4-1: NFC: intf ffff88807a702000 id ffffffff8ed2d220 [ 113.786200][ T5870] usb 3-1: can't read configurations, error -61 [ 113.807050][ T5870] usb usb3-port1: unable to enumerate USB device [ 113.807093][ T6434] bridge_slave_0: left allmulticast mode [ 113.819556][ T6434] bridge_slave_0: left promiscuous mode [ 113.826480][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.998329][ T5870] usb 4-1: USB disconnect, device number 14 [ 114.348220][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.363687][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.376766][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.389776][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.433026][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 114.474811][ T6451] syzkaller1: entered promiscuous mode [ 114.480295][ T6451] syzkaller1: entered allmulticast mode [ 114.488221][ T6451] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.160'. [ 114.594113][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.604987][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 114.618685][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 114.628603][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.641544][ T24] usb 1-1: config 0 descriptor?? [ 114.799811][ T6461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.809423][ T6461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.922734][ T793] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 115.073128][ T24] kye 0003:0458:4018.0005: unknown main item tag 0x0 [ 115.080057][ T24] kye 0003:0458:4018.0005: unknown main item tag 0x0 [ 115.086922][ T24] kye 0003:0458:4018.0005: unknown main item tag 0x0 [ 115.093911][ T24] kye 0003:0458:4018.0005: unknown main item tag 0x0 [ 115.100657][ T24] kye 0003:0458:4018.0005: unknown main item tag 0x0 [ 115.108443][ T793] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 115.118877][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.127538][ T24] kye 0003:0458:4018.0005: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.0-1/input0 [ 115.144141][ T793] usb 4-1: config 0 descriptor?? [ 115.166098][ T793] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 115.352837][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.376753][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.482411][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.494532][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.622645][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 115.678450][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.687285][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.710516][ T5857] usb 1-1: USB disconnect, device number 22 [ 115.775150][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.784895][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.800590][ T24] usb 3-1: config 0 descriptor?? [ 115.815901][ T24] cp210x 3-1:0.0: cp210x converter detected [ 116.176962][ T6497] netlink: 'syz.1.173': attribute type 2 has an invalid length. [ 116.207318][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'. [ 116.222086][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.224457][ T24] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 116.231437][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.243115][ T793] gspca_cpia1: usb_control_msg 05, error -110 [ 116.253444][ T793] gspca_cpia1: usb_control_msg 01, error -32 [ 116.259984][ T793] gspca_cpia1: usb_control_msg 01, error -32 [ 116.268357][ T793] gspca_cpia1: usb_control_msg 01, error -32 [ 116.275523][ T793] gspca_cpia1: usb_control_msg 01, error -32 [ 116.281797][ T793] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 116.450661][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 116.649002][ T24] usb 3-1: USB disconnect, device number 29 [ 116.659154][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 116.682141][ T24] cp210x 3-1:0.0: device disconnected [ 116.960037][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.985840][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.149458][ T6513] syz.1.179 (6513): drop_caches: 2 [ 117.172906][ T794] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 117.352642][ T794] usb 1-1: Using ep0 maxpacket: 16 [ 117.359541][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 117.372353][ T794] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 117.381628][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.390697][ T794] usb 1-1: Product: syz [ 117.394935][ T794] usb 1-1: Manufacturer: syz [ 117.399523][ T794] usb 1-1: SerialNumber: syz [ 117.406642][ T794] usb 1-1: config 0 descriptor?? [ 117.414621][ T794] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 117.429059][ T794] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 117.462739][ T5857] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 117.588145][ T5892] usb 4-1: USB disconnect, device number 15 [ 117.611327][ T5857] usb 3-1: device descriptor read/64, error -71 [ 117.862850][ T5857] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 117.865065][ T6533] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 117.883786][ T6533] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 117.894532][ T6533] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 117.904058][ T6533] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 117.912645][ T6533] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 117.921186][ T6533] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 117.930556][ T6533] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 117.940375][ T6533] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 117.949343][ T6533] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 117.958042][ T6533] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 117.966732][ T6533] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 117.975404][ T6533] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 118.002873][ T5857] usb 3-1: device descriptor read/64, error -71 [ 118.025624][ T794] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 118.082743][ T5892] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 118.113087][ T5857] usb usb3-port1: attempt power cycle [ 118.215693][ T5892] usb 4-1: device descriptor read/64, error -71 [ 118.291221][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.300067][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.439879][ T794] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 118.448046][ T794] em28xx 1-1:0.0: board has no eeprom [ 118.462698][ T5857] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 118.463119][ T5892] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 118.485564][ T5857] usb 3-1: device descriptor read/8, error -71 [ 118.512630][ T794] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 118.521723][ T794] em28xx 1-1:0.0: dvb set to bulk mode. [ 118.528119][ T9] em28xx 1-1:0.0: Binding DVB extension [ 118.537014][ T794] usb 1-1: USB disconnect, device number 23 [ 118.544770][ T794] em28xx 1-1:0.0: Disconnecting em28xx [ 118.586006][ T9] em28xx 1-1:0.0: Registering input extension [ 118.592214][ T794] em28xx 1-1:0.0: Closing input extension [ 118.605855][ T794] em28xx 1-1:0.0: Freeing device [ 118.622702][ T5892] usb 4-1: device descriptor read/64, error -71 [ 118.722640][ T5857] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 118.733089][ T5892] usb usb4-port1: attempt power cycle [ 118.743217][ T5857] usb 3-1: device descriptor read/8, error -71 [ 118.848159][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.858820][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.859530][ T5857] usb usb3-port1: unable to enumerate USB device [ 118.946400][ T6551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.955419][ T6551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.965887][ T30] audit: type=1326 audit(1762602363.834:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.191" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbd338f6c9 code=0x0 [ 119.072767][ T5892] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 119.093248][ T5892] usb 4-1: device descriptor read/8, error -71 [ 119.352656][ T5892] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 119.373262][ T5892] usb 4-1: device descriptor read/8, error -71 [ 119.483972][ T5892] usb usb4-port1: unable to enumerate USB device [ 119.911853][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 119.918335][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 119.928863][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 119.934991][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 120.194771][ T9] libceph: connect (1)[c::]:6789 error -101 [ 120.200845][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 120.262671][ T5857] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 120.304493][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 120.318673][ T6563] binder: 6562:6563 ioctl c00c6211 0 returned -14 [ 120.413462][ T30] audit: type=1326 audit(1762602365.274:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.2.195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa1d58f6c9 code=0x0 [ 120.433615][ T5857] usb 1-1: Invalid ep0 maxpacket: 64 [ 120.563474][ T5857] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 120.723171][ T9] libceph: connect (1)[c::]:6789 error -101 [ 120.729175][ T5857] usb 1-1: Invalid ep0 maxpacket: 64 [ 120.734762][ T5857] usb usb1-port1: attempt power cycle [ 120.740441][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 120.888420][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 120.937609][ T6570] netlink: 'syz.3.197': attribute type 83 has an invalid length. [ 120.948900][ T6570] netlink: 'syz.3.197': attribute type 83 has an invalid length. [ 121.082737][ T5857] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 121.103324][ T5857] usb 1-1: Invalid ep0 maxpacket: 64 [ 121.233089][ T5857] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 121.242762][ T5892] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 121.263649][ T5857] usb 1-1: Invalid ep0 maxpacket: 64 [ 121.269428][ T5857] usb usb1-port1: unable to enumerate USB device [ 121.406415][ T5892] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 121.415617][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.423803][ T5892] usb 4-1: Product: syz [ 121.428003][ T5892] usb 4-1: Manufacturer: syz [ 121.432679][ T5892] usb 4-1: SerialNumber: syz [ 121.439669][ T5892] usb 4-1: config 0 descriptor?? [ 121.512664][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 121.651893][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.660774][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.664102][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 121.670667][ T5857] usb 4-1: USB disconnect, device number 20 [ 121.684404][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.698469][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.717751][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 121.727205][ T24] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 121.735351][ T24] usb 3-1: Manufacturer: syz [ 121.742380][ T24] usb 3-1: config 0 descriptor?? [ 121.763035][ T9] libceph: connect (1)[c::]:6789 error -101 [ 121.769121][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 122.154591][ T24] ft260 0003:0403:6030.0006: item fetching failed at offset 0/2 [ 122.162972][ T24] ft260 0003:0403:6030.0006: failed to parse HID [ 122.169386][ T24] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -22 [ 122.358726][ T6577] use of bytesused == 0 is deprecated and will be removed in the future, [ 122.367452][ T6577] use the actual size instead. [ 122.692646][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 122.725167][ T24] libceph: connect (1)[c::]:6789 error -101 [ 122.731256][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 122.842624][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 122.849227][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 122.861167][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 122.870287][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.878323][ T9] usb 4-1: Product: syz [ 122.882493][ T9] usb 4-1: Manufacturer: syz [ 122.887244][ T9] usb 4-1: SerialNumber: syz [ 122.894781][ T6557] ceph: No mds server is up or the cluster is laggy [ 122.895560][ T9] usb 4-1: config 0 descriptor?? [ 122.914219][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 122.931400][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 123.422674][ T5857] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 123.512745][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 123.582657][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 123.589396][ T5857] usb 1-1: config 12 has an invalid interface number: 7 but max is 0 [ 123.597603][ T5857] usb 1-1: config 12 has no interface number 0 [ 123.604007][ T5857] usb 1-1: config 12 interface 7 has no altsetting 0 [ 123.614597][ T5857] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 123.623787][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.631805][ T5857] usb 1-1: Product: syz [ 123.637416][ T5857] usb 1-1: Manufacturer: syz [ 123.642057][ T5857] usb 1-1: SerialNumber: syz [ 123.924186][ T6550] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 123.933489][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 123.943655][ T9] em28xx 4-1:0.0: board has no eeprom [ 124.012783][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 124.020698][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 124.028907][ T794] em28xx 4-1:0.0: Binding DVB extension [ 124.054739][ T9] usb 4-1: USB disconnect, device number 21 [ 124.082648][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 124.135668][ T794] em28xx 4-1:0.0: Registering input extension [ 124.143030][ T9] em28xx 4-1:0.0: Closing input extension [ 124.169177][ T9] em28xx 4-1:0.0: Freeing device [ 124.425311][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.436559][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.492048][ T6601] netlink: 'syz.3.205': attribute type 40 has an invalid length. [ 124.548377][ T6603] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 124.557390][ T6603] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 124.565789][ T6603] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 124.572327][ T6603] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 124.579486][ T6603] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 124.586226][ T6603] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 124.592963][ T6603] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 124.599406][ T6603] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 124.606043][ T6603] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 124.614669][ T6603] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 124.621126][ T6603] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 124.628566][ T6603] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 124.636039][ T6603] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 124.644017][ T6603] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 124.842650][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 124.994549][ T9] usb 4-1: config 0 has an invalid interface number: 165 but max is 0 [ 125.003471][ T9] usb 4-1: config 0 has no interface number 0 [ 125.009593][ T9] usb 4-1: config 0 interface 165 has no altsetting 0 [ 125.020373][ T9] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=71.ba [ 125.029611][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.038292][ T9] usb 4-1: Product: syz [ 125.042507][ T9] usb 4-1: Manufacturer: syz [ 125.047814][ T6606] evm: overlay not supported [ 125.048816][ T9] usb 4-1: SerialNumber: syz [ 125.060789][ T9] usb 4-1: config 0 descriptor?? [ 125.117005][ T6608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.126174][ T6608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.199810][ T24] usb 3-1: USB disconnect, device number 34 [ 125.259445][ T6611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.270802][ T6611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.287963][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.299223][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.325164][ T9] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 125.347162][ T9] usb 4-1: USB disconnect, device number 22 [ 125.552680][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 125.682754][ T24] usb 3-1: device descriptor read/64, error -71 [ 125.799368][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 125.812449][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.821258][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.922764][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 126.020299][ T5857] go7007 1-1:12.7: probe with driver go7007 failed with error -12 [ 126.030670][ T5857] usb 1-1: USB disconnect, device number 28 [ 126.052677][ T24] usb 3-1: device descriptor read/64, error -71 [ 126.164492][ T24] usb usb3-port1: attempt power cycle [ 126.462866][ T5857] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 126.513059][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 126.543417][ T24] usb 3-1: device descriptor read/8, error -71 [ 126.601279][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 126.615202][ T6646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.623691][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 126.630731][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 126.641647][ T6646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.655352][ T5857] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 126.667062][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.675916][ T5857] usb 1-1: Product: syz [ 126.680146][ T5857] usb 1-1: Manufacturer: syz [ 126.685034][ T5857] usb 1-1: SerialNumber: syz [ 126.695475][ T5857] usb 1-1: config 0 descriptor?? [ 