last executing test programs: 16.571274853s ago: executing program 4 (id=2200): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000030000180080006000100000014000400fc020000000000000000000000000000060001000a000000060005"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 16.512471484s ago: executing program 4 (id=2201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 14.941609349s ago: executing program 1 (id=2205): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x9, 0x6, 0xfffe}, 0x3a, [0x8800, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x7, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x9, 0x7, 0x5, 0x3e, 0x8c, 0x2, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x1, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6ca, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x3, 0x4, 0xb, 0x4, 0x9, 0x4, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x7fff, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x40a, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x3e14, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x1, 0x3, 0x20000008, 0x4, 0xfffffffb, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x3, 0x5, 0x3, 0x2006, 0x2, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x800000b, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x5b, 0x5, 0x83, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x2, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x30, r4, 0x401, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x6008004) 14.830073727s ago: executing program 4 (id=2206): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x92, 0xe, 0x2, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1, 0x100, 0x9}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x1}}]}, {0x0, [0x30]}}, &(0x7f0000000240)=""/30, 0x33, 0x1e, 0x1, 0xfffffa12, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9, '\x00', r2, r3, 0x4, 0x2, 0x5}, 0x50) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000003300000000000005000000000000"], 0x0, 0x26}, 0x20) epoll_pwait(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$MON_IOCX_GET(r5, 0x400c9206, &(0x7f0000000140)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 14.755857358s ago: executing program 3 (id=2207): signalfd(0xffffffffffffffff, &(0x7f00000006c0)={[0xffffffffffffff37]}, 0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) getgid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x10) io_submit(0x0, 0x0, &(0x7f0000000040)) pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13.602173037s ago: executing program 4 (id=2208): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) gettid() syz_emit_ethernet(0xda, &(0x7f00000007c0)=ANY=[], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0xa, 0x1, 0x186) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) prctl$PR_SET_PTRACER(0x59616d61, r0) 11.704832951s ago: executing program 3 (id=2210): socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xec, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x39, 0x0, 0x0, 0x4}]}, 0xffffffffffffff07) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9.941185758s ago: executing program 2 (id=2214): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000001aa0b00009004"], 0x48) unshare(0x8040480) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) unshare(0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0x118, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) r1 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.614444196s ago: executing program 1 (id=2216): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) ptrace$poke(0x4, r0, 0x0, 0x3) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x18, 0x0}}], 0x40000000000016d, 0x1000) 8.141405391s ago: executing program 0 (id=2217): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x9, 0x6, 0xfffe}, 0x3a, [0x8800, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x7, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x9, 0x7, 0x5, 0x3e, 0x8c, 0x2, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x1, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6ca, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x3, 0x4, 0xb, 0x4, 0x9, 0x4, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x7fff, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x40a, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x3e14, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x1, 0x3, 0x20000008, 0x4, 0xfffffffb, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x3, 0x5, 0x3, 0x2006, 0x2, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x800000b, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x5b, 0x5, 0x83, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x2, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, 0x0, 0x6008004) 7.680703458s ago: executing program 1 (id=2218): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) memfd_secret(0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x50, r4, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}}, 0x40000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) 7.08482632s ago: executing program 3 (id=2219): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x7}, 0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 6.143967166s ago: executing program 1 (id=2220): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x50, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}}, 0x40000) 5.936162754s ago: executing program 2 (id=2221): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x92, 0xe, 0x2, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1, 0x100, 0x9}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000000240)=""/30, 0x0, 0x1e, 0x1, 0xfffffa12, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9, '\x00', r2, r3, 0x4, 0x2, 0x5}, 0x50) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r5 = epoll_create1(0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) read$char_usb(r6, &(0x7f0000000100)=""/162, 0xa2) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r7, 0x20, 0xfffffffffffffffe}, 0x8f) pread64(r6, &(0x7f00000002c0)=""/190, 0xbe, 0x200) epoll_pwait(r5, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$MON_IOCX_GET(r8, 0x400c9206, &(0x7f0000000140)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x72, 0x91, 0x58, 0x8, 0x1163, 0x200, 0xb892, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x1, 0x20, 0xe2, 0xc7, 0x0, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x9, 0x80, 0x9b}}]}}]}}]}}, 0x0) 5.814156738s ago: executing program 1 (id=2222): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000007000000300001800800060001000000140004"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5e84}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 4.990587144s ago: executing program 0 (id=2223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000030000180080006000100000014000400fc020000000000000000000000000000060001"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5e84}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 4.732233615s ago: executing program 3 (id=2224): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000030000180080006000100000014000400fc020000000000000000000000000000060001000a000000060005"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.284623872s ago: executing program 0 (id=2225): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000000700000030000180080006000100000014000400fc020000000000000000000000000000060001000a00"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.283661003s ago: executing program 2 (id=2226): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000030000180080006000100000014000400fc020000000000000000000000000000060001000a000000060005"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 2.08757913s ago: executing program 3 (id=2227): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0xe503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r6 = syz_io_uring_setup(0x12e, 0x0, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r6, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}}) syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001140)={&(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x400, 0x400004, 0xf, 0x7, 0x7, 0x4, 0x0, 0x0, 0x40, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) get_robust_list(r1, &(0x7f0000000680)=&(0x7f0000000640)={&(0x7f00000005c0)={&(0x7f0000000500)}, 0x0, &(0x7f0000000600)}, &(0x7f00000006c0)=0x18) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x1c, r7, 0x221, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 2.087376428s ago: executing program 2 (id=2228): getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x1) 1.963753477s ago: executing program 0 (id=2229): socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xec, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x39, 0x0, 0x0, 0x4}]}, 0xffffffffffffff07) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.724904026s ago: executing program 4 (id=2230): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x7, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES64], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0xc, 0x2, 0x0, @multicast}, 0x10) 1.621757239s ago: executing program 0 (id=2231): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000001aa0b00009004"], 0x48) unshare(0x8040480) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) unshare(0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0x118, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) r1 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) ptrace$poke(0x4, r0, 0x0, 0x3) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmmsg$inet6(r3, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x18, 0x0}}], 0x40000000000016d, 0x1000) 748.980145ms ago: executing program 2 (id=2233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 631.23684ms ago: executing program 2 (id=2234): r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00030900000002"], 0x0, 0x0, 0x0}, 0x0) 477.526417ms ago: executing program 1 (id=2235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000cd40009800800014000000006c80002800c0001800800014000000003240001800800014000000007"], 0x140}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0xfff0) 0s ago: executing program 4 (id=2236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000030000180080006000100000014000400fc020000000000000000000000000000060001"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5e84}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 0 descriptor?? [ 213.529279][ T5803] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 213.646254][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.363'. [ 213.742343][ T5809] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 213.742383][ T5809] CPU: 0 UID: 0 PID: 5809 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 213.742401][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 213.742409][ T5809] Workqueue: hci3 hci_rx_work [ 213.742446][ T5809] Call Trace: [ 213.742451][ T5809] [ 213.742460][ T5809] dump_stack_lvl+0xe8/0x150 [ 213.742479][ T5809] sysfs_create_dir_ns+0x271/0x2a0 [ 213.742496][ T5809] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 213.742510][ T5809] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 213.742528][ T5809] ? rt_spin_unlock+0x160/0x200 [ 213.742542][ T5809] kobject_add_internal+0x631/0xd10 [ 213.742563][ T5809] kobject_add+0x163/0x240 [ 213.742582][ T5809] ? __pfx_kobject_add+0x10/0x10 [ 213.742602][ T5809] ? get_device_parent+0x370/0x3a0 [ 213.742620][ T5809] device_add+0x408/0xb80 [ 213.742634][ T5809] hci_conn_add_sysfs+0xd5/0x210 [ 213.742651][ T5809] le_conn_complete_evt+0xf1d/0x1430 [ 213.742669][ T5809] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 213.742682][ T5809] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 213.742697][ T5809] ? lockdep_hardirqs_on+0x7a/0x110 [ 213.742714][ T5809] ? skb_pull_data+0xfb/0x200 [ 213.742730][ T5809] hci_le_conn_complete_evt+0x187/0x470 [ 213.742751][ T5809] hci_event_packet+0x7af/0x12c0 [ 213.742768][ T5809] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 213.742785][ T5809] ? __pfx_hci_event_packet+0x10/0x10 [ 213.742799][ T5809] ? rt_spin_unlock+0x14f/0x200 [ 213.742815][ T5809] ? hci_send_to_monitor+0xe2/0x590 [ 213.742829][ T5809] hci_rx_work+0x3ee/0x1030 [ 213.742848][ T5809] ? process_scheduled_works+0xa0f/0x17a0 [ 213.742862][ T5809] process_scheduled_works+0xaec/0x17a0 [ 213.742889][ T5809] ? __pfx_process_scheduled_works+0x10/0x10 [ 213.742901][ T5809] ? do_raw_spin_lock+0x12b/0x2f0 [ 213.742917][ T5809] ? assign_work+0x3d3/0x440 [ 213.742932][ T5809] worker_thread+0x89f/0xd90 [ 213.742958][ T5809] kthread+0x726/0x8b0 [ 213.742975][ T5809] ? __pfx_worker_thread+0x10/0x10 [ 213.742988][ T5809] ? __pfx_kthread+0x10/0x10 [ 213.743001][ T5809] ? rt_spin_unlock+0x14f/0x200 [ 213.743015][ T5809] ? rt_spin_unlock+0x160/0x200 [ 213.743026][ T5809] ? __pfx_kthread+0x10/0x10 [ 213.743041][ T5809] ret_from_fork+0x51b/0xa40 [ 213.743056][ T5809] ? __pfx_ret_from_fork+0x10/0x10 [ 213.743067][ T5809] ? __switch_to+0xc82/0x1410 [ 213.743080][ T5809] ? __pfx_kthread+0x10/0x10 [ 213.743096][ T5809] ret_from_fork_asm+0x1a/0x30 [ 213.743120][ T5809] [ 213.743139][ T5809] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 213.743162][ T5809] Bluetooth: hci3: failed to register connection device [ 216.091077][ T7029] fuse: Bad value for 'rootmode' [ 216.145309][ T5857] usb 5-1: USB disconnect, device number 7 [ 218.292795][ T7042] delete_channel: no stack [ 219.116011][ T7073] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 221.312837][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 221.456679][ T7082] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 221.458394][ T7082] team0: Device ipvlan1 failed to register rx_handler [ 228.229213][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.417'. [ 228.408957][ T7158] QAT: failed to copy from user cfg_data. [ 230.895527][ T7174] fuse: Bad value for 'rootmode' [ 231.607196][ T7187] QAT: failed to copy from user cfg_data. [ 234.267853][ T7206] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.437'. [ 234.692126][ T7219] QAT: failed to copy from user cfg_data. [ 235.168416][ T7228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.429'. [ 237.775613][ T7259] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.450'. [ 241.449374][ T7270] fuse: Bad value for 'rootmode' [ 242.528895][ T7289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.466'. [ 244.350365][ T7287] fuse: Bad value for 'rootmode' [ 244.735326][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.897384][ T9] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 244.897413][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.897432][ T9] usb 2-1: config 0 has no interface number 0 [ 244.902433][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 244.902463][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.902483][ T9] usb 2-1: Product: syz [ 244.902497][ T9] usb 2-1: Manufacturer: syz [ 244.902512][ T9] usb 2-1: SerialNumber: syz [ 244.986611][ T9] usb 2-1: config 0 descriptor?? [ 245.028386][ T9] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 245.429359][ T932] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 245.646122][ T932] usb 1-1: Using ep0 maxpacket: 32 [ 245.872232][ T932] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 245.872263][ T932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.925732][ T7328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.478'. [ 245.928225][ T932] usb 1-1: config 0 descriptor?? [ 246.368266][ T932] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 246.390452][ T932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.391499][ T932] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 246.391555][ T932] usb 1-1: media controller created [ 246.446740][ T932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.562072][ T5803] usb 2-1: USB disconnect, device number 8 [ 246.772600][ T7320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.476'. [ 246.917535][ T7336] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 247.986038][ T932] stb0899_attach: Driver disabled by Kconfig [ 247.986091][ T932] az6027: no front-end attached [ 247.986091][ T932] [ 248.004679][ T932] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 248.008202][ T932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 248.077898][ T932] dvb-usb: schedule remote query interval to 400 msecs. [ 248.077920][ T932] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 249.591886][ T7363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.490'. [ 249.752984][ T932] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 249.915264][ T932] usb 2-1: Using ep0 maxpacket: 8 [ 249.917764][ T932] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 249.917786][ T932] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 249.917803][ T932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.958901][ T932] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.958931][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.958950][ T932] usb 2-1: Product: syz [ 249.958965][ T932] usb 2-1: Manufacturer: syz [ 249.958979][ T932] usb 2-1: SerialNumber: syz [ 250.029280][ T5803] usb 1-1: USB disconnect, device number 8 [ 250.037676][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.492'. [ 250.545445][ T932] usb 2-1: 0:2 : does not exist [ 250.683642][ T5803] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 250.779563][ T932] usb 2-1: USB disconnect, device number 9 [ 250.869100][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.396478][ T5803] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 251.687869][ T5803] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 251.687955][ T5803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.688025][ T5803] usb 1-1: config 0 has no interface number 0 [ 251.989998][ T5803] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 251.990018][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.990029][ T5803] usb 1-1: Product: syz [ 251.990036][ T5803] usb 1-1: Manufacturer: syz [ 251.990044][ T5803] usb 1-1: SerialNumber: syz [ 252.051977][ T5803] usb 1-1: config 0 descriptor?? [ 252.054801][ T5803] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 252.297905][ T7385] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.499'. [ 252.361941][ T5886] usb 1-1: USB disconnect, device number 9 [ 254.338069][ T7393] netlink: 7 bytes leftover after parsing attributes in process `syz.3.493'. [ 255.165200][ T1808] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 255.335653][ T1808] usb 5-1: Using ep0 maxpacket: 32 [ 255.351602][ T1808] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 255.351632][ T1808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.381216][ T1808] usb 5-1: config 0 descriptor?? [ 255.510313][ T807] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 255.720443][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.721904][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.275200][ T807] usb 2-1: Using ep0 maxpacket: 8 [ 256.277244][ T807] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 256.277266][ T807] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 256.277282][ T807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.284203][ T807] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.284230][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.284250][ T807] usb 2-1: Product: syz [ 256.284264][ T807] usb 2-1: Manufacturer: syz [ 256.284278][ T807] usb 2-1: SerialNumber: syz [ 256.391857][ T1808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 256.404930][ T1808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.415352][ T1808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 256.415408][ T1808] usb 5-1: media controller created [ 256.457975][ T1808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.608994][ T807] usb 2-1: 0:2 : does not exist [ 256.680651][ T807] usb 2-1: USB disconnect, device number 10 [ 256.732453][ T7427] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.512'. [ 256.782002][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.820386][ T7408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.504'. [ 258.497544][ T1808] az6027: usb out operation failed. (-71) [ 258.497562][ T1808] stb0899_attach: Driver disabled by Kconfig [ 258.497572][ T1808] az6027: no front-end attached [ 258.497572][ T1808] [ 258.499482][ T1808] az6027: usb out operation failed. (-71) [ 258.499499][ T1808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 258.502841][ T1808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 258.970041][ T1808] dvb-usb: schedule remote query interval to 400 msecs. [ 258.970056][ T1808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 258.992248][ T1808] usb 5-1: USB disconnect, device number 8 [ 260.202398][ T7444] ceph: No mds server is up or the cluster is laggy [ 260.920452][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 262.236670][ T1808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 262.256086][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 262.550194][ T31] libceph: connect (1)[c::]:6789 error -101 [ 262.550352][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 266.065237][ T1808] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 266.215257][ T1808] usb 2-1: Using ep0 maxpacket: 8 [ 266.217762][ T1808] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 266.217785][ T1808] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 266.217804][ T1808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.221681][ T1808] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.221714][ T1808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.221736][ T1808] usb 2-1: Product: syz [ 266.221750][ T1808] usb 2-1: Manufacturer: syz [ 266.221764][ T1808] usb 2-1: SerialNumber: syz [ 266.566098][ T1808] usb 2-1: 0:2 : does not exist [ 267.626086][ T7489] fuse: Bad value for 'fd' [ 267.683907][ T1808] usb 2-1: USB disconnect, device number 11 [ 271.697074][ T5803] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 272.475261][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 272.476891][ T5803] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 272.476907][ T5803] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 272.476918][ T5803] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.478712][ T5803] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.478728][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.478739][ T5803] usb 2-1: Product: syz [ 272.478746][ T5803] usb 2-1: Manufacturer: syz [ 272.478755][ T5803] usb 2-1: SerialNumber: syz [ 272.779140][ T5803] usb 2-1: 0:2 : does not exist [ 273.585191][ T5803] usb 2-1: USB disconnect, device number 12 [ 273.631941][ T7550] delete_channel: no stack [ 273.635266][ T5857] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 273.856437][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 273.864147][ T5857] usb 3-1: config 0 has an invalid interface number: 190 but max is 0 [ 273.864166][ T5857] usb 3-1: config 0 has no interface number 0 [ 273.890685][ T5857] usb 3-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b0.11 [ 273.890705][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.890716][ T5857] usb 3-1: Product: syz [ 273.890724][ T5857] usb 3-1: Manufacturer: syz [ 273.890732][ T5857] usb 3-1: SerialNumber: syz [ 273.904142][ T5857] usb 3-1: config 0 descriptor?? [ 273.931653][ T5857] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 273.931702][ T5857] dvb-usb: bulk message failed: -22 (2/0) [ 273.931718][ T5857] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 273.932566][ T5857] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 273.932618][ T5857] usb 3-1: media controller created [ 273.934827][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.971533][ T5857] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 273.971744][ T5857] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 274.077855][ T1808] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 274.101957][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.552'. [ 274.227763][ T1808] usb 5-1: config 2 has an invalid interface number: 169 but max is 0 [ 274.227793][ T1808] usb 5-1: config 2 has no interface number 0 [ 274.228084][ T1808] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 274.228111][ T1808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.278427][ T1808] cypress_m8 5-1:2.169: DeLorme Earthmate USB converter detected [ 274.284048][ T1808] earthmate ttyUSB0: required endpoint is missing [ 274.285220][ T5857] rc_core: IR keymap rc-dtt200u not found [ 274.285237][ T5857] Registered IR keymap rc-empty [ 274.309578][ T5857] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 274.328874][ T5857] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input15 [ 274.360242][ T5857] dvb-usb: schedule remote query interval to 300 msecs. [ 274.360270][ T5857] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 274.387598][ T5857] usb 3-1: USB disconnect, device number 7 [ 274.930459][ T5857] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 276.646106][ T10] usb 5-1: USB disconnect, device number 9 [ 276.671535][ T10] cypress_m8 5-1:2.169: device disconnected [ 281.025727][ T1808] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 281.615304][ T1808] usb 5-1: Using ep0 maxpacket: 32 [ 281.755534][ T1808] usb 5-1: config 0 has an invalid interface number: 190 but max is 0 [ 281.755565][ T1808] usb 5-1: config 0 has no interface number 0 [ 281.761316][ T1808] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b0.11 [ 281.761337][ T1808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.761347][ T1808] usb 5-1: Product: syz [ 281.761355][ T1808] usb 5-1: Manufacturer: syz [ 281.761363][ T1808] usb 5-1: SerialNumber: syz [ 282.250335][ T1808] usb 5-1: config 0 descriptor?? [ 282.620891][ T1808] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 282.620946][ T1808] dvb-usb: bulk message failed: -22 (2/0) [ 282.620966][ T1808] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 282.649443][ T1808] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 282.649490][ T1808] usb 5-1: media controller created [ 282.650607][ T1808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.728091][ T1808] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 282.728325][ T1808] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 282.855702][ T1808] rc_core: IR keymap rc-dtt200u not found [ 282.855721][ T1808] Registered IR keymap rc-empty [ 282.857969][ T1808] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 282.862364][ T1808] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input16 [ 282.904520][ T1808] dvb-usb: schedule remote query interval to 300 msecs. [ 282.904545][ T1808] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 283.290391][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 283.290435][ T5886] dvb-usb: error -22 while querying for an remote control event. [ 283.292236][ T1808] usb 5-1: USB disconnect, device number 10 [ 283.470541][ T1808] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 286.435193][ T7645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 289.219478][ T5803] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 289.372602][ T5803] usb 4-1: Using ep0 maxpacket: 32 [ 289.382886][ T5803] usb 4-1: config 0 has an invalid interface number: 190 but max is 0 [ 289.382915][ T5803] usb 4-1: config 0 has no interface number 0 [ 289.402452][ T5803] usb 4-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b0.11 [ 289.402484][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.402505][ T5803] usb 4-1: Product: syz [ 289.402520][ T5803] usb 4-1: Manufacturer: syz [ 289.402535][ T5803] usb 4-1: SerialNumber: syz [ 289.418003][ T5803] usb 4-1: config 0 descriptor?? [ 289.441202][ T5803] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 289.441253][ T5803] dvb-usb: bulk message failed: -22 (2/0) [ 289.441270][ T5803] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 289.473243][ T5803] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 289.473304][ T5803] usb 4-1: media controller created [ 289.485681][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.492197][ T5803] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 289.492398][ T5803] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 289.625283][ T5803] rc_core: IR keymap rc-dtt200u not found [ 289.625298][ T5803] Registered IR keymap rc-empty [ 289.626315][ T5803] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 289.632353][ T5803] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input17 [ 289.719989][ T5803] dvb-usb: schedule remote query interval to 300 msecs. [ 289.720020][ T5803] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 289.735942][ T5803] usb 4-1: USB disconnect, device number 5 [ 289.895266][ T5857] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 289.989308][ T5803] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 290.076969][ T5857] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 290.076998][ T5857] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.077018][ T5857] usb 1-1: config 0 has no interface number 0 [ 290.080221][ T5857] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 290.080251][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.080273][ T5857] usb 1-1: Product: syz [ 290.080288][ T5857] usb 1-1: Manufacturer: syz [ 290.080302][ T5857] usb 1-1: SerialNumber: syz [ 290.092489][ T5857] usb 1-1: config 0 descriptor?? [ 290.119294][ T5857] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 290.299172][ T1808] usb 1-1: USB disconnect, device number 10 [ 290.486645][ T7674] binder: 7673:7674 ioctl c0306201 0 returned -14 [ 291.745927][ T7687] delete_channel: no stack [ 293.014470][ T7696] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.599'. [ 293.496085][ T7707] binder: 7706:7707 ioctl c0306201 0 returned -14 [ 294.165563][ T7692] fuse: Bad value for 'fd' [ 298.612271][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.610'. [ 299.601707][ T7733] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.611'. [ 299.753364][ T7737] binder: 7736:7737 ioctl c0306201 0 returned -14 [ 299.838780][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.614'. [ 304.130013][ T7774] netlink: 32 bytes leftover after parsing attributes in process `syz.1.622'. [ 305.126095][ T7778] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.623'. [ 308.895252][ T932] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 309.775306][ T932] usb 4-1: Using ep0 maxpacket: 8 [ 309.777507][ T932] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 309.777532][ T932] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 309.777552][ T932] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.780205][ T932] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.780233][ T932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.780253][ T932] usb 4-1: Product: syz [ 309.780269][ T932] usb 4-1: Manufacturer: syz [ 309.780283][ T932] usb 4-1: SerialNumber: syz [ 310.189184][ T932] usb 4-1: 0:2 : does not exist [ 310.247635][ T31] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 310.276210][ T932] usb 4-1: USB disconnect, device number 6 [ 310.343035][ T7824] udevd[7824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.428382][ T31] usb 1-1: config 2 has an invalid interface number: 