last executing test programs: 7m57.471334941s ago: executing program 4 (id=17): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000d00)=""/161, 0xa1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x7, 0xf, 0xaec, 0x10000, 0x5, 0xb408}, {0x6, 0x2, 0x1, 0x0, 0xfffffffffffffffa, 0x80000000}]}) 7m55.286022008s ago: executing program 4 (id=19): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x9, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5}}}}]}, 0x38}}, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4404}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000180)={0x2, "4c9e"}, 0x3) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m54.749302057s ago: executing program 4 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x40, 0xa5db}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) 7m54.256664369s ago: executing program 4 (id=28): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r3, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x205b) syz_fuse_handle_req(r3, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x800000, {0x6, 0x0, 0x1, 0x400000000000, 0x0, 0x2, {0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, r5, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006c40)="2d26cc01ce6b37509b6f3c3271a639de6120f14f3ce568149acc964e0ee361499ac494602f1ca27b352206b3d5119e1d3ea7de66a5685fb376fbbf2f5882baf11c24085c523b1e98c74dbfcd1cb5fd76fad4966db36d73be8fc9b83e4ef2ea9357b906217a92307828d026c0cd44b4722c2003c0ceea3c92f5f3752aed00f11d7b51aba4466811b4ed9eb0d48747cdf3452c2d0dbe20eb7d998ac3fdad4c2823d61b6d047479a71a456ad22e6310775f0d387ebd21b924987b5ad98209de8f77c5b4727a45807e0890d1978561f8c5d9b3e102e550cce491897c8d567bba6f1302bd6433f5e00b79e76dab18e7645fcd163ad9c87469ac1283f2480596ebfb46858f190530c959b851b61d2781eed6a70c81aec137fa36dda19c8229f34247ab38c623ad554d86ea1163fd1365636f82bde43701c35db16ebe8b78dd0bf7076554c9be2dde4e1ced09396dcd7af8389381645c388524021daf12dd624f2283b67a56dc9883788e44268a04d435a2ebecfdd1a19febe0cd07e432612964bca93760ae6bf8727e76d6336c41cd5818be142c8eeed82ee79c638d1fe5f19870bce906519e87fa17670658b2557f61655f2604522dfac3a9262353d1071716da574a7b7d17176ada75365d017ed36eb0e7c0467f92603e8c9b9d7ce19e25a342bade9ff6c748b6f05680ca2dc3765b694d6ef6a946f48ae396ae87ad5cd0ae01fbeaa86ef35fa0beb217fc9ffb07ea2e68f96d79b8720595210117dc40291f0bd588c35193a28735282d3a3feec8770525e4fc66cbbd7ec4f79daf66d6ba63b7167fae0f777d9ea8f179ae35e9a52fd7c984705251197b2aefd39938f1ae9f6a3665b94e652ba3bd759d8ceb444f098901e4d66ca6187eeb8c2810bdd912b797eb86b1928d5c0229eae5373b02dae7df3e151061d232ed52f29c994f1209db3934ea41144c8064b14ced02a795e7b6be9cbf52f56dd5f7cf11f0a3714bf9b6df0b73a88df3224ef37992d55cca4d846a7e3ee602a66d6b29d32c6cd360cd6311f224d9c95041893c2db5266d480cff0bcd038668a26eef0a8d2b71c283cc248963aebb6d32fedc1859dcc0e025600923272b1418c5572e71d52205e57aa52daedff3fdf2839eb2d3af61a122e4e4896ac636e36f6cc7b2aac8966a83e71828a26099c09d893dde0b5b7fbe1ec3842dba88d8ebe74bbb756bf73b80902b1d4f13895881e2d4e3418ab760739d751142e6680f9c25d99a163a0e153891503539aafa1afb6604d69e8c0dd03e762719a96ae893f52d6dfc1a8da2c8f02f42682eb19e6cf35f7ebf3b26c0c0179188a68b40956c706616692f768eaf3c242a4c610d9a3543ca83b1fc82d4e526455d38f78880ab5f895afb078155a3f6910502ad33d677b065797da0d86aa084859275f9f100cb52c066b4cfa8211e4e9629311251a955fe9dd0a8