last executing test programs: 3m15.044261032s ago: executing program 3 (id=2719): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0xfe44) 3m14.766472409s ago: executing program 3 (id=2722): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) 3m14.71401409s ago: executing program 1 (id=2723): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187013, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x3, 0x10000, 0x8000}}) 3m14.408697378s ago: executing program 3 (id=2727): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x32315241, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x3, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x5}}) 3m14.370542431s ago: executing program 1 (id=2728): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 3m13.903686954s ago: executing program 1 (id=2732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x7ffb8, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20) 3m13.456183278s ago: executing program 4 (id=2735): ioperm(0x0, 0x5, 0x4000000000000020) getrandom(0x0, 0x300, 0x0) 3m13.441980551s ago: executing program 3 (id=2736): setrlimit(0x7, &(0x7f0000000000)) landlock_create_ruleset(&(0x7f0000000400)={0x100}, 0x10, 0x0) 3m13.357241816s ago: executing program 1 (id=2738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x80) 3m13.110912461s ago: executing program 4 (id=2739): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0xa, 0x4e23, 0x9, @loopback, 0x74}, 0x1c, 0x0, 0x0, &(0x7f0000003180)=[@hopopts={{0x18, 0x29, 0x36, {0x3c}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x30}}}}], 0x40}, 0x4040010) 3m13.095999229s ago: executing program 3 (id=2740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x60048000}, 0x0) 3m12.997979524s ago: executing program 1 (id=2743): creat(&(0x7f00000004c0)='./bus\x00', 0x40) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000080)=ANY=[@ANYBLOB="048406df92fa"], 0xffd7, 0x0) 3m12.717364002s ago: executing program 4 (id=2744): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m12.589698368s ago: executing program 1 (id=2746): r0 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) write$smackfs_cipso(r0, &(0x7f0000006940)={'batadv_slave_1\x00', 0x20, 0x21, 0x20, 0x5, 0x20, [{0xa2}, {0x46}, {0x63}, {0x7c}, {0x77}]}, 0xa4) 3m12.574451489s ago: executing program 2 (id=2747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x38}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22040010}, 0x8000) 3m12.405324783s ago: executing program 3 (id=2748): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x4, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000080)={[{}]}) 3m12.295324248s ago: executing program 4 (id=2749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x10) 3m12.180280682s ago: executing program 2 (id=2751): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_vs\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/232, 0xe8}], 0x1, 0x4, 0x5) 3m11.999894282s ago: executing program 4 (id=2752): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xb) 3m11.874430885s ago: executing program 2 (id=2754): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000001580), 0x5) 3m11.658498901s ago: executing program 4 (id=2755): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004600000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x3100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3m11.604724799s ago: executing program 2 (id=2756): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcbb}]}) stat(0x0, 0x0) 3m11.217832715s ago: executing program 2 (id=2757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x5, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 3m10.909773857s ago: executing program 2 (id=2758): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) 2m44.169639253s ago: executing program 32 (id=2753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 2m43.285243054s ago: executing program 33 (id=2746): r0 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) write$smackfs_cipso(r0, &(0x7f0000006940)={'batadv_slave_1\x00', 0x20, 0x21, 0x20, 0x5, 0x20, [{0xa2}, {0x46}, {0x63}, {0x7c}, {0x77}]}, 0xa4) 2m43.08286082s ago: executing program 34 (id=2758): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) 2m42.934759893s ago: executing program 35 (id=2748): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x4, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000080)={[{}]}) 2m42.72379242s ago: executing program 36 (id=2755): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004600000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x3100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m15.569074643s ago: executing program 7 (id=3252): recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0}, {&(0x7f0000004300)=""/214, 0xd6}], 0x3}, 0x4}], 0x1, 0x23, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 1m15.239068345s ago: executing program 7 (id=3256): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002680)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m14.081422842s ago: executing program 7 (id=3266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="88", 0x1) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f00000000c0)=0x7, 0x4) 1m13.741987251s ago: executing program 7 (id=3269): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006200000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m13.368797366s ago: executing program 7 (id=3274): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m13.127952745s ago: executing program 7 (id=3277): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 57.984016495s ago: executing program 37 (id=3277): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 3.408838009s ago: executing program 8 (id=3962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 3.1357824s ago: executing program 8 (id=3964): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001000030400"/20, @ANYRES32=r1, @ANYBLOB="95020000000000009000128009000100766c616e00000000800002801c0003800c00010000000000050000000c000100000001002d0000000600010000000000580004"], 0xb8}, 0x1, 0xba01}, 0x0) 3.06633213s ago: executing program 5 (id=3965): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000001000000008000100", @ANYRES32=0x0, @ANYBLOB="0500100000000000060011000092"], 0x2c}}, 0x0) 2.745579717s ago: executing program 5 (id=3966): fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80400, 0x0) mkdirat(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) 2.657124126s ago: executing program 8 (id=3967): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) 2.375559764s ago: executing program 5 (id=3969): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x102c}}, 0x1006) 2.227807726s ago: executing program 9 (id=3970): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @mcast1, 0x800000, 0xa, 0x0, 0x100, 0x7ffffffe, 0x140192, r1}) 2.131119426s ago: executing program 8 (id=3972): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = io_uring_setup(0x2c49, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 2.068430889s ago: executing program 0 (id=3973): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.041817363s ago: executing program 5 (id=3974): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, r0, 0x2) recvmsg(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002940)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40) 1.915792143s ago: executing program 9 (id=3975): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c0e2c3", 0x259584305129a66}) 1.884911499s ago: executing program 8 (id=3976): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01f817000000000000000c0000000c0058db6fa752a3e37d00"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20) 1.728775181s ago: executing program 5 (id=3978): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x107382) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x1, {0x0, 0x0, 0x0, 0xffffffffffffff86, 0x7, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2984fcaf1860b5a61f8e2078de86be39f1bb99370491de6bb2c742bcf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ccfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca0206d8b02266a0443e8ae6", [0x3b, 0x4]}}) 1.611338845s ago: executing program 6 (id=3979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x60, r1, 0x731, 0x7, 0x25dfdbff, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x2}, 0x8800) 1.611124087s ago: executing program 8 (id=3980): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.503242601s ago: executing program 0 (id=3981): setreuid(0x0, 0xee00) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="480000001400190c09004beafd0d3602028447000b4e230f00000001a2bc5603ca00000f7f89000000200000495101ff0000000309ff5bffff04000000000000005839c97b910000", 0x48}], 0x1) 1.244267119s ago: executing program 5 (id=3982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0xc0, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x84}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0xc0}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x250, 0xba, 0x75, 0x99, 0x8, 0xa257, 0x2013, 0xe87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x80, 0xb0, 0x80, [{{0x9, 0x4, 0xff, 0x3, 0x0, 0xb9, 0x5c, 0xcf, 0x4}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 1.243679594s ago: executing program 6 (id=3983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4040080) 1.243448915s ago: executing program 0 (id=3984): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x20, r0, 0x10ada85e65c25359, 0x70bd2d, 0x8000000, {{0x6b}, {@void, @val={0xc, 0x99, {0x2, 0x22}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x4040804) 943.552626ms ago: executing program 9 (id=3985): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="800000deff000000700012800e0001006970366772657461700000005c000280050008004000000006000f00810000000800140006000000060011004e2000000800040008000000060003000600000004001200140007"], 0x98}}, 0x0) 934.037881ms ago: executing program 6 (id=3986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) syslog(0x2, 0x0, 0x0) 907.752097ms ago: executing program 0 (id=3987): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="010027bd70000000180001000000080001000000000004000480080002000100000010000c800c000b8008000a00326c30000801088044"], 0x140}}, 0x0) 716.15685ms ago: executing program 6 (id=3988): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendto$inet(r0, &(0x7f0000000580)="5ca7bb", 0x3, 0x40000d5, 0x0, 0x0) 694.244336ms ago: executing program 0 (id=3989): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x44}}, 0x0) 529.457366ms ago: executing program 9 (id=3990): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 407.836511ms ago: executing program 6 (id=3991): capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x0) 289.612456ms ago: executing program 9 (id=3992): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r1, 0x615, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) 203.517099ms ago: executing program 0 (id=3993): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x220}], 0x4e, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 136.102134ms ago: executing program 6 (id=3994): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00005f5a000000000c003f8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x80) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 0s ago: executing program 9 (id=3995): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0xef4c9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): nset [1, 0] type 2 family 0 port 6081 - 0 [ 311.946552][T11688] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.070117][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.077329][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.130020][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.137332][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.214294][T11692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.536631][T11692] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.816363][T11695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.900519][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.907807][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.370947][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.378210][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.446644][T11697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.736015][T11695] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.012874][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.020217][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.574943][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.582223][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.002028][T11700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.120169][T11688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.136860][T11700] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.328129][ C1] net_ratelimit: 6436 callbacks suppressed [ 315.328153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.346415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:9b:9f:07:8e:7c, vlan:0) [ 315.359610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.372046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:9b:9f:07:8e:7c, vlan:0) [ 315.385287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.397721][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:9b:9f:07:8e:7c, vlan:0) [ 315.410854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.423285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:9b:9f:07:8e:7c, vlan:0) [ 315.436543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.449510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:9b:9f:07:8e:7c, vlan:0) [ 315.492399][T11692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.550351][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.557636][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.670691][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.678026][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.212563][T11697] veth0_vlan: entered promiscuous mode [ 316.458352][T11697] veth1_vlan: entered promiscuous mode [ 316.707525][ T53] bridge_slave_1: left allmulticast mode [ 316.720530][ T53] bridge_slave_1: left promiscuous mode [ 316.728096][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.879152][ T53] bridge_slave_0: left allmulticast mode [ 316.907767][ T53] bridge_slave_0: left promiscuous mode [ 316.913615][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.026482][ T53] veth0_to_bridge: left allmulticast mode [ 317.065821][ T53] veth0_to_bridge: left promiscuous mode [ 317.094012][ T53] bridge0: port 3(veth0_to_bridge) entered disabled state [ 317.113432][ T53] bridge_slave_1: left allmulticast mode [ 317.123728][ T53] bridge_slave_1: left promiscuous mode [ 317.133944][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.146302][ T53] bridge_slave_0: left allmulticast mode [ 317.152501][ T53] bridge_slave_0: left promiscuous mode [ 317.160650][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.193178][ T53] bridge_slave_1: left allmulticast mode [ 317.208292][ T53] bridge_slave_1: left promiscuous mode [ 317.214122][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.231497][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.237925][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.248110][ T53] bridge_slave_0: left allmulticast mode [ 317.253821][ T53] bridge_slave_0: left promiscuous mode [ 317.266536][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.306924][ T53] bridge_slave_1: left allmulticast mode [ 317.313236][ T53] bridge_slave_1: left promiscuous mode [ 317.327917][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.337583][ T53] bridge_slave_0: left allmulticast mode [ 317.344438][ T53] bridge_slave_0: left promiscuous mode [ 317.350280][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.382060][ T53] bond_slave_0: left promiscuous mode [ 317.387642][ T53] bond_slave_1: left promiscuous mode [ 319.154426][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.166713][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.177467][ T53] bond0 (unregistering): Released all slaves [ 319.193941][ T53] bond1 (unregistering): Released all slaves [ 319.302326][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.315603][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.326010][ T53] bond0 (unregistering): Released all slaves [ 319.345449][ T53] bond1 (unregistering): Released all slaves [ 319.452738][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.464122][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.474592][ T53] bond0 (unregistering): Released all slaves [ 319.604718][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.615315][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.626082][ T53] bond0 (unregistering): Released all slaves [ 319.727014][ T53] bond1 (unregistering): Released all slaves [ 319.845288][T11697] veth0_macvtap: entered promiscuous mode [ 319.975779][T11697] veth1_macvtap: entered promiscuous mode [ 320.157409][ T53] : left promiscuous mode [ 320.254089][T11697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.323241][ T53] : left promiscuous mode [ 320.379952][T11688] veth0_vlan: entered promiscuous mode [ 320.391424][T11697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.459618][T11695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.504444][T11688] veth1_vlan: entered promiscuous mode [ 320.516983][ T53] IPVS: stopping backup sync thread 5938 ... [ 320.543338][T11697] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.567731][T11697] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.576624][T11697] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.595186][T11697] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.819599][T11692] veth0_vlan: entered promiscuous mode [ 320.949482][T11688] veth0_macvtap: entered promiscuous mode [ 321.065472][T11700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.081662][T11688] veth1_macvtap: entered promiscuous mode [ 321.097835][T11692] veth1_vlan: entered promiscuous mode [ 321.305997][T11688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.373095][T11688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.554704][T11688] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.576428][T11688] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.595181][T11688] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.605191][T11688] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.701368][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.720212][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.830433][T11695] veth0_vlan: entered promiscuous mode [ 321.894359][T11695] veth1_vlan: entered promiscuous mode [ 322.010939][T11692] veth0_macvtap: entered promiscuous mode [ 322.071917][T11692] veth1_macvtap: entered promiscuous mode [ 322.071946][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.107023][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.264408][T11695] veth0_macvtap: entered promiscuous mode [ 322.350389][T11695] veth1_macvtap: entered promiscuous mode [ 322.360987][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.377606][T11700] veth0_vlan: entered promiscuous mode [ 322.394571][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.416556][T11692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.495813][T11692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.595984][T11692] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.608765][T11692] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.617540][T11692] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.627927][T11692] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.650754][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.674916][T11700] veth1_vlan: entered promiscuous mode [ 322.687870][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.727361][ T53] hsr_slave_0: left promiscuous mode [ 322.739394][ T53] hsr_slave_1: left promiscuous mode [ 322.745759][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.772487][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.817241][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.836081][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.888021][ T53] hsr_slave_0: left promiscuous mode [ 322.908206][ T53] hsr_slave_1: left promiscuous mode [ 322.914996][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.923914][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.934616][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.942426][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.965151][ T53] hsr_slave_0: left promiscuous mode [ 322.985274][ T53] hsr_slave_1: left promiscuous mode [ 323.006702][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.028824][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.037366][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.047343][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.063041][ T53] hsr_slave_0: left promiscuous mode [ 323.076676][ T53] hsr_slave_1: left promiscuous mode [ 323.096843][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.106653][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.184679][ T53] veth1_macvtap: left promiscuous mode [ 323.193919][ T53] veth0_macvtap: left allmulticast mode [ 323.205377][ T53] veth0_macvtap: left promiscuous mode [ 323.213731][ T53] veth1_vlan: left promiscuous mode [ 323.223597][ T53] veth1_macvtap: left promiscuous mode [ 323.233936][ T53] veth0_macvtap: left promiscuous mode [ 323.244673][ T53] veth1_vlan: left promiscuous mode [ 323.256078][ T53] veth0_vlan: left promiscuous mode [ 323.266583][ T53] veth1_macvtap: left promiscuous mode [ 323.294345][ T53] veth0_macvtap: left promiscuous mode [ 323.308788][ T53] veth1_vlan: left promiscuous mode [ 324.105490][ T53] team0 (unregistering): Port device team_slave_1 removed [ 324.153324][ T53] team0 (unregistering): Port device team_slave_0 removed [ 324.986326][ T53] team0 (unregistering): Port device team_slave_1 removed [ 325.029992][ T53] team0 (unregistering): Port device team_slave_0 removed [ 325.865293][ T53] team0 (unregistering): Port device team_slave_1 removed [ 325.913725][ T53] team0 (unregistering): Port device team_slave_0 removed [ 326.764683][ T53] team0 (unregistering): Port device team_slave_1 removed [ 326.806398][ T53] team0 (unregistering): Port device team_slave_0 removed [ 327.243663][T11695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.340233][T11695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.471984][T11695] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.504914][T11695] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.531214][T11695] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.546938][T11695] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.674022][T11700] veth0_macvtap: entered promiscuous mode [ 327.982831][T11700] veth1_macvtap: entered promiscuous mode [ 328.114205][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.136991][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.217111][T11700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.368849][T11700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.388530][ T5877] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 328.446151][T11677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.454274][T11677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.457771][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.498515][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.515625][T11700] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.544613][T11700] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.556941][T11700] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.575039][T11700] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.590853][ T5877] usb 6-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 328.615570][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.656211][T11943] netlink: 'syz.8.2778': attribute type 1 has an invalid length. [ 328.669606][ T5877] usb 6-1: config 0 descriptor?? [ 328.674895][T11943] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2778'. [ 328.691896][ T5877] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 328.796145][T11677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.825373][T11677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.108678][ T5877] gspca_sn9c2028: read1 error -71 [ 329.147728][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.155614][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.164594][ T5877] gspca_sn9c2028: read1 error -71 [ 329.178047][ T5877] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 329.251644][ T5877] usb 6-1: USB disconnect, device number 2 [ 329.410286][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.439782][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.521639][T11958] syz.8.2782: attempt to access beyond end of device [ 329.521639][T11958] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 329.629555][T11958] gfs2: error -5 reading superblock [ 331.053715][T12013] net_ratelimit: 2241 callbacks suppressed [ 331.053739][T12013] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 331.492511][ T5916] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 331.737863][ T5916] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 331.747018][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.793743][ T5916] usb 7-1: Product: syz [ 331.828153][ T5916] usb 7-1: Manufacturer: syz [ 331.832833][ T5916] usb 7-1: SerialNumber: syz [ 331.873128][ T5916] usb 7-1: config 0 descriptor?? [ 332.100776][ T5916] usb-storage 7-1:0.0: USB Mass Storage device detected [ 332.251266][T12049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.329559][ T5916] usb 7-1: USB disconnect, device number 2 [ 332.718615][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 332.817205][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2821'. [ 332.933409][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 332.977340][ T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 333.040809][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 333.077730][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.121724][T12055] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 333.199072][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 333.563048][ T9] usb 9-1: USB disconnect, device number 2 [ 333.648234][T11269] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 333.718300][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2830'. [ 333.871956][T11269] usb 10-1: Using ep0 maxpacket: 32 [ 333.886269][T11269] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 333.925668][T11269] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 333.982845][T11269] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 334.030444][T11269] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 334.085769][T11269] usb 10-1: config 0 interface 0 has no altsetting 0 [ 334.123425][T11269] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 334.148910][T11269] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 334.197806][T11269] usb 10-1: Product: syz [ 334.212409][T11269] usb 10-1: Manufacturer: syz [ 334.217259][T11269] usb 10-1: SerialNumber: syz [ 334.261906][T11269] usb 10-1: config 0 descriptor?? [ 334.302336][T11269] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 334.369903][T11269] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 334.394311][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2838'. [ 334.581525][ T5875] usb 10-1: USB disconnect, device number 2 [ 334.626031][ T5875] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 335.136540][T12145] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2849'. [ 335.147257][T12145] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2849'. [ 335.159363][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2849'. [ 335.298315][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 335.477756][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 335.504226][ T24] usb 9-1: config 0 has an invalid interface number: 88 but max is 0 [ 335.546833][ T24] usb 9-1: config 0 has no interface number 0 [ 335.554826][ T24] usb 9-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 335.586289][ T24] usb 9-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 335.597909][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.617704][ T24] usb 9-1: Product: syz [ 335.627559][ T24] usb 9-1: Manufacturer: syz [ 335.637898][ T24] usb 9-1: SerialNumber: syz [ 335.645020][T12156] program syz.7.2852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.661040][ T24] usb 9-1: config 0 descriptor?? [ 336.136904][ T9] usb 9-1: USB disconnect, device number 3 [ 336.153288][T12149] orangefs_mount: mount request failed with -4 [ 336.166906][ T9] f81534a_ctrl 9-1:0.88: failed to set register 0x116: -19 [ 336.201256][ T9] f81534a_ctrl 9-1:0.88: failed to enable ports: -19 [ 336.420353][T12179] Bluetooth: MGMT ver 1.23 [ 336.427294][ T9] kernel write not supported for file /42/sched (pid: 9 comm: kworker/0:0) [ 337.905437][T12231] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 337.950765][ T24] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 337.974227][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2881'. [ 338.019066][T12234] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 338.046392][T12234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.139924][ T24] usb 9-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 338.177711][ T24] usb 9-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.227805][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 338.272517][ T24] usb 9-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 338.305877][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.378982][ T24] usb 9-1: config 0 descriptor?? [ 338.633767][ T5876] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 338.820053][ T5876] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.851804][ T5876] usb 8-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 338.880531][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.887279][ T24] betop 0003:11C0:5506.0001: hidraw0: USB HID v0.c4 Device [HID 11c0:5506] on usb-dummy_hcd.8-1/input0 [ 338.933294][ T5876] usb 8-1: Product: syz [ 338.937536][ T5876] usb 8-1: Manufacturer: syz [ 338.937775][ T24] betop 0003:11C0:5506.0001: no inputs found [ 339.018186][ T5876] usb 8-1: SerialNumber: syz [ 339.031902][ T5876] usb 8-1: config 0 descriptor?? [ 339.034630][ T24] usb 9-1: USB disconnect, device number 4 [ 339.051646][ T5876] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 339.087846][ T5876] dvb-usb: bulk message failed: -22 (3/0) [ 339.173338][ T5876] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 339.223133][ T5876] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 339.262696][T12261] fido_id[12261]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 339.289081][T12246] dvb-usb: bulk message failed: -22 (2/0) [ 339.296120][ T5876] usb 8-1: media controller created [ 339.335850][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.428343][ T5876] dvb-usb: bulk message failed: -22 (6/0) [ 339.434502][ T5876] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 339.482300][ T5876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input18 [ 339.503137][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 339.545507][ T5876] dvb-usb: schedule remote query interval to 150 msecs. [ 339.585744][ T5876] dvb-usb: bulk message failed: -22 (3/0) [ 339.639588][ T5876] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 339.672924][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 339.692000][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 339.736529][ T5876] usb 8-1: USB disconnect, device number 2 [ 339.755235][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.816797][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 339.839675][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 339.912781][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 339.936724][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 339.959565][ T5876] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 339.996029][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.031372][ T9] usb 7-1: config 0 descriptor?? [ 340.041925][T12267] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 340.338789][T12293] netlink: 'syz.7.2903': attribute type 1 has an invalid length. [ 340.347548][T12267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.368659][T12267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.421959][ T5824] Bluetooth: hci1: unexpected event 0x12 length: 1 < 8 [ 340.429343][ T5824] Bluetooth: hci1: Malformed Event: 0x02 [ 340.436382][ T5824] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 340.436534][ T5824] Bluetooth: hci1: connection err: -111 [ 340.648168][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 340.673372][ T5878] usb 7-1: USB disconnect, device number 3 [ 340.674144][ T55] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 340.852134][ T9] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 340.887096][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.924924][ T9] usb 6-1: Product: syz [ 340.937722][ T9] usb 6-1: Manufacturer: syz [ 340.942411][ T9] usb 6-1: SerialNumber: syz [ 340.968830][ T9] usb 6-1: config 0 descriptor?? [ 340.991961][ T9] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 003 [ 341.502462][T12334] sp0: Synchronizing with TNC [ 341.628958][ T9] i2c i2c-1: failure reading functionality [ 341.688888][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 341.733748][ T9] usb 6-1: USB disconnect, device number 3 [ 342.261664][T12363] netlink: 'syz.9.2927': attribute type 6 has an invalid length. [ 342.869360][T12381] netlink: zone id is out of range [ 342.895305][T12381] netlink: zone id is out of range [ 342.905277][T12381] netlink: zone id is out of range [ 342.937918][T12381] netlink: zone id is out of range [ 342.979057][T12381] netlink: zone id is out of range [ 342.989569][T12381] netlink: zone id is out of range [ 342.998264][T12381] netlink: zone id is out of range [ 343.024143][T12381] netlink: zone id is out of range [ 343.045357][T12381] netlink: zone id is out of range [ 343.054968][T12381] netlink: zone id is out of range [ 343.071784][T12381] netlink: zone id is out of range [ 343.087602][T12381] netlink: zone id is out of range [ 343.098275][ T5916] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 343.134999][T12381] netlink: set zone limit has 4 unknown bytes [ 343.287968][ T5916] usb 8-1: Using ep0 maxpacket: 8 [ 343.311900][T12396] debugfs: Bad value for 'uid' [ 343.343637][ T5916] usb 8-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 343.358070][T12396] debugfs: Bad value for 'uid' [ 343.373609][ T5916] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.393956][ T5916] usb 8-1: Product: syz [ 343.410403][ T5916] usb 8-1: Manufacturer: syz [ 343.426314][ T5916] usb 8-1: SerialNumber: syz [ 343.490131][ T5916] usb 8-1: config 0 descriptor?? [ 343.521002][ T5916] gspca_main: sq930x-2.14.0 probing 2770:930c [ 343.647756][ T30] audit: type=1326 audit(1747480240.386:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12406 comm="syz.8.