169 but max is 0 [ 310.428412][ T31] usb 1-1: config 2 has no interface number 0 [ 310.428475][ T31] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 310.428499][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.521670][ T31] cypress_m8 1-1:2.169: DeLorme Earthmate USB converter detected [ 310.565469][ T31] earthmate ttyUSB0: required endpoint is missing [ 311.192346][ T7841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.364151][ T31] usb 1-1: USB disconnect, device number 11 [ 312.367588][ T31] cypress_m8 1-1:2.169: device disconnected [ 313.040337][ T7869] netlink: 60 bytes leftover after parsing attributes in process `syz.2.652'. [ 315.575230][ T1808] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 315.745211][ T1808] usb 4-1: Using ep0 maxpacket: 8 [ 315.746611][ T1808] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 315.748518][ T1808] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 315.748533][ T1808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.748544][ T1808] usb 4-1: Product: syz [ 315.748552][ T1808] usb 4-1: Manufacturer: syz [ 315.748560][ T1808] usb 4-1: SerialNumber: syz [ 315.751437][ T1808] usb 4-1: config 0 descriptor?? [ 315.757696][ T1808] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 317.061630][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.061699][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.265251][ T5803] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 317.285354][ T5886] usb 4-1: USB disconnect, device number 7 [ 317.439958][ T5803] usb 3-1: config 2 has an invalid interface number: 169 but max is 0 [ 317.439986][ T5803] usb 3-1: config 2 has no interface number 0 [ 317.440053][ T5803] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 317.440076][ T5803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.549482][ T5803] cypress_m8 3-1:2.169: DeLorme Earthmate USB converter detected [ 317.551162][ T5803] earthmate ttyUSB0: required endpoint is missing [ 319.055497][ T44] usb 3-1: USB disconnect, device number 8 [ 319.076488][ T44] cypress_m8 3-1:2.169: device disconnected [ 323.741989][ T7939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.677'. [ 325.915236][ T1808] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 326.081512][ T1808] usb 4-1: Using ep0 maxpacket: 32 [ 326.091361][ T1808] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 326.091391][ T1808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.154172][ T1808] usb 4-1: config 0 descriptor?? [ 328.972177][ T1808] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 329.014381][ T1808] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 329.014411][ T1808] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 329.575543][ T932] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 330.920881][ T932] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 330.920909][ T932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.920929][ T932] usb 2-1: config 0 has no interface number 0 [ 330.955303][ T932] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 330.955333][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.955351][ T932] usb 2-1: Product: syz [ 330.955365][ T932] usb 2-1: Manufacturer: syz [ 330.955379][ T932] usb 2-1: SerialNumber: syz [ 331.006218][ T932] usb 2-1: config 0 descriptor?? [ 331.020707][ T932] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 331.949169][ T932] usb 2-1: USB disconnect, device number 13 [ 332.823633][ T7989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 335.444986][ T7998] delete_channel: no stack [ 337.129224][ T8014] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.699'. [ 337.225541][ T8022] fuse: Bad value for 'user_id' [ 337.225560][ T8022] fuse: Bad value for 'user_id' [ 339.902000][ T932] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 340.091687][ T932] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 340.091717][ T932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.091736][ T932] usb 1-1: config 0 has no interface number 0 [ 340.094697][ T932] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 340.094727][ T932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.094747][ T932] usb 1-1: Product: syz [ 340.094762][ T932] usb 1-1: Manufacturer: syz [ 340.094777][ T932] usb 1-1: SerialNumber: syz [ 340.100691][ T932] usb 1-1: config 0 descriptor?? [ 340.131331][ T932] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 340.675526][ T10] usb 1-1: USB disconnect, device number 12 [ 343.106039][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.718'. [ 348.135871][ T44] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 350.165350][ T8106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.732'. [ 350.567563][ T44] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 351.326689][ T44] usb 1-1: device descriptor read/64, error -71 [ 351.565188][ T44] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 351.695793][ T44] usb 1-1: device descriptor read/64, error -71 [ 351.818457][ T44] usb usb1-port1: attempt power cycle [ 352.298536][ T8121] netlink: 7 bytes leftover after parsing attributes in process `syz.2.738'. [ 352.318080][ T44] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 352.336284][ T44] usb 1-1: device descriptor read/8, error -71 [ 355.993993][ T8171] fuse: Bad value for 'fd' [ 359.743631][ T932] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 360.275240][ T932] usb 2-1: Using ep0 maxpacket: 8 [ 360.308238][ T932] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 360.308255][ T932] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 360.308266][ T932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.310293][ T932] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.310309][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.310320][ T932] usb 2-1: Product: syz [ 360.310328][ T932] usb 2-1: Manufacturer: syz [ 360.310335][ T932] usb 2-1: SerialNumber: syz [ 360.655402][ T932] usb 2-1: 0:2 : does not exist [ 360.728294][ T932] usb 2-1: USB disconnect, device number 14 [ 360.820165][ T7824] udevd[7824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.655353][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 362.949158][ T8249] netlink: 'syz.4.783': attribute type 72 has an invalid length. [ 362.975220][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 362.977144][ T31] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 362.977168][ T31] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 362.977187][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.979504][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 362.979530][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.979542][ T31] usb 2-1: Product: syz [ 362.979550][ T31] usb 2-1: Manufacturer: syz [ 362.979558][ T31] usb 2-1: SerialNumber: syz [ 363.251436][ T31] usb 2-1: 0:2 : does not exist [ 363.345460][ T31] usb 2-1: USB disconnect, device number 15 [ 363.362306][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.785'. [ 364.274079][ T8275] ceph: No mds server is up or the cluster is laggy [ 364.410234][ T31] libceph: connect (1)[c::]:6789 error -101 [ 364.410429][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 364.447407][ T7824] udevd[7824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.907372][ T8287] netlink: 'syz.1.795': attribute type 72 has an invalid length. [ 366.665894][ T8305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.801'. [ 372.311931][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.814'. [ 374.515189][ T807] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 374.872565][ T807] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 374.872594][ T807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.872614][ T807] usb 1-1: config 0 has no interface number 0 [ 374.885690][ T807] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 374.885719][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.885738][ T807] usb 1-1: Product: syz [ 374.885752][ T807] usb 1-1: Manufacturer: syz [ 374.885767][ T807] usb 1-1: SerialNumber: syz [ 374.897383][ T807] usb 1-1: config 0 descriptor?? [ 374.918922][ T807] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 375.244153][ T8385] openvswitch: netlink: IP tunnel dst address not specified [ 376.612988][ T5977] usb 1-1: USB disconnect, device number 17 [ 378.548295][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.548364][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.684155][ T8431] fuse: Bad value for 'rootmode' [ 380.565181][ T5806] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 380.706130][ T8457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.729374][ T5806] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 380.729402][ T5806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.729421][ T5806] usb 2-1: config 0 has no interface number 0 [ 380.733746][ T5806] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 380.733767][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.733778][ T5806] usb 2-1: Product: syz [ 380.733785][ T5806] usb 2-1: Manufacturer: syz [ 380.733793][ T5806] usb 2-1: SerialNumber: syz [ 380.738853][ T5806] usb 2-1: config 0 descriptor?? [ 380.807735][ T5806] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 380.962274][ T5806] usb 2-1: USB disconnect, device number 16 [ 381.388442][ T8468] fuse: Unknown parameter 'use00000000000000000000' [ 384.368525][ T8504] fuse: Unknown parameter 'use00000000000000000000' [ 387.145220][ T5977] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 387.335209][ T5803] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 387.338503][ T5977] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 387.338531][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.338549][ T5977] usb 5-1: config 0 has no interface number 0 [ 387.341603][ T5977] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 387.341631][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.341650][ T5977] usb 5-1: Product: syz [ 387.341664][ T5977] usb 5-1: Manufacturer: syz [ 387.341679][ T5977] usb 5-1: SerialNumber: syz [ 387.417252][ T5977] usb 5-1: config 0 descriptor?? [ 387.445909][ T5977] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 387.455449][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 387.485229][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 387.487587][ T5803] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 387.487611][ T5803] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 387.487631][ T5803] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.490584][ T5803] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.490611][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.490631][ T5803] usb 2-1: Product: syz [ 387.490646][ T5803] usb 2-1: Manufacturer: syz [ 387.490661][ T5803] usb 2-1: SerialNumber: syz [ 387.578456][ T932] usb 5-1: USB disconnect, device number 11 [ 387.822871][ T5803] usb 2-1: 0:2 : does not exist [ 387.914469][ T5803] usb 2-1: USB disconnect, device number 17 [ 387.975984][ T8539] fuse: Unknown parameter 'use00000000000000000000' [ 388.013234][ T7767] udevd[7767]: setting mode of /dev/bus/usb/002/017 to 020664 failed: No such file or directory [ 388.013440][ T7767] udevd[7767]: setting owner of /dev/bus/usb/002/017 to uid=0, gid=0 failed: No such file or directory [ 388.080176][ T7767] udevd[7767]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.041122][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 392.207383][ T31] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 392.207413][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.207431][ T31] usb 1-1: config 0 has no interface number 0 [ 392.209594][ T31] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 392.209615][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.209625][ T31] usb 1-1: Product: syz [ 392.209633][ T31] usb 1-1: Manufacturer: syz [ 392.209641][ T31] usb 1-1: SerialNumber: syz [ 392.218870][ T31] usb 1-1: config 0 descriptor?? [ 392.250020][ T31] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 393.418675][ T5803] usb 1-1: USB disconnect, device number 18 [ 393.874622][ T1808] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 393.874705][ T1808] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 393.914031][ T1808] usb 4-1: USB disconnect, device number 8 [ 393.936187][ T8573] netlink: 7 bytes leftover after parsing attributes in process `syz.3.894'. [ 398.634403][ T8618] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.911'. [ 398.876976][ T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 399.347722][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 399.646128][ T31] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 399.646160][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.646179][ T31] usb 1-1: config 0 has no interface number 0 [ 399.646213][ T31] usb 1-1: config 0 interface 255 has no altsetting 0 [ 399.955228][ T31] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 399.955258][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.955278][ T31] usb 1-1: Product: syz [ 399.955292][ T31] usb 1-1: Manufacturer: syz [ 399.955306][ T31] usb 1-1: SerialNumber: syz [ 400.565931][ T8628] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 400.722684][ T31] usb 1-1: config 0 descriptor?? [ 400.760346][ T31] streamzap 1-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 401.985781][ T932] usb 1-1: USB disconnect, device number 19 [ 408.756563][ T932] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 408.915146][ T932] usb 2-1: Using ep0 maxpacket: 8 [ 408.922821][ T932] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 408.922849][ T932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.922868][ T932] usb 2-1: config 0 has no interface number 0 [ 408.922900][ T932] usb 2-1: config 0 interface 255 has no altsetting 0 [ 408.928821][ T932] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 408.928851][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.928871][ T932] usb 2-1: Product: syz [ 408.928886][ T932] usb 2-1: Manufacturer: syz [ 408.928900][ T932] usb 2-1: SerialNumber: syz [ 409.016718][ T932] usb 2-1: config 0 descriptor?? [ 409.039477][ T932] streamzap 2-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 410.253267][ T8685] netlink: 7 bytes leftover after parsing attributes in process `syz.0.922'. [ 410.565283][ T31] usb 2-1: USB disconnect, device number 18 [ 412.866690][ T8723] fuse: Bad value for 'fd' [ 413.216241][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 413.366742][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 413.369560][ T31] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 413.369586][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.369605][ T31] usb 3-1: config 0 has no interface number 0 [ 413.369637][ T31] usb 3-1: config 0 interface 255 has no altsetting 0 [ 413.372975][ T31] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 413.373002][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.373022][ T31] usb 3-1: Product: syz [ 413.373037][ T31] usb 3-1: Manufacturer: syz [ 413.373052][ T31] usb 3-1: SerialNumber: syz [ 413.510468][ T31] usb 3-1: config 0 descriptor?? [ 413.524908][ T31] streamzap 3-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 415.150208][ T1808] usb 3-1: USB disconnect, device number 10 [ 415.309065][ T8761] fuse: Bad value for 'fd' [ 415.460693][ T8764] openvswitch: netlink: IP tunnel dst address not specified [ 418.288582][ T8779] netlink: 7 bytes leftover after parsing attributes in process `syz.2.971'. [ 418.434363][ T8795] fuse: Unknown parameter '0x0000000000000003' [ 419.040054][ T8808] openvswitch: netlink: IP tunnel dst address not specified [ 420.423358][ T31] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 421.253443][ T31] usb 4-1: config 2 has an invalid interface number: 169 but max is 0 [ 421.253675][ T31] usb 4-1: config 2 has no interface number 0 [ 421.254933][ T31] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 421.275721][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.934949][ T31] usb 4-1: can't set config #2, error -71 [ 421.960686][ T31] usb 4-1: USB disconnect, device number 9 [ 423.493858][ T8832] fuse: Unknown parameter '0x0000000000000003' [ 423.601942][ T8834] netlink: 7 bytes leftover after parsing attributes in process `syz.2.988'. [ 425.194710][ T8858] process 'syz.3.996' launched './file2' with NULL argv: empty string added [ 425.215657][ T37] audit: type=1326 audit(1769346541.240:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.3.