c6a25f0d8cd722a9d176b75e7165945552ad1f70f29b3870db873b3e96ef8efbb52ff0a990b5cd3aecad4040328a8e201b9371d5dbbadcc38480310fedd4c6ec91e06d3ff1d3d0550fd1e85524a43438c58c672b2ebf1aae2c9bade778aa9962b81567fe25aff9258bc8ccfc5d1604d5fa1dcae07f7e73fed593790a97d24e07d55629d78c3db735319f76b898c05da1850563c834f58ca7c8b9e166329e1fe6aa507748f8c8f9c6d88102b7e71d4f525874176e5f81c8ed60d9a5c00f2ddbb4f61abbdeb9c5260e23ceb3b3b32e56acc2ba5be79dbd31e4e989ba5167ece55c24f1668ddef96cede1ec48e6d9839766d0937403ef978f6dae2ddc42df9f41ca651c9523c6e47de0efaf10fc4a6c73c778d893037fd7d0d889ddea60eb6488e249cb3ff5cdbde8bcda5ac522413c5cf924885b5d7df182304cdfd21a0a82cc175c4848974223c6dcce5184b8778f42b6f61e0bdf0275a0f5de737fa4c257a211501e68270b542024d254c7c1003d02c7d48e376ce49f5527d36bbcc9efe0b4b6a8a97e6b026463fc6a9bca5d7a039901b19dec935b7356dfd79139365522fe3bace08421e7f87aba615091cd4d7d599452a18cf8d823e648da62d9839abc0190dc0fd48a0bd4930ad4c8e942e6e9c8f1ef052ff37009fa5fb91de8ae19b705f439d08b9a5dc4d6da4ed11daf7fd4e900eac7ba57bc21619b9e80583c465742d28c90548b95783d1aad439a4ca8f6097040f4cbd248f030dfed89e454c6ce1e70494cbeb949dd12c7600a8849e9455f8f649f6f3687d2c096f0b0d17687babafdd28f28e0e30f667b224dab25db70379bbf7e67972e6b55d82d78a7825647380958562c97b6241f726b96d2f10956acf4be708f5bc243c4fbab0d925db08f39b7f7c437c822b1da42d414acee547d01cf491a7e5a25df27e77c9aaab73240ef2be11fddde672bc865b1c0e75edb8a5ac3c7140bb3e002a6a7550e380a78e6e011aabaa0b1a7d1487111a65e379a9f91fbaea6f053097fd2689e4ed3801534f09d4819ddbc30273e2cff2fd5806f76598af99c98c090e96c9e933038504d9ebb9350620fb21fb5e73a1ca138405a95a99b46a4feb30d5d669df45304a97983abff8afbd285986eff53ada03d97821d7ae02aa4335b767ac1f9511a5bf036cea28481ca2c4e2ff3bda2823897aaf91e208a9146931877727d14a9fe8f8ac41ca7ef058dd2fbb9664b44873e74f2eec90fb0e2ec5aab6f86fca95055f6bd569139f6c0fd665c19ab009f56712fd49a0d885d3f5322b4b9a4e22721a72eb67120945d1892b1c17eecbbf6390152224675f7e649ecfedf540721a7d93164a9b57d9babe2303c1707012679fb1dcf39477baeb4a0e1278551fdf81bddcd704d174f553aa52d12f3b76c7b3b0469ac4d83af36a23b35ac382f870716bd39662ba26db1066a7ebe80b80aa4cdef24fe85cea7330e35de5ae8d606fec19cf625d2fc5b2585ab1b2e0a88a0683a65dd96eb9342759b05baee428e93ceb970964f564f8711b3b0b53e90204d5510cb6ec9dac41fce8d4c3b22e86f908e5e22db74dd023cf1ac1ae5d22990b48d2a58434a3781cd8c7b908328ea1dab8c39ce6c923bc00c3958fda0a5a3887f4e5db3d99fe003b6209d953033ed2fd941f05027e8b68e540a5aed683305c420200474cccc0927a8bb54db7f29e02cd3c5e96ee083a86a7f7f503d7584b403737a8c3dab226d0062725a1c728cff5accfcd2868e7b80c88032a579d7a949372b3fcd3089bcc4cb191f9f54248737d2df53f8d5ae20df8e72da17c118131464f7ecb8d6a49841b6fd31791a76329f825fb1fadb272e766caeb8ddc8d68e02ba1e771067fb2dc0718e56d42b9c6e38895b090789385dac2084e0bdb4e2761f6acdbfcee84616becda8120b504875ce7a8cece84003bf177980b31ff05ced419e56cbab005a1bce73abd738501999e087f652817e5dedc4bb2dcd17766208c1591dff39d90c0315583aed64fd31fc1c1e4a79a0770fc9d5afa63aa168c17e63e1ef7bc429e7d2e1d5aedf9ba18180ab774135c90304579025624573aa7daca58d78184d27e3d272727930623c9721f33b001ccae2346978ff3a58335882cea5aa5b6b5344b662158d50de72f89b8c63ed195361745e3f2ee55f76373206e505248ed68df928d1675585592404c0f7681c859fc6e93a4e4dbf51a813aa578d39a0a8d8ac17ab6076f11a6359bfef5bdfffb33a54ddd749440fc7c9fc013d8f26a505970d703685e05b56261bf3611ba5a671e47d074f72b92c7faf7d8a0ec92ed91e59db0d3f898dbead8ee