last executing test programs: 5.986128412s ago: executing program 3 (id=2062): socket$kcm(0x2d, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) pread64(r0, &(0x7f0000000240)=""/164, 0x131, 0x131) 5.704100012s ago: executing program 3 (id=2066): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2040) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x3, 0x3, 0x8, 0x0, 0x80, {0x5, 0x80000000000, 0x1, 0xfffffffffffffffa, 0x16f, 0xdbf, 0x10, 0x0, 0x0, 0x8000, 0x2, r1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0x1, &(0x7f0000000140), 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000200)=0x6) read$dsp(r3, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) 4.853213768s ago: executing program 1 (id=2068): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0xa40, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x8c4, 0x1, [@m_ipt={0x1bc, 0x10, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x61, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993770ebef3da299dac295f1a0bc30fe22fe588e4"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x284, 0x10, 0x0, 0x0, {{0x8}, {0x218, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x2, 0x3, "4c62fdb6c1d9e9751b85131383111291d855fa8a1919a06334c9969770bab9c51972ad6e414dec"}}, @TCA_IPT_TARG={0x59, 0x6, {0x1, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x104, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0xd9, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4c33ca5e4bc0ce96097ce357172e6ccf80818c0306fab9626b178a968b1c6b2de0b517302a9cc12fda509a7d256a4ff54a10e7946726678b31c6e99991735b21d31e8ef19e018e2c901e8d267cac71a9d3597b71e9b60fdb165fe02e8f3eaeb5739f4dfd19be90f69d368cd4f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x4c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x330, 0x11, 0x0, 0x0, {{0x8}, {0x250, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a86742f2ae2ebc984490fe68940b5658702910f2b9d1b952c7318ce607b082e9db"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xa5, 0x6, {0x3, 'mangle\x00', 0x4, 0x3, "f0f8f66d602b6783655db39e1cc948a0421e5d1393f4cd635a25e30c1719f35655ebc220059a6505e7e8de74849c425e9217e4cc351477cb2a445b66dd468c00d32929d5f3c2ea9992c262f0d79d8d361d1556aa1b2e21c4f045af07d8fce62f3493ce450ef47273cf7908ed5026fd1b3a1cab1153f7eb0951daf2"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe1, 0x6, {0x7ff, 'security\x00', 0x2, 0x8, "fed0e0dacc4fc91d4e674122609e0a6162b34895637129fc809755c2b8d7d77e2e9bd17541036e25155b436d08daa8f6d6c96ee00292d32de94a5923b4762bed536f8d1b5634ea3ad83c7aa89e9a796237166ce1d5ce33a899c82ff0563bcc2c8e4abff8f2c8062ab102025a307c9c376b51089b89c2676f13aa867fc2c454cd141b4713532c3780d291e19348fea90fbfc1fe5d0d52c7ef25d06ebd7ca66eb9f552a3c5d6a9dcd88011be9ee1bd641a022baf2be1d2fb"}}]}, {0xb9, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e06c018a8c4dce0e1f509600cfc2deb018c8cedc9a9d619d63faf53492c28f9fd99c2952312d7437c45dc56b17dc63d3e5e97ab2a16ee79c81478e10ba888305e6817945a0b68306a971c4a2382bd9577b679196987065bd27745023d7a979e0bde20eb6328afee98a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0xb4, 0x1, [@m_ipt={0xb0, 0x19, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x61, 0x6, "5b552808c4f855d42574e321cb5abef9071c2889dec481d329f3fd277e0f2b61e85d27e607a3831d6a64d9bd6b7fd54d812c60899c05ac69b067f62b5bdadcb9bc9fee49c623547e8ec19586ef91a396b284ec971c6b9d5ac0d3acb48f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x4}, {0xac, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x2c, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ipt={0x50, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x4}]}, 0xa40}, 0x1, 0x0, 0x0, 0x8004}, 0x880) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x0, 0x48574653, 0x1, @discrete={0xff, 0xfffffeff}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x0, {0xffffffffffffffff, 0x2, 0x400000b, 0x0, 0xfbfffffe}, 0xfffffffe}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) setsockopt$sock_attach_bpf(r6, 0x6, 0x21, 0x0, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r10, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$FUSE_INIT(r11, &(0x7f000000c3c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3ff, 0x5, 0x101, 0x4, 0xe, 0xd, 0x0, 0x0, 0x20, 0xb}}, 0x50) close_range(r3, 0xffffffffffffffff, 0x0) 4.619622145s ago: executing program 4 (id=2072): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)={0x0, 0x4f4}, 0x1, 0x0, 0x0, 0x8030}, 0x0) 4.617425865s ago: executing program 1 (id=2073): socket$inet(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@nullb, 0x0, &(0x7f0000000000)='.\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000fc0)={0x2, @sdr={0x3032344d, 0x80000000}}) r4 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x202000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @sack_perm], 0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0xb4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3ff}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xb4}}, 0x0) r8 = socket(0x2, 0x3, 0x81) setsockopt(r8, 0xff, 0x1, 0x0, 0x26) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="320400001000000004010ec910fc0100000000000000000000000000000105000000000001070084000000000000000020001efe131e7c7734adada1be991573cb801dc65f0aaffce4760a15a21ef3d24afc76bd3054616ae656c6e48ef4c7e62d3d278c7c6d013929615b3acc5595b856b9eda90321a20de8ae1a105b0bc67e8bcc95966dd26d51fb40e68eaa75d398a6"], 0x30) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000840), 0x4) lseek(r5, 0x40000007, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) 4.528791868s ago: executing program 4 (id=2075): r0 = openat$panthor(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f0000000040)={0x0, 0x1, 0xc58}) 4.419529312s ago: executing program 4 (id=2077): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000600)=0x3, 0x4) 4.124271461s ago: executing program 2 (id=2079): chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x1d8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 4.035696324s ago: executing program 2 (id=2080): r0 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x4002, 0x0) socket(0x23, 0x1, 0x6) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bacf314aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) 3.951106076s ago: executing program 2 (id=2081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x8000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x50a}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x6, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x5, 0x2, r2}) 3.86011081s ago: executing program 2 (id=2082): unshare(0x24060400) socket$packet(0x11, 0x3, 0x300) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x48c02) write$FUSE_LSEEK(r0, 0x0, 0x0) 3.50358597s ago: executing program 4 (id=2083): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000280)=[@release={0x40046306, 0x2}, @dead_binder_done, @release={0x40046306, 0x2}, @free_buffer], 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, 0x0) write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="0e"], 0xc) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000580)={{0xe000, 0x50000, 0xf, 0xf, 0xf3, 0x0, 0x0, 0x40, 0xf, 0x2, 0x9, 0xe6}, {0xf000, 0x8000000, 0x10, 0x9, 0x2, 0x4, 0x3, 0x84, 0x9, 0x3, 0x8, 0xc2}, {0x60000, 0x25000, 0x10, 0x7, 0x5, 0xfc, 0x10, 0x26, 0x10, 0x9, 0x1a, 0x7}, {0x50000, 0xe000, 0xb, 0x7, 0x1, 0x4, 0xc0, 0x3, 0x80, 0x3, 0x4c, 0x81}, {0x5a000, 0x2000, 0xa, 0x7f, 0x2, 0xa8, 0x9, 0x3, 0x5, 0x3, 0x3, 0x75}, {0x10000, 0x100000, 0x8, 0xed, 0x3, 0x80, 0x16, 0xff, 0x3, 0x3, 0x1, 0x8}, {0xc000, 0x8080000, 0x8, 0x2, 0xf, 0xd, 0x2, 0x94, 0xc, 0x7, 0x9, 0x1}, {0x41000, 0xfec00000, 0x3, 0x5, 0x1, 0x7, 0x2, 0xb, 0x10, 0x1, 0xc9, 0x2}, {0x2000, 0xf7}, {0xd000, 0x1}, 0x9, 0x0, 0x2000, 0x0, 0xe, 0x1000, 0x70000, [0x0, 0x2, 0x2, 0x200]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000933000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x1e01, 0x1e01, 0xfffff9, 0x80000440], 0x0, 0x0, &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 3.308508967s ago: executing program 0 (id=2085): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38, 0x0, 0x0, 0x0, r2}]) 3.127182932s ago: executing program 0 (id=2086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.993815257s ago: executing program 0 (id=2087): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x70bd28, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x64e98, 0x12ac1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x2}, @IFLA_BRPORT_PRIORITY={0x6}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 2.899833229s ago: executing program 0 (id=2088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x2, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xe, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xd}}]}}]}, 0x40}}, 0x800) 2.636497948s ago: executing program 0 (id=2089): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x1ff, 0x72, 0x8, 0x2, 0x1, 0xfffffffa, 0x6f2, 0x9, 0xb00, 0x17, 0xb, 0x1c, 0x8, 0x7, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "6a5c8d6e56a3857dfcdef7b2cc5943f5ab90a2a3c7b5b43b3c90ba420a16d00355354d134f9c2ee484adb8416e3f180a4b2d6e5552aa66ae89476a7ec13c04c39a107796cd115bcf28d72b188105acd71d1fee6f6a325169ef91d1e19089385aca27a7ccbdb2c2869cd2985c286e09ae436b1fed83c1b7d7fab107eb218151a560723252a1b16822925e4a160f93b0d43d9ba46411be3bcbad2c3f1e11a392b690c802177bd3ed3d1c2f69044f98128018c150e2c4b6322face88f5ed2cd741343af9eac5a454120c13ddc503835cbad8646351ba5d4af335af601dac0231ef35eb8933c4b7c235387bf398a3a26e3efbadc1616242f1131028e424db8c55351"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 2.634115078s ago: executing program 3 (id=2090): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x803, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)="95e0630926", 0x5}], 0x1}}], 0x1, 0x4004) socket$can_raw(0x1d, 0x3, 0x1) close(0x3) 2.5534789s ago: executing program 1 (id=2091): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000003c0)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, 0x0, 0x2000010) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x2, 0x2}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a440000000010109024a000101fd207e09040001ff02020000052406000005240000000d240f010000000000000000f2052407"], 0x0) bind$tipc(r3, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000080)) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000140)={{0x8, 0x1, &(0x7f00000000c0)=[{0xa1, 0x0, 0x400}]}, 0xb5, 0x80, 0x80, 0x2, 0x0, 0x100000001, 0x28, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r4, 0xc010644a, &(0x7f00000001c0)={r5}) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000100)={0x0, 0x7, 0x7, &(0x7f0000000080)={0x11, "a73b6cd937b8a60b7d166e63a88d79c999dbc9fa29b475a3a9f393d5189793be0b"}}) close(0x3) landlock_restrict_self(0xffffffffffffffff, 0x4) 2.318695618s ago: executing program 0 (id=2092): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f00000081c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000002200)=""/4096, 0x1000}, {0x0}], 0x3}, 0xfffffffc}, {{&(0x7f0000000bc0)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000fc0)=""/10, 0xa}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003d91b4440210451dfebd701020301090246008a090c0001090466000002fe480a05"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 1.663248688s ago: executing program 3 (id=2093): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e1e, @multicast2}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0xfffffffa, 0x80000001}, 0x8) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) close(r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x0, 0x0) r2 = gettid() capset(&(0x7f0000000040)={0x399f1316, r2}, &(0x7f0000000140)={0xcc9e, 0x26cc82c8, 0x7, 0x12518a60, 0x7, 0x9}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) 780.875096ms ago: executing program 2 (id=2094): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b46, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0xbdd, &(0x7f0000000080)={0x0, 0x48e0, 0x2, 0x3, 0x40000336}, &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r3, 0x847ba, 0x2000, 0x4b, 0x0, 0x53) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="ffac054de09740789d075b19b8dc1a64226bb165769f28e79b318400", 0x1c}], 0x1}, 0x20004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r6 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x40) ioctl$MON_IOCX_MFETCH(r6, 0xc00c9207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x862}) r7 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000180)={[0x80000000]}, 0x8) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r8, 0x0, 0x0) 651.78437ms ago: executing program 2 (id=2095): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8007}, 'syz0\x00', 0x3e}) r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0xc, 0x0, &(0x7f0000000940)=ANY=[]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20810100"], 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a80200004030007"], 0x1c}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_procfs(0x0, 0x0) readv(r4, &(0x7f0000000100), 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "61b2c13a64c7a3fdf4d8186dbecd6aa50d61f492573729589a196e8b82f9c7b17428dc5c3d91bc5d5aad038e9c2edb9399d0214d28bc8710b6d5b4b201efe3b6", 0x11}, 0x48, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4d83, 0x101200) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000340)=""/90) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x4, 0x24, 0x0, 0x0, 0x3f}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) 563.584133ms ago: executing program 4 (id=2096): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 535.155124ms ago: executing program 1 (id=2097): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42035, 0xad85}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040014}, 0x84) 373.624669ms ago: executing program 1 (id=2098): r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r0, 0x4, {0x0, 0x0, 0x0, 0x5, 0x2e, 0x0, 0x9, 0xa, 0x4, "19c3783780553a669ced6dc529c57d6231f4b2400982c4762239b994d521f3d204a42ae2a2db1d714fe6e69594c00948282b64dbeb836ef69499f714e61f484b", "6f455b497dbe5b0c75360583735f15fde874319da958c779ad83e25aec23b3372a4d5018d21a76ce57642f27025d55568da93ee718ce8137e900dc4c1797eeb4", "60eb544de890383549761d475aa9d2cb1990597a114b2618815b97c0cc5d0e32", [0x3, 0x10001]}}) mount$fuse(0x0, 0x0, 0x0, 0x200812, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',']) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1bd4000c"], 0xffdd) 227.473613ms ago: executing program 3 (id=2099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x2, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xe, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xd}}]}}]}, 0x40}}, 0x800) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r7) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000180)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 81.075578ms ago: executing program 1 (id=2100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x2, 0x27000000}}}}]}, 0x78}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xe, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xd}}]}}]}, 0x40}}, 0x800) 5.50313ms ago: executing program 3 (id=2101): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, 0x0) r3 = dup(r1) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000, 0x800020, 0x3fffffffffffffff, 0x20000005f, 0x106c, 0xfe, 0x8000000000000, 0xa21, 0x1000, 0x8, 0x0, 0x4, 0x0, 0x8004], 0x54000, 0x1c0200}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 4 (id=2102): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x1ff, 0x72, 0x8, 0x2, 0x1, 0xfffffffa, 0x6f2, 0x9, 0xb00, 0x17, 0xb, 0x1c, 0x8, 0x7, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) kernel console output (not intermixed with test programs): err -32 [ 300.491511][ T4235] vc032x: probe of 4-1:0.255 failed with error -32 [ 300.566954][ T1107] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 300.667499][ T1107] usb 3-1: device descriptor read/8, error -71 [ 300.694466][ T9468] __nla_validate_parse: 11 callbacks suppressed [ 300.694496][ T9468] netlink: 5968 bytes leftover after parsing attributes in process `syz.4.1429'. [ 300.786524][ T23] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 300.797275][ T23] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 300.806796][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 300.816166][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.936429][ T1107] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 301.036831][ T1107] usb 3-1: device descriptor read/8, error -71 [ 301.115953][ T9479] 8021q: adding VLAN 0 to HW filter on device bond12 [ 301.128993][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 301.156550][ T1107] usb usb3-port1: unable to enumerate USB device [ 301.192852][ T9482] device syzkaller0 entered promiscuous mode [ 301.326912][ T9484] netlink: 'syz.0.1434': attribute type 1 has an invalid length. [ 301.899466][ T9491] device syzkaller0 entered promiscuous mode [ 301.968717][ T23] usb 4-1: USB disconnect, device number 40 [ 302.597487][ T9504] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 302.617320][ T9498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 302.640913][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1439'. [ 302.671152][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1439'. [ 302.684883][ T9498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1439'. [ 302.710698][ T9498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1439'. [ 303.166492][ T1107] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 303.546703][ T1107] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 303.557579][ T1107] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 303.566780][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 303.661581][ T9468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.742510][ T1107] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 303.777718][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.806141][ T1107] usb 4-1: Product: syz [ 303.816153][ T1107] usb 4-1: Manufacturer: syz [ 303.827693][ T1107] usb 4-1: SerialNumber: syz [ 303.832903][ T4232] usb 2-1: USB disconnect, device number 47 [ 303.843401][ T1107] usb 4-1: config 0 descriptor?? [ 303.850525][ T9513] 8021q: adding VLAN 0 to HW filter on device bond8 [ 303.899141][ T1107] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 303.907062][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 303.908609][ T1107] usb 4-1: No valid video chain found. [ 304.056048][ T9517] device syzkaller0 entered promiscuous mode [ 304.101671][ T4235] usb 4-1: USB disconnect, device number 41 [ 304.138822][ T9522] netlink: 'syz.1.1446': attribute type 1 has an invalid length. [ 304.576579][ T21] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 304.776320][ T21] usb 3-1: device descriptor read/64, error -71 [ 304.839258][ T9552] device syzkaller0 entered promiscuous mode [ 305.066331][ T21] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 305.102897][ T9556] netlink: 5968 bytes leftover after parsing attributes in process `syz.3.1455'. [ 305.256415][ T21] usb 3-1: device descriptor read/64, error -71 [ 305.318491][ T9561] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 305.334672][ T9561] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 305.366385][ T9561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1456'. [ 305.376184][ T9561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1456'. [ 305.382574][ T21] usb usb3-port1: attempt power cycle [ 305.786524][ T4232] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 305.806391][ T21] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 305.896495][ T21] usb 3-1: device descriptor read/8, error -71 [ 306.156612][ T4232] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 306.167027][ T21] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 306.174711][ T4232] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 306.185912][ T4232] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.199297][ T4232] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 306.208586][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.266747][ T21] usb 3-1: device descriptor read/8, error -71 [ 306.328585][ T4232] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 306.353206][ T5055] udevd[5055]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.396765][ T21] usb usb3-port1: unable to enumerate USB device [ 307.213980][ T9577] 8021q: adding VLAN 0 to HW filter on device bond9 [ 307.229020][ T9577] __nla_validate_parse: 2 callbacks suppressed [ 307.229037][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 307.315455][ T9580] device syzkaller0 entered promiscuous mode [ 307.420779][ T9582] netlink: 'syz.0.1461': attribute type 1 has an invalid length. [ 307.624743][ T9590] device syzkaller0 entered promiscuous mode [ 308.032142][ T9556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.047433][ T21] usb 5-1: USB disconnect, device number 37 [ 308.437832][ T9612] 8021q: adding VLAN 0 to HW filter on device bond10 [ 308.585680][ T9617] device syzkaller0 entered promiscuous mode [ 308.676567][ T23] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 308.778790][ T9619] netlink: 'syz.4.1473': attribute type 1 has an invalid length. [ 308.876315][ T23] usb 4-1: device descriptor read/64, error -71 [ 308.948802][ T9625] device syzkaller0 entered promiscuous mode [ 309.116339][ T4713] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 309.146365][ T23] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 309.288036][ T9632] netlink: 5968 bytes leftover after parsing attributes in process `syz.4.1479'. [ 309.346319][ T23] usb 4-1: device descriptor read/64, error -71 [ 309.356476][ T4713] usb 3-1: Using ep0 maxpacket: 8 [ 309.466653][ T23] usb usb4-port1: attempt power cycle [ 309.476742][ T4713] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 309.495185][ T4713] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 309.505290][ T4713] usb 3-1: config 0 has no interface number 0 [ 309.517824][ T4713] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 309.529568][ T4713] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 309.545536][ T4713] usb 3-1: config 0 interface 255 has no altsetting 0 [ 309.552648][ T4713] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 309.562317][ T4713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.583452][ T4713] usb 3-1: config 0 descriptor?? [ 309.591933][ T9640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1480'. [ 309.601557][ T9640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1480'. [ 309.611223][ T9640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1480'. [ 309.620643][ T9640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1480'. [ 309.632290][ T4713] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 309.876524][ T23] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 309.976694][ T23] usb 4-1: device descriptor read/8, error -71 [ 310.246506][ T23] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 310.276387][ T4713] gspca_vc032x: reg_r err -32 [ 310.281262][ T4713] vc032x: probe of 3-1:0.255 failed with error -32 [ 310.336845][ T23] usb 4-1: device descriptor read/8, error -71 [ 310.456653][ T23] usb usb4-port1: unable to enumerate USB device [ 311.045299][ T9647] device syzkaller0 entered promiscuous mode [ 311.325650][ T9652] 8021q: adding VLAN 0 to HW filter on device bond9 [ 311.816359][ T21] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 311.901863][ T23] usb 3-1: USB disconnect, device number 42 [ 311.963670][ T9662] device syzkaller0 entered promiscuous mode [ 312.176647][ T21] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 312.196607][ T21] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 312.212916][ T9632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.216739][ T21] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.297123][ T21] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 312.329846][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.389449][ T9671] device syzkaller0 entered promiscuous mode [ 312.465484][ T21] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 312.504028][ T5055] udevd[5055]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.643690][ T21] usb 4-1: USB disconnect, device number 46 [ 313.443785][ T9698] 8021q: adding VLAN 0 to HW filter on device bond10 [ 313.502563][ T9702] device syzkaller0 entered promiscuous mode [ 313.646799][ T4235] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 313.734725][ T9706] device syzkaller0 entered promiscuous mode [ 313.792952][ T9710] netlink: 5968 bytes leftover after parsing attributes in process `syz.4.1500'. [ 313.933521][ T9715] device syzkaller0 entered promiscuous mode [ 314.017108][ T4261] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 314.066708][ T4235] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 314.082484][ T4235] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 314.094121][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'. [ 314.111858][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'. [ 314.121615][ T4235] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 314.126570][ T9721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1503'. [ 314.194584][ T9721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1503'. [ 314.286358][ T4261] usb 4-1: Using ep0 maxpacket: 8 [ 314.336684][ T4235] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 314.345806][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.378687][ T4235] usb 3-1: Product: syz [ 314.392261][ T4235] usb 3-1: Manufacturer: syz [ 314.415656][ T4235] usb 3-1: SerialNumber: syz [ 314.436543][ T4261] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 314.449272][ T4235] usb 3-1: config 0 descriptor?? [ 314.458104][ T4261] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 314.471470][ T4261] usb 4-1: config 0 has no interface number 0 [ 314.481371][ T4261] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 314.493699][ T4261] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 314.510187][ T4235] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 314.522066][ T4261] usb 4-1: config 0 interface 255 has no altsetting 0 [ 314.533087][ T4235] usb 3-1: No valid video chain found. [ 314.538927][ T4261] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 314.561454][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.581115][ T4261] usb 4-1: config 0 descriptor?? [ 314.634354][ T4261] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 314.712423][ T4229] usb 3-1: USB disconnect, device number 43 [ 315.056619][ T4713] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 315.276522][ T4261] gspca_vc032x: reg_r err -71 [ 315.281335][ T4261] vc032x: probe of 4-1:0.255 failed with error -71 [ 315.309646][ T4261] usb 4-1: USB disconnect, device number 47 [ 315.416635][ T4713] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 315.427707][ T4713] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 315.448073][ T4713] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.471406][ T4713] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 315.489853][ T4713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.521990][ T9742] 8021q: adding VLAN 0 to HW filter on device bond9 [ 315.598159][ T4713] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 315.642842][ T5055] udevd[5055]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.769628][ T4713] usb 2-1: USB disconnect, device number 48 [ 315.820740][ T9750] device syzkaller0 entered promiscuous mode [ 315.945789][ T9755] device syzkaller0 entered promiscuous mode [ 316.039077][ T9756] netlink: 5968 bytes leftover after parsing attributes in process `syz.3.1513'. [ 316.288753][ T9763] device syzkaller0 entered promiscuous mode [ 316.453595][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1516'. [ 316.466557][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1516'. [ 316.503667][ T9772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1516'. [ 316.536428][ T9772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1516'. [ 316.913087][ T9788] 8021q: adding VLAN 0 to HW filter on device bond11 [ 316.919994][ T4261] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 317.060248][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.066666][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.211791][ T9799] device syzkaller0 entered promiscuous mode [ 317.316691][ T4261] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 317.336501][ T4261] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 317.376022][ T4261] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 317.539584][ T9810] device syzkaller0 entered promiscuous mode [ 317.576979][ T4261] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 317.588187][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.597163][ T4261] usb 5-1: Product: syz [ 317.601393][ T4261] usb 5-1: Manufacturer: syz [ 317.606014][ T4261] usb 5-1: SerialNumber: syz [ 317.613555][ T4261] usb 5-1: config 0 descriptor?? [ 317.669228][ T4261] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 317.680378][ T4261] usb 5-1: No valid video chain found. [ 317.756331][ T4713] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 317.866586][ T4235] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 317.883340][ T1107] usb 5-1: USB disconnect, device number 38 [ 317.996328][ T4713] usb 2-1: Using ep0 maxpacket: 8 [ 318.116518][ T4713] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 318.134930][ T4713] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 318.142819][ T4713] usb 2-1: config 0 has no interface number 0 [ 318.149186][ T4713] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 318.160633][ T4713] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 318.174386][ T4713] usb 2-1: config 0 interface 255 has no altsetting 0 [ 318.181927][ T4713] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 318.192043][ T4713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.205276][ T4713] usb 2-1: config 0 descriptor?? [ 318.248701][ T4713] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 318.296542][ T4235] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 318.316465][ T4235] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 318.336555][ T4235] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.376423][ T4235] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 318.396386][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.463960][ T9825] device syzkaller0 entered promiscuous mode [ 318.473450][ T4235] usb 4-1: invalid MIDI out EP 0 [ 318.522334][ T4235] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 318.565937][ T8876] udevd[8876]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.676000][ T4235] usb 4-1: USB disconnect, device number 48 [ 318.874591][ T9831] __nla_validate_parse: 1 callbacks suppressed [ 318.874604][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1533'. [ 318.906442][ T4713] gspca_vc032x: reg_r err -71 [ 318.911277][ T4713] vc032x: probe of 2-1:0.255 failed with error -71 [ 318.951915][ T4713] usb 2-1: USB disconnect, device number 49 [ 318.979232][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1533'. [ 319.016729][ T9831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1533'. [ 319.026473][ T9831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1533'. [ 319.128735][ T9835] 8021q: adding VLAN 0 to HW filter on device bond11 [ 319.348161][ T9844] device syzkaller0 entered promiscuous mode [ 319.487090][ T9847] device syzkaller0 entered promiscuous mode [ 319.626467][ T9849] netlink: 5968 bytes leftover after parsing attributes in process `syz.4.1539'. [ 319.994120][ T9859] device syzkaller0 entered promiscuous mode [ 320.608940][ T9879] 8021q: adding VLAN 0 to HW filter on device bond12 [ 320.622782][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 320.769891][ T9887] device syzkaller0 entered promiscuous mode [ 320.930859][ T9891] device syzkaller0 entered promiscuous mode [ 321.421453][ T9903] device syzkaller0 entered promiscuous mode [ 321.436493][ T4261] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 321.886773][ T4261] usb 2-1: unable to get BOS descriptor or descriptor too short [ 321.926886][ T4261] usb 2-1: not running at top speed; connect to a high speed hub [ 321.934731][ T4261] usb 2-1: no configurations [ 321.939924][ T4261] usb 2-1: can't read configurations, error -22 [ 322.096334][ T4261] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 322.490120][ T9855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.508265][ T4261] usb 2-1: unable to get BOS descriptor or descriptor too short [ 322.586780][ T4261] usb 2-1: not running at top speed; connect to a high speed hub [ 322.626947][ T4261] usb 2-1: no configurations [ 322.631609][ T4261] usb 2-1: can't read configurations, error -22 [ 322.656507][ T4261] usb usb2-port1: attempt power cycle [ 322.736219][ T9914] 8021q: adding VLAN 0 to HW filter on device bond10 [ 322.774850][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1558'. [ 323.096441][ T4261] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 323.238135][ T9927] device syzkaller0 entered promiscuous mode [ 323.376641][ T4261] usb 2-1: unable to get BOS descriptor or descriptor too short [ 323.426626][ T4261] usb 2-1: not running at top speed; connect to a high speed hub [ 323.434472][ T4261] usb 2-1: no configurations [ 323.456504][ T4261] usb 2-1: can't read configurations, error -22 [ 323.482000][ T9932] device syzkaller0 entered promiscuous mode [ 323.550721][ T9933] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9933] [ 323.616562][ T4261] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 323.866604][ T4261] usb 2-1: unable to get BOS descriptor or descriptor too short [ 323.916541][ T4261] usb 2-1: not running at top speed; connect to a high speed hub [ 323.924390][ T4261] usb 2-1: no configurations [ 323.953291][ T4261] usb 2-1: can't read configurations, error -22 [ 323.977638][ T9948] device syzkaller0 entered promiscuous mode [ 323.983972][ T4261] usb usb2-port1: unable to enumerate USB device [ 324.189617][ T9952] netlink: 5968 bytes leftover after parsing attributes in process `syz.1.1569'. [ 324.256855][ T23] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 324.566564][ T4232] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 324.676474][ T23] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 324.696394][ T23] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 324.712146][ T23] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.734998][ T23] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.747517][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.829891][ T23] usb 5-1: invalid MIDI out EP 0 [ 324.889640][ T23] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 