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 343.765837][ T30] audit: type=1326 audit(1747480240.386:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12406 comm="syz.8.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 343.900355][ T30] audit: type=1326 audit(1747480240.416:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12406 comm="syz.8.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3163d8d2d0 code=0x7ffc0000 [ 344.004749][ T30] audit: type=1326 audit(1747480240.416:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12406 comm="syz.8.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3163d8d2d0 code=0x7ffc0000 [ 344.143294][ T30] audit: type=1326 audit(1747480240.416:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12406 comm="syz.8.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 344.179210][ T5916] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 344.258699][ T30] audit: type=1326 audit(1747480240.426:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12406 comm="syz.8.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 344.357743][ T30] audit: type=1326 audit(1747480240.426:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12406 comm="syz.8.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 344.406961][ T5916] gspca_sq930x: Sensor ov9630 not yet treated [ 344.417277][ T5916] sq930x 8-1:0.0: probe with driver sq930x failed with error -22 [ 344.478667][ T5916] usb 8-1: USB disconnect, device number 3 [ 345.179430][ T30] audit: type=1326 audit(1747480241.926:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12454 comm="syz.7.2963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f956338e969 code=0x0 [ 345.268047][ T5878] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 345.388250][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 345.461806][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 345.473899][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.498204][ T5878] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 345.517841][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.547837][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 345.555593][ T24] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 345.566314][ T5878] usb 6-1: config 0 descriptor?? [ 345.575106][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.611663][ T24] usb 9-1: config 0 descriptor?? [ 345.646400][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 345.761802][ T5916] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 345.928282][ T5916] usb 10-1: Using ep0 maxpacket: 16 [ 345.944680][ T5916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 345.960928][ T5916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16384, setting to 1024 [ 345.973493][ T5916] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.995466][ T5916] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 346.026442][ T5878] sunplus 0003:04FC:05D8.0002: hidraw0: USB HID v0.07 Device [HID 04fc:05d8] on usb-dummy_hcd.5-1/input0 [ 346.046884][ T5916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.077733][ T24] gspca_vc032x: reg_w err -71 [ 346.087360][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.100201][ T5916] usb 10-1: config 0 descriptor?? [ 346.107411][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.134547][ T5916] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input19 [ 346.143952][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.217993][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.223485][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.263849][ T5878] usb 6-1: USB disconnect, device number 4 [ 346.288039][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.304322][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.314480][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.344857][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.389465][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.394847][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.412690][T12482] sp0: Synchronizing with TNC [ 346.424265][T12479] fido_id[12479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 346.442309][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.451681][ T5916] usb 10-1: USB disconnect, device number 3 [ 346.462061][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.467414][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.487729][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.506722][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.518124][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.523728][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 346.554988][ T24] gspca_vc032x: Unknown sensor... [ 346.588394][ T24] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 346.641210][ T24] usb 9-1: USB disconnect, device number 5 [ 346.776720][T12486] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 347.588817][T12523] netlink: 'syz.8.2983': attribute type 1 has an invalid length. [ 347.609689][T12523] netlink: 144 bytes leftover after parsing attributes in process `syz.8.2983'. [ 347.631665][T12523] netlink: 'syz.8.2983': attribute type 1 has an invalid length. [ 347.668105][T12523] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2983'. [ 348.387950][ T5876] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 348.563924][ T5876] usb 7-1: unable to get BOS descriptor or descriptor too short [ 348.596198][ T5876] usb 7-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 32 [ 348.625114][ T5876] usb 7-1: config 1 interface 0 has no altsetting 0 [ 348.666937][ T5876] usb 7-1: string descriptor 0 read error: -22 [ 348.696017][ T5876] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 348.732181][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.782104][T12539] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 348.823467][T12559] mkiss: ax0: crc mode is auto. [ 349.053836][ T5876] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 64 proto 2 vid 0x0525 pid 0xA4A8 [ 349.286632][ C1] usblp0: nonzero read bulk status received: -71 [ 349.340017][ T5876] usb 7-1: USB disconnect, device number 4 [ 349.398298][ T5876] usblp0: removed [ 349.535451][T12568] autofs4:pid:12568:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 350.936877][T12615] process 'syz.7.3017' launched '/dev/fd/3' with NULL argv: empty string added [ 351.799053][T12650] overlay: Unknown parameter '\' [ 352.419068][ T5878] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 352.599706][ T5878] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.620368][ T5878] usb 10-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 352.647744][ T5878] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.707104][ T5878] usb 10-1: Product: syz [ 352.713764][ T5878] usb 10-1: Manufacturer: syz [ 352.739258][ T5878] usb 10-1: SerialNumber: syz [ 352.771357][ T5878] usb 10-1: config 0 descriptor?? [ 352.828766][ T5878] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 352.851998][T12688] bridge0: port 3(vlan2) entered blocking state [ 352.888477][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 352.894542][T12688] bridge0: port 3(vlan2) entered disabled state [ 352.929661][ T5878] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 352.947201][T12688] vlan2: entered allmulticast mode [ 352.948175][ T5876] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 352.953678][ T5878] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 352.977721][T12688] bridge0: entered allmulticast mode [ 352.995383][T12663] dvb-usb: bulk message failed: -22 (2/0) [ 353.013962][ T5878] usb 10-1: media controller created [ 353.035645][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.072466][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 353.081071][ T5878] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 353.096237][T12688] vlan2: left allmulticast mode [ 353.121675][T12688] bridge0: left allmulticast mode [ 353.130376][ T5876] usb 8-1: Using ep0 maxpacket: 8 [ 353.149417][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input20 [ 353.157472][ T5876] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 353.195749][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.198253][ T5878] dvb-usb: schedule remote query interval to 150 msecs. [ 353.236253][ T5876] usb 8-1: config 0 descriptor?? [ 353.245664][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 353.287734][ T5878] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 353.404207][ T5878] usb 10-1: USB disconnect, device number 4 [ 353.488336][ T5876] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 353.599116][ T5878] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 353.711887][ T5876] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 353.742559][ T5876] asix 8-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 353.757931][ T5880] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 353.765812][ T5876] asix 8-1:0.0: probe with driver asix failed with error -71 [ 353.816692][ T5876] usb 8-1: USB disconnect, device number 4 [ 353.974020][ T5880] usb 9-1: Using ep0 maxpacket: 32 [ 354.019648][ T5880] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.037724][ T5880] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 354.085819][ T5880] usb 9-1: config 0 interface 0 has no altsetting 0 [ 354.108617][ T5880] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 354.138021][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.170956][ T5880] usb 9-1: config 0 descriptor?? [ 354.776490][ T5880] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x1 [ 354.814277][ T5880] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x3 [ 354.838357][ T5880] corsair-cpro 0003:1B1C:0C10.0003: item fetching failed at offset 3/5 [ 354.895169][ T5880] corsair-cpro 0003:1B1C:0C10.0003: probe with driver corsair-cpro failed with error -22 [ 355.028165][ T5880] usb 9-1: USB disconnect, device number 6 [ 355.237740][T12742] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3063'. [ 355.237794][ T5876] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 355.430112][ T5876] usb 10-1: Using ep0 maxpacket: 16 [ 355.465243][ T5876] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.489865][ T5876] usb 10-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 355.520160][ T5876] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.538968][ T5876] usb 10-1: config 0 descriptor?? [ 355.591124][T12752] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3067'. [ 356.246095][ T10] usb 10-1: USB disconnect, device number 5 [ 356.277774][T11269] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 356.498665][T11269] usb 8-1: Using ep0 maxpacket: 32 [ 356.509892][T11269] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 356.536297][T11269] usb 8-1: config 0 has no interface number 0 [ 356.556792][T11269] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 356.575375][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3081'. [ 356.608247][T11269] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 356.640838][T11269] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 356.656074][T11269] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.667002][T11269] usb 8-1: Product: syz [ 356.674095][T11269] usb 8-1: Manufacturer: syz [ 356.706635][T11269] usb 8-1: SerialNumber: syz [ 356.728942][T11269] usb 8-1: config 0 descriptor?? [ 356.956826][T11269] radio-si470x 8-1:0.35: this is not a si470x device. [ 357.041289][T11269] radio-raremono 8-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 357.245902][T11269] radio-raremono 8-1:0.35: raremono_cmd_main failed (-71) [ 357.295669][T11269] radio-raremono 8-1:0.35: V4L2 device registered as radio48 [ 357.354370][T11269] usb 8-1: USB disconnect, device number 5 [ 357.391446][T11269] radio-raremono 8-1:0.35: Thanko's Raremono disconnected [ 358.067913][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 358.250963][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.285947][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.324236][ T10] usb 6-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 358.347143][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.411734][ T10] usb 6-1: config 0 descriptor?? [ 358.612391][T11269] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 358.810663][T11269] usb 9-1: Using ep0 maxpacket: 32 [ 358.840177][T11269] usb 9-1: config 0 has an invalid interface number: 88 but max is 0 [ 358.862757][T11269] usb 9-1: config 0 has no interface number 0 [ 358.871157][ T10] asus 0003:0B05:1822.0005: item fetching failed at offset 0/3 [ 358.887147][ T10] asus 0003:0B05:1822.0005: Asus hid parse failed: -22 [ 358.901621][T11269] usb 9-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 358.928157][T11269] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.936680][T12862] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3109'. [ 358.964466][ T10] asus 0003:0B05:1822.0005: probe with driver asus failed with error -22 [ 358.967776][T11269] usb 9-1: Product: syz [ 358.977363][T11269] usb 9-1: Manufacturer: syz [ 359.019255][T11269] usb 9-1: SerialNumber: syz [ 359.040851][T11269] usb 9-1: config 0 descriptor?? [ 359.074378][ T5877] usb 6-1: USB disconnect, device number 5 [ 359.485754][ T5877] usb 9-1: USB disconnect, device number 7 [ 359.527595][ T5877] f81534a_ctrl 9-1:0.88: failed to set register 0x116: -19 [ 359.564454][ T5877] f81534a_ctrl 9-1:0.88: failed to enable ports: -19 [ 359.589717][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3115'. [ 359.840031][T12888] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 360.402857][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3129'. [ 360.450167][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3129'. [ 360.773500][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3134'. [ 361.185589][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3140'. [ 361.207841][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3140'. [ 361.549172][ T5877] kernel write not supported for file /input/mouse0 (pid: 5877 comm: kworker/1:3) [ 362.543654][T12989] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3159'. [ 362.591747][T12989] netem: unknown loss type 12 [ 362.620326][T12989] netem: change failed [ 362.868829][T12998] sp0: Synchronizing with TNC [ 363.658395][T13023] netlink: 'syz.5.3172': attribute type 66 has an invalid length. [ 364.128357][T13043] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 364.237864][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 364.421096][ T10] usb 8-1: config index 0 descriptor too short (expected 45, got 42) [ 364.437871][ T10] usb 8-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 364.481079][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 364.524347][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.570906][ T10] usb 8-1: config 0 descriptor?? [ 364.818148][T11269] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 364.919206][ T5876] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 364.978153][T11269] usb 10-1: Using ep0 maxpacket: 16 [ 365.003577][T11269] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.008158][ T10] logitech 0003:046D:C50C.0006: unknown main item tag 0x0 [ 365.035397][T11269] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.060266][ T10] logitech 0003:046D:C50C.0006: unknown main item tag 0x0 [ 365.067579][ T10] logitech 0003:046D:C50C.0006: unknown main item tag 0x0 [ 365.088746][T11269] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 365.121746][T11269] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 365.129455][ T10] logitech 0003:046D:C50C.0006: unknown main item tag 0x0 [ 365.143732][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.152572][T11269] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.165992][ T10] logitech 0003:046D:C50C.0006: unknown main item tag 0x0 [ 365.177553][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.201680][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 365.204880][T11269] usb 10-1: config 0 descriptor?? [ 365.219652][ T10] logitech 0003:046D:C50C.0006: hidraw0: USB HID v1.01 Device [HID 046d:c50c] on usb-dummy_hcd.7-1/input0 [ 365.256599][ T5876] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 365.282810][ T10] usb 8-1: USB disconnect, device number 6 [ 365.319461][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.380765][ T5876] usb 6-1: config 0 descriptor?? [ 365.400970][ T5876] hub 6-1:0.0: USB hub found [ 365.507614][T13075] fido_id[13075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 365.636664][ T5876] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 365.707237][T11269] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 365.745858][T11269] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 365.774740][T11269] microsoft 0003:045E:07DA.0007: no inputs found [ 365.786014][T11269] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 365.998105][ T5876] usb 6-1: USB disconnect, device number 6 [ 366.010607][ T5880] usb 10-1: USB disconnect, device number 6 [ 366.152356][T13093] tipc: Started in network mode [ 366.203368][T13093] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 366.235720][T13093] tipc: Enabling of bearer rejected, failed to enable media [ 367.059740][ T5876] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 367.248246][ T5876] usb 8-1: Using ep0 maxpacket: 16 [ 367.271227][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.312825][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.354084][ T5876] usb 8-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 367.389748][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.429082][ T5876] usb 8-1: config 0 descriptor?? [ 367.929138][ T5876] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf3 found [ 367.972565][ T5876] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf4 found [ 368.108950][ T5876] usb 8-1: USB disconnect, device number 7 [ 368.612878][ T30] audit: type=1326 audit(1747480265.356:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13138 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 368.707626][ T30] audit: type=1326 audit(1747480265.386:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13138 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 368.807729][ T30] audit: type=1326 audit(1747480265.386:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13138 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 368.926129][ T30] audit: type=1326 audit(1747480265.386:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13138 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 369.030766][ T30] audit: type=1326 audit(1747480265.396:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13138 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 369.161482][ T30] audit: type=1326 audit(1747480265.396:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13138 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 369.163249][T13151] netlink: 'syz.6.3225': attribute type 8 has an invalid length. [ 369.455896][ T30] audit: type=1326 audit(1747480266.196:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.8.