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106911acb9 code=0x7ffc0000 [ 425.215712][ T37] audit: type=1326 audit(1769346541.240:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.3.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f106911acb9 code=0x7ffc0000 [ 425.215752][ T37] audit: type=1326 audit(1769346541.240:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.3.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106911acb9 code=0x7ffc0000 [ 425.215791][ T37] audit: type=1326 audit(1769346541.240:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.3.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106911acb9 code=0x7ffc0000 [ 425.215830][ T37] audit: type=1326 audit(1769346541.240:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.3.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f106911acb9 code=0x7ffc0000 [ 425.215869][ T37] audit: type=1326 audit(1769346541.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.3.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106911acb9 code=0x7ffc0000 [ 425.215907][ T37] audit: type=1326 audit(1769346541.240:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.3.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106911acb9 code=0x7ffc0000 [ 425.215946][ T37] audit: type=1326 audit(1769346541.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.3.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f106911acb9 code=0x7ffc0000 [ 425.215985][ T37] audit: type=1326 audit(1769346541.240:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.3.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106911acb9 code=0x7ffc0000 [ 425.216022][ T37] audit: type=1326 audit(1769346541.240:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8851 comm="syz.3.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f106911acb9 code=0x7ffc0000 [ 425.913570][ T8860] tipc: Started in network mode [ 425.913614][ T8860] tipc: Node identity 9ee39fdcee06, cluster identity 4711 [ 425.914249][ T8860] tipc: Enabled bearer , priority 0 [ 425.950651][ T8860] tipc: Resetting bearer [ 427.877081][ T8859] tipc: Disabling bearer [ 428.145452][ T6973] tipc: Node number set to 1894096860 [ 428.835636][ T8882] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1004'. [ 435.117263][ T8916] tipc: Started in network mode [ 435.117297][ T8916] tipc: Node identity 4e88a5f5aa56, cluster identity 4711 [ 435.117487][ T8916] tipc: Enabled bearer , priority 0 [ 435.128739][ T8916] tipc: Resetting bearer [ 435.175578][ T8923] fuse: Unknown parameter '0x0000000000000003' [ 436.511363][ T8915] tipc: Disabling bearer [ 437.006456][ T5886] tipc: Node number set to 3839796725 [ 439.941156][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.941225][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.145305][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1022'. [ 441.433681][ T8966] openvswitch: netlink: IP tunnel dst address not specified [ 449.960477][ T9012] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 450.904176][ T9019] fuse: Bad value for 'rootmode' [ 452.179364][ T9027] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1051'. [ 455.875077][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 455.940743][ T9060] fuse: Bad value for 'rootmode' [ 466.410455][ T9139] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 479.559174][ T807] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 479.740543][ T807] usb 5-1: config 2 has an invalid interface number: 169 but max is 0 [ 479.740580][ T807] usb 5-1: config 2 has no interface number 0 [ 479.740757][ T807] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 479.740793][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.258373][ T807] cypress_m8 5-1:2.169: DeLorme Earthmate USB converter detected [ 480.551278][ T807] earthmate ttyUSB0: required endpoint is missing [ 481.482394][ T1808] usb 5-1: USB disconnect, device number 12 [ 481.496088][ T1808] cypress_m8 5-1:2.169: device disconnected [ 486.622578][ T31] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 487.600377][ T31] usb 5-1: config 2 has an invalid interface number: 169 but max is 0 [ 487.600420][ T31] usb 5-1: config 2 has no interface number 0 [ 487.603514][ T31] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 487.604752][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.857479][ T31] usb 5-1: can't set config #2, error -71 [ 487.883034][ T31] usb 5-1: USB disconnect, device number 13 [ 489.627636][ T9309] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1144'. [ 490.857577][ T9314] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1147'. [ 500.763904][ T9419] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1163'. [ 500.785782][ T9425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1181'. [ 500.840664][ T9428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1181'. [ 501.571972][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.572919][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.760780][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 502.760809][ T9443] openvswitch: netlink: Key type 15644 is out of range max 32 [ 503.514863][ T9451] fuse: Bad value for 'rootmode' [ 504.747421][ T7915] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 504.905109][ T7915] usb 3-1: Using ep0 maxpacket: 8 [ 504.908182][ T7915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 504.913273][ T7915] usb 3-1: config 7 has an invalid interface number: 58 but max is 0 [ 504.913300][ T7915] usb 3-1: config 7 has no interface number 0 [ 504.913357][ T7915] usb 3-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 504.913384][ T7915] usb 3-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.913412][ T7915] usb 3-1: config 7 interface 58 has no altsetting 0 [ 504.952236][ T7915] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 504.952267][ T7915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.952287][ T7915] usb 3-1: Product: syz [ 504.952301][ T7915] usb 3-1: Manufacturer: syz [ 504.952315][ T7915] usb 3-1: SerialNumber: syz [ 505.072794][ T9462] netlink: 'syz.3.1192': attribute type 72 has an invalid length. [ 505.192366][ T9443] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1186'. [ 505.246234][ T7915] usb 3-1: USB disconnect, device number 11 [ 505.465152][ T6973] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 505.618968][ T6973] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 505.618997][ T6973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.619016][ T6973] usb 4-1: config 0 has no interface number 0 [ 505.621431][ T6973] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 505.621459][ T6973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.621479][ T6973] usb 4-1: Product: syz [ 505.621494][ T6973] usb 4-1: Manufacturer: syz [ 505.621509][ T6973] usb 4-1: SerialNumber: syz [ 505.656504][ T6973] usb 4-1: config 0 descriptor?? [ 505.684878][ T6973] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22 [ 507.153225][ T1808] usb 4-1: USB disconnect, device number 10 [ 509.300092][ T9494] netlink: 'syz.0.1203': attribute type 72 has an invalid length. [ 511.169012][ T5886] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 511.493041][ T5886] usb 5-1: config 2 has an invalid interface number: 169 but max is 0 [ 511.493097][ T5886] usb 5-1: config 2 has no interface number 0 [ 511.493265][ T5886] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 511.493299][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.904044][ T5886] cypress_m8 5-1:2.169: DeLorme Earthmate USB converter detected [ 513.132725][ T5886] earthmate ttyUSB0: required endpoint is missing [ 513.963964][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'. [ 513.963990][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'. [ 514.016836][ T9527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1214'. [ 514.040948][ T7915] usb 5-1: USB disconnect, device number 14 [ 514.059209][ T7915] cypress_m8 5-1:2.169: device disconnected [ 514.336178][ T9533] netlink: 'syz.4.1216': attribute type 72 has an invalid length. [ 522.035145][ T807] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 522.216007][ T807] usb 5-1: Using ep0 maxpacket: 8 [ 522.580644][ T807] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 522.580671][ T807] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 522.580690][ T807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.590846][ T807] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.590876][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.590895][ T807] usb 5-1: Product: syz [ 522.590910][ T807] usb 5-1: Manufacturer: syz [ 522.590924][ T807] usb 5-1: SerialNumber: syz [ 522.839562][ T807] usb 5-1: 0:2 : does not exist [ 522.940061][ T807] usb 5-1: USB disconnect, device number 15 [ 523.174129][ T9598] udevd[9598]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.766204][ T807] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 525.937389][ T807] usb 1-1: Using ep0 maxpacket: 32 [ 525.947551][ T807] usb 1-1: config 0 has an invalid interface number: 190 but max is 0 [ 525.947578][ T807] usb 1-1: config 0 has no interface number 0 [ 525.953534][ T807] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b0.11 [ 525.953562][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.953581][ T807] usb 1-1: Product: syz [ 525.953595][ T807] usb 1-1: Manufacturer: syz [ 525.953609][ T807] usb 1-1: SerialNumber: syz [ 525.991021][ T807] usb 1-1: config 0 descriptor?? [ 526.001057][ T807] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 526.001109][ T807] dvb-usb: bulk message failed: -22 (2/0) [ 526.001126][ T807] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 526.021986][ T807] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 526.022044][ T807] usb 1-1: media controller created [ 526.024433][ T807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 526.099993][ T807] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 526.100558][ T807] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 526.297695][ T807] rc_core: IR keymap rc-dtt200u not found [ 526.297716][ T807] Registered IR keymap rc-empty [ 526.299433][ T807] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 526.302314][ T807] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input18 [ 526.370730][ T807] dvb-usb: schedule remote query interval to 300 msecs. [ 526.370758][ T807] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 526.384484][ T807] usb 1-1: USB disconnect, device number 20 [ 526.558739][ T807] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 526.788802][ T9630] syz.3.1242 (9630): drop_caches: 2 [ 526.981245][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1252'. [ 527.359114][ T9657] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1257'. [ 528.645231][ T932] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 529.119362][ T932] usb 2-1: Using ep0 maxpacket: 8 [ 529.730045][ T932] usb 2-1: unable to get BOS descriptor or descriptor too short [ 529.731347][ T932] usb 2-1: config 7 has an invalid interface number: 58 but max is 0 [ 529.731379][ T932] usb 2-1: config 7 has no interface number 0 [ 529.731426][ T932] usb 2-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 529.731453][ T932] usb 2-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 529.731479][ T932] usb 2-1: config 7 interface 58 has no altsetting 0 [ 529.745778][ T932] usb 2-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 529.745810][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.745830][ T932] usb 2-1: Product: syz [ 529.745845][ T932] usb 2-1: Manufacturer: syz [ 529.745860][ T932] usb 2-1: SerialNumber: syz [ 530.107310][ T9662] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1258'. [ 530.170945][ T932] usb 2-1: USB disconnect, device number 19 [ 533.378580][ T5977] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 533.625081][ T5977] usb 3-1: Using ep0 maxpacket: 32 [ 533.628378][ T5977] usb 3-1: config 0 has an invalid interface number: 190 but max is 0 [ 533.628406][ T5977] usb 3-1: config 0 has no interface number 0 [ 533.631985][ T5977] usb 3-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b0.11 [ 533.632015][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.632041][ T5977] usb 3-1: Product: syz [ 533.632056][ T5977] usb 3-1: Manufacturer: syz [ 533.632071][ T5977] usb 3-1: SerialNumber: syz [ 533.691372][ T5977] usb 3-1: config 0 descriptor?? [ 533.715104][ T5977] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 533.715159][ T5977] dvb-usb: bulk message failed: -22 (2/0) [ 533.715178][ T5977] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 533.716060][ T5977] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 533.716114][ T5977] usb 3-1: media controller created [ 533.718125][ T5977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 533.782826][ T5977] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 533.783055][ T5977] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 534.115085][ T5977] rc_core: IR keymap rc-dtt200u not found [ 534.115595][ T5977] Registered IR keymap rc-empty [ 534.118467][ T5977] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 534.167214][ T5977] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input19 [ 534.170757][ T5977] dvb-usb: schedule remote query interval to 300 msecs. [ 534.170781][ T5977] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 534.173938][ T5977] usb 3-1: USB disconnect, device number 12 [ 534.730160][ T5977] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 535.066597][ T5977] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 535.216907][ T5977] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 535.216936][ T5977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.216955][ T5977] usb 3-1: config 0 has no interface number 0 [ 535.219652][ T5977] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 535.219679][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.219693][ T5977] usb 3-1: Product: syz [ 535.219701][ T5977] usb 3-1: Manufacturer: syz [ 535.219710][ T5977] usb 3-1: SerialNumber: syz [ 535.222724][ T5977] usb 3-1: config 0 descriptor?? [ 535.309798][ T5977] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 536.333704][ T7915] usb 3-1: USB disconnect, device number 13 [ 536.886471][ T9718] Bluetooth: MGMT ver 1.23 [ 536.886509][ T9718] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 541.449467][ T9747] ======================================================= [ 541.449467][ T9747] WARNING: The mand mount option has been deprecated and [ 541.449467][ T9747] and is ignored by this kernel. Remove the mand [ 541.449467][ T9747] option from the mount to silence this warning. [ 541.449467][ T9747] ======================================================= [ 542.245974][ T5803] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 542.468473][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 