8fc4a45c3479d1868a1262d1829983183537f242180ef31b75e1449800731c8d2d165a5975428d670d02962539d6aed9d193cc21c6a735a440f41ea8ef47e3487dd8aaaeef3704e9e9f9dc5d41dc75af98174aa1060056c8d0c4d3cd95db1ddd5f6d268ca5019b1e7b9ba1e927fabd22d02e23ba9738a5dd0a382156d2e1fd8ed638b70fe7feb4bbc7b2c6df06a98abccda2ca150830e1ec82d416767d7a1b352b65ce711d9e977446d7dd13be7d4d5969a8874fbdc9612dd710ca84fb031acc4853656e8069d7b5e3a922c28f724c0dc306839930b3f816ade9a9c155e2e661e2088756206f9fe6cbc91151453366de83406757f9d932aba22a09028b65df8caf4bcad4b8d8a1935033cb5f53b778b56bf8b4dffe2bfad7f63cee69ea6806d5d1fc2b7ae7d8af7bbf0bcc16905e7ef7cb548850f6414f6bfb6e6e72ffbb0753de68f0b3da9565c9b48ce59630ea79e24e3cbcc4844be1b4ef8bb6c387ff5ffab131a543107b286eaebfa12f7062bc85438ff93c2e74f538bf3bdd076cd6c10cf5ffeff59f3ec2ad5df6c57c41369c140afe2ef51edfbaf75a44d0d429e49344d4d5bd71992b8d721cc85d18dc91c145dd06201748af2369f2740ef43b51736122dbb7cb0fbf960f512da84a7890865044754db004371f0bf159da8b979d696b978bdcc27ad5fa0f6c91dc88174d5659925058e9af1dc86f7958df96b99ac5a72a82c6f91053c5914f571ed507a5e70a22181f64ef3653730e063b3a7109ed04a461b6b4db21d148b57ad13f566707c6e9bafe95db4149768f1769c1cbf2b02e2ddd0ee2c814892fe0e289f14aeab2d004cafbde45c033269dad15b17119c909b6f298e14e55c26bc7426d496d1b179522a383cd521386ae4ff347b1929ce8100000096e8eabebf23b556106ee0ba09290b211b69cc4e313916c9fa4c4348f09ecb59d0e3c13b994f1369212b09f943b5c2f76b371efe46e46f095e2f3fa6f20b30382c518d3cd9ef5a46d26fef874439f46865ef3a59c903772747b2c762f6c890b7525aeb8f2d6beb828d135225a371e5190e5035cb27cd373185a02328271bf50c1767836821f37466c9e03f6f42f4fa1d274b27171acb209dc09e812623f6d8776afdeb6fc472c30d8cabcbd07b01b37fae778c3488f226f4c37123cd8e9cf71012ef56b28154f9078af0532d1437e953508bc0ab03b49e9f505671a77521bdfafa4b6f753835a690c7978f9cf34f26bc2871d393dc8a8b5ac47b173e0e9815e2e6b95f18f35aa0c09e8000184bb3e23feefbfce17d76099d860c1e56f8f0b9175fc5bf28ea7907702d09f4e16cd46a97a114a1dc8a920b7fa2a12108a457cf162972eaa4e932de8201655a07fa2b0ac4fb14a1e0c8cdad2abca0dbff56a438f4c159dc642ea870cfec5b1c88a2a5aa7f0840569b04d2b9f9c42c5c8673f0ccbd33a0090cedf45308be4ebc3786f87ef681a259ba08493464a97ef7768170b076cd2244880d2ca6a4444aa6e72a6b4ab477ad6fdc2ed90f6cc60581628af3be7fa65bd62c2a5110ef7637468966b3a285ab03ccdca916e2f372249dada0bd6358e455c819bff8258cefcbb4e24a96a3b448eeb1a6a519985937d73660e6396a9109db8ee81f34389e502bb3b7ada948fe3f9acef781e5d13ddd5eac03fa2983d06b70438fe08c9fa9b134b74b56449f77fbbbc8f292c44b63873ea5847cdbfdf8ab8771c899ffb8df1674529a5bcf8f0bec4aab5489e867599b2a3458a2b40aa0ace5d261037d23bd989d5ae52962c5535d8ea70d9e45726b1b2fa30c276efe7a62ca7cefeb173bda25ce25a03b35e838f5519e50f15dfdb238fdf4af43b630ab480ede33aa628f06d398063cb076d91566077b0d8c8453ee570bac9cafba229d0f633c9d471a5c9c7f192b24d4700dcccfdb27fdfa6182958f99606ea45bbfb9ed2e6cedcf1e7cabd4b293dfa29ada8aa30c6de2e5e095e62a71f1d8d8220d0db1335d76186926240403a8b16199b91908950f17db4528fb1073f87930a4ba5aee954d4f4b7bec5c2e308cc03ae37cd45c2b1b47437e2bf0ff22dc2c6d143f9ac26a300127385413fa17da98d4a297266a7f1b4e5324597d5a2db3613371b276c54b639faf2aa905da9c427f0c84f3f89ba9c74fd80d1aa9c9b7f353d5e27925181db69187a6b59f740f1010e19105a08f04a60682f697de7c8260e67e00000000dff68782cfdffe179305eedb4d7b2cbfeaefa700578d4ba7af985de0e86a9b6e426caab6fc533f4973944f425a392bde65ff416f001320c8dc9f9e15a02d406cd8e814f14d6a41e34cd1e6662