324.934189][ T8993] udevd[8993]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.996584][ T4232] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 325.016314][ T4232] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 325.045605][ T4232] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 325.171346][ T9969] device syzkaller0 entered promiscuous mode [ 325.256703][ T4232] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 325.265801][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.306335][ T4232] usb 4-1: Product: syz [ 325.310557][ T4232] usb 4-1: Manufacturer: syz [ 325.315178][ T4232] usb 4-1: SerialNumber: syz [ 325.337913][ T4232] usb 4-1: config 0 descriptor?? [ 325.388559][ T4232] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 325.395084][ T4232] usb 4-1: No valid video chain found. [ 325.590576][ T4232] usb 4-1: USB disconnect, device number 49 [ 325.851560][ T9974] device syzkaller0 entered promiscuous mode [ 326.656560][ T13] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 327.056756][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 327.084985][ T9952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.105126][ T13] usb 4-1: not running at top speed; connect to a high speed hub [ 327.124915][ T13] usb 4-1: no configurations [ 327.139035][ T13] usb 4-1: can't read configurations, error -22 [ 327.185020][ T4261] usb 5-1: USB disconnect, device number 39 [ 327.275153][ T9990] device syzkaller0 entered promiscuous mode [ 327.316651][ T13] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 327.628764][ T9998] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9998] [ 327.642288][ T4261] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 327.726565][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 327.846638][ T13] usb 4-1: not running at top speed; connect to a high speed hub [ 327.854435][ T13] usb 4-1: no configurations [ 327.876556][ T4261] usb 5-1: Using ep0 maxpacket: 8 [ 327.884350][ T13] usb 4-1: can't read configurations, error -22 [ 327.917443][ T13] usb usb4-port1: attempt power cycle [ 327.950151][T10002] device syzkaller0 entered promiscuous mode [ 327.996538][ T4261] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 328.009422][ T4261] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 328.029444][ T4261] usb 5-1: config 0 has no interface number 0 [ 328.040361][ T4261] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 328.071838][ T4261] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 328.102409][ T4261] usb 5-1: config 0 interface 255 has no altsetting 0 [ 328.117131][ T4261] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 328.136046][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.159939][ T4261] usb 5-1: config 0 descriptor?? [ 328.208704][ T4261] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 328.323588][T10004] 8021q: adding VLAN 0 to HW filter on device bond13 [ 328.346731][ T13] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 328.646468][ T4261] gspca_vc032x: reg_w err -71 [ 328.651266][ T4261] vc032x: probe of 5-1:0.255 failed with error -71 [ 328.658146][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 328.699880][ T4261] usb 5-1: USB disconnect, device number 40 [ 328.706760][ T13] usb 4-1: not running at top speed; connect to a high speed hub [ 328.721397][ T13] usb 4-1: no configurations [ 328.741628][ T13] usb 4-1: can't read configurations, error -22 [ 328.916335][ T13] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 329.145670][T10015] netlink: 5968 bytes leftover after parsing attributes in process `syz.2.1590'. [ 329.206569][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 329.303768][ T13] usb 4-1: no configurations [ 329.308966][ T13] usb 4-1: can't read configurations, error -22 [ 329.327308][ T13] usb usb4-port1: unable to enumerate USB device [ 329.343185][T10026] device syzkaller0 entered promiscuous mode [ 329.436309][ T4261] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 329.662640][T10036] device syzkaller0 entered promiscuous mode [ 329.816463][ T4261] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 329.837655][ T4261] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 329.861194][ T4261] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 329.883438][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.927564][T10038] 8021q: adding VLAN 0 to HW filter on device bond14 [ 329.969622][ T4261] usb 2-1: invalid MIDI out EP 0 [ 330.055807][ T4261] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 330.115814][ T8993] udevd[8993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.472187][T10050] device syzkaller0 entered promiscuous mode [ 330.876517][ T4712] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 331.116513][ T4712] usb 4-1: Using ep0 maxpacket: 8 [ 331.236560][ T4712] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 331.244822][ T4712] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 331.266379][ T4712] usb 4-1: config 0 has no interface number 0 [ 331.286384][ T4712] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 331.298303][ T4712] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 331.316681][ T4712] usb 4-1: config 0 interface 255 has no altsetting 0 [ 331.323537][ T4712] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 331.332773][ T4712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.350105][ T4712] usb 4-1: config 0 descriptor?? [ 331.391670][ T4712] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 331.816815][ T4712] gspca_vc032x: reg_w err -71 [ 331.821585][ T4712] vc032x: probe of 4-1:0.255 failed with error -71 [ 331.838111][ T4712] usb 4-1: USB disconnect, device number 54 [ 332.069780][T10015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.170541][ T7770] usb 2-1: USB disconnect, device number 54 [ 332.266968][T10061] device syzkaller0 entered promiscuous mode [ 332.646373][ T13] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 333.056731][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 333.106581][ T13] usb 5-1: not running at top speed; connect to a high speed hub [ 333.206837][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.236498][ T13] usb 5-1: config 0 has no interfaces? [ 333.426640][ T13] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 333.470568][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.543932][ T13] usb 5-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻チꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 333.573443][T10085] device syzkaller0 entered promiscuous mode [ 333.630015][ T13] usb 5-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈d똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 333.664199][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.722206][T10088] 8021q: adding VLAN 0 to HW filter on device bond13 [ 333.734767][ T13] usb 5-1: SerialNumber: syz [ 333.748770][ T13] usb 5-1: config 0 descriptor?? [ 334.070415][T10103] device syzkaller0 entered promiscuous mode [ 334.353776][T10117] device syzkaller0 entered promiscuous mode [ 334.537414][T10121] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10121] [ 335.166491][ T4712] usb 5-1: USB disconnect, device number 41 [ 336.021215][T10132] device syzkaller0 entered promiscuous mode [ 336.275738][T10134] 8021q: adding VLAN 0 to HW filter on device bond11 [ 336.648315][T10151] device syzkaller0 entered promiscuous mode [ 336.836538][ T4232] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 336.964934][T10155] device syzkaller0 entered promiscuous mode [ 337.084670][T10107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.276648][ T4232] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.296417][ T4232] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 337.358758][ T4232] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 337.404031][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.471397][ T4232] usb 2-1: invalid MIDI out EP 0 [ 337.582833][ T4232] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 337.655361][ T8993] udevd[8993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.693831][ T23] usb 2-1: USB disconnect, device number 55 [ 337.738047][T10182] device syzkaller0 entered promiscuous mode [ 337.856550][ T7770] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 338.286558][ T7770] usb 5-1: unable to get BOS descriptor or descriptor too short [ 338.356388][ T7770] usb 5-1: not running at top speed; connect to a high speed hub [ 338.434803][T10191] device syzkaller0 entered promiscuous mode [ 338.456517][ T7770] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.490058][ T7770] usb 5-1: config 0 has no interfaces? [ 338.646664][ T7770] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 338.663387][ T7770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.682017][ T7770] usb 5-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻チꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 338.723361][ T7770] usb 5-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈d똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 338.758184][ T7770] usb 5-1: SerialNumber: syz [ 338.765289][ T7770] usb 5-1: config 0 descriptor?? [ 338.936089][T10205] device syzkaller0 entered promiscuous mode [ 339.269347][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 339.303651][T10216] device syzkaller0 entered promiscuous mode [ 339.508934][T10225] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 339.533608][T10225] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 339.827598][ T13] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 339.885326][T10234] device syzkaller0 entered promiscuous mode [ 340.129644][ T4261] usb 5-1: USB disconnect, device number 42 [ 340.150684][T10242] device syzkaller0 entered promiscuous mode [ 340.186619][ T13] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 340.206656][ T13] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 340.226316][ T13] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 340.246653][ T13] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 340.265775][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.369557][ T13] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 340.404261][ T8993] udevd[8993]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.823666][T10256] device syzkaller0 entered promiscuous mode [ 342.053082][T10258] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 342.065528][T10258] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 342.998744][T10236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.122439][ T13] usb 3-1: USB disconnect, device number 44 [ 343.234941][T10270] device syzkaller0 entered promiscuous mode [ 343.500941][T10290] 8021q: adding VLAN 0 to HW filter on device bond14 [ 343.512457][T10290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1673'. [ 343.546311][ T4261] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 343.676722][ T13] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 343.731676][T10297] device syzkaller0 entered promiscuous mode [ 343.956630][ T4261] usb 5-1: unable to get BOS descriptor or descriptor too short [ 344.076520][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 344.126888][ T13] usb 3-1: not running at top speed; connect to a high speed hub [ 344.139970][T10306] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 344.151325][T10306] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 344.206653][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.217021][ T4261] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 344.227633][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.235734][ T13] usb 3-1: config 0 has no interfaces? [ 344.241939][ T4261] usb 5-1: Product: syz [ 344.246199][ T4261] usb 5-1: Manufacturer: syz [ 344.251694][ T4261] usb 5-1: SerialNumber: syz [ 344.396533][ T13] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 344.405959][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.414860][ T13] usb 3-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻チꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 344.436794][ T13] usb 3-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈d똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 344.471979][ T13] usb 3-1: SerialNumber: syz [ 344.488860][ T13] usb 3-1: config 0 descriptor?? [ 344.607772][T10279] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.616044][T10279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.623321][T10279] IPv6: NLM_F_CREATE should be set when creating new route [ 344.630652][T10279] IPv6: NLM_F_CREATE should be set when creating new route [ 344.637933][T10279] IPv6: NLM_F_CREATE should be set when creating new route [ 344.648063][T10279] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1671'. [ 344.796548][ T4261] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 344.832288][ T4261] usb 5-1: USB disconnect, device number 43 [ 345.058323][ T8996] udevd[8996]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.666333][ T7770] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 346.056573][ T7770] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 346.067869][ T7770] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 346.078021][ T7770] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 346.088172][ T7770] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 346.097936][ T7770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.211233][ T7770] snd-usb-audio: probe of 5-1:27.0 failed with error -12 [ 346.224825][ T5055] udevd[5055]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.247654][ T7770] usb 3-1: USB disconnect, device number 45 [ 346.806520][ T7770] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 346.904276][T10300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.928579][ T4261] usb 5-1: USB disconnect, device number 44 [ 347.166604][ T7770] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 347.186454][ T7770] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 347.205638][ T7770] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.234790][T10334] 8021q: adding VLAN 0 to HW filter on device bond12 [ 347.252555][T10336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1685'. [ 347.386519][ T7770] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 347.395620][ T7770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.416366][ T7770] usb 3-1: Product: syz [ 347.420605][ T7770] usb 3-1: Manufacturer: syz [ 347.425246][ T7770] usb 3-1: SerialNumber: syz [ 347.456616][ T7770] usb 3-1: config 0 descriptor?? [ 347.498651][ T7770] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 347.505294][ T7770] usb 3-1: No valid video chain found. [ 347.700970][ T7770] usb 3-1: USB disconnect, device number 46 [ 347.730063][T10342] device syzkaller0 entered promiscuous mode [ 348.495610][T10364] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 348.527508][T10364] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 348.736875][ T4229] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 349.061907][ T4261] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 349.186661][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 349.236536][ T4229] usb 3-1: not running at top speed; connect to a high speed hub [ 349.327495][ T4229] usb 3-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 349.338395][ T4229] usb 3-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 349.379124][ T4712] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 349.526867][ T4261] usb 5-1: unable to get BOS descriptor or descriptor too short [ 349.555957][ T4229] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 349.566527][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.574559][ T4229] usb 3-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻チꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 349.596402][ T4261] usb 5-1: not running at top speed; connect to a high speed hub [ 349.605488][ T4229] usb 3-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈d똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 349.641088][ T4229] usb 3-1: SerialNumber: syz [ 349.717104][ T4261] usb 5-1: config 9 has too many interfaces: 138, using maximum allowed: 32 [ 349.727077][ T4261] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 349.738461][ T4261] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 138 [ 349.748058][ T4261] usb 5-1: config 9 has no interface number 0 [ 349.806675][ T4712] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 349.819306][ T4712] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 349.830151][ T4712] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 349.840807][ T4712] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 349.850387][ T4712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.926630][ T4261] usb 5-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 349.936018][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.946176][ T4261] usb 5-1: Product: syz [ 349.958745][ T4261] usb 5-1: Manufacturer: syz [ 349.965437][ T4261] usb 5-1: SerialNumber: syz [ 349.999202][ T4712] snd-usb-audio: probe of 2-1:27.0 failed with error -12 [ 350.031785][ T8876] udevd[8876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.156882][ T4712] usb 3-1: USB disconnect, device number 47 [ 351.678773][T10370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.776683][ T4229] usb 2-1: USB disconnect, device