542.472234][ T5803] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 542.472257][ T5803] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 542.472276][ T5803] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.495641][ T5803] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 542.495671][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.495690][ T5803] usb 2-1: Product: syz [ 542.495704][ T5803] usb 2-1: Manufacturer: syz [ 542.495719][ T5803] usb 2-1: SerialNumber: syz [ 544.038252][ T5803] usb 2-1: 0:2 : does not exist [ 544.130865][ T5803] usb 2-1: USB disconnect, device number 20 [ 544.606753][ T5803] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 544.875870][ T5803] usb 3-1: Using ep0 maxpacket: 32 [ 545.306427][ T5803] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 545.306461][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.306481][ T5803] usb 3-1: Product: syz [ 545.306496][ T5803] usb 3-1: Manufacturer: syz [ 545.306511][ T5803] usb 3-1: SerialNumber: syz [ 545.367160][ T5803] usb 3-1: config 0 descriptor?? [ 545.382380][ T5803] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 545.747708][ T5803] gspca_ov534_9: reg_w failed -71 [ 547.045088][ T5803] gspca_ov534_9: Unknown sensor 0000 [ 547.045199][ T5803] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 547.048684][ T5803] usb 3-1: USB disconnect, device number 14 [ 550.350063][ T5803] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 550.535106][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 550.537117][ T5803] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 550.537141][ T5803] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 550.537160][ T5803] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 550.540177][ T5803] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 550.540205][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.540225][ T5803] usb 2-1: Product: syz [ 550.540239][ T5803] usb 2-1: Manufacturer: syz [ 550.540252][ T5803] usb 2-1: SerialNumber: syz [ 550.830472][ T5803] usb 2-1: 0:2 : does not exist [ 550.876033][ T5803] usb 2-1: USB disconnect, device number 21 [ 550.992681][ T9785] udevd[9785]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.195199][ T5977] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 551.354913][ T5977] usb 1-1: Using ep0 maxpacket: 32 [ 551.712212][ T5977] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 551.712232][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.712243][ T5977] usb 1-1: Product: syz [ 551.712252][ T5977] usb 1-1: Manufacturer: syz [ 551.712260][ T5977] usb 1-1: SerialNumber: syz [ 551.717546][ T5977] usb 1-1: config 0 descriptor?? [ 551.731310][ T5977] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 551.931007][ T5977] gspca_ov534_9: reg_w failed -71 [ 552.155146][ T932] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 552.317560][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 552.339261][ T5977] gspca_ov534_9: Unknown sensor 0000 [ 552.351022][ T5977] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 552.933055][ T932] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 552.933088][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.933110][ T932] usb 2-1: Product: syz [ 552.933125][ T932] usb 2-1: Manufacturer: syz [ 552.933140][ T932] usb 2-1: SerialNumber: syz [ 553.073750][ T932] usb 2-1: config 0 descriptor?? [ 553.112969][ T5977] usb 1-1: USB disconnect, device number 21 [ 553.127187][ T932] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 553.352930][ T932] gspca_ov534_9: reg_w failed -71 [ 553.755076][ T932] gspca_ov534_9: Unknown sensor 0000 [ 553.755185][ T932] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 553.761948][ T932] usb 2-1: USB disconnect, device number 22 [ 554.306708][ T9854] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1324'. [ 554.805099][ T5803] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 555.074599][ T5803] usb 2-1: Using ep0 maxpacket: 32 [ 555.349721][ T5803] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 555.349754][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.349774][ T5803] usb 2-1: Product: syz [ 555.349788][ T5803] usb 2-1: Manufacturer: syz [ 555.349798][ T5803] usb 2-1: SerialNumber: syz [ 555.353414][ T5803] usb 2-1: config 0 descriptor?? [ 555.401079][ T5803] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 555.609363][ T5803] gspca_ov534_9: reg_w failed -71 [ 556.145059][ T5803] gspca_ov534_9: Unknown sensor 0000 [ 556.145180][ T5803] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 556.147345][ T5803] usb 2-1: USB disconnect, device number 23 [ 557.507708][ T9892] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1337'. [ 557.899870][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 558.085489][ T31] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 558.085525][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.085707][ T31] usb 2-1: config 0 has no interface number 0 [ 558.217405][ T31] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 558.217447][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.217504][ T31] usb 2-1: Product: syz [ 558.217556][ T31] usb 2-1: Manufacturer: syz [ 558.217572][ T31] usb 2-1: SerialNumber: syz [ 558.741800][ T31] usb 2-1: config 0 descriptor?? [ 558.782369][ T31] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 558.952698][ T5977] usb 2-1: USB disconnect, device number 24 [ 560.351265][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'. [ 560.351294][ T9921] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 560.685171][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 560.835661][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 560.864792][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 560.872463][ T31] usb 1-1: config 7 has an invalid interface number: 58 but max is 0 [ 560.872491][ T31] usb 1-1: config 7 has no interface number 0 [ 560.872537][ T31] usb 1-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 560.872565][ T31] usb 1-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.872590][ T31] usb 1-1: config 7 interface 58 has no altsetting 0 [ 560.902299][ T31] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 560.902330][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.902439][ T31] usb 1-1: Product: syz [ 560.902455][ T31] usb 1-1: Manufacturer: syz [ 560.902469][ T31] usb 1-1: SerialNumber: syz [ 561.023241][ T9908] syz.4.1340 (9908): drop_caches: 2 [ 561.760595][ T9921] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1345'. [ 561.788338][ T31] usb 1-1: USB disconnect, device number 22 [ 563.208430][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.208498][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.455091][ T5806] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 565.646489][ T5806] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 565.646517][ T5806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.646536][ T5806] usb 3-1: config 0 has no interface number 0 [ 565.649491][ T5806] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 565.649519][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.649539][ T5806] usb 3-1: Product: syz [ 565.649553][ T5806] usb 3-1: Manufacturer: syz [ 565.649569][ T5806] usb 3-1: SerialNumber: syz [ 565.676808][ T5806] usb 3-1: config 0 descriptor?? [ 565.687784][ T5806] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 565.944485][ T932] usb 3-1: USB disconnect, device number 15 [ 569.120805][ T9975] syz.1.1364 (9975): drop_caches: 2 [ 571.099059][ T5803] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 571.435317][ T5803] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 571.435348][ T5803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.435367][ T5803] usb 3-1: config 0 has no interface number 0 [ 571.438162][ T5803] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 571.438190][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.438211][ T5803] usb 3-1: Product: syz [ 571.438226][ T5803] usb 3-1: Manufacturer: syz [ 571.438241][ T5803] usb 3-1: SerialNumber: syz [ 571.710178][ T5803] usb 3-1: config 0 descriptor?? [ 571.713146][ T5803] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 571.932829][ T5803] usb 3-1: USB disconnect, device number 16 [ 572.612004][T10038] syz.4.1382 uses obsolete (PF_INET,SOCK_PACKET) [ 577.493284][T10047] syz.0.1385 (10047): drop_caches: 2 [ 578.935067][ T5886] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 579.088761][ T5886] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 579.088793][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.088812][ T5886] usb 1-1: config 0 has no interface number 0 [ 579.095585][ T5886] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 579.095604][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.095616][ T5886] usb 1-1: Product: syz [ 579.095623][ T5886] usb 1-1: Manufacturer: syz [ 579.095631][ T5886] usb 1-1: SerialNumber: syz [ 579.098834][ T5886] usb 1-1: config 0 descriptor?? [ 579.108759][ T5886] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 579.335883][ T31] usb 1-1: USB disconnect, device number 23 [ 580.330203][T10114] netlink: 876 bytes leftover after parsing attributes in process `syz.0.1406'. [ 580.465132][ T932] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 581.048400][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 581.069069][ T932] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 581.069101][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.069156][ T932] usb 2-1: Product: syz [ 581.069165][ T932] usb 2-1: Manufacturer: syz [ 581.069173][ T932] usb 2-1: SerialNumber: syz [ 581.073964][ T932] usb 2-1: config 0 descriptor?? [ 581.095590][ T932] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 581.620183][ T932] gspca_ov534_9: reg_w failed -110 [ 583.575228][ T932] gspca_ov534_9: Unknown sensor 0000 [ 583.575330][ T932] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 583.584708][ T932] usb 2-1: USB disconnect, device number 25 [ 587.557228][T10164] QAT: failed to copy from user cfg_data. [ 590.576015][T10194] QAT: failed to copy from user cfg_data. [ 593.255131][ T5806] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 593.427588][ T5806] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 593.427617][ T5806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.427636][ T5806] usb 5-1: config 0 has no interface number 0 [ 593.429748][ T5806] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 593.429775][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.429786][ T5806] usb 5-1: Product: syz [ 593.429794][ T5806] usb 5-1: Manufacturer: syz [ 593.429802][ T5806] usb 5-1: SerialNumber: syz [ 593.440750][ T5806] usb 5-1: config 0 descriptor?? [ 593.492832][ T5806] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 593.649709][ T1808] usb 5-1: USB disconnect, device number 16 [ 594.123513][T10205] syz.0.1435 (10205): drop_caches: 2 [ 594.864622][T10228] fuse: Bad value for 'rootmode' [ 597.665079][ T5806] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 597.763965][T10238] syzkaller0: entered promiscuous mode [ 597.763992][T10238] syzkaller0: entered allmulticast mode [ 597.817524][ T5806] usb 2-1: Using ep0 maxpacket: 32 [ 597.827992][ T5806] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 597.828021][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.828048][ T5806] usb 2-1: Product: syz [ 597.828062][ T5806] usb 2-1: Manufacturer: syz [ 597.828076][ T5806] usb 2-1: SerialNumber: syz [ 597.837213][ T5806] usb 2-1: config 0 descriptor?? [ 597.873250][ T5806] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 598.046663][ T5806] gspca_ov534_9: reg_w failed -71 [ 598.455076][ T5806] gspca_ov534_9: Unknown sensor 0000 [ 598.455179][ T5806] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 598.514869][ T5806] usb 2-1: USB disconnect, device number 26 [ 601.743611][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'. [ 601.761891][T10265] openvswitch: netlink: IP tunnel dst address not specified [ 602.354404][T10267] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1452'. [ 604.954676][T10282] QAT: failed to copy from user cfg_data. [ 606.426365][T10303] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 609.940418][T10335] syz.2.1470 (10335): drop_caches: 2 [ 610.187275][T10350] QAT: failed to copy from user cfg_data. [ 612.288960][T10358] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1482'. [ 612.945101][ T5886] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 613.785034][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 613.811706][ T5886] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 613.811789][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.811810][ T5886] usb 2-1: Product: syz [ 613.811825][ T5886] usb 2-1: Manufacturer: syz [ 613.811839][ T5886] usb 2-1: SerialNumber: syz [ 613.856406][ T5886] usb 2-1: config 0 descriptor?? [ 615.354811][ T5886] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 615.379685][ T5886] gspca_ov534_9: reg_w failed -71 [ 615.825085][ T5886] gspca_ov534_9: Unknown sensor 0000 [ 615.825158][ T5886] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 615.828008][ T5886] usb 2-1: USB disconnect, device number 27 [ 616.110874][T10374] udevd[10374]: setting mode of /dev/bus/usb/002/027 to 020664 failed: No such file or directory [ 616.179340][T10374] udevd[10374]: setting owner of /dev/bus/usb/002/027 to uid=0, gid=0 failed: No such file or directory [ 618.880449][T10407] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1498'. [ 618.935928][ T6973] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 619.315080][ T6973] usb 3-1: Using ep0 maxpacket: 16 [ 619.317713][ T6973] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.317746][ T6973] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.317770][ T6973] usb 3-1: config 0 interface 0 has no altsetting 0 [ 619.317803][ T6973] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 619.317826][ T6973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.245342][ T6973] usb 3-1: config 0 descriptor?? [ 621.545517][ T6973] usbhid 3-1:0.0: can't add hid device: -71 [ 621.545640][ T6973] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 621.557519][T10436] syz.0.1505 (10436): drop_caches: 2 [ 621.597824][ T6973] usb 3-1: USB disconnect, device number 17 [ 622.503357][T10454] syz.0.1510 (10454): drop_caches: 2 [ 622.603053][T10458] syzkaller0: entered promiscuous mode [ 622.603088][T10458] syzkaller0: entered allmulticast mode [ 627.244069][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.244141][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.700733][T10480] syz.1.1519 (10480): drop_caches: 2 [ 627.815160][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'. [ 627.815190][T10484] openvswitch: netlink: Message has 8 unknown bytes. [ 628.894678][ T5806] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 629.045727][ T5806] usb 3-1: Using ep0 maxpacket: 8 [ 629.047594][ T5806] usb 3-1: unable to get BOS descriptor or descriptor too short [ 629.048571][ T5806] usb 3-1: config 7 has an invalid interface number: 58 but max is 0 [ 629.048587][ T5806] usb 3-1: config 7 has no interface number 0 [ 629.048616][ T5806] usb 3-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 629.048631][ T5806] usb 3-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.048646][ T5806] usb 3-1: config 7 interface 58 has no altsetting 0 [ 629.054137][ T5806] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 629.054166][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.054186][ T5806] usb 3-1: Product: syz [ 629.054200][ T5806] usb 3-1: Manufacturer: syz [ 629.054215][ T5806] usb 3-1: SerialNumber: syz [ 