351415c47e974360383262acc2915505211a8ade7947a0e8b84da30d1581c4323d785ba20108c5027d5ed2a866532a520196074dfc13968eb349f3356fd5e2cd329655eba71f7662d6e5f80cbde2c7d9e3b60292545db3f690b1abbb40426c210c887897310d61abf928cea3077c1d23f34a101f9683a838cc3aaa845c1600a7c6ff2119442e4848068866486a03ca990555f68df38a7db77b7cbde80034a98755a75e0e10f4956d30a3ddd1a948debdf8ab12701cd40053ad5ad52cfe2339a8716385c56337f70e9297b284beca7a3e5ee2711914bf324241426e90295c1bfa63cc72916500bef28676f6fed80bcbd40d49cf55a54ea59abdb39efee7cdad3fdd923920b28d972eeffa33fd8fb149d97ce99503a7a93d7c50a57bf3108d98c296878b029f520fe6279dce6dc6e07d666c0e6e8f7bd58a6acc3550655ab39a3b3ece83c9bddbb9beb81c33893c5a2b9ec8d1694caa74116e3d9431214ab80c65828de6d96072abcd54f368cad8ddc49cf1e7abbe6ea294041e4978f93e2d85a8b583d3611104380ab88d31ea1bff104c4d75d875ee48e6070dc96b7f047db1f2564b18a84267c260767b6eebaac705ed70f1ddf11e23681abe60454b8b368308305f531435020645fb830db063016a44dfedc83c0f5e3aa19ef03186acbf82c96de8ad1d9e124013fcddedddc556ba439cb54e5e0a8d8b1a5c8dc7f80fe614ec2e064a09c61d7e0f0895880c6b974e51f0f84028893aba952ec173645c7d76218c38d843fe17beb6411b107578ee9c2f6c4d6bb1cd3ac1d52a2c34f7b2bb06110929f4be7392c59bacd8c31a6f4c0dad0f459c124b0cf09052d650f09792bc50b2de95d7d3fde459909040f3b2afbd3d800d6c6011016b640b08007e4c9d0002054d99acb733a50152f0f1df5c688f974ebcc1df84b792fb44bbc2a1bffecc42e2a3517f9564abcced05d61951cc5795b868dd6d06066e53121236bf2e16e81275e9990f0e7fcf61438d135cc7985a7652407ee997dd3ad280961769c663b92133f0f70c6a57a6412a05489b9a7748881f547690980bd9bb80bac5ee027eee0feaeac35f429feabbbe2a6f6130dea41d97408656ddc6612b69edc2762f953fcfc576cdb36080395d3cd156223ec6abc5140d51fd033069fff8bfbb39c184e90febeeeec0b28c3d485c211b1cf38e8f136ad87f9a0d292d734f3bc7bae81c7beb3f38665eafe23bd08a86c3d0b1e17c293a57e23d81116a450f1c8351715b6253b50b0ffbb220f78301c965d75eca037c1063dd058231ae6146a3565c82e693be55d2768fab4e665b078834fefbdb9d85145beffbf3b6c2d9611e2720d16e31da23af324defa1c3c3567aed0f8cf2a3e9fa11a7f7b19283edbabc76418a5d41100a25b19ffddfd7f36fb2702358d6bff6971c76e545505eb41a95744d194c69aed3280cc9085a6c4036ff9660b5186c5f01b8ebd172babaa91c0375ea97b3e6d47cea54cb68e41c6cae779e258789ea1fad8db2cd119b31d85d6e67f2e1c19009bdb11ae01f434466dde69d70907bd875c53a3cf94e3d9689d614191b03186abd29a4d235a77b282618d7482342266e7ce38f60ff895a875aa1fdfb104e3812f852129bd0553fc7bb602f81fc401d7acea120bcdd3673f621bf46c1289264eb1c96051250a847cd4b3a19cdc5989093a303f1e4c19c9bdec9216888dc91a82c5063aa33b3f9d8106369b201e9c08e9bc1e7800f535f4b15decb66f9299c9d04a93783ce5f3b56a3d6deac8bc2aa09e48fdccbf5464780cb2caf2264202215299299f88c1c49f11d4bb9e0aec61960e22207b09502cf76bd7e626daec4879d2ae2489ac7ea51421bfe262f603d82f23a3924ebd3fca893c69cf2b5d1549930bb1e00a48a1d14b7ec5bdd9609f26a3a59af6e2451a2ebf90ed51193c49fff7e7bc36088898f9938e954a4358549f9a735f1fdb00bb00c18969203db4d77c881e633e3a132c18fb2b7b43bf82039e6ea0d26f5b41f9f10cf2fc06b1b694381291d66bd8ff17f5963cc4242ca63c4a7117845e5159f2f79c5cb1c86f1c4a5d2048bd2eb7a4094b3c87c595ff5394ace0dd166a845e7b4d5541d2f7ffd03834522e250dcf78bc17456de27a8213e57e3a009150d14994090d9b7ea8a34f91eb94dc84a52535ba084bddbd2a4d411500bbfaa4dee89f48fd31cca8e59e10180245b3b15c149fe74b4933a13f94f7d2bc72b8724f3f092798cd53fd6baac60ea8ac402346ee68bc1dc7087265f72e93a3b4937422a7799df7d736bf6e141d3134ed3e92cd77aed5a0d583935c4b80479b85bdd