126.704760][ T5857] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 126.717321][ T5857] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 126.862653][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 126.884189][ T24] usb 3-1: device descriptor read/8, error -71 [ 126.992871][ T24] usb usb3-port1: unable to enumerate USB device [ 127.013167][ T5870] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 127.164449][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.175474][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 1024 [ 127.186680][ T5870] usb 4-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 127.195803][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.206740][ T5870] usb 4-1: config 0 descriptor?? [ 127.212891][ T6649] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 127.306761][ T5857] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 127.345392][ T6654] atomic_op ffff88805d215998 conn xmit_atomic 0000000000000000 [ 127.676997][ T5870] thrustmaster 0003:044F:B300.0007: unknown main item tag 0x0 [ 127.684712][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.695101][ T5870] thrustmaster 0003:044F:B300.0007: unknown main item tag 0x0 [ 127.695329][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.734448][ T5857] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 127.740981][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.744410][ T5870] thrustmaster 0003:044F:B300.0007: hidraw0: USB HID v0.00 Device [HID 044f:b300] on usb-dummy_hcd.3-1/input0 [ 127.763946][ T5857] em28xx 1-1:0.0: board has no eeprom [ 127.777246][ T5870] thrustmaster 0003:044F:B300.0007: no inputs found [ 127.780801][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.853347][ T5857] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 127.861232][ T5857] em28xx 1-1:0.0: dvb set to bulk mode. [ 127.867346][ T5870] em28xx 1-1:0.0: Binding DVB extension [ 127.883960][ T5857] usb 1-1: USB disconnect, device number 29 [ 127.909662][ T5857] em28xx 1-1:0.0: Disconnecting em28xx [ 127.918805][ T5870] em28xx 1-1:0.0: Registering input extension [ 127.927931][ T5857] em28xx 1-1:0.0: Closing input extension [ 127.946093][ T5857] em28xx 1-1:0.0: Freeing device [ 128.446487][ T6683] program syz.1.228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.722647][ T5870] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 128.832766][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 128.852676][ T5870] usb 1-1: device descriptor read/64, error -71 [ 128.982623][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 128.989130][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.000284][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 129.009378][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.019459][ T24] usb 3-1: config 0 descriptor?? [ 129.092632][ T5870] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 129.222671][ T5870] usb 1-1: device descriptor read/64, error -71 [ 129.334437][ T5870] usb usb1-port1: attempt power cycle [ 129.435424][ T24] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 129.520187][ T6694] faux_driver vgem: [drm] Unknown color mode 2787; guessing buffer size. [ 129.609902][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.618932][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.682701][ T5870] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 129.703340][ T5870] usb 1-1: device descriptor read/8, error -71 [ 129.837809][ T9] usb 3-1: USB disconnect, device number 39 [ 129.888992][ T5892] usb 4-1: USB disconnect, device number 23 [ 129.944416][ T5870] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 129.984004][ T5870] usb 1-1: device descriptor read/8, error -71 [ 130.093824][ T5870] usb usb1-port1: unable to enumerate USB device [ 130.172212][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.181448][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.352736][ T5892] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 130.504623][ T5892] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 130.515748][ T5892] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.525726][ T5892] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 130.538891][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.545596][ T5892] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 130.554655][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.564400][ T5892] usb 4-1: config 0 descriptor?? [ 130.632668][ T5870] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 130.740861][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.750676][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.778579][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.785578][ T5892] hid-multitouch 0003:0EEF:72C4.0009: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 130.803065][ T5870] usb 3-1: Invalid ep0 maxpacket: 9 [ 130.808253][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.942647][ T5870] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 130.975688][ T6698] binder: 6697:6698 ioctl 40046205 0 returned -22 [ 131.092614][ T5870] usb 3-1: Invalid ep0 maxpacket: 9 [ 131.099371][ T793] usb 4-1: USB disconnect, device number 24 [ 131.103271][ T5870] usb usb3-port1: attempt power cycle [ 131.462716][ T5870] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 131.483123][ T5870] usb 3-1: Invalid ep0 maxpacket: 9 [ 131.612735][ T5870] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 131.633325][ T5870] usb 3-1: Invalid ep0 maxpacket: 9 [ 131.639735][ T5870] usb usb3-port1: unable to enumerate USB device [ 132.726930][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.733411][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.177448][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.183850][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.238495][ T6734] openvswitch: netlink: Duplicate key (type 21). [ 197.319503][ T6726] usb usb8: usbfs: process 6726 (syz.3.243) did not claim interface 0 before use [ 197.641299][ T6754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.662069][ T6754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.712691][ T793] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 197.834307][ T30] audit: type=1326 audit(1762602442.704:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.2.254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa1d58f6c9 code=0x0 [ 197.882641][ T793] usb 4-1: Using ep0 maxpacket: 16 [ 197.890023][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 197.902364][ T793] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.915288][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.923408][ T793] usb 4-1: Product: syz [ 197.927735][ T793] usb 4-1: Manufacturer: syz [ 197.932332][ T793] usb 4-1: SerialNumber: syz [ 197.943438][ T793] usb 4-1: config 0 descriptor?? [ 197.949553][ T6766] netlink: 56 bytes leftover after parsing attributes in process `syz.2.254'. [ 197.952010][ T793] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 197.968206][ T793] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 198.293119][ T5870] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 198.342644][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 198.445059][ T5870] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 198.456418][ T5870] usb 3-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.470449][ T5870] usb 3-1: config 1 interface 0 has no altsetting 0 [ 198.479401][ T5870] usb 3-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 198.492848][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 198.498057][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.507640][ T5870] usb 3-1: Product: syz [ 198.511926][ T5870] usb 3-1: Manufacturer: syz [ 198.516779][ T5870] usb 3-1: SerialNumber: syz [ 198.522952][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 198.535711][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 198.551466][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 198.554385][ T793] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 198.560680][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.574752][ T9] usb 1-1: Product: syz [ 198.578955][ T9] usb 1-1: Manufacturer: syz [ 198.583642][ T9] usb 1-1: SerialNumber: syz [ 198.591907][ T9] usb 1-1: config 0 descriptor?? [ 198.600619][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 198.609913][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 198.800154][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.810728][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.896472][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 198.907696][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 198.916187][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 198.923471][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 198.939145][ T9] usb 1-1: USB disconnect, device number 34 [ 198.951239][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 