629.341429][T10484] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1520'. [ 629.498082][ T5806] usb 3-1: USB disconnect, device number 18 [ 632.065844][ T5806] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 632.538898][ T5806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.538928][ T5806] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 632.541354][ T5806] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 632.541384][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.541405][ T5806] usb 5-1: Product: syz [ 632.541420][ T5806] usb 5-1: Manufacturer: syz [ 632.541435][ T5806] usb 5-1: SerialNumber: syz [ 632.621186][ T5806] usb 5-1: config 0 descriptor?? [ 633.742339][T10540] fuse: Bad value for 'fd' [ 633.852601][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1539'. [ 633.852628][T10545] openvswitch: netlink: Message has 8 unknown bytes. [ 633.913419][T10546] syz.2.1540 (10546): drop_caches: 2 [ 634.135108][ T5886] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 634.295171][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 634.299038][ T5886] usb 4-1: unable to get BOS descriptor or descriptor too short [ 634.300819][ T5886] usb 4-1: config 7 has an invalid interface number: 58 but max is 0 [ 634.300846][ T5886] usb 4-1: config 7 has no interface number 0 [ 634.300895][ T5886] usb 4-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 634.300922][ T5886] usb 4-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.300950][ T5886] usb 4-1: config 7 interface 58 has no altsetting 0 [ 634.304447][ T5886] usb 4-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 634.304476][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.304497][ T5886] usb 4-1: Product: syz [ 634.304512][ T5886] usb 4-1: Manufacturer: syz [ 634.304528][ T5886] usb 4-1: SerialNumber: syz [ 635.202976][T10545] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1539'. [ 635.223152][T10571] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1548'. [ 635.297773][ T5886] usb 4-1: USB disconnect, device number 11 [ 635.302244][ T5977] usb 5-1: USB disconnect, device number 17 [ 640.686417][T10603] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 640.849994][T10613] syz.0.1562 (10613): drop_caches: 2 [ 642.807480][ T5977] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 643.777430][ T5977] usb 2-1: Using ep0 maxpacket: 16 [ 643.779813][ T5977] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 643.779841][ T5977] usb 2-1: config 4 has no interface number 0 [ 643.779873][ T5977] usb 2-1: config 4 interface 51 has no altsetting 0 [ 643.782641][ T5977] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 643.782668][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.782690][ T5977] usb 2-1: Product: syz [ 643.782704][ T5977] usb 2-1: Manufacturer: syz [ 643.782719][ T5977] usb 2-1: SerialNumber: syz [ 643.821094][ T5977] cdc_eem 2-1:4.51: probe with driver cdc_eem failed with error -22 [ 644.491459][T10642] syz.0.1571 (10642): drop_caches: 2 [ 644.544327][ T5806] usb 2-1: USB disconnect, device number 28 [ 646.702311][T10657] syz.0.1574 (10657): drop_caches: 2 [ 646.755097][ T5806] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 646.791444][T10663] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1577'. [ 647.183139][ T5806] usb 4-1: device descriptor read/64, error -71 [ 647.495451][ T5806] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 649.153172][ T5806] usb 4-1: device descriptor read/64, error -71 [ 649.273509][ T5806] usb usb4-port1: attempt power cycle [ 649.734078][T10581] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 650.405129][ T5806] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 650.555038][ T5806] usb 4-1: device descriptor read/8, error -71 [ 650.575064][T10581] usb 2-1: Using ep0 maxpacket: 8 [ 650.583708][T10581] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 650.583743][T10581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 650.583769][T10581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 650.592484][T10581] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 650.592516][T10581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.592537][T10581] usb 2-1: Product: syz [ 650.592561][T10581] usb 2-1: Manufacturer: syz [ 650.592576][T10581] usb 2-1: SerialNumber: syz [ 650.660349][T10581] usb 2-1: config 0 descriptor?? [ 651.458933][T10695] fuse: Bad value for 'rootmode' [ 652.033477][T10581] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 652.685777][ T6973] usb 2-1: USB disconnect, device number 29 [ 654.553399][T10712] fuse: Unknown parameter 'useS00000000000000000000' [ 659.315612][T10581] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 661.055072][T10581] usb 5-1: device descriptor read/64, error -71 [ 661.088058][T10751] syz.2.1589 (10751): drop_caches: 2 [ 666.235032][ T5886] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 667.468291][T10804] fuse: Bad value for 'rootmode' [ 668.230344][ T5886] usb 2-1: device descriptor read/64, error -71 [ 668.465248][ T5886] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 668.715191][ T5886] usb 2-1: device descriptor read/64, error -71 [ 668.830273][ T5886] usb usb2-port1: attempt power cycle [ 670.308398][T10824] syz.0.1628 (10824): drop_caches: 2 [ 670.805619][T10832] syz.0.1630 (10832): drop_caches: 2 [ 674.195501][T10852] fuse: Bad value for 'rootmode' [ 674.440757][T10850] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1623'. [ 675.518603][T10866] syz.3.1640 (10866): drop_caches: 2 [ 676.522665][T10880] syz.0.1644 (10880): drop_caches: 2 [ 678.002912][T10889] fuse: Unknown parameter 'useö00000000000000000000' [ 679.480396][T10893] fuse: Unknown parameter 'usen00000000000000000000' [ 680.151975][T10888] syz.0.1649 (10888): drop_caches: 2 [ 682.307714][T10913] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1657'. [ 684.480889][T10936] syz.2.1662 (10936): drop_caches: 2 [ 685.339765][T10939] fuse: Bad value for 'rootmode' [ 686.355105][ T5803] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 686.515391][ T5803] usb 5-1: Using ep0 maxpacket: 8 [ 686.617182][ T5803] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 686.617267][ T5803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 686.617349][ T5803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 687.037788][ T5803] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 687.038299][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.038673][ T5803] usb 5-1: Product: syz [ 687.039045][ T5803] usb 5-1: Manufacturer: syz [ 687.039435][ T5803] usb 5-1: SerialNumber: syz [ 687.303204][ T5803] usb 5-1: config 0 descriptor?? [ 687.352981][ T5803] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 687.407155][T10954] syz.2.1668 (10954): drop_caches: 2 [ 688.315488][T10581] usb 5-1: USB disconnect, device number 20 [ 688.812330][T10970] syz.4.1675 (10970): drop_caches: 2 [ 688.880939][T10973] syz.3.1674 (10973): drop_caches: 2 [ 690.108067][T10991] syz.4.1681 (10991): drop_caches: 2 [ 690.485446][T11004] syz.4.1687 (11004): drop_caches: 2 [ 690.515130][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 690.546981][T11003] syz.2.1686 (11003): drop_caches: 2 [ 690.665168][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 690.696033][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 690.696068][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 690.696094][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 690.741985][ T10] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 690.742016][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.742037][ T10] usb 4-1: Product: syz [ 690.742051][ T10] usb 4-1: Manufacturer: syz [ 690.742066][ T10] usb 4-1: SerialNumber: syz [ 690.828728][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.828799][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.847395][T11011] syz.4.1688 (11011): drop_caches: 2 [ 690.924284][ T10] usb 4-1: config 0 descriptor?? [ 691.004160][ T10] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 693.613019][ T10] usb 4-1: USB disconnect, device number 16 [ 695.286303][T11035] fuse: Bad value for 'rootmode' [ 696.499318][T11040] syz.1.1698 (11040): drop_caches: 2 [ 697.534012][T11044] fuse: Bad value for 'rootmode' [ 700.445666][ T5806] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 700.675455][ T5806] usb 3-1: Using ep0 maxpacket: 8 [ 700.752936][ T5806] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.752972][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 700.752999][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 700.793572][ T5806] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 700.793607][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.793628][ T5806] usb 3-1: Product: syz [ 700.793644][ T5806] usb 3-1: Manufacturer: syz [ 700.793659][ T5806] usb 3-1: SerialNumber: syz [ 700.838749][ T5806] usb 3-1: config 0 descriptor?? [ 700.854186][ T5806] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 701.165241][T10581] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 701.194170][T11069] 9p: Bad value for 'wfdno' [ 701.360779][T10581] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 701.360810][T10581] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.360830][T10581] usb 2-1: config 0 has no interface number 0 [ 701.360933][T10581] usb 2-1: too many endpoints for config 0 interface 64 altsetting 0: 48, using maximum allowed: 30 [ 701.363883][T10581] usb 2-1: config 0 interface 64 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 701.372959][T10581] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 701.372990][T10581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.373008][T10581] usb 2-1: Product: syz [ 701.373021][T10581] usb 2-1: Manufacturer: syz [ 701.373035][T10581] usb 2-1: SerialNumber: syz [ 701.534841][T10581] usb 2-1: config 0 descriptor?? [ 702.386603][T10581] usb 2-1: USB disconnect, device number 33 [ 702.408596][ T5886] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 702.707449][ T10] usb 3-1: USB disconnect, device number 19 [ 703.213116][ T5886] usb 1-1: config 2 has an invalid interface number: 169 but max is 0 [ 703.213174][ T5886] usb 1-1: config 2 has no interface number 0 [ 703.213361][ T5886] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 703.213398][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.562917][ T5886] cypress_m8 1-1:2.169: DeLorme Earthmate USB converter detected [ 703.992259][ T5886] earthmate ttyUSB0: required endpoint is missing [ 705.721586][ T5886] usb 1-1: USB disconnect, device number 24 [ 706.211869][ T5886] cypress_m8 1-1:2.169: device disconnected [ 710.914440][T11117] 9p: Bad value for 'wfdno' [ 712.192571][T10581] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 712.475014][T10581] usb 2-1: Using ep0 maxpacket: 8 [ 712.477412][T10581] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 712.477445][T10581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 712.477472][T10581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 712.494040][T10581] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 712.494078][T10581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.494099][T10581] usb 2-1: Product: syz [ 712.494114][T10581] usb 2-1: Manufacturer: syz [ 712.494129][T10581] usb 2-1: SerialNumber: syz [ 713.045303][ T5806] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 713.049394][T10581] usb 2-1: config 0 descriptor?? [ 713.231456][ T5806] usb 5-1: config 2 has an invalid interface number: 169 but max is 0 [ 713.231517][ T5806] usb 5-1: config 2 has no interface number 0 [ 713.231721][ T5806] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 713.231782][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.823593][ T5806] cypress_m8 5-1:2.169: DeLorme Earthmate USB converter detected [ 713.951176][ T5806] earthmate ttyUSB0: required endpoint is missing [ 714.337376][T10581] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 715.974965][T10581] usb 2-1: USB disconnect, device number 34 [ 716.353514][T11149] syz.3.1730 (11149): drop_caches: 2 [ 716.368473][ T6973] usb 5-1: USB disconnect, device number 21 [ 716.371823][ T6973] cypress_m8 5-1:2.169: device disconnected [ 716.864189][T11146] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1729'. [ 723.669074][T11193] fuse: Bad value for 'rootmode' [ 725.696960][T11202] fuse: Unknown parameter 'use-00000000000000000000' [ 726.445226][ T6973] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 726.614177][ T6973] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 726.614207][ T6973] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 726.614228][ T6973] usb 3-1: config 0 has no interface number 0 [ 726.641971][ T6973] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 726.642004][ T6973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.642025][ T6973] usb 3-1: Product: syz [ 726.642040][ T6973] usb 3-1: Manufacturer: syz [ 726.642055][ T6973] usb 3-1: SerialNumber: syz [ 726.679367][ T6973] usb 3-1: config 0 descriptor?? [ 727.133109][ T6973] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 727.133153][ T6973] uvcvideo 3-1:0.64: No valid video chain found. [ 727.150520][ T6973] usb 3-1: USB disconnect, device number 20 [ 731.401969][T11250] syz.2.1756 (11250): drop_caches: 2 [ 733.232157][T11261] fuse: Bad value for 'rootmode' [ 735.359876][T11269] fuse: Bad value for 'fd' [ 736.201507][T11271] syz.3.1765 (11271): drop_caches: 2 [ 737.514096][T11276] fuse: Unknown parameter 'useÀ00000000000000000000' [ 738.449031][T11281] syz.0.1771 (11281): drop_caches: 2 [ 739.470260][T11289] syz.2.1774 (11289): drop_caches: 2 [ 744.418147][T11317] fuse: Bad value for 'fd' [ 746.497639][T10581] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 748.056597][T11344] fuse: Bad value for 'rootmode' [ 748.777438][T10581] usb 2-1: Using ep0 maxpacket: 8 [ 748.861225][T10581] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 748.861261][T10581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 748.861285][T10581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 749.204134][T10581] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 749.204168][T10581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.204189][T10581] usb 2-1: Product: syz [ 749.245894][T10581] usb 2-1: config 0 descriptor?? [ 749.248080][T10581] usb 2-1: can't set config #0, error -71 [ 749.252964][T10581] usb 2-1: USB disconnect, device number 35 [ 752.825698][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.825769][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.645034][ T6973] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 753.825048][ T6973] usb 1-1: Using ep0 maxpacket: 32 [ 753.830595][ T6973] usb 1-1: config 0 has an invalid interface number: 190 but max is 0 [ 753.830624][ T6973] usb 1-1: config 0 has no interface number 0 [ 753.834276][ T6973] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b0.11 [ 753.834304][ T6973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.834324][ T6973] usb 1-1: Product: syz [ 753.834339][ T6973] usb 1-1: Manufacturer: syz [ 753.834353][ T6973] usb 1-1: SerialNumber: syz [ 753.914386][ T6973] usb 1-1: config 0 descriptor?? [ 753.979745][ T6973] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 753.979800][ T6973] dvb-usb: bulk message failed: -22 (2/0) [ 753.979819][ T6973] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 754.015294][ T6973] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 754.015358][ T6973] usb 1-1: media controller created [ 754.017502][ T6973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 754.111505][ T6973] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 754.111625][ T6973] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 