number 56 [ 351.797133][ T4261] cdc_phonet 5-1:9.102: skipping garbage [ 351.802846][ T4261] cdc_phonet: probe of 5-1:9.102 failed with error -22 [ 351.831071][ T4261] usb 5-1: USB disconnect, device number 45 [ 351.957651][T10405] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 351.979029][T10405] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 352.156503][ T23] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 352.516543][ T23] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 352.536265][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 352.556294][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 352.856389][ T23] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 352.865527][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.890655][ T23] usb 3-1: Product: syz [ 352.908850][ T23] usb 3-1: Manufacturer: syz [ 352.913546][ T23] usb 3-1: SerialNumber: syz [ 352.971543][T10425] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 352.980814][ T23] usb 3-1: config 0 descriptor?? [ 353.018583][ T23] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 353.055846][ T23] usb 3-1: No valid video chain found. [ 353.229899][ T4261] usb 3-1: USB disconnect, device number 48 [ 354.091605][T10441] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 354.101530][T10441] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 354.276722][ T23] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 354.676465][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 354.716531][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 354.796655][ T23] usb 4-1: config 136 has an invalid interface number: 30 but max is 0 [ 354.816412][ T23] usb 4-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 354.828422][ T23] usb 4-1: config 136 has no interface number 0 [ 354.834920][ T23] usb 4-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.006655][ T23] usb 4-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=f0.f4 [ 355.015752][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.024419][ T23] usb 4-1: Product: syz [ 355.029129][ T23] usb 4-1: Manufacturer: syz [ 355.033754][ T23] usb 4-1: SerialNumber: syz [ 355.282909][T10443] udc-core: couldn't find an available UDC or it's busy [ 355.291265][T10443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 355.407959][ T23] snd-usb-audio: probe of 4-1:136.30 failed with error -2 [ 355.427058][ T23] usb 4-1: USB disconnect, device number 55 [ 355.647612][ T5055] udevd[5055]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.016339][ T4261] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 356.406883][ T4261] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 356.418655][ T4261] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 356.429158][ T4261] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 356.438893][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.486824][T10457] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 356.494111][T10435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.882066][ T4232] usb 2-1: USB disconnect, device number 57 [ 357.076490][ T23] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 357.436540][ T23] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 357.447198][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.465355][ T23] usb 5-1: config 0 descriptor?? [ 357.926398][ T4232] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 358.046520][ T23] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 358.055091][ T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 358.076436][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 358.090026][ T23] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 358.097911][ T23] [drm] Initialized udl on minor 2 [ 358.116433][ T23] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 358.125252][ T23] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 358.143880][ T23] usb 5-1: USB disconnect, device number 46 [ 358.156796][ T4713] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 358.168132][ T4713] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 358.177476][ T4713] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 358.296408][ T4232] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.466608][ T4232] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 358.475807][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.484478][ T4232] usb 2-1: Product: syz [ 358.488886][ T4232] usb 2-1: Manufacturer: syz [ 358.493516][ T4232] usb 2-1: SerialNumber: syz [ 358.822780][T10500] udc-core: couldn't find an available UDC or it's busy [ 358.837633][T10500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 358.855266][T10500] netlink: 'syz.1.1730': attribute type 4 has an invalid length. [ 359.046617][ T4232] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 359.076543][ T4232] usb 2-1: unit 2 not found! [ 359.083714][T10502] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 359.093888][T10502] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 359.135887][ T4232] snd-usb-audio: probe of 2-1:1.2 failed with error -16 [ 359.167087][ T4232] usb 2-1: USB disconnect, device number 58 [ 359.280095][T10507] netlink: 5968 bytes leftover after parsing attributes in process `syz.4.1733'. [ 359.886362][T10402] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 360.156368][T10402] usb 2-1: Using ep0 maxpacket: 8 [ 360.287407][T10402] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 360.299097][T10402] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 360.314202][T10402] usb 2-1: config 0 has no interface number 0 [ 360.329417][T10402] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 360.360287][T10402] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 360.376808][T10402] usb 2-1: config 0 interface 255 has no altsetting 0 [ 360.384245][T10402] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 360.393821][T10402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.413639][T10402] usb 2-1: config 0 descriptor?? [ 360.469267][T10402] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 360.523105][T10522] device syzkaller0 entered promiscuous mode [ 360.766259][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 360.786264][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 360.796247][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 360.806246][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 360.816257][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 360.826251][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 360.836247][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 360.846249][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 361.099748][T10534] device bridge0 entered promiscuous mode [ 361.116308][ T4261] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 361.156436][T10402] gspca_vc032x: reg_r err -71 [ 361.161249][T10402] vc032x: probe of 2-1:0.255 failed with error -71 [ 361.255528][T10402] usb 2-1: USB disconnect, device number 59 [ 361.596472][ T4261] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 361.605549][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.758695][ T4261] usb 3-1: config 0 descriptor?? [ 362.269763][T10507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.406500][ T4261] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 362.424366][ T4261] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 362.486413][ T4261] [drm:udl_init] *ERROR* Selecting channel failed [ 362.490230][T10549] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 362.525126][ T4261] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 362.553125][ T4261] [drm] Initialized udl on minor 2 [ 362.577402][ T4261] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 362.598234][ T4261] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 362.617144][T10549] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 362.668515][ T4261] usb 3-1: USB disconnect, device number 49 [ 362.712962][T10402] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 362.737511][T10402] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 362.772925][T10402] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 363.066680][ T4229] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 363.150140][T10566] device syzkaller0 entered promiscuous mode [ 363.436786][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.521656][T10577] netlink: 5968 bytes leftover after parsing attributes in process `syz.4.1753'. [ 363.726431][ T4232] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 363.914499][T10588] device gretap0 entered promiscuous mode [ 363.967768][T10588] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1756'. [ 364.176819][ T4229] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 364.185923][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.196535][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 364.206299][ T4229] usb 4-1: Product: syz [ 364.210507][ T4229] usb 4-1: Manufacturer: syz [ 364.215130][ T4229] usb 4-1: SerialNumber: syz [ 364.328039][T10599] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 364.349192][T10599] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 364.446725][ T4713] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 364.454788][ T4232] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 364.466390][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.480379][ T4232] usb 2-1: Product: syz [ 364.486577][ T4232] usb 2-1: Manufacturer: syz [ 364.494734][ T4232] usb 2-1: SerialNumber: syz [ 364.578905][T10604] udc-core: couldn't find an available UDC or it's busy [ 364.619350][T10604] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 364.659937][T10555] netlink: 'syz.3.1746': attribute type 4 has an invalid length. [ 364.846887][ T4713] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 364.866446][ T4713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.887836][T10580] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.895649][T10580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.902919][T10580] IPv6: NLM_F_CREATE should be set when creating new route [ 364.910216][T10580] IPv6: NLM_F_CREATE should be set when creating new route [ 364.917477][T10580] IPv6: NLM_F_CREATE should be set when creating new route [ 364.926539][ T4229] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 364.936477][ T4713] usb 5-1: config 0 descriptor?? [ 364.947535][T10609] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1754'. [ 364.957547][ T4229] usb 4-1: unit 2 not found! [ 365.126504][ T4232] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 365.150410][ T4229] snd-usb-audio: probe of 4-1:1.2 failed with error -16 [ 365.175194][ T4229] usb 4-1: USB disconnect, device number 56 [ 365.211151][ T4232] usb 2-1: USB disconnect, device number 60 [ 365.417995][T10622] device syzkaller0 entered promiscuous mode [ 365.529040][ T8993] udevd[8993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 365.546436][ T4713] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 365.557405][ T4713] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 365.584680][T10632] netlink: 5968 bytes leftover after parsing attributes in process `syz.1.1766'. [ 365.596588][ T4713] [drm:udl_init] *ERROR* Selecting channel failed [ 365.609304][ T4713] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 365.636446][ T4713] [drm] Initialized udl on minor 2 [ 365.656358][ T4713] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 365.665198][ T4713] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 365.685184][ T4713] usb 5-1: USB disconnect, device number 47 [ 365.699065][ T4232] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 365.721691][ T4232] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 365.745954][ T4232] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 365.861254][T10636] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10636] [ 367.368825][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 367.420490][T10661] mmap: syz.1.1773 (10661) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 367.435141][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'. [ 367.900590][ T4230] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 368.035462][T10675] device syzkaller0 entered promiscuous mode [ 368.068909][T10677] netlink: 5968 bytes leftover after parsing attributes in process `syz.4.1778'. [ 368.126303][ T4261] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 368.240965][T10686] device syzkaller0 entered promiscuous mode [ 368.276984][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.296662][ T4230] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 368.329204][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.357266][ T4230] usb 2-1: config 0 descriptor?? [ 368.408911][ T4230] pwc: Askey VC010 type 2 USB webcam detected. [ 368.536461][ T4261] usb 4-1: unable to get BOS descriptor or descriptor too short [ 368.786584][ T4261] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 368.801682][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.816357][ T4261] usb 4-1: Product: syz [ 368.826545][ T4261] usb 4-1: Manufacturer: syz [ 368.836475][ T4261] usb 4-1: SerialNumber: syz [ 368.846551][ T4230] pwc: recv_control_msg error -32 req 02 val 2b00 [ 369.106810][ T4230] pwc: recv_control_msg error -71 req 02 val 2c00 [ 369.136555][ T4230] pwc: recv_control_msg error -71 req 04 val 1000 [ 369.156380][ T4230] pwc: recv_control_msg error -71 req 04 val 1300 [ 369.176790][ T4230] pwc: recv_control_msg error -71 req 04 val 1400 [ 369.196393][ T4230] pwc: recv_control_msg error -71 req 02 val 2000 [ 369.225684][T10671] IPv6: NLM_F_CREATE should be specified when creating new route [ 369.233748][ T4230] pwc: recv_control_msg error -71 req 02 val 2100 [ 369.246556][T10671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.253859][T10671] IPv6: NLM_F_CREATE should be set when creating new route [ 369.261172][T10671] IPv6: NLM_F_CREATE should be set when creating new route [ 369.268464][T10671] IPv6: NLM_F_CREATE should be set when creating new route [ 369.276604][ T4230] pwc: recv_control_msg error -71 req 04 val 1500 [ 369.297629][ T4230] pwc: recv_control_msg error -71 req 02 val 2500 [ 369.316331][ T4230] pwc: recv_control_msg error -71 req 02 val 2400 [ 369.333068][T10693] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1776'. [ 369.346382][ T4230] pwc: recv_control_msg error -71 req 02 val 2600 [ 369.366440][ T4230] pwc: recv_control_msg error -71 req 02 val 2900 [ 369.386423][ T4230] pwc: recv_control_msg error -71 req 02 val 2800 [ 369.406578][ T4230] pwc: recv_control_msg error -71 req 04 val 1100 [ 369.426437][ T4230] pwc: recv_control_msg error -71 req 04 val 1200 [ 369.438524][ T4230] pwc: Registered as video103. [ 369.464161][ T4230] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 369.506572][ T4261] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 369.563400][ T4230] usb 2-1: USB disconnect, device number 61 [ 369.633703][ T4261] usb 4-1: USB disconnect, device number 57 [ 369.937358][ T8876] udevd[8876]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.478678][T10714] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10714] [ 370.636513][ T4230] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 370.676768][T10716] 8021q: adding VLAN 0 to HW filter on device bond15 [ 370.703252][T10716] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 370.728079][T10716] bond15: (slave batadv9): Enslaving as an active interface with an up link [ 370.749827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond15: link becomes ready [ 370.886893][T10720] device syzkaller0 entered promiscuous mode [ 370.996764][T10677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.046729][ T4230] usb 3-1: unable to get BOS descriptor or descriptor too short [ 371.177280][T10722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1792'. [ 371.297487][ T4230] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 371.336605][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.367298][ T4230] usb 3-1: Product: syz [ 371.375799][ T4230] usb 3-1: Manufacturer: syz [ 371.390756][ T4230] usb 3-1: SerialNumber: syz [ 371.496285][ T4713] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 371.946765][ T4713] usb 5-1: config 0 has no interfaces? [ 371.952486][ T4713] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.984737][T10712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.992054][T10712] IPv6: NLM_F_CREATE should be set when creating new route [ 371.997009][ T4713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.999868][T10712] IPv6: NLM_F_CREATE should be set when creating new route [ 372.014743][T10712] IPv6: NLM_F_CREATE should be set when creating new route [ 372.037272][ T4713] usb 5-1: config 0 descriptor?? [ 372.073217][T10728] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1789'. [ 372.211481][T10733] device syzkaller0 entered promiscuous mode [ 372.256796][ T4230] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 372.318283][ T4230] usb 3-1: USB disconnect, device number 50 [ 372.407198][T10724] netlink: 'syz.4.1793': attribute type 1 has an invalid length. [ 372.479640][T10724] device bond0 entered promiscuous mode [ 372.500535][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.565252][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.586124][T10724] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 