198.971124][ T9] em28xx 1-1:0.0: Freeing device [ 198.991754][ T793] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 199.011880][ T793] em28xx 4-1:0.0: board has no eeprom [ 199.092744][ T793] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 199.100676][ T793] em28xx 4-1:0.0: dvb set to bulk mode. [ 199.107428][ T24] em28xx 4-1:0.0: Binding DVB extension [ 199.154790][ T793] usb 4-1: USB disconnect, device number 25 [ 199.162057][ T793] em28xx 4-1:0.0: Disconnecting em28xx [ 199.187035][ T24] em28xx 4-1:0.0: Registering input extension [ 199.208672][ T793] em28xx 4-1:0.0: Closing input extension [ 199.226253][ T793] em28xx 4-1:0.0: Freeing device [ 199.259996][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 199.272261][ T6791] syzkaller1: entered promiscuous mode [ 199.278318][ T6791] syzkaller1: entered allmulticast mode [ 199.299145][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.310658][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.443095][ T9] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 199.595063][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.608179][ T9] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 199.617969][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.628273][ T9] usb 1-1: config 0 descriptor?? [ 199.782646][ T794] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 199.937204][ T6795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.948399][ T6795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.959102][ T794] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.968340][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.979422][ T794] usb 4-1: config 0 descriptor?? [ 199.990367][ T794] cp210x 4-1:0.0: cp210x converter detected [ 200.044040][ T9] waltop 0003:172F:0037.000A: collection stack underflow [ 200.051185][ T9] waltop 0003:172F:0037.000A: item 0 1 0 12 parsing failed [ 200.059124][ T9] waltop 0003:172F:0037.000A: probe with driver waltop failed with error -22 [ 200.244416][ T24] usb 1-1: USB disconnect, device number 35 [ 200.421890][ T794] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 200.430042][ T794] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 200.438590][ T794] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 200.448616][ T794] usb 4-1: cp210x converter now attached to ttyUSB0 [ 200.465279][ T794] usb 4-1: USB disconnect, device number 26 [ 200.485562][ T794] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 200.494697][ T794] cp210x 4-1:0.0: device disconnected [ 200.882779][ T5870] appletouch 3-1:1.0: Failed to read mode from device. [ 200.903818][ T5870] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 200.936228][ T5870] usb 3-1: USB disconnect, device number 44 [ 201.031622][ T6808] infiniband syz2: set down [ 201.036050][ T6817] netlink: 104 bytes leftover after parsing attributes in process `syz.0.270'. [ 201.037485][ T6808] infiniband syz2: added ipvlan1 [ 201.067835][ T6808] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 201.074560][ T6808] infiniband syz2: Couldn't open port 1 [ 201.128799][ T6823] syzkaller1: entered promiscuous mode [ 201.135993][ T6823] syzkaller1: entered allmulticast mode [ 201.147011][ T6808] RDS/IB: syz2: added [ 201.151906][ T6808] smc: adding ib device syz2 with port count 1 [ 201.158651][ T6808] smc: ib device syz2 port 1 has no pnetid [ 201.292684][ T5870] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 201.300409][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 201.373007][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 201.373691][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 201.379815][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 201.385034][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 201.462625][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 201.469572][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.479869][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 201.485558][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.498607][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 201.508392][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 201.518490][ T5870] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 201.528757][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.543434][ T5870] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 201.553468][ T5870] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 201.562409][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 201.571851][ T5870] usb 3-1: Manufacturer: syz [ 201.576515][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.587973][ T5870] usb 3-1: config 0 descriptor?? [ 201.592995][ T9] usb 4-1: Product: syz [ 201.597157][ T9] usb 4-1: Manufacturer: syz [ 201.601746][ T9] usb 4-1: SerialNumber: syz [ 201.621139][ T9] usb 4-1: config 0 descriptor?? [ 201.630642][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 201.640283][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 201.883548][ T5870] rc_core: IR keymap rc-hauppauge not found [ 201.890693][ T5870] Registered IR keymap rc-empty [ 201.897170][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.922795][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.939070][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.949576][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.954680][ T5870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 201.975928][ T5870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 201.997239][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.017838][ T6833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.030075][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.031005][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.042704][ T6833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.057851][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.062750][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.077904][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.088490][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.112993][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.126683][ T6839] capability: warning: `syz.0.275' uses 32-bit capabilities (legacy support in use) [ 202.136403][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.162649][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.193134][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.212646][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.232659][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.240462][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 202.262645][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.284225][ T5870] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 202.293360][ T5870] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 202.311085][ T5870] usb 3-1: USB disconnect, device number 45 [ 202.382607][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 202.532634][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 202.540181][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.548378][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.558570][ T24] usb 1-1: config 0 has no interface number 0 [ 202.564774][ T24] usb 1-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.577683][ T24] usb 1-1: config 0 interface 1 has no altsetting 0 [ 202.602190][ T24] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 202.611470][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.619517][ T24] usb 1-1: Product: syz [ 202.624116][ T24] usb 1-1: Manufacturer: syz [ 202.628725][ T24] usb 1-1: SerialNumber: syz [ 202.636998][ T24] usb 1-1: config 0 descriptor?? [ 202.646908][ T24] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 202.664818][ T24] cx231xx 1-1:0.1: Not found matching IAD interface [ 202.675898][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 202.686793][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.695670][ T9] em28xx 4-1:0.0: board has no eeprom [ 202.702673][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.711259][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.720903][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.729488][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.738237][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.749185][ T6843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.759657][ T6843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.771116][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.779812][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 202.780698][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.787642][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 202.798745][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.803982][ T5870] em28xx 4-1:0.0: Binding DVB extension [ 202.819901][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.832668][ T9] usb 4-1: USB disconnect, device number 27 [ 