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 369.561926][ T30] audit: type=1326 audit(1747480266.196:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.8.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 369.709529][ T30] audit: type=1326 audit(1747480266.236:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.8.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 369.797083][ T30] audit: type=1326 audit(1747480266.236:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13161 comm="syz.8.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 370.047014][T13181] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3238'. [ 370.431193][T13195] usb usb1: usbfs: process 13195 (syz.9.3243) did not claim interface 63 before use [ 370.897086][T13216] netlink: 348 bytes leftover after parsing attributes in process `syz.7.3252'. [ 371.742545][ T5876] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 371.941101][ T5876] usb 10-1: Using ep0 maxpacket: 16 [ 371.982383][ T5876] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 372.009606][ T5876] usb 10-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 372.032951][ T5876] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.075377][ T5876] usb 10-1: config 0 descriptor?? [ 372.528747][ T5876] hid (null): invalid report_count 43536 [ 372.539076][T13264] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3268'. [ 372.574261][T13262] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3268'. [ 372.584284][ T5876] redragon 0003:0C45:760B.0009: unknown main item tag 0x6 [ 372.606091][ T5876] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 372.632415][ T5876] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 372.676587][ T5876] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 372.696951][ T5876] redragon 0003:0C45:760B.0009: unknown main item tag 0x5 [ 372.717200][ T5876] redragon 0003:0C45:760B.0009: invalid report_count 43536 [ 372.787760][ T5876] redragon 0003:0C45:760B.0009: item 0 2 1 9 parsing failed [ 372.810224][ T5876] redragon 0003:0C45:760B.0009: probe with driver redragon failed with error -22 [ 372.888001][ T5876] usb 10-1: USB disconnect, device number 7 [ 373.171798][T13285] can0: slcan on ptm0. [ 373.361488][T13284] can0 (unregistered): slcan off ptm0. [ 373.644494][T13297] team0: Device gtp0 is of different type [ 374.120319][ T5877] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 374.179936][ T5877] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 374.268532][ T5880] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 374.476487][T13318] fido_id[13318]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 374.547747][ T5880] usb 9-1: Using ep0 maxpacket: 8 [ 374.597747][ T5880] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 374.632078][ T5880] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 374.668318][ T5880] usb 9-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 374.698328][T13326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3291'. [ 374.707788][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.751454][ T5880] usb 9-1: config 0 descriptor?? [ 375.107170][ T5876] IPVS: starting estimator thread 0... [ 375.208260][ T5880] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 375.215312][ T5880] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 375.228317][T13335] IPVS: using max 30 ests per chain, 72000 per kthread [ 375.244160][ T5880] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 375.285761][ T5880] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 375.308184][ T5880] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 375.348254][ T5880] elecom 0003:056E:00FB.000B: hidraw0: USB HID v38.04 Device [HID 056e:00fb] on usb-dummy_hcd.8-1/input0 [ 375.411889][ T5880] usb 9-1: USB disconnect, device number 8 [ 375.653740][T13345] fido_id[13345]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 375.687918][ T5876] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 375.880351][ T5876] usb 10-1: Using ep0 maxpacket: 16 [ 375.893555][ T5876] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 375.927845][ T5876] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.970358][ T5876] usb 10-1: config 0 has no interface number 0 [ 376.002810][ T5876] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 376.021594][ T5876] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.068360][ T5876] usb 10-1: Product: syz [ 376.074754][ T5876] usb 10-1: Manufacturer: syz [ 376.079631][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 376.097479][ T5876] usb 10-1: SerialNumber: syz [ 376.120312][ T5876] usb 10-1: config 0 descriptor?? [ 376.229236][ T5877] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 376.258329][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 376.271198][ T10] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 376.286352][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.298284][ T10] usb 7-1: Product: syz [ 376.302572][ T10] usb 7-1: Manufacturer: syz [ 376.307343][ T10] usb 7-1: SerialNumber: syz [ 376.322209][ T10] usb 7-1: config 0 descriptor?? [ 376.345717][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 376.365457][ T5876] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 376.376683][ T10] usb 7-1: setting power ON [ 376.381892][ T5876] usb 10-1: No valid video chain found. [ 376.388825][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 376.411025][ T5877] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 376.413060][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 376.446892][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.447509][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 376.476603][ T10] usb 7-1: media controller created [ 376.483566][ T5877] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 376.503333][ T5877] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 376.520461][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.535126][ T5877] usb 6-1: Manufacturer: syz [ 376.551909][ T5877] usb 6-1: config 0 descriptor?? [ 376.572237][T13354] dvb-usb: bulk message failed: -22 (3/0) [ 376.610309][T13354] usb 7-1: gpio_write failed. [ 376.627507][ T5878] usb 10-1: USB disconnect, device number 8 [ 376.634711][T13354] cxusb: i2c wr: len=80 is too big! [ 376.634711][T13354] [ 376.672765][ T10] usb 7-1: selecting invalid altsetting 6 [ 376.712425][ T10] usb 7-1: digital interface selection failed (-22) [ 376.731007][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 376.748191][ T5877] rc_core: IR keymap rc-hauppauge not found [ 376.755468][ T10] usb 7-1: setting power OFF [ 376.760198][ T5877] Registered IR keymap rc-empty [ 376.774019][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 376.781178][ T5877] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 376.791637][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 376.791659][ T10] (NULL device *): no alternate interface [ 376.845293][ T5877] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 376.961897][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 377.052584][ T10] usb 7-1: USB disconnect, device number 5 [ 377.160805][ C1] igorplugusb 6-1:0.0: receive overflow, at least 31 lost [ 377.362582][ T10] usb 6-1: USB disconnect, device number 7 [ 378.665647][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.678883][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.097935][ T10] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 379.288085][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 379.314347][ T10] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.345652][ T10] usb 10-1: config 0 has no interface number 0 [ 379.387067][ T10] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 379.416805][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.469000][ T10] usb 10-1: Product: syz [ 379.480109][ T10] usb 10-1: Manufacturer: syz [ 379.498484][ T10] usb 10-1: SerialNumber: syz [ 379.539031][ T10] usb 10-1: config 0 descriptor?? [ 379.564279][ T10] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 379.620960][ T10] usb 10-1: selecting invalid altsetting 1 [ 379.643839][ T10] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 379.695896][ T10] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 379.758710][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 379.791225][ T10] usb 10-1: media controller created [ 379.845465][T13439] atomic_op ffff888024322198 conn xmit_atomic 0000000000000000 [ 379.931209][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.208441][ T5918] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 380.398386][ T5918] usb 9-1: Using ep0 maxpacket: 16 [ 380.440381][ T5918] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 380.475581][ T5918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.527863][ T5918] usb 9-1: Product: syz [ 380.532134][ T5918] usb 9-1: Manufacturer: syz [ 380.536778][ T5918] usb 9-1: SerialNumber: syz [ 380.594511][ T5918] usb 9-1: config 0 descriptor?? [ 380.613090][ T5918] visor 9-1:0.0: Sony Clie 3.5 converter detected [ 380.821331][T13417] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 380.877920][ T10] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 380.885389][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 380.938550][ T10] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 380.988305][ T5878] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 381.046425][ T5918] usb 9-1: clie_3_5_startup: get interface number bad return length: 0 [ 381.087876][ T5918] visor 9-1:0.0: probe with driver visor failed with error -5 [ 381.145779][ T10] usb 10-1: USB disconnect, device number 9 [ 381.187245][ T5878] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 381.229250][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.273933][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.290416][T11269] usb 9-1: USB disconnect, device number 9 [ 381.317074][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 381.342127][ T5878] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 381.357698][ T5878] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 381.397724][ T5878] usb 6-1: Manufacturer: syz [ 381.423255][ T5878] usb 6-1: config 0 descriptor?? [ 381.872047][ T5878] appleir 0003:05AC:8243.000C: item fetching failed at offset 0/1 [ 381.915232][ T5878] appleir 0003:05AC:8243.000C: parse failed [ 381.947801][ T5878] appleir 0003:05AC:8243.000C: probe with driver appleir failed with error -22 [ 381.973073][T13472] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 381.973073][T13472] [ 382.104691][ T5823] usb 6-1: USB disconnect, device number 8 [ 383.428558][ T1208] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 383.618074][ T1208] usb 6-1: Using ep0 maxpacket: 32 [ 383.644810][ T1208] usb 6-1: config 7 has an invalid interface number: 221 but max is 2 [ 383.669329][ T1208] usb 6-1: config 7 has an invalid interface number: 93 but max is 2 [ 383.677493][ T1208] usb 6-1: config 7 has an invalid interface number: 145 but max is 2 [ 383.691709][ T1208] usb 6-1: config 7 has no interface number 0 [ 383.703758][ T1208] usb 6-1: config 7 has no interface number 1 [ 383.712278][ T1208] usb 6-1: config 7 has no interface number 2 [ 383.724089][ T1208] usb 6-1: config 7 interface 221 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 383.749478][ T1208] usb 6-1: config 7 interface 93 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 383.807535][ T1208] usb 6-1: config 7 interface 221 has no altsetting 0 [ 383.822490][ T1208] usb 6-1: config 7 interface 93 has no altsetting 0 [ 383.843053][ T1208] usb 6-1: config 7 interface 145 has no altsetting 0 [ 383.862051][ T1208] usb 6-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=e5.c9 [ 383.882796][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.901120][ T1208] usb 6-1: Product: syz [ 383.905621][ T1208] usb 6-1: Manufacturer: syz [ 383.915264][ T1208] usb 6-1: SerialNumber: syz [ 383.927837][ T5875] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 384.110283][ T5875] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 384.134443][ T5875] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.170221][ T5875] usb 9-1: config 0 has no interface number 0 [ 384.176416][ T5875] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 384.254674][ T1208] usb 6-1: USB disconnect, device number 9 [ 384.260715][ T5875] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.341399][ T5875] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 384.394229][ T5875] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.419374][ T5875] usb 9-1: Product: syz [ 384.423621][ T5875] usb 9-1: Manufacturer: syz [ 384.440109][ T5875] usb 9-1: SerialNumber: syz [ 384.460646][ T5875] usb 9-1: config 0 descriptor?? [ 384.966651][T13549] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 384.987760][T13549] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 384.996816][T13549] overlayfs: missing 'lowerdir' [ 385.096930][ T5875] usbtouchscreen 9-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 385.141579][ T5875] usb 9-1: USB disconnect, device number 10 [ 385.317770][ T5823] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 385.497803][ T5823] usb 10-1: Using ep0 maxpacket: 32 [ 385.504934][ T5823] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 385.524214][ T5823] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 385.578102][ T5823] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 385.607737][ T5823] usb 10-1: config 1 has no interface number 0 [ 385.614024][ T5823] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.635804][T13564] vlan2: entered allmulticast mode [ 385.653118][ T5823] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 385.699610][ T5823] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 385.709674][ T5823] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.766883][ T5823] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 385.985430][ T5823] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 386.447099][ T5880] usb 10-1: USB disconnect, device number 10 [ 386.480771][ T5880] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 387.738451][ T5875] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 387.938765][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 387.956527][ T5875] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.000306][ T5875] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.052571][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 388.073486][ T5875] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 388.130224][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.197025][ T5875] usb 6-1: config 0 descriptor?? [ 388.688199][ T5875] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 388.695346][ T5875] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 388.768005][ T5875] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 