372.589915][ T8996] udevd[8996]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.619464][T10724] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 372.656542][ T4229] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 372.687053][T10724] bond0: (slave vti0): making interface the new active one [ 372.708171][T10724] device vti0 entered promiscuous mode [ 372.716072][T10724] bond0: (slave vti0): Enslaving as an active interface with an up link [ 372.725678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 372.780733][ T7770] usb 5-1: USB disconnect, device number 48 [ 373.000336][T10749] device gretap0 entered promiscuous mode [ 373.036498][T10749] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1800'. [ 373.091169][ T4229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 373.243739][T10755] device syzkaller0 entered promiscuous mode [ 373.377061][ T4229] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 373.397470][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.405542][ T4229] usb 4-1: Product: syz [ 373.450597][ T4229] usb 4-1: Manufacturer: syz [ 373.460223][T10762] netlink: 5968 bytes leftover after parsing attributes in process `syz.4.1803'. [ 373.466619][ T4229] usb 4-1: SerialNumber: syz [ 373.639163][T10767] device syzkaller0 entered promiscuous mode [ 373.766359][ T4261] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 373.849417][T10735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.856753][T10735] IPv6: NLM_F_CREATE should be set when creating new route [ 373.864060][T10735] IPv6: NLM_F_CREATE should be set when creating new route [ 373.871365][T10735] IPv6: NLM_F_CREATE should be set when creating new route [ 373.895500][T10735] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1796'. [ 374.026342][ T4261] usb 3-1: Using ep0 maxpacket: 8 [ 374.036722][ T4229] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 374.076581][ T7770] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 374.085462][ T4229] usb 4-1: USB disconnect, device number 58 [ 374.146487][ T4261] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 374.158139][ T8996] udevd[8996]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.159731][ T4261] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 374.185179][ T4261] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 374.196999][ T4261] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 374.208127][ T4261] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.225313][ T4261] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 374.235118][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.264868][ T154] bond0: (slave vti0): Releasing backup interface [ 374.272411][ T154] device vti0 left promiscuous mode [ 374.280930][ T154] bond0: Destroying bond [ 374.292558][ T154] bond0 (unregistering): Released all slaves [ 374.448665][ T7770] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.463107][ T7770] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 374.472144][ T7770] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.506592][ T4261] usb 3-1: usb_control_msg returned -32 [ 374.512261][ T4261] usbtmc 3-1:16.0: can't read capabilities [ 374.676768][ T7770] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 374.685904][ T7770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.716272][ T7770] usb 2-1: Product: syz [ 374.720532][ T7770] usb 2-1: Manufacturer: syz [ 374.725179][ T7770] usb 2-1: SerialNumber: syz [ 374.759127][ T7770] usb 2-1: config 0 descriptor?? [ 374.799229][ T7770] usb 2-1: Found UVC 34.00 device syz (8086:0b5b) [ 374.805719][ T7770] usb 2-1: No valid video chain found. [ 374.936639][T10781] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 374.959181][ T7770] usb 3-1: USB disconnect, device number 51 [ 375.011687][ T23] usb 2-1: USB disconnect, device number 62 [ 376.138270][T10801] device syzkaller0 entered promiscuous mode [ 376.158627][T10803] device syzkaller0 entered promiscuous mode [ 376.433123][T10757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.656362][ T4261] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 376.926480][ T4713] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 377.056617][ T4261] usb 3-1: unable to get BOS descriptor or descriptor too short [ 377.106408][ T7770] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 377.306543][ T4261] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 377.336730][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.344784][ T4261] usb 3-1: Product: syz [ 377.356955][ T4713] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 377.376422][ T4713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.379964][ T4261] usb 3-1: Manufacturer: syz [ 377.396374][ T7770] usb 4-1: Using ep0 maxpacket: 8 [ 377.410404][ T4261] usb 3-1: SerialNumber: syz [ 377.418102][ T4713] usb 5-1: config 0 descriptor?? [ 377.566774][ T7770] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 377.583083][ T7770] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.623593][ T7770] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 377.664189][ T7770] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 377.685001][ T7770] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.718793][ T7770] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 377.745663][ T7770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.868022][T10808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 377.875360][T10808] IPv6: NLM_F_CREATE should be set when creating new route [ 377.882722][T10808] IPv6: NLM_F_CREATE should be set when creating new route [ 377.889993][T10808] IPv6: NLM_F_CREATE should be set when creating new route [ 378.007870][T10844] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1818'. [ 378.019859][ T4713] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 378.028554][ T4713] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 378.066588][ T4713] [drm:udl_init] *ERROR* Selecting channel failed [ 378.126828][ T7770] usb 4-1: usb_control_msg returned -32 [ 378.132488][ T7770] usbtmc 4-1:16.0: can't read capabilities [ 378.173715][ T4713] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 378.191536][ T4713] [drm] Initialized udl on minor 2 [ 378.216524][ T4713] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 378.235358][ T4713] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 378.267933][ T4713] usb 5-1: USB disconnect, device number 49 [ 378.274382][ T7770] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 378.283828][ T7770] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 378.292607][ T7770] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 378.304716][T10850] device syzkaller0 entered promiscuous mode [ 378.326465][ T4261] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 378.396489][ T4261] usb 3-1: USB disconnect, device number 52 [ 378.504338][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.510734][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.517337][T10856] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 378.534740][ T7770] usb 4-1: USB disconnect, device number 59 [ 378.615153][T10862] netlink: 5968 bytes leftover after parsing attributes in process `syz.0.1831'. [ 378.667552][ T8993] udevd[8993]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.846577][ T4713] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 379.276594][ T4713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 379.546678][ T4713] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 379.629342][ T4713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.661081][ T4713] usb 5-1: Product: syz [ 379.674685][ T4713] usb 5-1: Manufacturer: syz [ 379.688647][ T4713] usb 5-1: SerialNumber: syz [ 379.888802][T10879] 8021q: adding VLAN 0 to HW filter on device bond12 [ 379.910924][T10879] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 379.921142][T10879] bond12: (slave batadv9): Enslaving as an active interface with an up link [ 379.933523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 379.984352][T10861] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 379.991725][T10861] IPv6: NLM_F_CREATE should be set when creating new route [ 379.999000][T10861] IPv6: NLM_F_CREATE should be set when creating new route [ 380.006261][T10861] IPv6: NLM_F_CREATE should be set when creating new route [ 380.062198][T10885] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1830'. [ 380.196318][ T23] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 380.286372][ T4713] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 380.335966][ T4713] usb 5-1: USB disconnect, device number 50 [ 380.346033][ T21] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 380.617513][ T8996] udevd[8996]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.666524][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 380.706596][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 380.766557][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.784640][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.814735][ T21] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 380.824468][ T23] usb 2-1: config 9 has too many interfaces: 138, using maximum allowed: 32 [ 380.844423][ T23] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 380.854924][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.027029][ T23] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 138 [ 381.041498][ T21] usb 3-1: config 0 descriptor?? [ 381.046685][ T23] usb 2-1: config 9 has no interface number 0 [ 381.256418][ T23] usb 2-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 381.406375][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.436383][ T23] usb 2-1: Product: syz [ 381.440711][ T23] usb 2-1: Manufacturer: syz [ 381.445643][ T23] usb 2-1: SerialNumber: syz [ 381.546759][ T21] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 381.557557][ T21] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 381.569085][T10862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.723385][T10892] device syzkaller0 entered promiscuous mode [ 381.741323][T10884] netlink: 'syz.2.1838': attribute type 28 has an invalid length. [ 381.779191][ T23] cdc_phonet 2-1:9.102: skipping garbage [ 381.787309][ T23] cdc_phonet: probe of 2-1:9.102 failed with error -22 [ 381.800142][T10884] netlink: 'syz.2.1838': attribute type 3 has an invalid length. [ 381.808776][ T21] cp2112 0003:10C4:EA90.0002: error requesting version [ 381.831132][T10884] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1838'. [ 381.833902][ T23] usb 2-1: USB disconnect, device number 63 [ 381.908275][T10884] udc-core: couldn't find an available UDC or it's busy [ 381.945314][T10884] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 381.988539][ T21] cp2112: probe of 0003:10C4:EA90.0002 failed with error -32 [ 382.032379][ T21] usb 3-1: USB disconnect, device number 53 [ 382.085195][T10900] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1843'. [ 382.162289][T10899] fido_id[10899]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 382.876459][ T4230] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 383.028303][T10922] netlink: 5968 bytes leftover after parsing attributes in process `syz.0.1851'. [ 383.306573][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.496984][ T4230] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 383.525305][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.543848][ T4230] usb 2-1: Product: syz [ 383.558475][T10928] device syzkaller0 entered promiscuous mode [ 383.566446][ T4230] usb 2-1: Manufacturer: syz [ 383.571115][ T4230] usb 2-1: SerialNumber: syz [ 383.805848][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1854'. [ 383.876837][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 383.919565][T10938] udc-core: couldn't find an available UDC or it's busy [ 383.927307][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 383.936182][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1855'. [ 383.968855][T10938] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 384.020159][T10938] netlink: 'syz.1.1849': attribute type 4 has an invalid length. [ 384.236351][ T4229] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 384.286482][ T21] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 384.506316][ T4713] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 384.616817][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.636636][ T4229] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 384.645749][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.663797][ T4229] usb 3-1: config 0 descriptor?? [ 384.676634][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.687522][ T21] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 384.696669][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.707111][ T21] usb 5-1: config 0 descriptor?? [ 384.712222][ T4229] pwc: Askey VC010 type 2 USB webcam detected. [ 384.758570][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 384.906427][ T4713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.918651][ T4713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.929087][ T4713] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 384.938563][ T4713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.955271][ T4713] usb 4-1: config 0 descriptor?? [ 385.156791][ T4229] pwc: recv_control_msg error -32 req 02 val 2b00 [ 385.186400][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 385.417016][ T4229] pwc: recv_control_msg error -71 req 02 val 2c00 [ 385.436756][ T4229] pwc: recv_control_msg error -71 req 04 val 1000 [ 385.445013][ T4713] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 385.453004][ T21] pwc: recv_control_msg error -71 req 02 val 2c00 [ 385.458268][ T4229] pwc: recv_control_msg error -71 req 04 val 1300 [ 385.467965][ T4713] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 385.477612][ T4229] pwc: recv_control_msg error -71 req 04 val 1400 [ 385.480774][ T21] pwc: recv_control_msg error -71 req 04 val 1000 [ 385.496687][ T4229] pwc: recv_control_msg error -71 req 02 val 2000 [ 385.506560][ T21] pwc: recv_control_msg error -71 req 04 val 1300 [ 385.516750][ T4229] pwc: recv_control_msg error -71 req 02 val 2100 [ 385.536731][ T21] pwc: recv_control_msg error -71 req 04 val 1400 [ 385.537111][ T4229] pwc: recv_control_msg error -71 req 04 val 1500 [ 385.556746][ T21] pwc: recv_control_msg error -71 req 02 val 2000 [ 385.586507][ T4229] pwc: recv_control_msg error -71 req 02 val 2500 [ 385.586518][ T21] pwc: recv_control_msg error -71 req 02 val 2100 [ 385.615134][ T21] pwc: recv_control_msg error -71 req 04 val 1500 [ 385.636505][ T21] pwc: recv_control_msg error -71 req 02 val 2500 [ 385.638550][ T4229] pwc: recv_control_msg error -71 req 02 val 2400 [ 385.651854][T10942] netlink: 'syz.3.1856': attribute type 28 has an invalid length. [ 385.664366][T10942] netlink: 'syz.3.1856': attribute type 3 has an invalid length. [ 385.673091][T10942] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1856'. [ 385.677901][ T4229] pwc: recv_control_msg error -71 req 02 val 2600 [ 385.683450][ T21] pwc: recv_control_msg error -71 req 02 val 2400 [ 385.706390][ T21] pwc: recv_control_msg error -71 req 02 val 2600 [ 385.716823][ T4229] pwc: recv_control_msg error -71 req 02 val 2900 [ 385.726552][ T4713] cp2112 0003:10C4:EA90.0003: error requesting version [ 385.734673][ T21] pwc: recv_control_msg error -71 req 02 val 2900 [ 385.737744][ T4229] pwc: recv_control_msg error -71 req 02 val 2800 [ 385.756456][ T21] pwc: recv_control_msg error -71 req 02 val 2800 [ 385.776470][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 385.777548][ T4229] pwc: recv_control_msg error -71 req 04 val 1100 [ 385.800386][T10944] udc-core: couldn't find an available UDC or it's busy [ 385.806881][ T4229] pwc: recv_control_msg error -71 req 04 val 1200 [ 385.814153][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 385.824642][T10944] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 385.828547][ T4229] pwc: Registered as video103. [ 385.835059][ T21] pwc: Registered as video104. [ 385.842771][ T4229] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 385.842986][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 385.868782][ T4229] usb 3-1: USB disconnect, device number 54 [ 385.878106][ T4713] cp2112: probe of 0003:10C4:EA90.0003 failed with error -32 [ 385.906444][ T4713] usb 4-1: USB disconnect, device number 60 [ 385.947814][ T21] usb 5-1: USB disconnect, device number 51 [ 385.961497][T10922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.101940][T10946] fido_id[10946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 386.186500][ T4230] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 386.207130][ T4230] usb 2-1: unit 2 not found! [ 386.221667][T10953] 8021q: adding VLAN 0 to HW filter on device bond11 [ 386.287561][T10953] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 386.294534][ T4230] snd-usb-audio: probe of 2-1:1.2 failed with error -16 [ 386.346193][ T4230] usb 2-1: USB disconnect, device number 64 [ 386.394422][T10953] bond11: (slave batadv7): Enslaving as an active interface with an up link [ 386.420728][T10959] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1861'. [ 386.456399][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 386.576501][T10968] device syzkaller0 entered promiscuous mode [ 386.946358][ T4261] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 