8d8c4c5a0c3a43e205682a201d0dd08ba2ec527b649418753509a200d501a29193b1966e546cb18b051293fb11fb76f3bae800943ee26525fda6f89c09cf69aed290ea794facfffda2665be566ed01dea1fac74b469aa1ebd3e3df2506dc30716f524c69c9ff3b131e574b158772d106338944264ce49d0f7d5f01e953a0bfe1838189d4c2457a788d6e6959c0bcdebcaf1a2f6531986e24e1f447fa81bf5ce0cc3c4714e83c53770d4b2db0b30838001df8124dee57e37034306bcac21ec01d22a5d09d5dcfca61f57af27919c8cbc4ceb8c24fddc020bc0e73367f1af47f53ef00642cd352a7ad3648b3a30b4f64ebd13ab683d3c09abf15d79017fc7430f5f0dd6c7dbcc0cad6aba3737c8c16e33e26285436bb5e56420824c857b31f4819a09eb05f14085aa577faeaf69a05bcc092384bb3830c491d689b2c86554c452661df39b38027e13a47817b988b884b2d0f5b2a6a12889654a1e7eba5ef0e1303dc520677475f2133ffbf3146fd98c2746500951df98ca6ef4f1687750c6170080be7a8e3371c146d7a88c8557a7cbe269f1373093e3611cccb57d22df0e23524a1b4b94eeef7538abbe3b8fdcc963b2fcc468cebd8b0a8bcd6f274687ec0d9aeb853efd713327512e02133ff0ff4f120fa1a31a211a49df20a26a94a6cb9c1d0d1d34202e0a7880b46437c552858ccb9b6326c04a1812e7a421a6a13aebae9a2da5b2f4656f09b19169e79104c47bf46c73acbd1224ffadedffb109f33a7ae083216bacdb3908e2d0ca495b2e287118c78971a722b948f8104eae41531e33d0efb19c22b30f6683ffeba7e4fd5393561fddccc83c0d86116feff95f540d765c8a95bb536a4666a9bbccc1808a3cf89b5e03ecd6b1b6fd4664d91b00648902a56260b7ee98aab17ac01d311997083652ae01c8be7c59c3212146314c214d41b90b7899cc2a63e23b423274d490b02b0d71f690fffe980e3377e9b08cfca0d179a7208a046db03c3c7142217fbeb5fc71d280c8a2ccbb041f261e21a97afcfe674b273eef3e78c2d2b6073707a073b7670eb014883ab4edc6a0f9e3e0e04853998e60d574440f5083bb57fcb1d1bd6cb079afc991dae4a60cf4984c1bb2f1c64e1eca7d82990fcb1e049c2642a67ff7c6cb0f466889de44c9ca03313b0b751daf08cecc3fdc4c331c5c9b88def5496df0e49b19da5ebcba58e179ed26ac4063f264f5a5a79548bbf1cca727c120c24158be0fd827094faa862c08523cb17fbd93a54908dd16376054c6128985a1c0560cc9e71cef1e5c3b880473e6966e5b5a9c70a19c00c0fa6d689a38ffba05a5ff12afbd1f3af4b4c82c5ac1edd2c472e069d2915e0575f0ac4e2e6bfd1f6688c718c9b1726a9d371f312ed9b97146d5b67d2f4d0efc138d02dbc8b3a3785046de67598257d1d2a0958e88332a1615c3c5018259450277afed9985db88c0aa43fa505df62e92004e9b1df2e39e849ddf575836b8ac3bc40135d40f08d73d1a0204d5efc2e49e9ce3efecc16f30cd0e429d05e400307473025ef82d02c984c09741b9132f8e1657ef34d83d033cc3caa4e39a95978f7f49676d4ce8500bf1eb2835cf6511b3b7cb95f6a8f07eb11afc9ba3c47a2abcb46011327b51756480642397851d17f12a965f2f70a37453dca4d49045be6609cfff85e03b73ac57e4ea01b2797a3c6ad90e470cdd57939754c77b018aa76b1189805a5e84f91b42780ebd0d3f6cbf6810bb723711274a6b62a9692d2a78819f0a154fb2e04f5ff351797d28647ef80b8b56d7ae2321fa00c5c592ffeae0f24f8234b5dcd8c1fc07bac741d137f81359439b86e36482356884617bbda271e8fb9b433c8b0c5f13635c399a502ad8fe5a79f6c8215cf330b1513a196a4ffd2eb122175eb6a5f3f877d041c5aaabb5f8886a2961c9fef111e2a9cd1430cf19e8a4d226a872f02f39b40e8137545d4a5f286963f07461e4356cbee3b1765499e3934cc797b4fb4417c0579af3616fd4c0934692a4dbfc7e83b06ff682d3a053e956ce77ca7b8c0c2c53492511c574e0d740678bb9dec2b560d203254df4166f1fe30021ca38d9847f55b81709d4c0997f921ad92be18a8d4b57f4f7cc51b389749c7f471bc7fd23b1cf0d23ff75f6119570be6751d7b75336f661acd31a98061bf9cc86c33f485c21b4056ac5a4afa8ff2c4337fde23699aececc2ca7aaa4c85718ce3448d411cf8055ce0c29938753e35299d3626eb9e51985aa32ef188078e7fb6e06f8a4e91097a801971980c3d2550084c3aded3ed91d0f8c9406c72d05fbfb001a16fa4eda79d28cedc7658