388.775156][ T5875] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 388.843888][ T5875] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 388.894177][ T5875] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 388.935369][ T5875] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 388.966460][ T5875] mcp2200 0003:04D8:00DF.000D: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.5-1/input0 [ 389.157449][ T5875] usb 6-1: USB disconnect, device number 10 [ 389.713096][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.728181][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.736610][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.737746][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 389.779330][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.794669][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.948780][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 389.992148][ T24] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 390.012940][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.050456][T11677] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.062190][ T24] usb 7-1: Product: syz [ 390.066411][ T24] usb 7-1: Manufacturer: syz [ 390.083373][ T24] usb 7-1: SerialNumber: syz [ 390.106399][ T24] usb 7-1: config 0 descriptor?? [ 390.155864][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 390.205081][ T24] usb 7-1: setting power ON [ 390.216800][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 390.269187][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 390.311257][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 390.356787][T13661] dvb-usb: bulk message failed: -22 (3/0) [ 390.363614][ T24] usb 7-1: media controller created [ 390.369613][T13661] usb 7-1: gpio_write failed. [ 390.380590][T13661] cxusb: i2c wr: len=80 is too big! [ 390.380590][T13661] [ 390.393734][T11677] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.474208][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 390.592205][ T24] usb 7-1: selecting invalid altsetting 6 [ 390.626189][ T24] usb 7-1: digital interface selection failed (-22) [ 390.657701][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 390.699544][T11677] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.710361][ T24] usb 7-1: setting power OFF [ 390.715016][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 390.737726][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 390.766073][ T24] (NULL device *): no alternate interface [ 390.997500][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 391.031912][T11677] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.092625][ T24] usb 7-1: USB disconnect, device number 6 [ 391.418386][ T5880] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 391.598295][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 391.636328][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 391.694952][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 391.786120][T13662] chnl_net:caif_netlink_parms(): no params data found [ 391.797929][ T5880] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 391.807054][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.849954][ T5880] usb 6-1: Product: syz [ 391.860498][ T55] Bluetooth: hci1: command tx timeout [ 391.877780][ T5880] usb 6-1: Manufacturer: syz [ 391.882458][ T5880] usb 6-1: SerialNumber: syz [ 391.890731][ T5880] usb 6-1: config 0 descriptor?? [ 391.937306][T11677] bridge_slave_1: left allmulticast mode [ 391.970626][T11677] bridge_slave_1: left promiscuous mode [ 392.007990][T11677] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.109039][T11677] bridge_slave_0: left allmulticast mode [ 392.114938][T11677] bridge_slave_0: left promiscuous mode [ 392.177345][T11677] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.218157][ T5880] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 392.224304][ T5880] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 392.337837][ T5880] usb 6-1: USB disconnect, device number 11 [ 392.977090][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 392.977109][ T30] audit: type=1326 audit(1747480289.716:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13757 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 393.083277][ T30] audit: type=1326 audit(1747480289.756:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13757 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 393.169182][ T30] audit: type=1326 audit(1747480289.766:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13757 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 393.234623][ T30] audit: type=1326 audit(1747480289.766:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13757 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 393.266338][ T30] audit: type=1326 audit(1747480289.766:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13757 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 393.293494][ T30] audit: type=1326 audit(1747480289.766:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13757 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 393.322356][ T30] audit: type=1326 audit(1747480289.766:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13757 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 393.344091][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.553328][T11677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.564990][T11677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.576592][T11677] bond0 (unregistering): Released all slaves [ 393.828742][T11677] tipc: Left network mode [ 393.948064][ T55] Bluetooth: hci1: command tx timeout [ 394.504339][T13662] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.528633][T13662] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.565070][T13662] bridge_slave_0: entered allmulticast mode [ 394.587761][ T5875] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 394.597376][T13662] bridge_slave_0: entered promiscuous mode [ 394.633500][T13662] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.642474][T13662] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.662465][T13662] bridge_slave_1: entered allmulticast mode [ 394.691270][T13662] bridge_slave_1: entered promiscuous mode [ 394.716196][T13804] netlink: 'syz.9.3446': attribute type 6 has an invalid length. [ 394.780574][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.817944][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.854440][ T5875] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 394.880769][ T5875] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 394.894979][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.952825][ T5875] usb 7-1: config 0 descriptor?? [ 395.173589][T13813] tipc: Invalid UDP bearer configuration [ 395.173648][T13813] tipc: Enabling of bearer rejected, failed to enable media [ 395.242322][T13662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.286941][T13662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.330374][T11677] hsr_slave_0: left promiscuous mode [ 395.348504][T11677] hsr_slave_1: left promiscuous mode [ 395.355581][T11677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.374846][T11677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.399290][ T5875] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 395.437873][T11677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.445392][T11677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.454801][ T5875] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 395.459205][ T5877] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 395.497120][ T5875] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 395.585500][T11677] veth1_macvtap: left promiscuous mode [ 395.632710][T11677] veth0_macvtap: left promiscuous mode [ 395.671901][T11677] veth1_vlan: left promiscuous mode [ 395.674421][ T5877] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 395.677452][T11677] veth0_vlan: left promiscuous mode [ 395.695682][ T5877] usb 6-1: config 0 has no interface number 0 [ 395.704173][ T5877] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 395.716697][ T5823] usb 7-1: USB disconnect, device number 7 [ 395.723056][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.738490][ T5877] usb 6-1: config 0 descriptor?? [ 395.759346][ T5877] usb 6-1: selecting invalid altsetting 1 [ 395.781551][ T5877] dvb_ttusb_budget: ttusb_init_controller: error [ 395.801449][T13822] fido_id[13822]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 395.808268][ T5877] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 396.006686][ T5877] DVB: Unable to find symbol cx22700_attach() [ 396.029173][ T55] Bluetooth: hci1: command tx timeout [ 396.062805][ T5877] DVB: Unable to find symbol tda10046_attach() [ 396.071015][ T5877] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 396.098988][ T5877] usb 6-1: USB disconnect, device number 12 [ 396.755527][T11677] team0 (unregistering): Port device team_slave_1 removed [ 396.826312][T11677] team0 (unregistering): Port device team_slave_0 removed [ 396.908001][ T5823] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 397.098389][ T5823] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 397.109304][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.117436][ T5823] usb 6-1: Product: syz [ 397.124989][ T5823] usb 6-1: Manufacturer: syz [ 397.129955][ T5823] usb 6-1: SerialNumber: syz [ 397.141030][ T5823] usb 6-1: config 0 descriptor?? [ 397.150833][ T5823] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 397.597177][T13825] Zero length message leads to an empty skb [ 397.614100][T13662] team0: Port device team_slave_0 added [ 397.732490][T13662] team0: Port device team_slave_1 added [ 397.787581][ T5875] usb 6-1: USB disconnect, device number 13 [ 397.978008][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3463'. [ 398.005842][T13662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.029894][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.104634][ T55] Bluetooth: hci1: command tx timeout [ 398.157805][T13662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.198730][T13662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.211322][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.287994][T13662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.452930][T13863] tipc: Started in network mode [ 398.458151][T13863] tipc: Node identity ac14140f, cluster identity 4711 [ 398.490551][T13863] tipc: Enabled bearer , priority 10 [ 398.582399][T13872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.676955][T13662] hsr_slave_0: entered promiscuous mode [ 398.754242][T13662] hsr_slave_1: entered promiscuous mode [ 399.609432][ T5880] tipc: Node number set to 2886997007 [ 399.967938][ T5880] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 400.141539][ T5880] usb 10-1: Using ep0 maxpacket: 8 [ 400.190509][ T5880] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 400.253331][ T5880] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 400.268377][ T5880] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 400.276718][ T5880] usb 10-1: Product: syz [ 400.341233][ T5880] usb 10-1: Manufacturer: syz [ 400.346001][ T5880] usb 10-1: SerialNumber: syz [ 400.580304][ T5880] usb 10-1: Handspring Visor / Palm OS: No valid connect info available [ 400.612066][ T5880] usb 10-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 400.643568][ T5880] usb 10-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 400.690705][ T5880] usb 10-1: Handspring Visor / Palm OS: Number of ports: 2 [ 400.785036][ T5880] visor 10-1:1.0: Handspring Visor / Palm OS converter detected [ 400.839012][ T5880] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 400.874626][ T5880] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 401.033715][ T10] usb 10-1: USB disconnect, device number 11 [ 401.095236][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 401.100833][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 401.164554][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 401.190117][ T10] visor 10-1:1.0: device disconnected [ 401.251169][T13931] [U] . [ 401.278674][ T5875] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 401.298189][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.319661][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.356503][T13662] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 401.365568][ T24] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 401.384126][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.403646][ T24] usb 9-1: config 0 descriptor?? [ 401.416411][T13662] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 401.443093][T13662] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 401.457978][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 401.488368][ T5875] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 401.494540][T13662] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 401.496434][ T5875] usb 7-1: config 0 has no interface number 0 [ 401.496485][ T5875] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.521742][ T5875] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.531596][ T5875] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 401.563325][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.602175][ T5875] usb 7-1: config 0 descriptor?? [ 401.879288][T13662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.886705][ T24] acrux 0003:1A34:0802.000F: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.8-1/input0 [ 401.941023][ T24] acrux 0003:1A34:0802.000F: no inputs found [ 401.957422][T13662] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.966931][ T24] acrux 0003:1A34:0802.000F: Failed to enable force feedback support, error: -19 [ 402.044563][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.051838][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.092621][ T24] usb 9-1: USB disconnect, device number 11 [ 402.160283][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.167574][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.195013][T13961] fido_id[13961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 402.243500][ T5875] uclogic 0003:28BD:0071.0010: failed retrieving string descriptor #100: -71 [ 402.281763][ T5875] uclogic 0003:28BD:0071.0010: failed retrieving pen parameters: -71 [ 402.313415][ T5875] uclogic 0003:28BD:0071.0010: pen probing failed: -71 [ 402.336544][ T5875] uclogic 0003:28BD:0071.0010: failed probing parameters: -71 [ 402.381726][ T5875] uclogic 0003:28BD:0071.0010: probe with driver uclogic failed with error -71 [ 402.436671][ T5875] usb 7-1: USB disconnect, device number 8 [ 403.155210][T13662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.377545][T13662] veth0_vlan: entered promiscuous mode [ 403.461462][T13662] veth1_vlan: entered promiscuous mode [ 403.629834][T13662] veth0_macvtap: entered promiscuous mode [ 403.666723][T13662] veth1_macvtap: entered promiscuous mode [ 403.772645][T13662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.843631][T13662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.889876][T13662] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.940469][T13662] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.982245][T13662] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.016547][T13662] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.106073][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3516'. [ 404.473256][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.501122][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.610160][T14032] veth1_macvtap: left promiscuous mode [ 404.625737][T14032] macsec0: entered promiscuous mode [ 404.694351][T14032] veth1_macvtap: entered promiscuous mode [ 404.710393][T14032] macsec0: left promiscuous mode [ 404.763843][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.801768][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.321880][ T5878] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 406.488032][ T5878] usb 9-1: Using ep0 maxpacket: 32 [ 406.522221][ T5878] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.548912][ T5878] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 406.595727][ T5878] usb 9-1: config 0 interface 0 has no altsetting 0 [ 406.620206][ T5878] usb 9-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 406.670804][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.729754][ T5878] usb 9-1: config 0 descriptor?? [ 406.978402][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 407.159360][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 407.166264][T14117] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3553'. [ 407.182378][ T5878] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 407.203768][ T5878] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 407.217555][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 407.259108][ T5878] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 407.271036][ T24] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 407.282566][ T5878] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 407.308154][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.316230][ T24] usb 1-1: Product: syz [ 407.320556][ T5878] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 407.341615][ T5878] glorious 0003:258A:0033.0011: hidraw0: USB HID