387.356478][ T4261] usb 5-1: unable to get BOS descriptor or descriptor too short [ 387.357823][T10982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.371461][T10982] IPv6: NLM_F_CREATE should be set when creating new route [ 387.378749][T10982] IPv6: NLM_F_CREATE should be set when creating new route [ 387.385983][T10982] IPv6: NLM_F_CREATE should be set when creating new route [ 387.499473][T10983] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1867'. [ 387.616586][ T4261] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 387.646169][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.676640][ T4261] usb 5-1: Product: syz [ 387.680873][ T4261] usb 5-1: Manufacturer: syz [ 387.706094][ T4261] usb 5-1: SerialNumber: syz [ 387.985856][T10987] netlink: 5968 bytes leftover after parsing attributes in process `syz.1.1870'. [ 388.087966][T10973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.095275][T10973] IPv6: NLM_F_CREATE should be set when creating new route [ 388.102600][T10973] IPv6: NLM_F_CREATE should be set when creating new route [ 388.109861][T10973] IPv6: NLM_F_CREATE should be set when creating new route [ 388.228645][T10973] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1865'. [ 388.406546][ T4261] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 388.487586][ T4261] usb 5-1: USB disconnect, device number 52 [ 388.734517][T11005] 8021q: adding VLAN 0 to HW filter on device bond16 [ 388.748783][ T8996] udevd[8996]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.880833][T11005] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 388.890420][T11005] bond16: (slave batadv10): Enslaving as an active interface with an up link [ 388.906417][ T733] IPv6: ADDRCONF(NETDEV_CHANGE): bond16: link becomes ready [ 389.155427][T11015] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1878'. [ 389.893320][T11019] device syzkaller0 entered promiscuous mode [ 390.376437][ T4232] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 390.746717][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 390.786357][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.932800][T10987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.460654][ T4232] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.936252][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.975419][ T4232] usb 5-1: config 0 descriptor?? [ 393.058779][ T4232] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 393.116467][ T4232] usb 5-1: USB disconnect, device number 53 [ 393.395654][T11048] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1890'. [ 393.526362][ T4261] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 393.656320][ T4232] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 393.786374][ T4261] usb 3-1: Using ep0 maxpacket: 8 [ 393.906616][ T4261] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.924932][ T4261] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 393.945203][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.979645][ T4261] usb 3-1: config 0 descriptor?? [ 394.028211][ T4261] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 394.096697][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 394.116414][ T4229] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 394.266857][T11063] netlink: 5968 bytes leftover after parsing attributes in process `syz.0.1895'. [ 394.376501][ T4232] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 394.386247][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.394486][ T4232] usb 5-1: Product: syz [ 394.399260][ T4232] usb 5-1: Manufacturer: syz [ 394.403889][ T4232] usb 5-1: SerialNumber: syz [ 394.487957][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.666512][ T4229] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 394.679482][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.687990][ T4261] gspca_vc032x: reg_r err -71 [ 394.692739][ T4261] vc032x: probe of 3-1:0.0 failed with error -71 [ 394.700435][ T4229] usb 4-1: Product: syz [ 394.704635][ T4229] usb 4-1: Manufacturer: syz [ 394.720151][ T4261] usb 3-1: USB disconnect, device number 55 [ 394.726693][ T4229] usb 4-1: SerialNumber: syz [ 394.766353][ T13] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 394.789367][T11041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.796778][T11041] IPv6: NLM_F_CREATE should be set when creating new route [ 394.804008][T11041] IPv6: NLM_F_CREATE should be set when creating new route [ 394.811284][T11041] IPv6: NLM_F_CREATE should be set when creating new route [ 394.827684][T11041] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1887'. [ 394.976694][ T4232] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 395.028243][ T4232] usb 5-1: USB disconnect, device number 54 [ 395.050720][T11073] udc-core: couldn't find an available UDC or it's busy [ 395.063365][T11073] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 395.097387][T11073] netlink: 'syz.3.1893': attribute type 4 has an invalid length. [ 395.126415][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 395.138101][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 395.151612][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.166675][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.183316][ T13] usb 2-1: config 0 descriptor?? [ 395.232388][ T13] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 395.278718][ T8996] udevd[8996]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.654041][T11081] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.661192][T11081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.668724][T11081] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.675862][T11081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.689111][T11081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.146389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.918234][T11104] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1906'. [ 397.184187][T11063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.436900][ T4229] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 397.456904][ T4229] usb 4-1: unit 2 not found! [ 397.520204][ T4229] snd-usb-audio: probe of 4-1:1.2 failed with error -16 [ 397.571514][ T4229] usb 4-1: USB disconnect, device number 61 [ 397.576922][ T4232] usb 2-1: USB disconnect, device number 65 [ 398.036370][ T4229] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 398.296301][ T4229] usb 4-1: Using ep0 maxpacket: 32 [ 398.756617][T11146] netlink: 5968 bytes leftover after parsing attributes in process `syz.1.1917'. [ 398.846338][ T4229] usb 4-1: config 0 has no interfaces? [ 399.046814][ T4229] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 399.056811][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.064845][ T4229] usb 4-1: Product: syz [ 399.069957][ T4229] usb 4-1: Manufacturer: syz [ 399.074597][ T4229] usb 4-1: SerialNumber: syz [ 399.110762][ T4229] usb 4-1: config 0 descriptor?? [ 399.136812][T11154] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1922'. [ 399.147398][T11157] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.154661][T11157] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.185665][T11157] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.193329][T11157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.202219][T11157] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.209374][T11157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.231194][T11157] team0: Port device bridge0 added [ 399.386497][T10402] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 399.486177][ T7770] usb 4-1: USB disconnect, device number 62 [ 399.507074][T11167] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4198] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11167] [ 399.756587][T10402] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 399.785767][T10402] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 399.826572][T10402] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.853456][T10402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.891910][T10402] usb 2-1: config 0 descriptor?? [ 399.952432][T10402] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 400.015907][T11170] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 400.084841][T11170] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 400.496822][T10402] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 400.767632][T11181] netlink: 5968 bytes leftover after parsing attributes in process `syz.2.1930'. [ 400.876576][T10402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 400.897815][T10402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 400.923740][T10402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 401.106527][T10402] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 401.121426][T10402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.138755][T10402] usb 4-1: Product: syz [ 401.148803][T10402] usb 4-1: Manufacturer: syz [ 401.159224][T10402] usb 4-1: SerialNumber: syz [ 401.180708][T10402] usb 4-1: config 0 descriptor?? [ 401.456665][T10402] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 401.685610][ T13] usb 4-1: USB disconnect, device number 63 [ 402.161853][ T4230] usb 2-1: USB disconnect, device number 66 [ 402.524146][T11200] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1936'. [ 402.610864][T11200] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 402.790569][T11211] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 402.848797][T11211] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 403.569297][ T26] audit: type=1800 audit(1780728827.508:6): pid=11210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1940" name="/" dev="fuse" ino=1 res=0 errno=0 [ 403.661747][T11181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.016351][ T13] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 404.116428][ T7770] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 404.256369][ T4232] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 404.276274][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 404.366365][ T7770] usb 3-1: Using ep0 maxpacket: 16 [ 404.426659][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.443419][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.465543][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 404.493421][ T13] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 404.512926][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.526456][ T7770] usb 3-1: unable to get BOS descriptor or descriptor too short [ 404.546802][ T13] usb 5-1: config 0 descriptor?? [ 404.606491][ T7770] usb 3-1: config 251 has an invalid interface number: 95 but max is 0 [ 404.614839][ T7770] usb 3-1: config 251 has no interface number 0 [ 404.621525][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.636296][ T4232] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 404.665625][ T7770] usb 3-1: config 251 interface 95 has no altsetting 0 [ 404.672826][ T4232] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 404.836514][ T7770] usb 3-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 404.846492][ T4232] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 404.861159][ T7770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.869381][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.889702][ T7770] usb 3-1: Product: syz [ 404.893925][ T7770] usb 3-1: Manufacturer: syz [ 404.898716][ T4232] usb 4-1: Product: syz [ 404.909722][ T4232] usb 4-1: Manufacturer: syz [ 404.918936][ T7770] usb 3-1: SerialNumber: syz [ 404.924687][ T4232] usb 4-1: SerialNumber: syz [ 404.940483][ T4232] usb 4-1: config 0 descriptor?? [ 405.028628][T11217] sctp: [Deprecated]: syz.4.1941 (pid 11217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 405.028628][T11217] Use struct sctp_sack_info instead [ 405.181417][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1943'. [ 405.197730][ T4713] usb 4-1: USB disconnect, device number 64 [ 405.273027][ T13] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0004/input/input11 [ 405.346451][ T4232] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 405.401140][ T13] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 405.476434][ T7770] mos7840 3-1:251.95: required endpoints missing [ 405.509238][ T7770] usb 3-1: USB disconnect, device number 56 [ 405.746738][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 406.476519][ T4230] usb 5-1: reset high-speed USB device number 55 using dummy_hcd [ 406.641150][T11241] fuse: Bad value for 'fd' [ 406.687678][ T4230] usb 5-1: device descriptor read/64, error -32 [ 406.749330][ T4232] usb 2-1: not running at top speed; connect to a high speed hub [ 406.836417][ T4232] usb 2-1: config 136 has an invalid interface number: 30 but max is 0 [ 406.865077][ T4232] usb 2-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 406.878448][ T4232] usb 2-1: config 136 has no interface number 0 [ 406.884779][ T4232] usb 2-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.976313][ T4230] usb 5-1: reset high-speed USB device number 55 using dummy_hcd [ 407.015152][T11247] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 407.053302][T11247] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 407.057261][ T4232] usb 2-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=f0.f4 [ 407.106476][T11253] netlink: 5968 bytes leftover after parsing attributes in process `syz.2.1953'. [ 407.115738][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.154141][ T4232] usb 2-1: Product: syz [ 407.181443][ T4232] usb 2-1: Manufacturer: syz [ 407.206615][ T4232] usb 2-1: SerialNumber: syz [ 407.472293][T11230] udc-core: couldn't find an available UDC or it's busy [ 407.480026][T11230] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 407.579751][ T4232] snd-usb-audio: probe of 2-1:136.30 failed with error -2 [ 407.604387][ T4232] usb 2-1: USB disconnect, device number 67 [ 407.816830][ T5055] udevd[5055]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.870941][ T13] usb 5-1: USB disconnect, device number 55 [ 408.516310][ T13] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 408.886465][ T13] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 408.897681][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.914394][ T13] usb 2-1: config 0 descriptor?? [ 409.126681][ T7770] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 409.496341][ T13] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 409.506639][ T7770] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.515260][ T13] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 409.526243][ T7770] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 409.536342][ T13] [drm:udl_init] *ERROR* Selecting channel failed [ 409.545551][ T7770] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 409.560720][ T13] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 409.576253][ T13] [drm] Initialized udl on minor 2 [ 409.607371][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 409.627101][ T13] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 409.637392][ T13] usb 2-1: USB disconnect, device number 68 [ 409.644675][T10402] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 409.663874][T10402] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 409.685026][T10402] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 409.736512][ T4232] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 409.744462][ T7770] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 409.764033][ T7770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.776305][ T7770] usb 5-1: Product: syz [ 409.780564][ T7770] usb 5-1: Manufacturer: syz [ 409.795498][ T7770] usb 5-1: SerialNumber: syz [ 409.808183][ T7770] usb 5-1: config 0 descriptor?? [ 410.016312][T11249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.026837][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 410.071387][ T7770] usb 5-1: USB disconnect, device number 56 [ 410.178725][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.194506][ T4232] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 410.236579][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.278492][ T4232] usb 4-1: config 0 descriptor?? [ 410.328846][ T4232] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 410.536764][T10402] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 410.566331][ T7770] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 410.647390][T11297] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1970'. [ 410.676374][T11297] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1970'. [ 410.706502][T11298] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1970'. [ 410.786279][T10402] usb 3-1: Using ep0 maxpacket: 8 [ 410.916922][T10402] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 410.925781][T11302] device syzkaller0 entered promiscuous mode [ 410.976524][ T4232] gspca_vc032x: reg_r err -71 [ 410.981363][ T4232] vc032x: probe of 4-1:0.0 failed with error -71 [ 411.005848][ T4232] usb 4-1: USB disconnect, device number 65 [ 411.033113][ T7770] usb 2-1: unable to get BOS descriptor or descriptor too short [ 411.086810][ T7770] usb 2-1: not running at top speed; connect to a high speed hub [ 411.097560][T10402] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 411.113992][T10402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.138477][T10402] usb 3-1: Product: syz [ 411.147206][T10402] usb 3-1: Manufacturer: syz [ 411.176138][T10402] usb 3-1: SerialNumber: syz [ 411.186459][ T7770] usb 2-1: config 136 has an invalid interface number: 30 but max is 0 [ 411.199607][ T7770] usb 2-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 411.203865][T10402] usb 3-1: config 0 descriptor?? [ 411.210930][ T7770] usb 2-1: config 136 has no interface number 0 [ 411.221741][ T7770] usb 2-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.246906][T11304] netlink: 5968 bytes leftover after parsing attributes in process `syz.0.1973'. [ 411.289641][T11309] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1974'. [ 411.302964][T10402] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 411.316832][T10402] usb 3-1: setting power ON [ 411.333252][T10402] dvb-usb: bulk message failed: -22 (2/0) [ 411.366723][T10402] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.406568][ T7770] usb 2-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=f0.f4 [ 411.408357][T10402] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 411.426002][ T7770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.446390][ T7770] usb 2-1: Product: syz [ 411.450611][ T7770] usb 2-1: Manufacturer: syz [ 411.455408][ T7770] usb 2-1: SerialNumber: syz [ 411.467299][T10402] usb 3-1: media controller created [ 411.492718][T10402] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.505965][T11286] dvb-usb: bulk message failed: -22 (3/0) [ 411.513826][T11286] dvb-usb: bulk message failed: -22 (6/0) [ 411.535945][T10402] usb 3-1: selecting invalid altsetting 6 [ 411.553517][T10402] usb 3-1: digital interface selection failed (-22) [ 411.564234][T10402] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 411.626698][T10402] usb 3-1: setting power OFF [ 411.631835][T10402] dvb-usb: bulk message failed: -22 (2/0) [ 411.649282][T10402] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 411.659072][T10402] (NULL device *): no alternate interface [ 411.717602][T10402] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 411.739973][T11287] udc-core: couldn't find an available UDC or it's busy [ 411.766652][T11287] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 411.825228][T10402] usb 3-1: USB disconnect, device number 57 [ 411.971765][T11318] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.006318][ T4713] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 412.263822][T11330] device syzkaller0 entered promiscuous mode [ 412.386663][ T4713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.405007][ T4713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.426147][ T4713] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 412.438541][ T4713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.450897][ T4713] usb 4-1: config 0 descriptor?? [ 412.584992][T11339] netlink: 5968 bytes leftover after parsing attributes in process `syz.4.1985'. [ 412.934124][ T26] audit: type=1326 audit(1780728836.868:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.0.1987" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe62bbe2e59 code=0x0 [ 412.941675][ T4713] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 413.010054][ T4713] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 413.024845][T11349] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1988'. [ 413.170305][T11316] netlink: 'syz.3.1976': attribute type 28 has an invalid length. [ 413.180427][T11316] netlink: 'syz.3.1976': attribute type 3 has an invalid length. [ 413.188879][T11316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1976'. [ 413.206451][ T4713] cp2112 0003:10C4:EA90.0005: error requesting version [ 413.336842][ T4713] cp2112: probe of 0003:10C4:EA90.0005 failed with error -32 [ 413.369054][T11362] 8021q: VLANs not supported on gre0 [ 413.376493][ T4713] usb 4-1: USB disconnect, device number 66 [ 413.408410][ T7770] snd-usb-audio: probe of 2-1:136.30 failed with error -2 [ 413.435422][ T7770] usb 2-1: USB disconnect, device number 69 [ 413.533411][T11363] fido_id[11363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 413.556436][ T13] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 413.709915][T11369] device syzkaller0 entered promiscuous mode [ 413.876445][ T7770] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 413.927988][T11380] netlink: 5968 bytes leftover after parsing attributes in process `syz.4.1996'. [ 413.938132][ T13] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 413.956671][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 413.970094][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 413.979907][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.989987][ T13] usb 3-1: config 0 descriptor?? [ 414.032239][ T13] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 414.147086][T11385] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1999'. [ 414.298297][ T7770] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 414.318777][ T7770] usb 2-1: config 0 has no interface number 0 [ 414.324920][ T7770] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 414.556514][ T7770] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 414.574633][ T7770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.615728][ T7770] usb 2-1: Product: syz [ 414.632616][ T7770] usb 2-1: Manufacturer: syz [ 414.683343][ T7770] usb 2-1: SerialNumber: syz [ 414.707009][ T7770] usb 2-1: config 0 descriptor?? [ 414.771635][ T7770] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 414.789074][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.836283][T10402] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 414.939270][T11403] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 415.071054][T11409] device syzkaller0 entered promiscuous mode [ 415.196358][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 415.207864][ T4261] usb 2-1: USB disconnect, device number 70 [ 415.224288][ T4261] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 415.236593][T10402] usb 4-1: unable to get BOS descriptor or descriptor too short [ 415.286561][T10402] usb 4-1: not running at top speed; connect to a high speed hub [ 415.366571][T10402] usb 4-1: config 136 has an invalid interface number: 30 but max is 0 [ 415.375115][T10402] usb 4-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 415.396075][T10402] usb 4-1: config 136 has no interface number 0 [ 415.405980][T10402] usb 4-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 415.586494][T10402] usb 4-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=f0.f4 [ 415.600443][T10402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.617635][T10402] usb 4-1: Product: syz [ 415.627705][T10402] usb 4-1: Manufacturer: syz [ 415.636957][T10402] usb 4-1: SerialNumber: syz [ 415.879171][T11418] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2010'. [ 415.893454][T11394] udc-core: couldn't find an available UDC or it's busy [ 415.911490][T11394] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 416.025348][T10402] snd-usb-audio: probe of 4-1:136.30 failed with error -2 [ 416.100245][T10402] usb 4-1: USB disconnect, device number 67 [ 416.114683][ T5055] udevd[5055]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.311655][ T4713] usb 3-1: USB disconnect, device number 58 [ 416.494275][T11427] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11427] [ 417.103910][T11439] device syzkaller0 entered promiscuous mode [ 417.156593][ T4713] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 417.786483][ T4713] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 417.816253][ T4713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.850085][ T4713] usb 2-1: Product: syz [ 417.886442][ T4713] usb 2-1: Manufacturer: syz [ 417.906278][ T4713] usb 2-1: SerialNumber: syz [ 418.060141][T11455] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2021'. [ 418.311981][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 418.348298][T11466] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 418.358117][T11466] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 418.789142][ T4713] usb 2-1: 1:1 : no cluster descriptor [ 418.818977][ T4713] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 418.851816][ T4713] usb 2-1: USB disconnect, device number 71 [ 418.996465][ T4232] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 419.174971][T11487] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 419.224011][T11487] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 419.263187][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 419.396617][ T4232] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 419.404915][ T4232] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.435251][ T4232] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.466346][ T4232] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.496395][ T4232] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.526913][ T4232] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 419.546557][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.571908][T11495] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4198] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11495] [ 419.846406][ T4232] usb 4-1: usb_control_msg returned -32 [ 419.852680][ T4232] usbtmc 4-1:16.0: can't read capabilities [ 420.626313][ T21] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 420.639241][T11519] usbtmc 4-1:16.0: usb_clear_halt returned -32 [ 420.732002][ T4232] usb 4-1: USB disconnect, device number 68 [ 421.140719][T11532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2043'. [ 421.156634][ T21] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 421.178824][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.191176][T11534] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 421.207728][ T21] usb 3-1: Product: syz [ 421.216523][ T4232] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 421.224373][ T21] usb 3-1: Manufacturer: syz [ 421.244600][ T21] usb 3-1: SerialNumber: syz [ 421.265760][ T21] usb 3-1: config 0 descriptor?? [ 421.355323][T11530] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 421.626549][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 421.696631][ T4232] usb 4-1: not running at top speed; connect to a high speed hub [ 421.756654][ T21] usb 3-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -61 [ 421.764742][ T21] usb 3-1: Firmware version (0.0) predates our first public release. [ 421.776647][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.793749][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.806604][ T21] usb 3-1: Please update to version 0.2 or newer [ 421.876513][ T23] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 421.967331][T11552] device syzkaller0 entered promiscuous mode [ 421.976644][ T21] usb 3-1: atusb_probe: initialization failed, error = -61 [ 421.984213][ T4232] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 421.995547][ T21] atusb: probe of 3-1:0.0 failed with error -61 [ 422.005767][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.026372][ T21] usb 3-1: USB disconnect, device number 59 [ 422.032408][ T4232] usb 4-1: Product: syz [ 422.042396][ T4232] usb 4-1: Manufacturer: syz [ 422.055122][ T4232] usb 4-1: SerialNumber: syz [ 422.066327][ T23] usb 2-1: device descriptor read/64, error -71 [ 422.336557][ T23] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 422.362713][T11523] udc-core: couldn't find an available UDC or it's busy [ 422.380112][T11523] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 422.465839][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'. [ 422.480500][T11555] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2040'. [ 422.521509][T11556] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2040'. [ 422.536336][ T23] usb 2-1: device descriptor read/64, error -71 [ 422.600481][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 422.656746][ T23] usb usb2-port1: attempt power cycle [ 423.066353][ T23] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 423.140017][T11591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2057'. [ 423.168921][ T23] usb 2-1: device descriptor read/8, error -71 [ 423.346369][ T4232] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x300, type = 4 [ 423.362631][ T4232] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 423.396375][ T4232] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x300, wIndex = 0x300, type = 2 [ 423.417260][ T4232] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 423.437905][ T23] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 423.446367][ T4232] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x400, wIndex = 0x300, type = 2 [ 423.465343][ T4232] usb 4-1: 3:0: cannot get min/max values for control 4 (id 3) [ 423.502655][ T4232] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x500, wIndex = 0x300, type = 2 [ 423.516326][ T4232] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 423.546525][ T4232] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x800, wIndex = 0x300, type = 7 [ 423.556502][ T23] usb 2-1: device descriptor read/8, error -71 [ 423.571736][ T4232] usb 4-1: 3:0: cannot get min/max values for control 8 (id 3) [ 423.610314][ T4232] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x300, wIndex = 0x300, type = 2 [ 423.636105][ T4232] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 423.666399][ T4232] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x500, wIndex = 0x300, type = 2 [ 423.676877][ T23] usb usb2-port1: unable to enumerate USB device [ 423.691459][ T4232] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 423.724639][ T4232] usb 4-1: USB disconnect, device number 69 [ 423.754864][T11602] device syzkaller0 entered promiscuous mode [ 423.968964][ T5055] udevd[5055]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.466403][ T4229] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 425.877024][ T4229] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 425.885951][ T4229] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 426.076994][ T4229] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 426.089524][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.106308][ T4229] usb 2-1: Product: syz [ 426.115760][ T4229] usb 2-1: Manufacturer: syz [ 426.121442][ T4229] usb 2-1: SerialNumber: syz [ 426.128951][ T4229] usb 2-1: config 0 descriptor?? [ 426.173959][ T4229] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 426.236348][ T4232] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 426.506439][ T4713] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 426.596426][ T4232] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 426.604518][ T4232] usb 3-1: config 0 has no interface number 0 [ 426.616413][ T4229] gspca_sunplus: reg_r err -71 [ 426.621385][ T4229] sunplus: probe of 2-1:0.0 failed with error -71 [ 426.629819][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 426.647611][ T4229] usb 2-1: USB disconnect, device number 76 [ 426.776605][ T4232] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 426.785847][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.803856][ T4232] usb 3-1: Product: syz [ 426.816549][ T4232] usb 3-1: Manufacturer: syz [ 426.823122][ T4232] usb 3-1: SerialNumber: syz [ 426.855200][ T4232] usb 3-1: config 0 descriptor?? [ 426.866614][ T4713] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 426.886430][ T4713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.899435][ T4232] usb 3-1: selecting invalid altsetting 1 [ 426.916848][ T4232] dvb_ttusb_budget: ttusb_init_controller: error [ 426.923299][ T4232] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 426.932543][ T4713] usb 5-1: config 0 has no interface number 0 [ 426.946274][ T4713] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 426.968052][ T4713] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 426.996365][ T4713] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.054461][ T4232] DVB: Unable to find symbol stv0299_attach() [ 427.142592][ T4232] DVB: Unable to find symbol tda8083_attach() [ 427.150216][ T4232] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 427.195110][ T4713] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 427.217738][ T4713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.256350][ T4713] usb 5-1: Product: syz [ 427.265086][ T4713] usb 5-1: Manufacturer: syz [ 427.275442][ T4713] usb 5-1: SerialNumber: syz [ 427.304810][ T4713] usb 5-1: config 0 descriptor?? [ 427.486372][ T4229] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 427.736311][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 428.016020][ T13] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 428.046536][ T4229] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 428.057192][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.082601][ T13] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 428.092438][ T4229] usb 2-1: Product: syz [ 428.102586][ T4229] usb 2-1: Manufacturer: syz [ 428.112755][ T4229] usb 2-1: SerialNumber: syz [ 428.133844][T11721] netlink: 'syz.3.2093': attribute type 28 has an invalid length. [ 428.138598][ T4229] usb 2-1: config 0 descriptor?? [ 428.155582][T11721] netlink: 'syz.3.2093': attribute type 3 has an invalid length. [ 428.182644][T11721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2093'. [ 428.390030][ T13] usb 5-1: USB disconnect, device number 57 [ 428.429507][ T4229] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 077 [ 