dc6477aa421c1c665d4cebe52edd9908a15f79aec6b99c48369bb7387c0e78766167e822f30b683756a74e5cf9a37f8467005350648f19d09fe48087106373be6cfe200adbdaba2b88f49ef1eee09ac5b0b70578acff805c613c052bd2c5a1d592722d7af9517722957359a5153bbce4eea5534f32c0ba633fff1ccbc178e526fca7a9f33de778c6a72778d74e1b344335d1b646f43488d4a63ab1ae0635f4d94d571f4071493a097dcf3767c816c4f4b1ab989ad9e9582db52dc26dd8a3ae617633167d3416b59fc5b3be2fe373a540c08f3ee68e88642bd19d96bfe275a54967884735146b51cc6e3105c6e94970361b521d8353a9f85af3be1d8d6ce653dbf405e3e9787fd7a7c8343fe3308ab6ad676c2e3bde1adce2679372bf8ed3e046989707091b58cf6b8b41a0dada02a368494c7a19a8ee65c776ee145269444e3ae3ff86f5e6711f08f1ae1f2d586370754ce73b52656309bd2f2445770554366f7ba33d9bb7a445aeafc7f7e356fa2aeb73dba6f9f474a12b641188c3445b52aa20f7d9cc698070825b7b060c23eea2ea559204816fd5a049896c5c1b386a628250b9e83f029210a42ab36af3f2e5775bdb4b87115d14d6c251631ac8e85552ce8cbadd363d87f1f0f27aad01eaadced6f8b00b0afee08687cad2b4806fead3166a179b155b9bf3d96f40f3b18d241f25bb17151fa1485fe78e89715c7333846ab61e2640f321dd51f5e09ae057e79090616582d72df5b0f4afcd9120b5d9b32bdb9c85bb7204f66b440fee15de805be7c5084df778a5a7606505c1c00", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)={0x90, 0x0, 0x5, {0x6, 0x4, 0x81004, 0x200000000, 0x5, 0xfffffffc, {0x0, 0x4858e8ae, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x94fa, 0x8, 0x2, 0x4000, 0xfffffffc, r5, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000021c0)='./file0/file1/file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r6}}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 7m53.206561031s ago: executing program 4 (id=34): inotify_init() unshare(0x24030000) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7m52.529130659s ago: executing program 4 (id=35): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x5, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 7m51.283568164s ago: executing program 32 (id=35): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x5, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 7.021708368s ago: executing program 0 (id=1271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf250100000000000000094100000014001802000000756415"], 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 7.020061628s ago: executing program 2 (id=1272): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x800, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0xb, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x7, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x4], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x5, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x2000000e, 0xf, 0x133, 0x6]}, 0x45c) r8 = openat$cgroup_ro(r4, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r8, &(0x7f00000001c0)={0x14}, 0x14) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r9 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r10, 0x5423, 0x0) ioctl$VT_SETMODE(r10, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000102f00002c0012800b00010067726574617000001c00028006000e000100000008000700e0000001060010000100000008000a00", @ANYRES32=r3, @ANYBLOB="03737a86022a981efb8309e2e28affffac5a890f779d951228988466072eb43981f135ae0c0fec50364af231a314fb2638aa43d7e02a708d4e93e9b8ce2af68520eb49f7d4e027e5c4991095807a0fabc46c8cf1c3b279f61615bce0981f3a41a1921d10874bf95015eaa728d1e276021a1346101b1bcaed63fb8a3b4354ce52bccc697e58a126da05fd3f2dfd9881a7b85ede73ce3d460b"], 