vff.fc Device [Glorious Model D] on usb-dummy_hcd.8-1/input0 [ 407.356068][ T24] usb 1-1: Manufacturer: syz [ 407.366270][ T24] usb 1-1: SerialNumber: syz [ 407.406907][ T24] usb 1-1: config 0 descriptor?? [ 407.425474][ T5878] usb 9-1: USB disconnect, device number 12 [ 407.453078][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 407.517751][ T24] usb 1-1: setting power ON [ 407.522345][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 407.543324][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 407.578622][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 407.639439][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 407.662297][T14104] dvb-usb: bulk message failed: -22 (3/0) [ 407.672227][ T24] usb 1-1: media controller created [ 407.678465][T14124] fido_id[14124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 407.694198][T14104] usb 1-1: gpio_write failed. [ 407.699452][T14104] dvb-usb: bulk message failed: -22 (38/0) [ 407.730078][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.756560][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.757689][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.779930][ T5877] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 407.805389][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 407.829058][ T24] usb 1-1: selecting invalid altsetting 6 [ 407.843154][ T10] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 407.845714][ T24] usb 1-1: digital interface selection failed (-22) [ 407.863535][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.885305][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 407.886400][ T10] usb 10-1: config 0 descriptor?? [ 407.915368][ T24] usb 1-1: setting power OFF [ 407.925159][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 407.935629][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 407.951605][ T5877] usb 7-1: Using ep0 maxpacket: 16 [ 407.964276][ T24] (NULL device *): no alternate interface [ 407.965577][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 407.983015][ T5880] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 408.024261][ T5877] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 408.048498][ T5877] usb 7-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 408.066092][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 408.078847][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.092087][ T5877] usb 7-1: config 0 descriptor?? [ 408.127253][ T24] usb 1-1: USB disconnect, device number 14 [ 408.169833][ T5880] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 408.226761][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 408.253888][ T5880] usb 6-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 408.265798][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.305386][ T5880] usb 6-1: config 0 descriptor?? [ 408.334371][ T10] plantronics 0003:047F:FFFF.0012: unbalanced delimiter at end of report description [ 408.365869][ T10] plantronics 0003:047F:FFFF.0012: parse failed [ 408.390907][ T10] plantronics 0003:047F:FFFF.0012: probe with driver plantronics failed with error -22 [ 408.584216][ T5877] kye 0003:0458:5019.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 408.622656][ T5877] kye 0003:0458:5019.0013: unknown main item tag 0x2 [ 408.628976][ T5823] usb 10-1: USB disconnect, device number 12 [ 408.671738][ T5877] kye 0003:0458:5019.0013: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.6-1/input0 [ 408.698975][ T5877] kye 0003:0458:5019.0013: tablet-enabling feature report not found [ 408.712079][ T5877] kye 0003:0458:5019.0013: tablet enabling failed [ 408.763123][ T5880] cypress 0003:04B4:BCA1.0014: unknown main item tag 0x0 [ 408.786806][ T5877] usb 7-1: USB disconnect, device number 9 [ 408.799823][ T5880] cypress 0003:04B4:BCA1.0014: unknown main item tag 0x0 [ 408.830692][ T5880] cypress 0003:04B4:BCA1.0014: unknown main item tag 0x0 [ 408.878880][ T5880] cypress 0003:04B4:BCA1.0014: hidraw0: USB HID v1.05 Device [HID 04b4:bca1] on usb-dummy_hcd.5-1/input0 [ 408.954481][ T5880] usb 6-1: USB disconnect, device number 14 [ 408.961420][T14151] fido_id[14151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 408.989731][ T30] audit: type=1326 audit(1747480305.716:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14152 comm="syz.0.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0438e969 code=0x7ffc0000 [ 409.074891][ T30] audit: type=1326 audit(1747480305.716:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14152 comm="syz.0.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0438e969 code=0x7ffc0000 [ 409.120720][ T30] audit: type=1326 audit(1747480305.726:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14152 comm="syz.0.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fec0438e969 code=0x7ffc0000 [ 409.150782][ T30] audit: type=1326 audit(1747480305.726:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14152 comm="syz.0.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0438e969 code=0x7ffc0000 [ 409.214327][ T30] audit: type=1326 audit(1747480305.726:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14152 comm="syz.0.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0438e969 code=0x7ffc0000 [ 409.256363][T14162] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3565'. [ 409.473273][T14158] fido_id[14158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 409.999860][T14180] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3574'. [ 410.031959][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 411.424807][T14237] UBIFS error (pid: 14237): cannot open "c:::", error -22 [ 411.459602][T10659] Bluetooth: hci5: command 0x0406 tx timeout [ 411.459622][ T5132] Bluetooth: hci6: command 0x0406 tx timeout [ 411.466829][T10659] Bluetooth: hci8: command 0x0406 tx timeout [ 411.693923][T14244] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 411.693923][T14244] program syz.5.3601 not setting count and/or reply_len properly [ 412.651857][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3616'. [ 412.717805][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3616'. [ 412.797200][T14290] netlink: 'syz.6.3618': attribute type 1 has an invalid length. [ 414.377235][T14345] tmpfs: Cannot retroactively limit inodes [ 414.674627][T14357] netlink: 'syz.6.3641': attribute type 178 has an invalid length. [ 414.840126][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 415.027807][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 415.075393][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.114293][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.160070][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 415.193003][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.258265][ T10] usb 9-1: config 0 descriptor?? [ 415.317955][ T10] hub 9-1:0.0: USB hub found [ 415.381486][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3645'. [ 415.390694][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3645'. [ 415.401298][T14382] netlink: 'syz.5.3645': attribute type 15 has an invalid length. [ 415.510570][ T10] hub 9-1:0.0: 1 port detected [ 415.605135][T14385] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3647'. [ 415.706471][ T10] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 415.731236][ T10] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 415.766889][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 415.805874][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 415.844605][ T10] usb 9-1: USB disconnect, device number 13 [ 416.476307][T14408] netlink: 'syz.8.3658': attribute type 1 has an invalid length. [ 416.497561][T14408] netlink: 228 bytes leftover after parsing attributes in process `syz.8.3658'. [ 416.739685][ T30] audit: type=1326 audit(1747480313.486:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.8.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 416.835144][ T30] audit: type=1326 audit(1747480313.486:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.8.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 416.856894][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.967211][ T30] audit: type=1326 audit(1747480313.526:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.8.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 417.089478][ T30] audit: type=1326 audit(1747480313.526:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.8.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 417.211215][ T30] audit: type=1326 audit(1747480313.526:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.8.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 417.334392][ T30] audit: type=1326 audit(1747480313.536:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.8.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 417.356183][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.464376][ T30] audit: type=1326 audit(1747480313.536:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.8.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3163d8e969 code=0x7ffc0000 [ 417.558175][ T10] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 417.743370][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3677'. [ 417.767545][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.791700][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 417.837735][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.907968][ T10] usb 9-1: config 0 descriptor?? [ 418.077404][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3682'. [ 418.337167][ T10] logitech 0003:046D:CA03.0015: unbalanced collection at end of report description [ 418.407830][ T10] logitech 0003:046D:CA03.0015: parse failed [ 418.424419][ T10] logitech 0003:046D:CA03.0015: probe with driver logitech failed with error -22 [ 418.556301][ T5823] usb 9-1: USB disconnect, device number 14 [ 418.993619][T14490] [U] [Œæî [ 419.547739][ T5880] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 419.699769][T14520] vim2m vim2m.0: vidioc_s_fmt queue busy [ 419.752761][ T5880] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 419.788098][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.818760][ T5880] usb 7-1: Product: syz [ 419.823005][ T5880] usb 7-1: Manufacturer: syz [ 419.832235][ T5880] usb 7-1: SerialNumber: syz [ 419.871175][ T5880] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 419.911714][ T24] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 419.968001][ T5823] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 420.158255][ T5823] usb 10-1: Using ep0 maxpacket: 8 [ 420.173126][ T5823] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 420.199268][ T5823] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 420.257930][ T5823] usb 10-1: Product: syz [ 420.267862][ T5823] usb 10-1: Manufacturer: syz [ 420.280785][ T5823] usb 10-1: SerialNumber: syz [ 420.309081][ T5823] usb 10-1: config 0 descriptor?? [ 420.346130][ T5823] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 420.594673][ T5875] usb 7-1: USB disconnect, device number 10 [ 420.732529][ T5823] gspca_zc3xx: reg_r err -71 [ 420.749795][ T5823] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 420.835027][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3718'. [ 420.862684][ T5823] usb 10-1: USB disconnect, device number 13 [ 420.981914][ T24] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 421.020963][ T24] ath9k_htc: Failed to initialize the device [ 421.053788][ T5875] usb 7-1: ath9k_htc: USB layer deinitialized [ 421.187846][ T5880] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 421.378517][ T5880] usb 9-1: Using ep0 maxpacket: 16 [ 421.387770][ T5823] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 421.392418][ T5880] usb 9-1: config 0 interface 0 has no altsetting 0 [ 421.431519][ T5880] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 421.463674][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.494696][ T5880] usb 9-1: Product: syz [ 421.522568][ T5880] usb 9-1: Manufacturer: syz [ 421.532352][ T5880] usb 9-1: SerialNumber: syz [ 421.557398][ T5880] r8152-cfgselector 9-1: Unknown version 0x0000 [ 421.567758][ T5823] usb 6-1: Using ep0 maxpacket: 8 [ 421.579017][ T5880] r8152-cfgselector 9-1: config 0 descriptor?? [ 421.613787][ T5823] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 421.651491][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.691715][ T5823] usb 6-1: Product: syz [ 421.697410][ T5823] usb 6-1: Manufacturer: syz [ 421.734550][ T5823] usb 6-1: SerialNumber: syz [ 421.819758][ T5823] usb 6-1: config 0 descriptor?? [ 421.860845][ T5823] gspca_main: sq930x-2.14.0 probing 2770:930c [ 422.131304][ T5880] r8152-cfgselector 9-1: USB disconnect, device number 15 [ 422.376176][T14589] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3731'. [ 422.513645][ T5823] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 422.519896][ T5823] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 422.552526][ T5823] usb 6-1: USB disconnect, device number 15 [ 423.037986][T14610] syz.9.3739 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 423.118185][ T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 423.307868][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 423.322489][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.352856][ T9] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 423.388971][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.428647][ T9] usb 9-1: config 0 descriptor?? [ 423.547729][ T5875] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 423.740117][ T5875] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.742303][ T30] audit: type=1326 audit(1747480320.486:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14636 comm="syz.5.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 423.756217][ T5875] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.805093][ T5875] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 423.850900][ T30] audit: type=1326 audit(1747480320.486:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14636 comm="syz.5.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 423.873183][ T5875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.884948][ T9] holtek 0003:1241:5015.0016: unknown main item tag 0x0 [ 423.895415][ T5875] usb 10-1: config 0 descriptor?? [ 423.908935][ T9] holtek 0003:1241:5015.0016: unknown main item tag 0x0 [ 423.930566][ T9] holtek 0003:1241:5015.0016: unknown main item tag 0x0 [ 423.986882][ T9] holtek 0003:1241:5015.0016: unknown main item tag 0x0 [ 423.994057][ T30] audit: type=1326 audit(1747480320.536:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14636 comm="syz.5.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 423.994111][ T30] audit: type=1326 audit(1747480320.536:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14636 comm="syz.5.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 424.035978][ T9] holtek 0003:1241:5015.0016: unknown main item tag 0x0 [ 424.037532][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.087758][ T30] audit: type=1326 audit(1747480320.536:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14636 comm="syz.5.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 424.110721][ T9] holtek 0003:1241:5015.0016: hidraw0: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.8-1/input0 [ 424.138477][ T30] audit: type=1326 audit(1747480320.536:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14636 comm="syz.5.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 424.167771][ T30] audit: type=1326 audit(1747480320.536:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14636 comm="syz.5.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 424.223541][ T9] holtek 0003:1241:5015.0016: no inputs found [ 424.239636][ T30] audit: type=1326 audit(1747480320.536:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14636 comm="syz.5.