202.864487][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 202.914126][ T5892] usb 1-1: USB disconnect, device number 36 [ 202.983913][ T5870] em28xx 4-1:0.0: Registering input extension [ 202.990654][ T9] em28xx 4-1:0.0: Closing input extension [ 203.025314][ T9] em28xx 4-1:0.0: Freeing device [ 203.212735][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 203.271397][ T6855] kvm: kvm [6854]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 203.280283][ T6855] kvm: kvm [6854]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 203.343288][ T5892] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 203.362648][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 203.369403][ T24] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 203.378039][ T24] usb 3-1: config 0 has no interface number 0 [ 203.386795][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30 [ 203.397983][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.412821][ T24] usb 3-1: Product: syz [ 203.412986][ T6858] netlink: 'syz.3.280': attribute type 21 has an invalid length. [ 203.417001][ T24] usb 3-1: Manufacturer: syz [ 203.417018][ T24] usb 3-1: SerialNumber: syz [ 203.443298][ T24] usb 3-1: config 0 descriptor?? [ 203.451676][ T24] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 203.455775][ T6858] netlink: 168 bytes leftover after parsing attributes in process `syz.3.280'. [ 203.502611][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 203.515116][ T5892] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 203.518352][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.528896][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.533577][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.542778][ T5892] usb 1-1: Product: syz [ 203.549561][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 203.555259][ T5892] usb 1-1: Manufacturer: syz [ 203.567795][ T5892] usb 1-1: SerialNumber: syz [ 203.579179][ T5892] usb 1-1: config 0 descriptor?? [ 203.703646][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 203.862600][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 203.869548][ T9] usb 4-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 203.878724][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.889247][ T9] usb 4-1: config 0 descriptor?? [ 203.898082][ T9] usblcd 4-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 203.990011][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 204.000712][ T5892] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 204.007476][ T5892] gspca_sunplus: reg_w_riv err -71 [ 204.012734][ T5892] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 204.024606][ T5892] usb 1-1: USB disconnect, device number 37 [ 204.104603][ T5870] usb 4-1: USB disconnect, device number 28 [ 204.116065][ T6866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.125542][ T6866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.379327][ T24] usb 3-1: USB disconnect, device number 46 [ 204.750018][ T6883] autofs: Bad value for 'fd' [ 204.779209][ T6883] comedi comedi0: adq12b: I/O port conflict (0x3,16) [ 204.965277][ T6895] netlink: 'syz.2.290': attribute type 10 has an invalid length. [ 204.975330][ T6895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.290'. [ 204.999579][ T6895] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 205.002833][ T794] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 205.008801][ T6895] team0: Failed to send options change via netlink (err -105) [ 205.024315][ T6895] team0: Port device geneve0 added [ 205.075093][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.094791][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.108450][ T6902] overlayfs: missing 'lowerdir' [ 205.114300][ T6903] overlayfs: missing 'lowerdir' [ 205.131201][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.140136][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.152980][ T5870] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 205.172641][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 205.179477][ T794] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.188163][ T794] usb 4-1: config 5 has an invalid interface number: 97 but max is 1 [ 205.196282][ T794] usb 4-1: config 5 has an invalid interface number: 175 but max is 1 [ 205.204555][ T794] usb 4-1: config 5 has no interface number 0 [ 205.210624][ T794] usb 4-1: config 5 has no interface number 1 [ 205.216836][ T794] usb 4-1: config 5 interface 97 has no altsetting 0 [ 205.224056][ T794] usb 4-1: config 5 interface 175 has no altsetting 0 [ 205.234385][ T794] usb 4-1: string descriptor 0 read error: -22 [ 205.240615][ T794] usb 4-1: New USB device found, idVendor=c643, idProduct=384d, bcdDevice=c9.f6 [ 205.250463][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.267560][ T794] usb-storage 4-1:5.97: USB Mass Storage device detected [ 205.304586][ T5870] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 205.313788][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.324022][ T5870] usb 1-1: config 0 descriptor?? [ 205.341199][ T5870] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 205.363423][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 205.465863][ T5857] usb 4-1: USB disconnect, device number 29 [ 205.492634][ T9] usb 3-1: device descriptor read/64, error -71 [ 205.728515][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.737328][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 205.737638][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.745202][ T5870] cpia1 1-1:0.0: unexpected state after lo power cmd: 86 [ 205.882587][ T9] usb 3-1: device descriptor read/64, error -71 [ 205.955406][ T5870] gspca_cpia1: usb_control_msg 01, error -32 [ 205.962407][ T5870] gspca_cpia1: usb_control_msg 01, error -71 [ 205.973981][ T5870] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 205.985107][ T5870] usb 1-1: USB disconnect, device number 38 [ 206.008754][ T9] usb usb3-port1: attempt power cycle [ 206.128952][ T6922] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 206.184255][ T6923] @0Ù: renamed from bond_slave_1 (while UP) [ 206.362605][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 206.383592][ T9] usb 3-1: device descriptor read/8, error -71 [ 206.622776][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 206.663167][ T9] usb 3-1: device descriptor read/8, error -71 [ 206.772805][ T9] usb usb3-port1: unable to enumerate USB device [ 206.882701][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 207.058235][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.066337][ T24] usb 1-1: config 0 has no interface number 0 [ 207.074269][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 207.083359][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.091919][ T24] usb 1-1: Product: syz [ 207.097388][ T24] usb 1-1: Manufacturer: syz [ 207.101989][ T24] usb 1-1: SerialNumber: syz [ 207.109523][ T24] usb 1-1: config 0 descriptor?? [ 207.320876][ T24] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 207.346544][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 207.363032][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 207.381344][ T24] usb 1-1: media controller created [ 207.407344][ T6943] binder: 6942:6943 ioctl 40046205 0 returned -22 [ 207.417881][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.575441][ T24] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 207.585950][ T6950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.605271][ T6950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.742637][ T9] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 207.896374][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 207.905777][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 207.916098][ T9] usb 4-1: SerialNumber: syz [ 207.934355][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 207.945863][ T9] usb 4-1: config 0 descriptor?? [ 207.958843][ T9] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 207.967264][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 207.984298][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 207.994390][ T9] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 208.003320][ T9] usb 4-1: media controller created [ 208.008776][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 208.016213][ T9] dvb-usb: MAC address reading failed. [ 208.040647][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.068437][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 208.075320][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 208.081232][ T9] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 208.093874][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 208.108198][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 208.116475][ T9] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 208.160215][ T9] usb 4-1: USB disconnect, device number 30 [ 208.215076][ T9] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 208.259650][ T6952] mmap: syz.2.309 (6952): VmData 37597184 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 208.336670][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.310'. [ 208.408840][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.418806][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.648122][ T24] usb 1-1: USB disconnect, device number 39 [ 208.705696][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 208.865001][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.876096][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.892444][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 208.905406][ T9] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 208.914503][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.925248][ T9] usb 3-1: config 0 descriptor?? [ 208.980610][ T6969] netlink: 'syz.1.315': attribute type 83 has an invalid length. [ 209.032054][ T6971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.316'. [ 209.149550][ T6976] netlink: 244 bytes leftover after parsing attributes in process `syz.1.317'. [ 209.162406][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.174941][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.202454][ T6976] netlink: 36 bytes leftover after parsing attributes in process `syz.1.317'. [ 209.351452][ T9] nintendo 0003:057E:2019.000B: hidraw0: USB HID v80.00 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 209.423664][ T9] nintendo 0003:057E:2019.000B: Failed to get joycon info; ret=-38 [ 209.432716][ T9] nintendo 0003:057E:2019.000B: Failed to retrieve controller info; ret=-38 [ 209.441422][ T9] nintendo 0003:057E:2019.000B: Failed to initialize controller; ret=-38 [ 209.459673][ T9] nintendo 0003:057E:2019.000B: probe - fail = -38 [ 209.466751][ T9] nintendo 0003:057E:2019.000B: probe with driver nintendo failed with error -38 [ 209.472793][ T793] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 209.549269][ T9] usb 3-1: USB disconnect, device number 51 [ 209.643340][ T793] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 209.653096][ T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.661982][ T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.672908][ T793] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.680390][ T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.689323][ T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.700336][ T793] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.707910][ T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.716919][ T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.729878][ T793] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.738111][ T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.762762][ T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.773802][ T793] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.782324][ T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.791929][ T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.812610][ T793] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.820669][ T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.837157][ T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.851430][ T793] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.860176][ T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.872629][ T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.890362][ T6987] syz.1.320 (6987): drop_caches: 2 [ 209.900921][ T793] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.902643][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.913980][ T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.924339][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.930607][ T793] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.946926][ T6990] overlayfs: failed to resolve './bus': -2 [ 209.953639][ T793] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.961584][ T6990] fuse: Bad value for 'fd' [ 209.977553][ T793] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 209.986953][ T793] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 209.995384][ T793] usb 1-1: Product: syz [ 209.999664][ T793] usb 1-1: Manufacturer: syz [ 210.004592][ T793] usb 1-1: SerialNumber: syz [ 210.012175][ T793] usb 1-1: config 0 descriptor?? [ 210.026302][ T793] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 210.120770][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 210.177153][ T6999] netlink: 'syz.2.324': attribute type 11 has an invalid length. [ 210.222692][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 210.239029][ T6978] usbtmc 2-1:16.0: Unable to send data, error -71 [ 210.262940][ T793] usb 1-1: USB disconnect, device number 40 [ 210.278581][ T793] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 210.332638][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 210.495646][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.526062][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.574566][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.600992][ T7010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'. [ 210.610208][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.625417][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.645069][ T9] usb 4-1: config 0 descriptor?? [ 210.728472][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.739689][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.856805][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.864569][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.871949][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.887983][ T9] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 210.922617][ T793] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 210.983377][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 211.055619][ T5870] usb 4-1: USB disconnect, device number 31 [ 211.072576][ T793] usb 1-1: Using ep0 maxpacket: 8 [ 211.080272][ T793] usb 1-1: config 0 has an invalid interface number: 150 but max is 0 [ 211.090209][ T793] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 211.098447][ T793] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 211.106485][ T793] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 211.116568][ T24] usb 3-1: device descriptor read/64, error -71 [ 211.123023][ T793] usb 1-1: config 0 has no interface number 0 [ 211.129088][ T793] usb 1-1: config 0 has no interface number 1 [ 211.135500][ T793] usb 1-1: config 0 has no interface number 2 [ 211.141970][ T793] usb 1-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.154982][ T793] usb 1-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 211.166153][ T793] usb 1-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 211.179558][ T793] usb 1-1: config 0 interface 150 has no altsetting 0 [ 211.186837][ T793] usb 1-1: config 0 interface 112 has no altsetting 0 [ 211.193663][ T793] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 211.202739][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.212672][ T793] usb 1-1: config 0 descriptor?? [ 211.372626][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 211.438735][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.448522][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.512621][ T24] usb 3-1: device descriptor read/64, error -71 [ 211.620868][ T793] usb 1-1: string descriptor 0 read error: -71 [ 211.630427][ T24] usb usb3-port1: attempt power cycle [ 211.643654][ T793] usb 1-1: USB disconnect, device number 41 [ 211.842673][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 211.982681][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 211.992652][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 212.000396][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 212.000420][ T9] usb 4-1: config 0 has no interface number 0 [ 212.000452][ T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 212.000473][ T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 212.000493][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 212.004226][ T24] usb 3-1: device descriptor read/8, error -71 [ 212.011687][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 212.011715][ T9] usb 4-1: New USB device strings: Mfr=1, Product=53, SerialNumber=3 [ 212.011727][ T9] usb 4-1: Product: syz [ 212.011735][ T9] usb 4-1: Manufacturer: syz [ 212.011743][ T9] usb 4-1: SerialNumber: syz [ 212.014042][ T9] usb 4-1: config 0 descriptor?? [ 212.014779][ T7025] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 212.014912][ T7025] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 212.244424][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 212.262616][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 212.321359][ T24] usb 3-1: device descriptor read/8, error -71 [ 212.366405][ T7034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.378313][ T7034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.426527][ T7025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.426939][ T7025] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 212.427685][ T7025] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 212.450496][ T7025] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 212.450611][ T7025] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 212.455595][ T24] usb usb3-port1: unable to enumerate USB device [ 212.793709][ T5870] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 212.862631][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 212.887067][ T9] usb 4-1: USB disconnect, device number 32 [ 212.955198][ T5870] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.978124][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.991425][ T5870] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 213.004312][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 213.013420][ T7061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.024329][ T5870] usb 1-1: SerialNumber: syz [ 213.031489][ T7061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.066493][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.077264][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.151657][ T7071] mmap: syz.1.336 (7071) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 213.168913][ T7071] netlink: 168 bytes leftover after parsing attributes in process `syz.1.336'. [ 213.240698][ T7075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.272347][ T5870] usb 1-1: 0:2 : does not exist [ 213.282800][ T7075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.284102][ T5870] usb 1-1: unit 5 not found! [ 213.348152][ T5870] usb 1-1: USB disconnect, device number 42 [ 213.690853][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.710765][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.837162][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 213.942638][ T5870] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 214.230399][ T7111] netlink: 64 bytes leftover after parsing attributes in process `syz.1.346'. [ 214.250725][ T7114] netlink: 14 bytes leftover after parsing attributes in process `syz.3.347'. [ 214.267631][ T7111] netlink: 64 bytes leftover after parsing attributes in process `syz.1.346'. [ 214.403599][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 214.424493][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.446726][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.572643][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 214.581893][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.594179][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.605856][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 214.620165][ T9] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 214.631505][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.653495][ T9] usb 3-1: Product: syz [ 214.657720][ T9] usb 3-1: Manufacturer: syz [ 214.663621][ T9] usb 3-1: SerialNumber: syz [ 214.675918][ T9] usb 3-1: config 0 descriptor?? [ 214.753120][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 214.912921][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 214.925440][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 214.934189][ T10] usb 1-1: config 0 has no interface number 0 [ 214.937887][ T7140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.940390][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 214.954211][ T7140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.959150][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 214.974944][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.975621][ T7109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.983180][ T10] usb 1-1: Product: syz [ 214.995873][ T7109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.996002][ T10] usb 1-1: Manufacturer: syz [ 215.008421][ T10] usb 1-1: SerialNumber: syz [ 215.017400][ T10] usb 1-1: config 0 descriptor?? [ 215.034802][ T9] pegasus_notetaker 3-1:0.0: packet size is too small (0) [ 215.046783][ T9] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 215.073413][ T9] usb 3-1: USB disconnect, device number 56 [ 215.088872][ T5834] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 215.099323][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 215.099352][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.099365][ T5834] Workqueue: hci1 hci_rx_work [ 215.099399][ T5834] Call Trace: [ 215.099410][ T5834] [ 215.099418][ T5834] dump_stack_lvl+0x189/0x250 [ 215.099448][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.099471][ T5834] ? __pfx__printk+0x10/0x10 [ 215.099497][ T5834] ? kernfs_path_from_node+0x250/0x290 [ 215.099521][ T5834] ? kernfs_path_from_node+0x2f/0x290 [ 215.099550][ T5834] sysfs_create_dir_ns+0x259/0x280 [ 215.099579][ T5834] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 215.099603][ T5834] ? do_raw_spin_unlock+0x122/0x240 [ 215.099632][ T5834] kobject_add_internal+0x59f/0xb70 [ 215.099669][ T5834] kobject_add+0x155/0x220 [ 215.099701][ T5834] ? __pfx_kobject_add+0x10/0x10 [ 215.099728][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 215.099753][ T5834] ? get_device_parent+0x366/0x3a0 [ 215.099780][ T5834] device_add+0x408/0xb80 [ 215.099805][ T5834] hci_conn_add_sysfs+0xd5/0x210 [ 215.099834][ T5834] le_conn_complete_evt+0xf26/0x14d0 [ 215.099870][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 215.099894][ T5834] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 215.099918][ T5834] ? __asan_memcpy+0x40/0x70 [ 215.099945][ T5834] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.099967][ T5834] ? skb_pull_data+0xfb/0x200 [ 215.099998][ T5834] hci_le_conn_complete_evt+0x187/0x480 [ 215.100028][ T5834] hci_event_packet+0x78f/0x1260 [ 215.100059][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 215.100084][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 215.100113][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.100139][ T5834] ? hci_send_to_monitor+0xe2/0x590 [ 215.100162][ T5834] hci_rx_work+0x45d/0xfc0 [ 215.100190][ T5834] ? process_one_work+0x868/0x15d0 [ 215.100208][ T5834] process_one_work+0x94a/0x15d0 [ 215.100224][ T5834] ? __lock_acquire+0xab9/0xd20 [ 215.100260][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 215.100277][ T5834] ? assign_work+0x3a1/0x410 [ 215.100289][ T5834] worker_thread+0x9b0/0xee0 [ 215.100314][ T5834] kthread+0x711/0x8a0 [ 215.100329][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 215.100339][ T5834] ? __pfx_kthread+0x10/0x10 [ 215.100353][ T5834] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.100364][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.100375][ T5834] ? __pfx_kthread+0x10/0x10 [ 215.100388][ T5834] ret_from_fork+0x599/0xb30 [ 215.100399][ T5834] ? __pfx_ret_from_fork+0x10/0x10 [ 215.100415][ T5834] ? __switch_to_asm+0x39/0x70 [ 215.100427][ T5834] ? __switch_to_asm+0x33/0x70 [ 215.100438][ T5834] ? __pfx_kthread+0x10/0x10 [ 215.100450][ T5834] ret_from_fork_asm+0x1a/0x30 [ 215.100472][ T5834] [ 215.100535][ T5834] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 215.380546][ T5834] Bluetooth: hci1: failed to register connection device [ 215.396902][ T5834] ================================================================== [ 215.404991][ T5834] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6d0/0x10c0 [ 215.412977][ T5834] Read of size 8 at addr ffff888142eb8480 by task kworker/u9:6/5834 [ 215.420939][ T5834] [ 215.423256][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 215.423275][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.423287][ T5834] Workqueue: hci1 hci_rx_work [ 215.423305][ T5834] Call Trace: [ 215.423313][ T5834] [ 215.423320][ T5834] dump_stack_lvl+0x189/0x250 [ 215.423339][ T5834] ? __kasan_check_byte+0x12/0x40 [ 215.423359][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.423376][ T5834] ? lock_release+0x4b/0x3e0 [ 215.423392][ T5834] ? __virt_addr_valid+0x4a5/0x5c0 [ 215.423412][ T5834] print_report+0xca/0x240 [ 215.423430][ T5834] ? l2cap_connect_cfm+0x6d0/0x10c0 [ 215.423447][ T5834] kasan_report+0x118/0x150 [ 215.423467][ T5834] ? l2cap_connect_cfm+0x6d0/0x10c0 [ 215.423487][ T5834] l2cap_connect_cfm+0x6d0/0x10c0 [ 215.423506][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 215.423526][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 215.423543][ T5834] hci_connect_cfm+0x95/0x140 [ 215.423558][ T5834] le_conn_complete_evt+0xfa5/0x14d0 [ 215.423579][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 215.423595][ T5834] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 215.423613][ T5834] ? __asan_memcpy+0x40/0x70 [ 215.423630][ T5834] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.423647][ T5834] ? skb_pull_data+0xfb/0x200 [ 215.423668][ T5834] hci_le_conn_complete_evt+0x187/0x480 [ 215.423686][ T5834] hci_event_packet+0x78f/0x1260 [ 215.423707][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 215.423722][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 215.423743][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.423763][ T5834] ? hci_send_to_monitor+0xe2/0x590 [ 215.423781][ T5834] hci_rx_work+0x45d/0xfc0 [ 215.423798][ T5834] ? process_one_work+0x868/0x15d0 [ 215.423811][ T5834] process_one_work+0x94a/0x15d0 [ 215.423824][ T5834] ? __lock_acquire+0xab9/0xd20 [ 215.423843][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 215.423859][ T5834] ? assign_work+0x3a1/0x410 [ 215.423873][ T5834] worker_thread+0x9b0/0xee0 [ 215.423895][ T5834] kthread+0x711/0x8a0 [ 215.423913][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 215.423927][ T5834] ? __pfx_kthread+0x10/0x10 [ 215.423964][ T5834] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.423981][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.423997][ T5834] ? __pfx_kthread+0x10/0x10 [ 215.424015][ T5834] ret_from_fork+0x599/0xb30 [ 215.424029][ T5834] ? __pfx_ret_from_fork+0x10/0x10 [ 215.424046][ T5834] ? __switch_to_asm+0x39/0x70 [ 215.424062][ T5834] ? __switch_to_asm+0x33/0x70 [ 215.424079][ T5834] ? __pfx_kthread+0x10/0x10 [ 215.424095][ T5834] ret_from_fork_asm+0x1a/0x30 [ 215.424118][ T5834] [ 215.424123][ T5834] [ 215.677632][ T5834] Allocated by task 5834: [ 215.681945][ T5834] kasan_save_track+0x3e/0x80 [ 215.686632][ T5834] __kasan_kmalloc+0x93/0xb0 [ 215.691213][ T5834] __kmalloc_cache_noprof+0x3e2/0x700 [ 215.696570][ T5834] l2cap_chan_create+0x51/0x790 [ 215.701415][ T5834] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 215.707299][ T5834] l2cap_connect_cfm+0x367/0x10c0 [ 215.712311][ T5834] hci_connect_cfm+0x95/0x140 [ 215.716974][ T5834] le_conn_complete_evt+0xfa5/0x14d0 [ 215.722253][ T5834] hci_le_conn_complete_evt+0x187/0x480 [ 215.727786][ T5834] hci_event_packet+0x78f/0x1260 [ 215.732718][ T5834] hci_rx_work+0x45d/0xfc0 [ 215.737115][ T5834] process_one_work+0x94a/0x15d0 [ 215.742034][ T5834] worker_thread+0x9b0/0xee0 [ 215.746614][ T5834] kthread+0x711/0x8a0 [ 215.750668][ T5834] ret_from_fork+0x599/0xb30 [ 215.755239][ T5834] ret_from_fork_asm+0x1a/0x30 [ 215.760011][ T5834] [ 215.762319][ T5834] Freed by task 7141: [ 215.766277][ T5834] kasan_save_track+0x3e/0x80 [ 215.770941][ T5834] kasan_save_free_info+0x46/0x50 [ 215.775947][ T5834] __kasan_slab_free+0x5c/0x80 [ 215.780707][ T5834] kfree+0x19a/0x6d0 [ 215.784584][ T5834] l2cap_sock_cleanup_listen+0xf0/0x450 [ 215.790124][ T5834] l2cap_sock_release+0x6a/0x230 [ 215.795046][ T5834] sock_close+0xc3/0x240 [ 215.799272][ T5834] __fput+0x44c/0xa70 [ 215.803241][ T5834] task_work_run+0x1d4/0x260 [ 215.807820][ T5834] exit_to_user_mode_loop+0xff/0x4f0 [ 215.813086][ T5834] do_syscall_64+0x2e9/0xfa0 [ 215.817673][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.823559][ T5834] [ 215.825868][ T5834] The buggy address belongs to the object at ffff888142eb8000 [ 215.825868][ T5834] which belongs to the cache kmalloc-2k of size 2048 [ 215.839900][ T5834] The buggy address is located 1152 bytes inside of [ 215.839900][ T5834] freed 2048-byte region [ffff888142eb8000, ffff888142eb8800) [ 215.853860][ T5834] [ 215.856178][ T5834] The buggy address belongs to the physical page: [ 215.862593][ T5834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x142eb8 [ 215.871430][ T5834] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 215.879914][ T5834] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 215.887975][ T5834] page_type: f5(slab) [ 215.891946][ T5834] raw: 057ff00000000040 ffff88813fe27000 0000000000000000 dead000000000001 [ 215.900510][ T5834] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 215.909082][ T5834] head: 057ff00000000040 ffff88813fe27000 0000000000000000 dead000000000001 [ 215.917739][ T5834] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 215.926397][ T5834] head: 057ff00000000003 ffffea00050bae01 00000000ffffffff 00000000ffffffff [ 215.935053][ T5834] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 215.943704][ T5834] page dumped because: kasan: bad access detected [ 215.950369][ T5834] page_owner tracks the page as allocated [ 215.956066][ T5834] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3023464097, free_ts 0 [ 215.975682][ T5834] post_alloc_hook+0x240/0x2a0 [ 215.980441][ T5834] get_page_from_freelist+0x2365/0x2440 [ 215.985978][ T5834] __alloc_frozen_pages_noprof+0x181/0x370 [ 215.991773][ T5834] alloc_pages_mpol+0x232/0x4a0 [ 215.996611][ T5834] allocate_slab+0x96/0x350 [ 216.001098][ T5834] ___slab_alloc+0xf56/0x1990 [ 216.005764][ T5834] __slab_alloc+0x65/0x100 [ 216.010173][ T5834] __kmalloc_cache_noprof+0x41e/0x700 [ 216.015534][ T5834] acpi_ds_create_walk_state+0xf6/0x310 [ 216.021068][ T5834] acpi_ds_call_control_method+0x3dd/0xab0 [ 216.026861][ T5834] acpi_ps_parse_aml+0x671/0x10a0 [ 216.031872][ T5834] acpi_ps_execute_method+0x88f/0xa60 [ 216.037229][ T5834] acpi_ns_evaluate+0xc49/0x1230 [ 216.042151][ T5834] acpi_ut_evaluate_object+0x140/0x630 [ 216.047599][ T5834] acpi_rs_get_method_data+0xac/0x150 [ 216.052966][ T5834] acpi_walk_resources+0x17a/0x240 [ 216.058064][ T5834] page_owner free stack trace missing [ 216.063411][ T5834] [ 216.065727][ T5834] Memory state around the buggy address: [ 216.071358][ T5834] ffff888142eb8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.079417][ T5834] ffff888142eb8400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.087468][ T5834] >ffff888142eb8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.095509][ T5834] ^ [ 216.099558][ T5834] ffff888142eb8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.107603][ T5834] ffff888142eb8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.115643][ T5834] ================================================================== [ 216.131953][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 216.138059][ T5834] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 216.145266][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 216.154725][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.164785][ T5834] Workqueue: hci1 hci_rx_work [ 216.169477][ T5834] Call Trace: [ 216.172758][ T5834] [ 216.175689][ T5834] dump_stack_lvl+0x99/0x250 [ 216.180287][ T5834] ? __asan_memcpy+0x40/0x70 [ 216.184877][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.190078][ T5834] ? __pfx__printk+0x10/0x10 [ 216.194671][ T5834] vpanic+0x237/0x6d0 [ 216.198645][ T5834] ? __pfx_vpanic+0x10/0x10 [ 216.203138][ T5834] ? preempt_schedule+0xae/0xc0 [ 216.207987][ T5834] ? __pfx_preempt_schedule+0x10/0x10 [ 216.213359][ T5834] panic+0xb9/0xc0 [ 216.217079][ T5834] ? __pfx_panic+0x10/0x10 [ 216.221495][ T5834] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 216.227384][ T5834] ? l2cap_connect_cfm+0x6d0/0x10c0 [ 216.232583][ T5834] check_panic_on_warn+0x89/0xb0 [ 216.237526][ T5834] ? l2cap_connect_cfm+0x6d0/0x10c0 [ 216.242718][ T5834] end_report+0x78/0x160 [ 216.246965][ T5834] kasan_report+0x129/0x150 [ 216.251461][ T5834] ? l2cap_connect_cfm+0x6d0/0x10c0 [ 216.256656][ T5834] l2cap_connect_cfm+0x6d0/0x10c0 [ 216.261675][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 216.267136][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 216.272599][ T5834] hci_connect_cfm+0x95/0x140 [ 216.277266][ T5834] le_conn_complete_evt+0xfa5/0x14d0 [ 216.282549][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 216.288260][ T5834] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 216.293884][ T5834] ? __asan_memcpy+0x40/0x70 [ 216.298469][ T5834] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 216.304438][ T5834] ? skb_pull_data+0xfb/0x200 [ 216.309114][ T5834] hci_le_conn_complete_evt+0x187/0x480 [ 216.314659][ T5834] hci_event_packet+0x78f/0x1260 [ 216.319593][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 216.324867][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 216.330233][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.335424][ T5834] ? hci_send_to_monitor+0xe2/0x590 [ 216.340613][ T5834] hci_rx_work+0x45d/0xfc0 [ 216.345023][ T5834] ? process_one_work+0x868/0x15d0 [ 216.350125][ T5834] process_one_work+0x94a/0x15d0 [ 216.355046][ T5834] ? __lock_acquire+0xab9/0xd20 [ 216.359892][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 216.365249][ T5834] ? assign_work+0x3a1/0x410 [ 216.369829][ T5834] worker_thread+0x9b0/0xee0 [ 216.374412][ T5834] kthread+0x711/0x8a0 [ 216.378475][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 216.383572][ T5834] ? __pfx_kthread+0x10/0x10 [ 216.388151][ T5834] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.393338][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.398526][ T5834] ? __pfx_kthread+0x10/0x10 [ 216.403103][ T5834] ret_from_fork+0x599/0xb30 [ 216.407682][ T5834] ? __pfx_ret_from_fork+0x10/0x10 [ 216.412786][ T5834] ? __switch_to_asm+0x39/0x70 [ 216.417551][ T5834] ? __switch_to_asm+0x33/0x70 [ 216.422307][ T5834] ? __pfx_kthread+0x10/0x10 [ 216.426888][ T5834] ret_from_fork_asm+0x1a/0x30 [ 216.431651][ T5834] [ 216.434924][ T5834] Kernel Offset: disabled [ 216.439245][ T5834] Rebooting in 86400 seconds..