755.870913][ T6973] rc_core: IR keymap rc-dtt200u not found [ 755.871030][ T6973] Registered IR keymap rc-empty [ 756.296516][ T6973] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 756.299806][ T6973] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input21 [ 756.345604][ T6973] dvb-usb: schedule remote query interval to 300 msecs. [ 756.345631][ T6973] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 756.385532][ T6973] usb 1-1: USB disconnect, device number 25 [ 758.402603][ T6973] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 759.094212][T11411] syz.3.1803 (11411): drop_caches: 2 [ 765.045042][ T6973] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 765.209732][ T6973] usb 1-1: Using ep0 maxpacket: 8 [ 765.231303][ T6973] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.231345][ T6973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 765.231372][ T6973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 765.233653][ T6973] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 765.233681][ T6973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.233702][ T6973] usb 1-1: Product: syz [ 765.233716][ T6973] usb 1-1: Manufacturer: syz [ 765.233731][ T6973] usb 1-1: SerialNumber: syz [ 765.333297][ T6973] usb 1-1: config 0 descriptor?? [ 765.346151][ T6973] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 766.112127][T10581] usb 1-1: USB disconnect, device number 26 [ 766.163248][T11448] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1812'. [ 769.075585][T11464] syz.4.1815 (11464): drop_caches: 2 [ 773.854160][T11490] fuse: Unknown parameter 'usec00000000000000000000' [ 774.697627][T11488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1827'. [ 774.969447][T11493] syz.0.1830 (11493): drop_caches: 2 [ 775.464984][T10581] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 775.620650][T10581] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 775.620682][T10581] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.620701][T10581] usb 1-1: config 0 has no interface number 0 [ 775.624003][T10581] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 775.624033][T10581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.624055][T10581] usb 1-1: Product: syz [ 775.624075][T10581] usb 1-1: Manufacturer: syz [ 775.624090][T10581] usb 1-1: SerialNumber: syz [ 775.743772][T10581] usb 1-1: config 0 descriptor?? [ 775.758921][T10581] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 775.969075][ T5806] usb 1-1: USB disconnect, device number 27 [ 776.421341][T11521] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1835'. [ 777.523308][T11525] fuse: Bad value for 'rootmode' [ 779.938710][T11536] fuse: Unknown parameter 'use'00000000000000000000' [ 784.395415][T11571] fuse: Unknown parameter 'useó00000000000000000000' [ 785.171200][T11573] syz.1.1850 (11573): drop_caches: 2 [ 787.869994][T11585] fuse: Bad value for 'rootmode' [ 792.115369][ T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 792.623148][ T10] usb 3-1: config 2 has an invalid interface number: 169 but max is 0 [ 792.623189][ T10] usb 3-1: config 2 has no interface number 0 [ 792.623667][ T10] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 792.623724][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.569520][ T10] cypress_m8 3-1:2.169: DeLorme Earthmate USB converter detected [ 793.717483][ T10] earthmate ttyUSB0: required endpoint is missing [ 794.908675][T10581] usb 3-1: USB disconnect, device number 21 [ 794.914808][T10581] cypress_m8 3-1:2.169: device disconnected [ 795.195962][T11616] syz.2.1863 (11616): drop_caches: 2 [ 796.629803][T11632] syz.2.1867 (11632): drop_caches: 2 [ 800.685206][T11658] fuse: Bad value for 'rootmode' [ 801.447205][T11655] syz.4.1875 (11655): drop_caches: 2 [ 801.487617][T11661] syz.0.1877 (11661): drop_caches: 2 [ 805.390125][T11681] fuse: Bad value for 'rootmode' [ 806.520125][T11686] QAT: failed to copy from user cfg_data. [ 808.054715][T11695] syz.3.1891 (11695): drop_caches: 2 [ 811.103540][T11730] syz.0.1897 (11730): drop_caches: 2 [ 811.490644][T11736] syz.1.1903 (11736): drop_caches: 2 [ 812.616912][T11750] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1905'. [ 813.215336][ T5806] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 813.428527][ T5806] usb 4-1: config 2 has an invalid interface number: 169 but max is 0 [ 813.428570][ T5806] usb 4-1: config 2 has no interface number 0 [ 813.428809][ T5806] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 813.428864][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.728440][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.728736][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.335345][ T5806] cypress_m8 4-1:2.169: DeLorme Earthmate USB converter detected [ 814.336459][ T5806] earthmate ttyUSB0: required endpoint is missing [ 814.438270][T10581] usb 4-1: USB disconnect, device number 17 [ 814.463369][T10581] cypress_m8 4-1:2.169: device disconnected [ 815.577696][T11770] ceph: No mds server is up or the cluster is laggy [ 815.605332][ T5806] libceph: connect (1)[c::]:6789 error -101 [ 815.605458][ T5806] libceph: mon0 (1)[c::]:6789 connect error [ 816.417710][T11780] QAT: failed to copy from user cfg_data. [ 817.959073][T11786] syz.2.1915 (11786): drop_caches: 2 [ 820.718378][T11790] netlink: 'syz.3.1916': attribute type 10 has an invalid length. [ 820.720652][T11790] team0: Device ipvlan1 failed to register rx_handler [ 820.935432][T11807] fuse: Bad value for 'fd' [ 826.087926][T11833] syz.2.1930 (11833): drop_caches: 2 [ 826.907959][T11840] fuse: Bad value for 'fd' [ 827.007077][T11842] syz.3.1931 (11842): drop_caches: 2 [ 828.577266][T11864] fuse: Unknown parameter '0x0000000000000004' [ 829.650049][T11877] fuse: Bad value for 'fd' [ 829.865618][T11878] syz.1.1946 (11878): drop_caches: 2 [ 832.691314][T11909] fuse: Unknown parameter '0x0000000000000004' [ 832.746882][T11906] QAT: failed to copy from user cfg_data. [ 835.848068][T11939] ceph: No mds server is up or the cluster is laggy [ 836.272948][ T6973] libceph: connect (1)[c::]:6789 error -101 [ 836.273142][ T6973] libceph: mon0 (1)[c::]:6789 connect error [ 836.530890][T11943] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1962'. [ 839.116599][T11958] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 840.811707][T10581] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 841.555119][T10581] usb 2-1: Using ep0 maxpacket: 8 [ 841.951090][T10581] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 841.951133][T10581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 841.951190][T10581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 842.033026][T10581] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 842.033048][T10581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.033060][T10581] usb 2-1: Product: syz [ 842.033068][T10581] usb 2-1: Manufacturer: syz [ 842.033076][T10581] usb 2-1: SerialNumber: syz [ 842.071632][T10581] usb 2-1: config 0 descriptor?? [ 842.074530][T10581] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 843.066293][T11988] fuse: Bad value for 'rootmode' [ 843.515505][ T5803] usb 2-1: USB disconnect, device number 36 [ 844.766767][T12000] netlink: 'syz.4.1980': attribute type 10 has an invalid length. [ 844.827304][T12000] team0: Device ipvlan1 failed to register rx_handler [ 849.815404][T12021] fuse: Bad value for 'rootmode' [ 853.016992][T12038] fuse: Bad value for 'rootmode' [ 853.845110][ T6973] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 854.024915][ T6973] usb 4-1: Using ep0 maxpacket: 32 [ 854.026537][ T6973] usb 4-1: config 0 has an invalid interface number: 190 but max is 0 [ 854.026553][ T6973] usb 4-1: config 0 has no interface number 0 [ 854.028562][ T6973] usb 4-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b0.11 [ 854.028579][ T6973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.028590][ T6973] usb 4-1: Product: syz [ 854.028598][ T6973] usb 4-1: Manufacturer: syz [ 854.028606][ T6973] usb 4-1: SerialNumber: syz [ 854.031486][ T6973] usb 4-1: config 0 descriptor?? [ 854.041463][ T6973] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 854.041515][ T6973] dvb-usb: bulk message failed: -22 (2/0) [ 854.041531][ T6973] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 854.075389][ T6973] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 854.075449][ T6973] usb 4-1: media controller created [ 854.082157][ T6973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 854.171003][ T6973] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 854.171093][ T6973] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 854.435120][ T6973] rc_core: IR keymap rc-dtt200u not found [ 854.435141][ T6973] Registered IR keymap rc-empty [ 854.437352][ T6973] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 854.440607][ T6973] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input22 [ 854.455556][ T6973] dvb-usb: schedule remote query interval to 300 msecs. [ 854.455582][ T6973] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 854.461678][T12048] syz.2.1994 (12048): drop_caches: 2 [ 854.479932][ T6973] usb 4-1: USB disconnect, device number 18 [ 855.077647][ T6973] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 857.405090][ T6973] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 857.568418][ T6973] usb 1-1: Using ep0 maxpacket: 32 [ 857.569915][ T6973] usb 1-1: config 0 has an invalid interface number: 190 but max is 0 [ 857.569932][ T6973] usb 1-1: config 0 has no interface number 0 [ 857.571792][ T6973] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b0.11 [ 857.571808][ T6973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.571819][ T6973] usb 1-1: Product: syz [ 857.571827][ T6973] usb 1-1: Manufacturer: syz [ 857.571835][ T6973] usb 1-1: SerialNumber: syz [ 857.582896][ T6973] usb 1-1: config 0 descriptor?? [ 857.602677][ T6973] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 857.602729][ T6973] dvb-usb: bulk message failed: -22 (2/0) [ 857.602745][ T6973] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 857.621194][ T6973] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 857.621265][ T6973] usb 1-1: media controller created [ 857.623286][ T6973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 857.699413][T12070] syz.1.2002 (12070): drop_caches: 2 [ 857.700534][ T6973] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 857.700630][ T6973] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 857.854994][ T6973] rc_core: IR keymap rc-dtt200u not found [ 857.855009][ T6973] Registered IR keymap rc-empty [ 857.855991][ T6973] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 857.857691][ T6973] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input23 [ 857.862979][ T6973] dvb-usb: schedule remote query interval to 300 msecs. [ 857.863003][ T6973] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 857.875901][ T6973] usb 1-1: USB disconnect, device number 28 [ 858.526569][ T6973] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 859.128729][T12089] syz.0.2009 (12089): drop_caches: 2 [ 861.025509][T12115] syz.0.2015 (12115): drop_caches: 2 [ 861.135052][ T5803] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 861.287324][T12118] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2017'. [ 861.304937][ T5803] usb 3-1: Using ep0 maxpacket: 8 [ 861.307787][ T5803] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 861.307819][ T5803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 861.307845][ T5803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 861.310575][ T5803] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 861.310603][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.310624][ T5803] usb 3-1: Product: syz [ 861.310639][ T5803] usb 3-1: Manufacturer: syz [ 861.310654][ T5803] usb 3-1: SerialNumber: syz [ 861.329426][ T5803] usb 3-1: config 0 descriptor?? [ 861.334432][ T5803] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 861.871119][ T44] usb 3-1: USB disconnect, device number 22 [ 862.929645][T12147] syz.2.2027 (12147): drop_caches: 2 [ 863.083936][T12150] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.2030'. [ 863.889450][T12156] fuse: Unknown parameter 'fd0x0000000000000004' [ 865.420241][T12160] fuse: Bad value for 'rootmode' [ 868.761664][T12181] netlink: 'syz.0.2041': attribute type 72 has an invalid length. [ 869.563403][T12190] fuse: Unknown parameter 'fd0x0000000000000004' [ 869.908048][T12199] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2049'. [ 873.356356][T12229] netlink: 'syz.0.2056': attribute type 72 has an invalid length. [ 874.170064][T12236] fuse: Unknown parameter 'fd0x0000000000000004' [ 875.193034][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.193542][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.166739][T12256] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2063'. [ 881.255216][ T6973] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 881.488794][ T6973] usb 4-1: config 2 has an invalid interface number: 169 but max is 0 [ 881.488859][ T6973] usb 4-1: config 2 has no interface number 0 [ 881.541535][ T6973] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 881.541580][ T6973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.853865][ T6973] cypress_m8 4-1:2.169: DeLorme Earthmate USB converter detected [ 881.953280][ T6973] earthmate ttyUSB0: required endpoint is missing [ 885.549893][T10581] usb 4-1: USB disconnect, device number 19 [ 885.587495][T10581] cypress_m8 4-1:2.169: device disconnected [ 886.616874][ T7915] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 886.680002][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 886.944948][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 886.972817][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.972840][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.972853][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 886.972873][ T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 886.972886][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.004977][ T10] usb 4-1: config 0 descriptor?? [ 887.044975][ T7915] usb 1-1: Using ep0 maxpacket: 8 [ 887.047614][ T7915] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 887.047646][ T7915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 887.047672][ T7915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 887.092226][ T7915] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 887.092250][ T7915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.092262][ T7915] usb 1-1: Product: syz [ 887.092270][ T7915] usb 1-1: Manufacturer: syz [ 887.092278][ T7915] usb 1-1: SerialNumber: syz [ 887.129119][ T7915] usb 1-1: config 0 descriptor?? [ 887.166186][ T7915] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 887.595656][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 887.595734][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 887.650279][ T10] usb 4-1: USB disconnect, device number 20 [ 889.045033][ T1808] usb 1-1: USB disconnect, device number 29 [ 889.262766][T12310] netlink: 'syz.1.2073': attribute type 72 has an invalid length. [ 892.165541][T12330] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2087'. [ 894.413513][T12351] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2093'. [ 896.083498][T12363] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2086'. [ 896.506538][T12372] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2099'. [ 896.777998][ T5886] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 897.116712][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 897.119474][ T5886] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 