0x54}}, 0x4000) 6.826251779s ago: executing program 0 (id=1273): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace(0x10, r0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x11, r0) 6.635588947s ago: executing program 0 (id=1274): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x20) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) r7 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c22901000000000014000300697036746e6c30000000000000000000280012800b000100697036746e6c00001800028014000200fc"], 0x5c}}, 0x0) 5.150995529s ago: executing program 5 (id=1282): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) chown(0x0, 0x0, 0xffffffffffffffff) 4.889599279s ago: executing program 5 (id=1283): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r7, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r10, 0xc0285628, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc}) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, &(0x7f00000000c0)) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 4.857958126s ago: executing program 2 (id=1284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.06580866s ago: executing program 5 (id=1287): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) syz_emit_ethernet(0x6e, &(0x7f0000001180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @empty, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x5, '\x00', {0x8, 0x6, "db0603", 0x0, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', [], "aea4425d72ab6f99"}}}}}}}, 0x0) 2.857397416s ago: executing program 5 (id=1288): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x8, 0x0, [{}, {}, {}, {}, {0x0, 0x5}]}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x7, 0x1, 0x0, "eee906000000d734fc70157dcb4f1891e20000000200003b00"}) 2.828711976s ago: executing program 5 (id=1289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @multicast1}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x7, 0x0, 0x13}, {"2244070000bc0be4bdf9da2470a34ec90000932b52c828de"}}}}}, 0x4e) 2.626021012s ago: executing program 0 (id=1290): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e25, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={r2}, &(0x7f0000000300)=0x8) 2.411701942s ago: executing program 5 (id=1292): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010580416500000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.046448864s ago: executing program 1 (id=1296): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x2) 1.979093226s ago: executing program 1 (id=1297): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000000080004000000000044000080080004"], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000262000/0x1000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) 1.877658681s ago: executing program 1 (id=1298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)="0000d7", 0x3}], 0x1}, 0x4048043) 1.829872275s ago: executing program 2 (id=1299): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[{0x10, 0x1, 0x5}], 0x10}}], 0x2, 0x4044044) 1.799111526s ago: executing program 3 (id=1300): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x26020480) unshare(0x28020480) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x808) 