428.634311][T11704] udc-core: couldn't find an available UDC or it's busy [ 428.642959][T11704] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 428.656010][ T13] usb 2-1: USB disconnect, device number 77 [ 428.938951][T10402] usb 3-1: USB disconnect, device number 60 [ 429.236507][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2097'. [ 429.556463][T10402] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 429.706362][ T27] INFO: task udevd:4176 blocked for more than 143 seconds. [ 429.713623][ T27] Not tainted syzkaller #0 [ 429.738199][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.761202][ T27] task:udevd state:D stack:23120 pid: 4176 ppid: 3559 flags:0x00004002 [ 429.779631][ T27] Call Trace: [ 429.787707][ T27] [ 429.793892][ T27] __schedule+0x11ef/0x43c0 [ 429.804800][ T27] ? rcu_lock_acquire+0x30/0x30 [ 429.818799][ T27] ? __mutex_lock_common+0xcf7/0x2400 [ 429.832619][ T27] ? release_firmware_map_entry+0x190/0x190 [ 429.844642][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 429.855510][ T27] ? __mutex_trylock_common+0x86/0x260 [ 429.868236][ T27] ? rcu_lock_release+0x20/0x20 [ 429.880118][ T27] schedule+0x11b/0x1e0 [ 429.889981][ T27] schedule_preempt_disabled+0xf/0x20 [ 429.899814][ T27] __mutex_lock_common+0xcfc/0x2400 [ 429.905287][ T27] ? uevent_show+0x17a/0x330 [ 429.911314][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 429.917606][ T27] mutex_lock_nested+0x17/0x20 [ 429.922719][ T27] uevent_show+0x17a/0x330 [ 429.928591][ T27] dev_attr_show+0x50/0xb0 [ 429.933360][ T27] ? device_get_ownership+0xa0/0xa0 [ 429.947623][ T27] sysfs_kf_seq_show+0x316/0x4c0 [ 429.958407][ T27] seq_read_iter+0x49b/0xd50 [ 429.968760][ T27] vfs_read+0x759/0xd60 [ 429.977868][ T27] ? kernel_read+0x1e0/0x1e0 [ 429.986847][ T27] ? __context_tracking_exit+0x4c/0x80 [ 429.993385][ T27] ? __fdget_pos+0x2c6/0x370 [ 429.998928][ T27] ksys_read+0x152/0x260 [ 430.003308][ T27] ? vfs_write+0xd60/0xd60 [ 430.009117][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 430.014440][ T27] do_syscall_64+0x4c/0xa0 [ 430.019660][ T27] ? clear_bhb_loop+0x30/0x80 [ 430.024465][ T27] ? clear_bhb_loop+0x30/0x80 [ 430.030933][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.037363][T10402] usb 3-1: unable to get BOS descriptor or descriptor too short [ 430.045418][ T27] RIP: 0033:0x7f73770cd407 [ 430.050724][ T27] RSP: 002b:00007ffcf8d39000 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 430.059713][ T27] RAX: ffffffffffffffda RBX: 00007f7376fdf880 RCX: 00007f73770cd407 [ 430.068201][ T27] RDX: 0000000000001000 RSI: 00005598e9629a00 RDI: 0000000000000008 [ 430.077104][ T4261] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 430.084850][ T27] RBP: 00007f7377215ff0 R08: 0000000000000000 R09: 0000000000000000 [ 430.093773][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 430.102511][ T27] R13: 00007f7377215ea0 R14: 0000000000000000 R15: 00005598e963cb40 [ 430.111421][ T27] [ 430.114643][ T27] INFO: task kworker/0:5:4234 blocked for more than 143 seconds. [ 430.123475][ T27] Not tainted syzkaller #0 [ 430.129451][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.140845][ T27] task:kworker/0:5 state:D stack:21232 pid: 4234 ppid: 2 flags:0x00004000 [ 430.151284][ T27] Workqueue: usb_hub_wq hub_event [ 430.157073][ T27] Call Trace: [ 430.160461][ T27] [ 430.163711][ T27] __schedule+0x11ef/0x43c0 [ 430.169026][ T27] ? release_firmware_map_entry+0x190/0x190 [ 430.175251][ T27] ? try_to_wake_up+0x6cf/0x1050 [ 430.181103][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 430.187048][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 430.192386][ T27] schedule+0x11b/0x1e0 [ 430.197191][ T27] schedule_timeout+0xbd/0x2d0 [ 430.202471][ T27] ? console_conditional_schedule+0x40/0x40 [ 430.209546][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 430.215666][ T27] ? lock_chain_count+0x20/0x20 [ 430.221574][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 430.227361][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 430.232902][ T27] do_wait_for_common+0x2a2/0x450 [ 430.238761][ T27] ? console_conditional_schedule+0x40/0x40 [ 430.245001][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 430.253067][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 430.259549][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 430.265213][ T27] ? kthread_data+0x4b/0xc0 [ 430.270554][ T27] wait_for_completion+0x48/0x60 [ 430.275614][ T27] flush_workqueue+0x664/0x13d0 [ 430.281611][ T27] ? ath6kl_usb_bmi_write+0x10d/0x160 [ 430.287559][T10402] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 430.297415][ T27] ? rcu_work_rcufn+0x120/0x120 [ 430.302404][T10402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.311093][ T27] ? ath6kl_bmi_done+0x1a0/0x1a0 [ 430.316170][ T27] ath6kl_usb_power_off+0x34/0x40 [ 430.322162][T10402] usb 3-1: Product: syz [ 430.326534][ T27] ath6kl_core_init+0xac4/0x1090 [ 430.331859][ T27] ? lockdep_softirqs_off+0x430/0x430 [ 430.338050][T10402] usb 3-1: Manufacturer: syz [ 430.342684][T10402] usb 3-1: SerialNumber: syz [ 430.350019][ T27] ? ath6kl_core_rx_complete+0x70/0x70 [ 430.355537][ T27] ? memcpy+0x3c/0x60 [ 430.360875][ T27] ? ath6kl_core_create+0x7d6/0x980 [ 430.366133][ T27] ath6kl_usb_probe+0x1302/0x1410 [ 430.372169][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 430.377846][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 430.384047][ T27] ? _raw_spin_unlock+0x40/0x40 [ 430.390307][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 430.396145][ T27] ? usb_disable_lpm+0x72/0x370 [ 430.401514][ T27] usb_probe_interface+0x5c5/0xb20 [ 430.407291][ T27] ? usb_register_driver+0x3d0/0x3d0 [ 430.412620][ T27] really_probe+0x284/0xc80 [ 430.417902][ T27] __driver_probe_device+0x1ef/0x390 [ 430.423230][ T27] driver_probe_device+0x4f/0x420 [ 430.428782][ T27] __device_attach_driver+0x2b0/0x500 [ 430.434190][ T27] ? deferred_probe_work_func+0x230/0x230 [ 430.440632][ T27] bus_for_each_drv+0x184/0x210 [ 430.445535][ T27] ? deferred_probe_work_func+0x230/0x230 [ 430.451943][ T4261] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 430.463142][ T27] ? subsys_find_device_by_id+0x360/0x360 [ 430.469135][ T4261] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.483214][ T27] __device_attach+0x2a8/0x480 [ 430.488278][ T27] ? device_attach+0x20/0x20 [ 430.493163][ T27] ? kobject_uevent_env+0x371/0x890 [ 430.498588][ T4261] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.508395][ T27] bus_probe_device+0xbc/0x1e0 [ 430.513296][ T27] device_add+0xa3a/0x1000 [ 430.517854][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.527375][ T27] usb_set_configuration+0x1991/0x1fd0 [ 430.539523][ T27] ? kernfs_activate+0x1eb/0x210 [ 430.544539][ T27] usb_generic_driver_probe+0x89/0x150 [ 430.552537][ T4261] usb 4-1: config 0 descriptor?? [ 430.558436][ T27] usb_probe_device+0x139/0x270 [ 430.563555][ T27] ? usb_register_device_driver+0x230/0x230 [ 430.569930][ T27] really_probe+0x284/0xc80 [ 430.574699][ T27] __driver_probe_device+0x1ef/0x390 [ 430.580543][ T27] driver_probe_device+0x4f/0x420 [ 430.585831][ T27] __device_attach_driver+0x2b0/0x500 [ 430.593457][ T27] ? deferred_probe_work_func+0x230/0x230 [ 430.602201][ T4261] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 430.610166][ T27] bus_for_each_drv+0x184/0x210 [ 430.615075][ T27] ? deferred_probe_work_func+0x230/0x230 [ 430.627409][ T27] ? subsys_find_device_by_id+0x360/0x360 [ 430.633488][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 430.638967][ T27] __device_attach+0x2a8/0x480 [ 430.643992][ T27] ? device_attach+0x20/0x20 [ 430.649068][ T27] ? kobject_uevent_env+0x371/0x890 [ 430.654531][ T27] bus_probe_device+0xbc/0x1e0 [ 430.660000][ T27] device_add+0xa3a/0x1000 [ 430.664706][ T27] usb_new_device+0xd65/0x1660 [ 430.670641][ T27] ? lock_chain_count+0x20/0x20 [ 430.675755][ T27] ? usb_disconnect+0x8a0/0x8a0 [ 430.680883][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 430.686728][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 430.691977][ T27] hub_event+0x2e4a/0x55e0 [ 430.698133][ T27] ? hub_post_resume+0x120/0x120 [ 430.703128][ T27] ? read_lock_is_recursive+0x10/0x10 [ 430.708860][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 430.714894][ T27] ? _raw_spin_unlock+0x40/0x40 [ 430.720449][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 430.725769][ T27] process_one_work+0x85f/0x1010 [ 430.731207][ T27] ? worker_detach_from_pool+0x240/0x240 [ 430.738140][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 430.743565][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 430.749027][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 430.755405][ T27] ? wq_worker_running+0x97/0x170 [ 430.760897][ T27] worker_thread+0xaa6/0x1290 [ 430.765699][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 430.771354][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 430.777648][ T27] kthread+0x436/0x520 [ 430.781832][ T27] ? rcu_lock_release+0x20/0x20 [ 430.787082][ T27] ? kthread_blkcg+0xd0/0xd0 [ 430.791794][ T27] ret_from_fork+0x1f/0x30 [ 430.796669][ T27] [ 430.800027][ T27] [ 430.800027][ T27] Showing all locks held in the system: [ 430.819115][ T27] 2 locks held by kworker/0:0/7: [ 430.823588][T11728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.824282][ T27] #0: [ 430.831386][T11728] IPv6: NLM_F_CREATE should be set when creating new route [ 430.831425][T11728] IPv6: NLM_F_CREATE should be set when creating new route [ 430.831447][T11728] IPv6: NLM_F_CREATE should be set when creating new route [ 430.857389][ T27] ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 430.868549][T11752] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2095'. [ 430.877973][ T27] #1: ffffc90000cc7d00 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 430.890437][ T27] 1 lock held by khungtaskd/27: [ 430.895423][ T27] #0: ffffffff8c31f360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 430.946328][ T27] 2 locks held by getty/3948: [ 430.951266][ T27] #0: ffff88802c0ea098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 430.962359][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 430.972810][ T27] 4 locks held by udevd/4176: [ 430.978089][ T27] #0: ffff888058c1d0a0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 430.987210][ T27] #1: ffff88805f227488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 430.996640][ T27] #2: ffff8880625af918 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 431.006862][ T27] #3: ffff888025ce21a8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 [ 431.015995][ T27] 5 locks held by kworker/0:5/4234: [ 431.022143][ T27] #0: ffff888141b9a538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 431.033568][ T27] #1: ffffc9000312fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 431.045169][ T27] #2: ffff888023da4220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 [ 431.054628][ T27] #3: ffff8880789ed220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 431.064202][ T27] #4: ffff888025ce21a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 431.073616][ T27] 2 locks held by kworker/u4:5/4239: [ 431.079557][ T27] 2 locks held by kworker/0:7/4261: [ 431.084883][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 431.095599][ T27] #1: ffffc9000319fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 431.107694][ T27] 4 locks held by udevd/5055: [ 431.112496][ T27] #0: ffff88802ab3a790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 431.121774][ T27] #1: ffff8880615ea488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 431.132635][ T27] #2: ffff88807b888ae8 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 431.142328][ T27] #3: ffff8880613f2220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 [ 431.152024][ T27] 4 locks held by kworker/0:9/10402: [ 431.157445][ T27] #0: ffff888141b9a538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 431.170836][ T27] #1: ffffc9000383fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 431.182437][ T27] #2: ffff888024282220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 [ 431.209541][ T27] #3: ffff8880613f2220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 431.219669][ T27] 2 locks held by syz.2.2095/11727: [ 431.225028][ T27] #0: ffff8880753aca10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 431.235558][ T27] #1: ffffffff8c323de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 431.247856][ T27] 1 lock held by syz.1.2100/11739: [ 431.253123][ T27] #0: ffffffff8c323cf0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4c0 [ 431.271330][ T27] [ 431.273931][ T27] ============================================= [ 431.273931][ T27] [ 431.282521][ T27] NMI backtrace for cpu 0 [ 431.286904][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 431.294131][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.304208][ T27] Call Trace: [ 431.307593][ T27] [ 431.310544][ T27] dump_stack_lvl+0x188/0x250 [ 431.315258][ T27] ? show_regs_print_info+0x20/0x20 [ 431.320481][ T27] ? load_image+0x400/0x400 [ 431.325020][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 431.330167][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 431.335166][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 431.341349][ T27] ? _printk+0xda/0x130 [ 431.345530][ T27] ? load_image+0x400/0x400 [ 431.350064][ T27] ? load_image+0x400/0x400 [ 431.354598][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 431.360698][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 431.366717][ T27] watchdog+0xe0f/0xe50 [ 431.370911][ T27] kthread+0x436/0x520 [ 431.375006][ T27] ? hungtask_pm_notify+0x40/0x40 [ 431.380063][ T27] ? kthread_blkcg+0xd0/0xd0 [ 431.384688][ T27] ret_from_fork+0x1f/0x30 [ 431.389147][ T27] [ 431.392647][ T27] Sending NMI from CPU 0 to CPUs 1: [ 431.397929][ C1] NMI backtrace for cpu 1 [ 431.397938][ C1] CPU: 1 PID: 4239 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 431.397956][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.397967][ C1] Workqueue: bat_events batadv_nc_worker [ 431.397989][ C1] RIP: 0010:__lock_acquire+0x5c6/0x7d10 [ 431.398013][ C1] Code: 0f 85 33 62 00 00 44 0f b6 33 48 8b 44 24 58 0f b6 04 10 84 c0 0f 85 42 62 00 00 41 8b 04 24 89 c3 81 e3 ff 1f 00 00 c1 e8 03 <25> f8 03 00 00 48 8d b8 c0 80 1d 90 be 08 00 00 00 e8 a4 33 61 00 [ 431.398027][ C1] RSP: 0018:ffffc9000317f820 EFLAGS: 00000003 [ 431.398041][ C1] RAX: 0000000000004002 RBX: 0000000000000015 RCX: ffffffff815d2f8a [ 431.398053][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff901d80c0 [ 431.398065][ C1] RBP: ffffc9000317fa70 R08: ffffffff901d80c7 R09: 1ffffffff203b018 [ 431.398079][ C1] R10: dffffc0000000000 R11: fffffbfff203b019 R12: ffff88802a978b60 [ 431.398092][ C1] R13: ffff88802a978000 R14: 0000000000000002 R15: ffff88802a978b40 [ 431.398104][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 431.398124][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.398136][ C1] CR2: 00007fd0401e5ff8 CR3: 000000007e32e000 CR4: 00000000003526e0 [ 431.398150][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 431.398160][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 431.398171][ C1] Call Trace: [ 431.398176][ C1] [ 431.398188][ C1] ? mark_lock+0x94/0x320 [ 431.398207][ C1] ? verify_lock_unused+0x140/0x140 [ 431.398225][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 431.398251][ C1] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 431.398272][ C1] lock_acquire+0x19e/0x400 [ 431.398289][ C1] ? rcu_lock_acquire+0x5/0x30 [ 431.398308][ C1] ? rcu_lock_release+0x5/0x20 [ 431.398324][ C1] ? read_lock_is_recursive+0x10/0x10 [ 431.398344][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 431.398363][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 431.398386][ C1] rcu_lock_acquire+0x2a/0x30 [ 431.398402][ C1] ? rcu_lock_acquire+0x5/0x30 [ 431.398417][ C1] batadv_nc_worker+0xc9/0x5c0 [ 431.398436][ C1] process_one_work+0x85f/0x1010 [ 431.398461][ C1] ? worker_detach_from_pool+0x240/0x240 [ 431.398478][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 431.398499][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 431.398517][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 431.398534][ C1] ? wq_worker_running+0x97/0x170 [ 431.398552][ C1] worker_thread+0xaa6/0x1290 [ 431.398585][ C1] kthread+0x436/0x520 [ 431.398601][ C1] ? rcu_lock_release+0x20/0x20 [ 431.398617][ C1] ? kthread_blkcg+0xd0/0xd0 [ 431.398633][ C1] ret_from_fork+0x1f/0x30 [ 431.398656][ C1] [ 431.641478][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 431.681380][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 431.688598][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.698656][ T27] Call Trace: [ 431.702047][ T27] [ 431.704996][ T27] dump_stack_lvl+0x188/0x250 [ 431.709696][ T27] ? show_regs_print_info+0x20/0x20 [ 431.714913][ T27] ? load_image+0x400/0x400 [ 431.719442][ T27] panic+0x2e5/0x810 [ 431.723361][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 431.729030][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 431.733563][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 431.739748][ T27] watchdog+0xe4e/0xe50 [ 431.743940][ T27] kthread+0x436/0x520 [ 431.748030][ T27] ? hungtask_pm_notify+0x40/0x40 [ 431.753072][ T27] ? kthread_blkcg+0xd0/0xd0 [ 431.757682][ T27] ret_from_fork+0x1f/0x30 [ 431.762130][ T27] [ 431.765497][ T27] Kernel Offset: disabled [ 431.769868][ T27] Rebooting in 86400 seconds..