897.119503][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.153567][ T5886] usb 2-1: config 0 descriptor?? [ 899.598597][ T5886] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 899.618223][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 899.619326][ T5886] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 899.619384][ T5886] usb 2-1: media controller created [ 899.653824][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 900.042195][T12404] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.2109'. [ 900.077353][T12377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2100'. [ 901.275543][T12410] ceph: No mds server is up or the cluster is laggy [ 901.296717][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 901.296922][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 901.586266][T12416] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2112'. [ 901.968392][ T5886] stb0899_attach: Driver disabled by Kconfig [ 901.968407][ T5886] az6027: no front-end attached [ 901.968407][ T5886] [ 901.975065][ T5886] az6027: usb out operation failed. (-71) [ 901.975082][ T5886] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 901.978042][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 902.006986][ T5886] dvb-usb: schedule remote query interval to 400 msecs. [ 902.007009][ T5886] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 902.015186][ T5886] usb 2-1: USB disconnect, device number 37 [ 902.306060][ T5886] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 904.830511][T12441] netlink: 'syz.1.2121': attribute type 72 has an invalid length. [ 904.884946][ T44] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 904.919156][T12443] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2107'. [ 906.351410][T12445] netlink: 'syz.1.2122': attribute type 10 has an invalid length. [ 906.353401][T12445] team0: Device ipvlan1 failed to register rx_handler [ 906.464569][T12449] fuse: Bad value for 'group_id' [ 906.464589][T12449] fuse: Bad value for 'group_id' [ 906.665741][ T44] usb 4-1: device not accepting address 21, error -71 [ 906.981906][T12451] syz.3.2124 (12451): drop_caches: 2 [ 908.638958][T12464] netlink: 'syz.3.2130': attribute type 10 has an invalid length. [ 908.640523][T12464] team0: Device ipvlan1 failed to register rx_handler [ 908.765444][T12472] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2133'. [ 910.757023][T12486] fuse: Bad value for 'group_id' [ 910.757044][T12486] fuse: Bad value for 'group_id' [ 912.696862][T12495] syz.4.2141 (12495): drop_caches: 2 [ 914.282669][T12500] netlink: 'syz.1.2142': attribute type 10 has an invalid length. [ 914.284219][T12500] team0: Device ipvlan1 failed to register rx_handler [ 916.300228][T12521] fuse: Bad value for 'group_id' [ 916.300243][T12521] fuse: Bad value for 'group_id' [ 917.437672][T12533] syz.3.2153 (12533): drop_caches: 2 [ 918.748821][T12543] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 920.710989][T12541] fuse: Bad value for 'fd' [ 922.880588][ T5803] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 923.697228][ T5803] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 923.697258][ T5803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.697277][ T5803] usb 1-1: config 0 has no interface number 0 [ 923.700973][ T5803] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 923.701004][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.701024][ T5803] usb 1-1: Product: syz [ 923.701039][ T5803] usb 1-1: Manufacturer: syz [ 923.701054][ T5803] usb 1-1: SerialNumber: syz [ 923.763277][ T5803] usb 1-1: config 0 descriptor?? [ 923.783507][ T5803] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 923.904104][T12568] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2164'. [ 923.939632][ T5803] usb 1-1: USB disconnect, device number 30 [ 925.681278][T12578] syz.1.2165 (12578): drop_caches: 2 [ 925.705769][T12579] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2167'. [ 928.226698][T12593] syz.1.2171 (12593): drop_caches: 2 [ 928.661580][T12591] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 928.917342][T12601] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2172'. [ 929.383181][T12606] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2175'. [ 929.640396][T10581] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 929.978648][T10581] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 929.978681][T10581] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.978701][T10581] usb 2-1: config 0 has no interface number 0 [ 930.011034][T10581] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 930.011066][T10581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.011088][T10581] usb 2-1: Product: syz [ 930.011103][T10581] usb 2-1: Manufacturer: syz [ 930.011118][T10581] usb 2-1: SerialNumber: syz [ 930.057710][T10581] usb 2-1: config 0 descriptor?? [ 930.087710][T10581] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 930.398647][ T5886] usb 2-1: USB disconnect, device number 38 [ 930.544149][T12626] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2180'. [ 932.551006][T12619] Bluetooth: hci1: command 0x0406 tx timeout [ 934.001087][T12644] netlink: 'syz.3.2184': attribute type 10 has an invalid length. [ 934.061843][T12644] team0: Device ipvlan1 failed to register rx_handler [ 934.479928][T12650] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2187'. [ 935.632885][T12659] fuse: Bad value for 'rootmode' [ 936.735857][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.735927][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.414948][ T5886] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 940.550375][T12688] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2193'. [ 940.572817][ T5886] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 940.572845][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.572863][ T5886] usb 2-1: config 0 has no interface number 0 [ 940.576343][ T5886] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 940.576372][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.576399][ T5886] usb 2-1: Product: syz [ 940.576413][ T5886] usb 2-1: Manufacturer: syz [ 940.576429][ T5886] usb 2-1: SerialNumber: syz [ 940.659386][ T5886] usb 2-1: config 0 descriptor?? [ 940.664598][ T5886] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 940.874917][ T5886] usb 2-1: USB disconnect, device number 39 [ 941.218154][T12700] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2189'. [ 942.143499][ T1808] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 942.565291][ T1808] usb 1-1: Using ep0 maxpacket: 32 [ 942.624109][ T1808] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 942.624140][ T1808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.628052][ T1808] usb 1-1: config 0 descriptor?? [ 942.966498][ T1808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 942.987821][ T1808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 943.002617][ T1808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 943.002655][ T1808] usb 1-1: media controller created [ 943.112008][ T1808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 944.315048][T12728] syz.2.2199 (12728): drop_caches: 2 [ 944.564899][ T1808] stb0899_attach: Driver disabled by Kconfig [ 944.564918][ T1808] az6027: no front-end attached [ 944.564918][ T1808] [ 944.566032][ T1808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 944.568205][ T1808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 945.461519][ T1808] dvb-usb: schedule remote query interval to 400 msecs. [ 945.461535][ T1808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 947.056004][ T1808] usb 1-1: USB disconnect, device number 31 [ 947.276908][ T1808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 947.897710][ T5886] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 949.225076][ T5886] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 949.225106][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.225126][ T5886] usb 3-1: config 0 has no interface number 0 [ 949.228258][ T5886] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 949.228289][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.228310][ T5886] usb 3-1: Product: syz [ 949.228325][ T5886] usb 3-1: Manufacturer: syz [ 949.228340][ T5886] usb 3-1: SerialNumber: syz [ 949.295958][ T5886] usb 3-1: config 0 descriptor?? [ 949.329178][ T5886] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 950.050199][ T5886] usb 3-1: USB disconnect, device number 23 [ 952.885253][ T5806] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 953.245580][ T5806] usb 3-1: config 2 has an invalid interface number: 169 but max is 0 [ 953.246161][ T5806] usb 3-1: config 2 has no interface number 0 [ 953.248672][ T5806] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 953.249427][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.107256][ T5806] cypress_m8 3-1:2.169: DeLorme Earthmate USB converter detected [ 954.303892][ T5806] earthmate ttyUSB0: required endpoint is missing [ 955.078420][ T5806] usb 3-1: USB disconnect, device number 24 [ 955.082193][ T5806] cypress_m8 3-1:2.169: device disconnected [ 956.766283][ T5806] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 956.917864][ T5806] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 956.917893][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.917913][ T5806] usb 1-1: config 0 has no interface number 0 [ 956.924371][ T5806] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 956.924402][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.924422][ T5806] usb 1-1: Product: syz [ 956.924436][ T5806] usb 1-1: Manufacturer: syz [ 956.924451][ T5806] usb 1-1: SerialNumber: syz [ 957.016999][ T5806] usb 1-1: config 0 descriptor?? [ 957.022460][ T5806] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 957.064914][ T5803] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 957.225709][ T5803] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 957.225738][ T5803] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 957.225757][ T5803] usb 3-1: config 0 has no interface number 0 [ 957.231425][ T5803] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 957.231457][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.231477][ T5803] usb 3-1: Product: syz [ 957.231493][ T5803] usb 3-1: Manufacturer: syz [ 957.231508][ T5803] usb 3-1: SerialNumber: syz [ 957.232196][ T5886] usb 1-1: USB disconnect, device number 32 [ 957.307585][ T5803] usb 3-1: config 0 descriptor?? [ 957.495461][ T5886] ================================================================== [ 957.495478][ T5886] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 957.495730][ T5886] Read of size 8 at addr ffffc90005a51008 by task kworker/0:5/5886 [ 957.495745][ T5886] [ 957.495762][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 957.495783][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 957.495796][ T5886] Workqueue: usb_hub_wq hub_event [ 957.495882][ T5886] Call Trace: [ 957.495890][ T5886] [ 957.495902][ T5886] dump_stack_lvl+0xe8/0x150 [ 957.495957][ T5886] print_report+0xba/0x230 [ 957.495985][ T5886] ? __list_add_valid_or_report+0x4e/0x130 [ 957.496000][ T5886] kasan_report+0x117/0x150 [ 957.496102][ T5886] ? __list_add_valid_or_report+0x4e/0x130 [ 957.496120][ T5886] __list_add_valid_or_report+0x4e/0x130 [ 957.496139][ T5886] kcov_remote_stop+0x457/0x680 [ 957.496182][ T5886] hub_event+0x49d8/0x4f60 [ 957.496213][ T5886] ? __lock_acquire+0x6b5/0x2cf0 [ 957.496250][ T5886] ? rcu_is_watching+0x15/0xb0 [ 957.496278][ T5886] ? finish_task_switch+0x161/0x920 [ 957.496311][ T5886] ? __pfx_hub_event+0x10/0x10 [ 957.496327][ T5886] ? process_scheduled_works+0xa0f/0x17a0 [ 957.496346][ T5886] ? process_scheduled_works+0xa0f/0x17a0 [ 957.496361][ T5886] ? process_scheduled_works+0xa0f/0x17a0 [ 957.496378][ T5886] process_scheduled_works+0xaec/0x17a0 [ 957.496403][ T5886] ? __pfx_process_scheduled_works+0x10/0x10 [ 957.496418][ T5886] ? do_raw_spin_lock+0x12b/0x2f0 [ 957.496438][ T5886] ? assign_work+0x3d3/0x440 [ 957.496454][ T5886] worker_thread+0x89f/0xd90 [ 957.496476][ T5886] ? __kthread_parkme+0x7a/0x1f0 [ 957.496498][ T5886] kthread+0x726/0x8b0 [ 957.496520][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 957.496538][ T5886] ? __pfx_kthread+0x10/0x10 [ 957.496557][ T5886] ? rt_spin_unlock+0x14f/0x200 [ 957.496665][ T5886] ? rt_spin_unlock+0x160/0x200 [ 957.496681][ T5886] ? __pfx_kthread+0x10/0x10 [ 957.496700][ T5886] ret_from_fork+0x51b/0xa40 [ 957.496733][ T5886] ? __pfx_ret_from_fork+0x10/0x10 [ 957.496750][ T5886] ? __switch_to+0xc82/0x1410 [ 957.496774][ T5886] ? __pfx_kthread+0x10/0x10 [ 957.496795][ T5886] ret_from_fork_asm+0x1a/0x30 [ 957.496824][ T5886] [ 957.496831][ T5886] [ 957.496835][ T5886] The buggy address belongs to a vmalloc virtual mapping [ 957.496850][ T5886] Memory state around the buggy address: [ 957.496861][ T5886] ffffc90005a50f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 957.496872][ T5886] ffffc90005a50f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 957.496885][ T5886] >ffffc90005a51000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 957.496894][ T5886] ^ [ 957.496902][ T5886] ffffc90005a51080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 957.496912][ T5886] ffffc90005a51100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 957.496921][ T5886] ================================================================== [ 957.496938][ T5886] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 957.496953][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 957.496969][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 957.496979][ T5886] Workqueue: usb_hub_wq hub_event [ 957.496997][ T5886] Call Trace: [ 957.497003][ T5886] [ 957.497009][ T5886] vpanic+0x1e0/0x670 [ 957.497030][ T5886] panic+0xc5/0xd0 [ 957.497048][ T5886] ? __pfx_panic+0x10/0x10 [ 957.497068][ T5886] ? __list_add_valid_or_report+0x4e/0x130 [ 957.497087][ T5886] ? __list_add_valid_or_report+0x4e/0x130 [ 957.497102][ T5886] check_panic_on_warn+0x89/0xb0 [ 957.497139][ T5886] ? __list_add_valid_or_report+0x4e/0x130 [ 957.497155][ T5886] end_report+0x6f/0x140 [ 957.497178][ T5886] kasan_report+0x128/0x150 [ 957.497207][ T5886] ? __list_add_valid_or_report+0x4e/0x130 [ 957.497224][ T5886] __list_add_valid_or_report+0x4e/0x130 [ 957.497241][ T5886] kcov_remote_stop+0x457/0x680 [ 957.497260][ T5886] hub_event+0x49d8/0x4f60 [ 957.497281][ T5886] ? __lock_acquire+0x6b5/0x2cf0 [ 957.497303][ T5886] ? rcu_is_watching+0x15/0xb0 [ 957.497323][ T5886] ? finish_task_switch+0x161/0x920 [ 957.497351][ T5886] ? __pfx_hub_event+0x10/0x10 [ 957.497369][ T5886] ? process_scheduled_works+0xa0f/0x17a0 [ 957.497388][ T5886] ? process_scheduled_works+0xa0f/0x17a0 [ 957.497404][ T5886] ? process_scheduled_works+0xa0f/0x17a0 [ 957.497422][ T5886] process_scheduled_works+0xaec/0x17a0 [ 957.497451][ T5886] ? __pfx_process_scheduled_works+0x10/0x10 [ 957.497468][ T5886] ? do_raw_spin_lock+0x12b/0x2f0 [ 957.497490][ T5886] ? assign_work+0x3d3/0x440 [ 957.497508][ T5886] worker_thread+0x89f/0xd90 [ 957.497531][ T5886] ? __kthread_parkme+0x7a/0x1f0 [ 957.497554][ T5886] kthread+0x726/0x8b0 [ 957.497575][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 957.497592][ T5886] ? __pfx_kthread+0x10/0x10 [ 957.497613][ T5886] ? rt_spin_unlock+0x14f/0x200 [ 957.497635][ T5886] ? rt_spin_unlock+0x160/0x200 [ 957.497653][ T5886] ? __pfx_kthread+0x10/0x10 [ 957.497676][ T5886] ret_from_fork+0x51b/0xa40 [ 957.497697][ T5886] ? __pfx_ret_from_fork+0x10/0x10 [ 957.497716][ T5886] ? __switch_to+0xc82/0x1410 [ 957.497734][ T5886] ? __pfx_kthread+0x10/0x10 [ 957.497759][ T5886] ret_from_fork_asm+0x1a/0x30 [ 957.497789][ T5886] [ 957.498157][ T5886] Kernel Offset: disabled