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ac58e969 code=0x7ffc0000 [ 424.291978][ T9] usb 9-1: USB disconnect, device number 16 [ 424.388865][ T30] audit: type=1326 audit(1747480321.136:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14647 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0438e969 code=0x7ffc0000 [ 424.400731][ T5875] isku 0003:1E7D:319C.0017: unbalanced collection at end of report description [ 424.502874][ T5875] isku 0003:1E7D:319C.0017: parse failed [ 424.527795][ T30] audit: type=1326 audit(1747480321.176:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14647 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0438e969 code=0x7ffc0000 [ 424.556917][ T5875] isku 0003:1E7D:319C.0017: probe with driver isku failed with error -22 [ 424.604364][ T5875] usb 10-1: USB disconnect, device number 14 [ 425.498226][ T5823] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 425.541389][T14687] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3765'. [ 425.570101][T14687] tipc: Started in network mode [ 425.585338][T14687] tipc: Node identity 0000000000002d120000000000000001, cluster identity 4711 [ 425.617352][T14687] tipc: Enabling of bearer rejected, failed to enable media [ 425.627841][ T5875] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 425.688177][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 425.712696][ T5823] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.737454][ T5823] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.783309][ T5823] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.803149][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 425.826451][ T5823] usb 6-1: config 0 interface 0 has no altsetting 0 [ 425.834418][ T5875] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.853341][ T5823] usb 6-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 425.873765][ T5875] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 425.884678][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.919569][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.944578][ T5823] usb 6-1: config 0 descriptor?? [ 425.958474][ T5875] usb 7-1: config 0 descriptor?? [ 426.498466][ T5875] ryos 0003:1E7D:3138.0019: hidraw0: USB HID v0.06 Device [HID 1e7d:3138] on usb-dummy_hcd.6-1/input0 [ 426.544078][ T5823] input: HID 28bd:0905 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0905.0018/input/input24 [ 426.645025][ T5878] usb 7-1: USB disconnect, device number 11 [ 426.689852][ T5823] uclogic 0003:28BD:0905.0018: input,hidraw1: USB HID v0.00 Mouse [HID 28bd:0905] on usb-dummy_hcd.5-1/input0 [ 426.819819][ T5823] usb 6-1: USB disconnect, device number 16 [ 426.896526][T14722] fido_id[14722]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 427.057835][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3779'. [ 427.075379][T14725] fido_id[14725]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 427.742362][T14748] MPI: mpi too large (130952 bits) [ 428.841386][ T5875] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 429.049223][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.072931][ T5875] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 429.109182][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.136796][ T5875] usb 7-1: config 0 descriptor?? [ 429.441824][T14814] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 429.585788][ T5875] lg-g15 0003:046D:C222.001A: reserved main item tag 0xd [ 429.663145][ T5875] lg-g15 0003:046D:C222.001A: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.6-1/input0 [ 429.834571][ T5875] usb 7-1: USB disconnect, device number 12 [ 429.979925][T14824] fido_id[14824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 430.087771][ T5877] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 430.279987][ T5877] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 430.306070][ T5877] usb 6-1: config 0 has no interface number 0 [ 430.331487][ T5877] usb 6-1: config 0 interface 122 has no altsetting 0 [ 430.361321][T14849] netlink: 'syz.9.3822': attribute type 2 has an invalid length. [ 430.365955][ T5877] usb 6-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 430.397777][T14849] netlink: 164 bytes leftover after parsing attributes in process `syz.9.3822'. [ 430.400475][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.463739][ T5877] usb 6-1: Product: syz [ 430.478138][ T5877] usb 6-1: Manufacturer: syz [ 430.493265][ T5877] usb 6-1: SerialNumber: syz [ 430.567062][ T5877] usb 6-1: config 0 descriptor?? [ 431.078989][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3832'. [ 431.079697][ T5878] usb 6-1: USB disconnect, device number 17 [ 431.107411][ T5878] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 431.312023][T14873] netlink: 'syz.8.3833': attribute type 3 has an invalid length. [ 431.760644][ T5878] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 431.873387][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3840'. [ 431.969711][ T5878] usb 10-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 432.007973][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.065270][ T5878] usb 10-1: config 0 descriptor?? [ 432.217949][ T5875] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 432.389392][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 432.396399][ T5875] usb 7-1: config 64 has an invalid interface number: 219 but max is 1 [ 432.417079][ T5875] usb 7-1: config 64 has an invalid interface number: 145 but max is 1 [ 432.456461][ T5875] usb 7-1: config 64 has no interface number 0 [ 432.486259][ T5875] usb 7-1: config 64 has no interface number 1 [ 432.506940][ T5875] usb 7-1: config 64 interface 145 has no altsetting 0 [ 432.539602][ T5875] usb 7-1: New USB device found, idVendor=185b, idProduct=1e78, bcdDevice=33.a9 [ 432.578081][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.592644][ T5878] kye 0003:0458:4018.001B: hidraw0: USB HID v0.03 Device [HID 0458:4018] on usb-dummy_hcd.9-1/input0 [ 432.615107][ T5875] usb 7-1: Product: syz [ 432.625579][ T5875] usb 7-1: Manufacturer: syz [ 432.645592][ T5875] usb 7-1: SerialNumber: syz [ 432.735041][ T5878] usb 10-1: USB disconnect, device number 15 [ 432.862479][T14918] fido_id[14918]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 432.906104][T14923] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3850'. [ 432.922586][ T5875] dvb-usb: found a 'Compro Videomate U500' in cold state, will try to load a firmware [ 433.046546][ T5875] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 433.118783][ T5875] dib0700: firmware download failed at 7 with -22 [ 433.141666][ T5875] hub 7-1:64.145: Invalid hub with more than one config or interface [ 433.176595][ T5875] hub 7-1:64.145: probe with driver hub failed with error -22 [ 433.214777][ T5875] dvb-usb: found a 'Compro Videomate U500' in cold state, will try to load a firmware [ 433.273324][ T5875] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 433.317364][ T5875] dib0700: firmware download failed at 7 with -22 [ 433.345247][T14934] [U] ùÿ [ 433.378042][ T5875] usb 7-1: USB disconnect, device number 13 [ 433.938255][ T5877] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 433.984487][ T5875] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 434.068515][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 434.068535][ T30] audit: type=1804 audit(1747480330.806:2405): pid=14960 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.3865" name="/newroot/240/cgroup.controllers" dev="tmpfs" ino=1231 res=1 errno=0 [ 434.147746][ T30] audit: type=1800 audit(1747480330.856:2406): pid=14960 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.3865" name="cgroup.controllers" dev="tmpfs" ino=1231 res=0 errno=0 [ 434.169093][ T5877] usb 7-1: Using ep0 maxpacket: 8 [ 434.206218][ T5877] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 434.223434][ T5877] usb 7-1: config 2 has no interface number 0 [ 434.237979][ T5877] usb 7-1: config 2 interface 31 has no altsetting 0 [ 434.255798][ T5877] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 434.257708][ T5875] usb 10-1: Using ep0 maxpacket: 32 [ 434.285601][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.291772][ T5875] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 434.334684][ T5875] usb 10-1: config 0 has no interface number 0 [ 434.343005][ T5877] usb 7-1: Product: syz [ 434.354229][ T5877] usb 7-1: Manufacturer: syz [ 434.373060][ T5877] usb 7-1: SerialNumber: syz [ 434.384677][ T5875] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 434.414489][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.459058][ T5875] usb 10-1: Product: syz [ 434.463392][ T5875] usb 10-1: Manufacturer: syz [ 434.487704][ T5875] usb 10-1: SerialNumber: syz [ 434.516514][ T5875] usb 10-1: config 0 descriptor?? [ 434.553024][ T5875] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 434.774372][ T5875] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 434.816426][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3873'. [ 434.851719][ T5875] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 435.018469][ T5877] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 435.085766][ T5877] usb 7-1: USB disconnect, device number 14 [ 435.290800][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 435.302547][ T5875] usb 10-1: USB disconnect, device number 16 [ 435.339102][ T5875] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 435.385729][ T5875] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 435.427224][ T5875] quatech2 10-1:0.51: device disconnected [ 436.087256][T15008] mkiss: ax0: crc mode is auto. [ 436.146700][T15012] overlayfs: lower data-only dirs require metacopy support. [ 437.020654][T15043] overlayfs: conflicting lowerdir path [ 438.709637][T15103] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3915'. [ 439.547731][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 439.748010][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 439.762757][ T10] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 439.797120][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.816758][ T10] usb 7-1: Product: syz [ 439.855822][ T10] usb 7-1: Manufacturer: syz [ 439.868022][ T10] usb 7-1: SerialNumber: syz [ 439.893311][ T10] usb 7-1: config 0 descriptor?? [ 439.937562][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 439.998145][T15144] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3932'. [ 440.108000][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.118011][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.580447][ T10] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 440.597775][ T5880] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 440.609049][ T10] sq905 7-1:0.0: probe with driver sq905 failed with error -71 [ 440.648039][ T10] usb 7-1: USB disconnect, device number 15 [ 440.794486][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 440.826781][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 440.856933][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 440.895586][ T5880] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 440.934990][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 440.948598][ T5880] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 440.959266][ T5880] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 440.970982][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.021450][ T5880] usb 6-1: config 0 descriptor?? [ 441.028175][T15156] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 441.573187][ T5880] usb 6-1: USB disconnect, device number 18 [ 441.581011][ T5824] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 442.275346][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 442.362136][T15215] netlink: 'syz.5.3956': attribute type 18 has an invalid length. [ 442.485725][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 442.508797][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 442.531546][ T9] usb 1-1: config 0 has no interface number 0 [ 442.568394][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 442.623708][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.652403][ T9] usb 1-1: Product: syz [ 442.668371][ T9] usb 1-1: Manufacturer: syz [ 442.673064][ T9] usb 1-1: SerialNumber: syz [ 442.711381][ T9] usb 1-1: config 0 descriptor?? [ 442.758140][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 442.994751][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 443.047465][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 443.358975][T15241] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3964'. [ 443.393904][T15241] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3964'. [ 443.409338][T15241] vlan1: entered allmulticast mode [ 443.434255][T15241] veth0_vlan: entered allmulticast mode [ 443.548735][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 443.558432][ T9] usb 1-1: USB disconnect, device number 15 [ 443.615124][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 443.683507][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 443.758570][ T9] quatech2 1-1:0.51: device disconnected [ 443.843911][T15252] netlink: 'syz.8.3967': attribute type 4 has an invalid length. [ 443.887801][T15252] netlink: 17 bytes leftover after parsing attributes in process `syz.8.3967'. [ 444.470083][T15268] mkiss: ax0: crc mode is auto. [ 445.154635][T15292] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3982'. [ 445.196064][T15292] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3982'. [ 445.246174][ T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 445.453258][T15300] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3987'. [ 445.454464][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3985'. [ 445.466030][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 445.497703][ T9] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 445.515203][T15299] netlink: 'syz.9.3985': attribute type 2 has an invalid length. [ 445.517008][ T9] usb 9-1: config 179 has no interface number 0 [ 445.523607][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3985'. [ 445.547990][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 445.560430][ T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 445.625468][ T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 445.649747][ T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 445.661994][ T9] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 445.683427][ T9] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 445.698760][ T9] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 445.710692][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.737745][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 445.748738][T15288] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 445.759674][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 445.788613][ T24] usb 6-1: config 4 has an invalid interface number: 255 but max is 0 [ 445.813168][ T24] usb 6-1: config 4 has no interface number 0 [ 445.843438][ T24] usb 6-1: config 4 interface 255 has no altsetting 0 [ 445.875137][ T24] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= e.87 [ 445.914698][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.960260][ T24] usb 6-1: Product: syz [ 445.964502][ T24] usb 6-1: Manufacturer: syz [ 446.005869][ T24] usb 6-1: SerialNumber: syz [ 446.278622][T15320] netlink: 'syz.6.3994': attribute type 63 has an invalid length. [ 446.334061][ T24] usb 6-1: USB disconnect, device number 19 [ 446.406459][ T5880] usb 9-1: USB disconnect, device number 17 [ 446.406484][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 446.420908][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 446.429962][ C0] ================================================================== [ 446.438070][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 446.445925][ C0] Read of size 4 at addr ffff88805d92685c by task syz-executor/11700 [ 446.454025][ C0] [ 446.456399][ C0] CPU: 0 UID: 0 PID: 11700 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 446.456431][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.456455][ C0] Call Trace: [ 446.456468][ C0] [ 446.456481][ C0] dump_stack_lvl+0x189/0x250 [ 446.456517][ C0] ? __virt_addr_valid+0x18c/0x540 [ 446.456547][ C0] ? rcu_is_watching+0x15/0xb0 [ 446.456582][ C0] ? __kasan_check_byte+0x12/0x40 [ 446.456619][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.456649][ C0] ? rcu_is_watching+0x15/0xb0 [ 446.456683][ C0] ? lock_release+0x4b/0x3e0 [ 446.456717][ C0] ? __virt_addr_valid+0x18c/0x540 [ 446.456746][ C0] ? __virt_addr_valid+0x469/0x540 [ 446.456777][ C0] print_report+0xb4/0x290 [ 446.456802][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 446.456827][ C0] kasan_report+0x118/0x150 [ 446.456863][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 446.456892][ C0] do_raw_spin_lock+0x23d/0x290 [ 446.456918][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 446.456947][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 446.456978][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 446.457005][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 446.457032][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 446.457061][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 446.457094][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 446.457119][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 446.457144][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 446.457173][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 446.457197][ C0] dummy_timer+0x862/0x4550 [ 446.457249][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 446.457273][ C0] ? __lock_acquire+0xaac/0xd20 [ 446.457328][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 446.457366][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 446.457400][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 446.457444][ C0] __hrtimer_run_queues+0x529/0xc60 [ 446.457489][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 446.457521][ C0] ? read_tsc+0x9/0x20 [ 446.457554][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 446.457593][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 446.457627][ C0] handle_softirqs+0x286/0x870 [ 446.457662][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 446.457700][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 446.457736][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 446.457765][ C0] __irq_exit_rcu+0xca/0x1f0 [ 446.457799][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 446.457838][ C0] irq_exit_rcu+0x9/0x30 [ 446.457870][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 446.457896][ C0] [ 446.457903][ C0] [ 446.457931][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 446.457956][ C0] RIP: 0010:finish_task_switch+0x26b/0x950 [ 446.457986][ C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 ef f0 bf 09 e8 5a 66 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 446.458006][ C0] RSP: 0018:ffffc9000bbded98 EFLAGS: 00000282 [ 446.458028][ C0] RAX: bdec20e592b91100 RBX: 0000000000000000 RCX: bdec20e592b91100 [ 446.458045][ C0] RDX: 0000000000000006 RSI: ffffffff8d73a84c RDI: ffffffff8bc12000 [ 446.458060][ C0] RBP: ffffc9000bbdedf0 R08: ffffffff8f7e0677 R09: 1ffffffff1efc0ce [ 446.458077][ C0] R10: dffffc0000000000 R11: fffffbfff1efc0cf R12: ffff88807a811e00 [ 446.458095][ C0] R13: dffffc0000000000 R14: ffff88801b2fda00 R15: ffff8880b883a558 [ 446.458124][ C0] ? finish_task_switch+0x266/0x950 [ 446.458158][ C0] __schedule+0x1697/0x4c70 [ 446.458183][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 446.458208][ C0] ? sched_clock+0x3f/0x60 [ 446.458240][ C0] ? sched_clock_cpu+0x74/0x430 [ 446.458280][ C0] ? preempt_schedule_common+0x83/0xd0 [ 446.458309][ C0] ? __pfx___schedule+0x10/0x10 [ 446.458344][ C0] ? __resched_curr+0x1f6/0x3d0 [ 446.458383][ C0] ? preempt_schedule+0xae/0xc0 [ 446.458410][ C0] preempt_schedule_common+0x83/0xd0 [ 446.458437][ C0] preempt_schedule+0xae/0xc0 [ 446.458462][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 446.458487][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 446.458517][ C0] preempt_schedule_thunk+0x16/0x30 [ 446.458545][ C0] _raw_spin_unlock_irqrestore+0xfd/0x110 [ 446.458570][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 446.458599][ C0] ? swake_up_one+0x78/0x140 [ 446.458624][ C0] rcu_preempt_deferred_qs_irqrestore+0x9d2/0xc40 [ 446.458654][ C0] ? register_lock_class+0x51/0x320 [ 446.458699][ C0] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 446.458728][ C0] ? do_raw_spin_lock+0x121/0x290 [ 446.458756][ C0] ? rcu_is_watching+0x15/0xb0 [ 446.458791][ C0] rcu_read_unlock_special+0x3fe/0x4c0 [ 446.458818][ C0] ? preempt_schedule_common+0x83/0xd0 [ 446.458845][ C0] ? preempt_schedule+0xae/0xc0 [ 446.458870][ C0] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 446.458900][ C0] ? copy_pmd_range+0x6706/0x7000 [ 446.458926][ C0] __rcu_read_unlock+0x84/0xe0 [ 446.458951][ C0] ? copy_pmd_range+0x6706/0x7000 [ 446.458973][ C0] copy_pmd_range+0x67ce/0x7000 [ 446.459006][ C0] ? __pfx_mas_destroy+0x10/0x10 [ 446.459037][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 446.459063][ C0] ? copy_page_range+0x2ed/0xd40 [ 446.459097][ C0] copy_page_range+0x95c/0xd40 [ 446.459133][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 446.459162][ C0] ? copy_mm+0x11d3/0x2100 [ 446.459186][ C0] ? up_write+0x1c4/0x420 [ 446.459206][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 446.459239][ C0] copy_mm+0x121c/0x2100 [ 446.459271][ C0] ? __pfx_copy_mm+0x10/0x10 [ 446.459301][ C0] ? __init_rwsem+0x122/0x160 [ 446.459329][ C0] ? copy_signal+0x50b/0x630 [ 446.459351][ C0] ? copy_process+0x978/0x3b80 [ 446.459370][ C0] copy_process+0x16d3/0x3b80 [ 446.459396][ C0] ? copy_process+0x978/0x3b80 [ 446.459426][ C0] ? __pfx_copy_process+0x10/0x10 [ 446.459455][ C0] kernel_clone+0x224/0x7f0 [ 446.459480][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 446.459508][ C0] ? count_memcg_event_mm+0x35b/0x3b0 [ 446.459540][ C0] ? count_memcg_event_mm+0x92/0x3b0 [ 446.459577][ C0] __x64_sys_clone+0x18b/0x1e0 [ 446.459603][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 446.459636][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 446.459676][ C0] ? do_syscall_64+0xba/0x210 [ 446.459707][ C0] do_syscall_64+0xf6/0x210 [ 446.459737][ C0] ? clear_bhb_loop+0x60/0xb0 [ 446.459763][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.459786][ C0] RIP: 0033:0x7f3bd6b851d3 [ 446.459806][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 446.459826][ C0] RSP: 002b:00007ffd93ac2bb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 446.459848][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3bd6b851d3 [ 446.459864][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 446.459879][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 446.459892][ C0] R10: 00005555712507d0 R11: 0000000000000246 R12: 0000000000000000 [ 446.459907][ C0] R13: 00000000000927c0 R14: 000000000006ced4 R15: 00007ffd93ac2d50 [ 446.459932][ C0] [ 446.459939][ C0] [ 447.155891][ C0] Allocated by task 9: [ 447.159973][ C0] kasan_save_track+0x3e/0x80 [ 447.164674][ C0] __kasan_kmalloc+0x93/0xb0 [ 447.169279][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 447.174664][ C0] xpad_probe+0x41c/0x1ed0 [ 447.179088][ C0] usb_probe_interface+0x641/0xbc0 [ 447.184201][ C0] really_probe+0x26a/0x9a0 [ 447.188722][ C0] __driver_probe_device+0x18c/0x2f0 [ 447.194018][ C0] driver_probe_device+0x4f/0x430 [ 447.199054][ C0] __device_attach_driver+0x2ce/0x530 [ 447.204461][ C0] bus_for_each_drv+0x251/0x2e0 [ 447.209323][ C0] __device_attach+0x2b8/0x400 [ 447.214102][ C0] bus_probe_device+0x185/0x260 [ 447.218980][ C0] device_add+0x7b6/0xb50 [ 447.223320][ C0] usb_set_configuration+0x1a87/0x20e0 [ 447.228794][ C0] usb_generic_driver_probe+0x8d/0x150 [ 447.234267][ C0] usb_probe_device+0x1c1/0x390 [ 447.239125][ C0] really_probe+0x26a/0x9a0 [ 447.243642][ C0] __driver_probe_device+0x18c/0x2f0 [ 447.248937][ C0] driver_probe_device+0x4f/0x430 [ 447.253974][ C0] __device_attach_driver+0x2ce/0x530 [ 447.259358][ C0] bus_for_each_drv+0x251/0x2e0 [ 447.264216][ C0] __device_attach+0x2b8/0x400 [ 447.268988][ C0] bus_probe_device+0x185/0x260 [ 447.273852][ C0] device_add+0x7b6/0xb50 [ 447.278188][ C0] usb_new_device+0xa39/0x16c0 [ 447.282960][ C0] hub_event+0x2941/0x4a00 [ 447.287388][ C0] process_scheduled_works+0xadb/0x17a0 [ 447.292951][ C0] worker_thread+0x8a0/0xda0 [ 447.297542][ C0] kthread+0x70e/0x8a0 [ 447.301624][ C0] ret_from_fork+0x4b/0x80 [ 447.306045][ C0] ret_from_fork_asm+0x1a/0x30 [ 447.310823][ C0] [ 447.313155][ C0] Freed by task 5880: [ 447.317136][ C0] kasan_save_track+0x3e/0x80 [ 447.321830][ C0] kasan_save_free_info+0x46/0x50 [ 447.326865][ C0] __kasan_slab_free+0x62/0x70 [ 447.331641][ C0] kfree+0x193/0x440 [ 447.335635][ C0] xpad_disconnect+0x350/0x480 [ 447.340411][ C0] usb_unbind_interface+0x26b/0x8f0 [ 447.345632][ C0] device_release_driver_internal+0x4d9/0x7c0 [ 447.351712][ C0] bus_remove_device+0x34d/0x410 [ 447.356654][ C0] device_del+0x511/0x8e0 [ 447.360990][ C0] usb_disable_device+0x3e9/0x8a0 [ 447.366027][ C0] usb_disconnect+0x330/0x910 [ 447.370711][ C0] hub_event+0x1cdb/0x4a00 [ 447.375140][ C0] process_scheduled_works+0xadb/0x17a0 [ 447.380706][ C0] worker_thread+0x8a0/0xda0 [ 447.385304][ C0] kthread+0x70e/0x8a0 [ 447.389381][ C0] ret_from_fork+0x4b/0x80 [ 447.393804][ C0] ret_from_fork_asm+0x1a/0x30 [ 447.398587][ C0] [ 447.400918][ C0] The buggy address belongs to the object at ffff88805d926800 [ 447.400918][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 447.415069][ C0] The buggy address is located 92 bytes inside of [ 447.415069][ C0] freed 1024-byte region [ffff88805d926800, ffff88805d926c00) [ 447.428886][ C0] [ 447.431216][ C0] The buggy address belongs to the physical page: [ 447.437635][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d920 [ 447.446402][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 447.454903][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 447.462453][ C0] page_type: f5(slab) [ 447.466444][ C0] raw: 00fff00000000040 ffff88801a041dc0 ffffea0001210e00 dead000000000002 [ 447.475031][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 447.483621][ C0] head: 00fff00000000040 ffff88801a041dc0 ffffea0001210e00 dead000000000002 [ 447.492295][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 447.500974][ C0] head: 00fff00000000003 ffffea0001764801 00000000ffffffff 00000000ffffffff [ 447.509652][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 447.518328][ C0] page dumped because: kasan: bad access detected [ 447.524750][ C0] page_owner tracks the page as allocated [ 447.530466][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5829, tgid 5829 (syz-executor), ts 92587740671, free_ts 29707208431 [ 447.549755][ C0] post_alloc_hook+0x1d8/0x230 [ 447.554527][ C0] get_page_from_freelist+0x21c7/0x22a0 [ 447.560084][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 447.565897][ C0] alloc_pages_mpol+0x232/0x4a0 [ 447.570761][ C0] allocate_slab+0x8a/0x3b0 [ 447.575269][ C0] ___slab_alloc+0xbfc/0x1480 [ 447.579949][ C0] __kmalloc_cache_noprof+0x296/0x3d0 [ 447.585335][ C0] batadv_hard_if_event+0x11b7/0x1a50 [ 447.590713][ C0] notifier_call_chain+0x1b6/0x3e0 [ 447.595829][ C0] register_netdevice+0x1608/0x1af0 [ 447.601040][ C0] veth_newlink+0x5cc/0xa50 [ 447.605555][ C0] rtnl_newlink_create+0x305/0xaf0 [ 447.610679][ C0] rtnl_newlink+0x16d6/0x1c70 [ 447.615362][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 447.620309][ C0] netlink_rcv_skb+0x219/0x490 [ 447.625094][ C0] netlink_unicast+0x75b/0x8d0 [ 447.629862][ C0] page last free pid 1 tgid 1 stack trace: [ 447.635669][ C0] __free_frozen_pages+0xb05/0xcd0 [ 447.640784][ C0] free_contig_range+0x159/0x440 [ 447.645750][ C0] destroy_args+0x86/0x460 [ 447.650177][ C0] debug_vm_pgtable+0x3cf/0x410 [ 447.655038][ C0] do_one_initcall+0x233/0x820 [ 447.659813][ C0] do_initcall_level+0x137/0x1f0 [ 447.664757][ C0] do_initcalls+0x69/0xd0 [ 447.669096][ C0] kernel_init_freeable+0x3d9/0x570 [ 447.674299][ C0] kernel_init+0x1d/0x1d0 [ 447.678645][ C0] ret_from_fork+0x4b/0x80 [ 447.683066][ C0] ret_from_fork_asm+0x1a/0x30 [ 447.687844][ C0] [ 447.690172][ C0] Memory state around the buggy address: [ 447.695800][ C0] ffff88805d926700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 447.703862][ C0] ffff88805d926780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 447.711925][ C0] >ffff88805d926800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 447.719989][ C0] ^ [ 447.726922][ C0] ffff88805d926880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 447.735015][ C0] ffff88805d926900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 447.743084][ C0] ================================================================== [ 447.751166][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 447.758364][ C0] CPU: 0 UID: 0 PID: 11700 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 447.770604][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 447.780662][ C0] Call Trace: [ 447.783948][ C0] [ 447.786800][ C0] dump_stack_lvl+0x99/0x250 [ 447.791412][ C0] ? __asan_memcpy+0x40/0x70 [ 447.796036][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.801288][ C0] ? __pfx__printk+0x10/0x10 [ 447.805911][ C0] panic+0x2db/0x790 [ 447.809825][ C0] ? __pfx_panic+0x10/0x10 [ 447.814255][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 447.820163][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 447.826503][ C0] ? print_memory_metadata+0x314/0x400 [ 447.831978][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 447.837010][ C0] check_panic_on_warn+0x89/0xb0 [ 447.841962][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 447.846991][ C0] end_report+0x78/0x160 [ 447.851249][ C0] kasan_report+0x129/0x150 [ 447.855771][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 447.860808][ C0] do_raw_spin_lock+0x23d/0x290 [ 447.865672][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 447.871056][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.876439][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 447.881648][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 447.887552][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 447.892517][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 447.897729][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 447.903108][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 447.908958][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 447.914859][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 447.920241][ C0] dummy_timer+0x862/0x4550 [ 447.924799][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.930199][ C0] ? __lock_acquire+0xaac/0xd20 [ 447.935084][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 447.940045][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 447.945002][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 447.949954][ C0] __hrtimer_run_queues+0x529/0xc60 [ 447.955177][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 447.960909][ C0] ? read_tsc+0x9/0x20 [ 447.964997][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 447.970823][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 447.975952][ C0] handle_softirqs+0x286/0x870 [ 447.980732][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 447.985516][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 447.990824][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 447.996037][ C0] __irq_exit_rcu+0xca/0x1f0 [ 448.000654][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 448.005873][ C0] irq_exit_rcu+0x9/0x30 [ 448.010130][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 448.015774][ C0] [ 448.018712][ C0] [ 448.021646][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 448.027642][ C0] RIP: 0010:finish_task_switch+0x26b/0x950 [ 448.033466][ C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 ef f0 bf 09 e8 5a 66 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 448.053104][ C0] RSP: 0018:ffffc9000bbded98 EFLAGS: 00000282 [ 448.059196][ C0] RAX: bdec20e592b91100 RBX: 0000000000000000 RCX: bdec20e592b91100 [ 448.067188][ C0] RDX: 0000000000000006 RSI: ffffffff8d73a84c RDI: ffffffff8bc12000 [ 448.075166][ C0] RBP: ffffc9000bbdedf0 R08: ffffffff8f7e0677 R09: 1ffffffff1efc0ce [ 448.083143][ C0] R10: dffffc0000000000 R11: fffffbfff1efc0cf R12: ffff88807a811e00 [ 448.091122][ C0] R13: dffffc0000000000 R14: ffff88801b2fda00 R15: ffff8880b883a558 [ 448.099112][ C0] ? finish_task_switch+0x266/0x950 [ 448.104330][ C0] __schedule+0x1697/0x4c70 [ 448.108842][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 448.114138][ C0] ? sched_clock+0x3f/0x60 [ 448.118569][ C0] ? sched_clock_cpu+0x74/0x430 [ 448.123436][ C0] ? preempt_schedule_common+0x83/0xd0 [ 448.128905][ C0] ? __pfx___schedule+0x10/0x10 [ 448.133772][ C0] ? __resched_curr+0x1f6/0x3d0 [ 448.138649][ C0] ? preempt_schedule+0xae/0xc0 [ 448.143513][ C0] preempt_schedule_common+0x83/0xd0 [ 448.148811][ C0] preempt_schedule+0xae/0xc0 [ 448.153499][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 448.158877][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 448.164784][ C0] preempt_schedule_thunk+0x16/0x30 [ 448.169993][ C0] _raw_spin_unlock_irqrestore+0xfd/0x110 [ 448.175722][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 448.182060][ C0] ? swake_up_one+0x78/0x140 [ 448.186661][ C0] rcu_preempt_deferred_qs_irqrestore+0x9d2/0xc40 [ 448.193083][ C0] ? register_lock_class+0x51/0x320 [ 448.198302][ C0] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 448.205251][ C0] ? do_raw_spin_lock+0x121/0x290 [ 448.210284][ C0] ? rcu_is_watching+0x15/0xb0 [ 448.215066][ C0] rcu_read_unlock_special+0x3fe/0x4c0 [ 448.220620][ C0] ? preempt_schedule_common+0x83/0xd0 [ 448.226084][ C0] ? preempt_schedule+0xae/0xc0 [ 448.230940][ C0] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 448.236932][ C0] ? copy_pmd_range+0x6706/0x7000 [ 448.241974][ C0] __rcu_read_unlock+0x84/0xe0 [ 448.246753][ C0] ? copy_pmd_range+0x6706/0x7000 [ 448.251788][ C0] copy_pmd_range+0x67ce/0x7000 [ 448.256653][ C0] ? __pfx_mas_destroy+0x10/0x10 [ 448.261608][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 448.266818][ C0] ? copy_page_range+0x2ed/0xd40 [ 448.271774][ C0] copy_page_range+0x95c/0xd40 [ 448.276552][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 448.281851][ C0] ? copy_mm+0x11d3/0x2100 [ 448.286273][ C0] ? up_write+0x1c4/0x420 [ 448.290608][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 448.297383][ C0] copy_mm+0x121c/0x2100 [ 448.301639][ C0] ? __pfx_copy_mm+0x10/0x10 [ 448.306243][ C0] ? __init_rwsem+0x122/0x160 [ 448.310929][ C0] ? copy_signal+0x50b/0x630 [ 448.315523][ C0] ? copy_process+0x978/0x3b80 [ 448.320293][ C0] copy_process+0x16d3/0x3b80 [ 448.324976][ C0] ? copy_process+0x978/0x3b80 [ 448.329754][ C0] ? __pfx_copy_process+0x10/0x10 [ 448.334785][ C0] kernel_clone+0x224/0x7f0 [ 448.339305][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 448.344343][ C0] ? count_memcg_event_mm+0x35b/0x3b0 [ 448.349734][ C0] ? count_memcg_event_mm+0x92/0x3b0 [ 448.355034][ C0] __x64_sys_clone+0x18b/0x1e0 [ 448.359808][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 448.365108][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 448.370411][ C0] ? do_syscall_64+0xba/0x210 [ 448.375105][ C0] do_syscall_64+0xf6/0x210 [ 448.379619][ C0] ? clear_bhb_loop+0x60/0xb0 [ 448.384303][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.390206][ C0] RIP: 0033:0x7f3bd6b851d3 [ 448.394638][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 448.414250][ C0] RSP: 002b:00007ffd93ac2bb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 448.422678][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3bd6b851d3 [ 448.430657][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 448.438639][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 448.446627][ C0] R10: 00005555712507d0 R11: 0000000000000246 R12: 0000000000000000 [ 448.454643][ C0] R13: 00000000000927c0 R14: 000000000006ced4 R15: 00007ffd93ac2d50 [ 448.462631][ C0] [ 448.466025][ C0] Kernel Offset: disabled [ 448.470351][ C0] Rebooting in 86400 seconds..