1.725440313s ago: executing program 1 (id=1301): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)=0x6) 1.720306333s ago: executing program 2 (id=1302): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xa43, 0x8000000000000001], 0x0, 0x0}, 0x78) 1.647578899s ago: executing program 0 (id=1303): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000000)=0x84) 1.62476889s ago: executing program 2 (id=1304): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x800, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0xb, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x7, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x4], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x5, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x2000000e, 0xf, 0x133, 0x6]}, 0x45c) r8 = openat$cgroup_ro(r4, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r8, 0x0, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r9 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(r10, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000102f00002c0012800b00010067726574617000001c00028006000e000100000008000700e0000001060010000100000008000a00", @ANYRES32=r3, @ANYBLOB="03737a86022a981efb8309e2e28affffac5a890f779d951228988466072eb43981f135ae0c0fec50364af231a314fb2638aa43d7e02a708d4e93e9b8ce2af68520eb49f7d4e027e5c4991095"], 0x54}}, 0x4000) 1.557985193s ago: executing program 3 (id=1305): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r2], 0x8) 1.536791609s ago: executing program 3 (id=1306): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4", 0x3}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x50, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.442241852s ago: executing program 3 (id=1307): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000080102000000000039df581e0000040900010073797a300000000005000300010000000c00058008000140"], 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8048) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f60014001a8010000580"], 0x34}}, 0x0) 1.301221947s ago: executing program 3 (id=1308): setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e1c, 0x6, @empty, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="8f", 0x1}], 0x1}}], 0x1, 0x4044000) 1.202547757s ago: executing program 3 (id=1309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 696.071421ms ago: executing program 0 (id=1310): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0xc000400) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') ppoll(&(0x7f0000000000)=[{r2, 0x4040}], 0x1, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) setrlimit(0xf, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1, 0x2, 0xf2, 0x3, [], [0x0, 0x2, 0xffff, 0x4e4b], [0x80, 0x8, 0x1d51, 0x7], [0x50, 0x8, 0x1, 0x7f]}) 444.599429ms ago: executing program 2 (id=1311): r0 = syz_open_dev$media(&(0x7f0000000b40), 0x2e18, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0x55117e) renameat2(r3, &(0x7f0000000040)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus/file0\x00', 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x8, r1}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) 212.846836ms ago: executing program 1 (id=1312): prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001400674c00"/29], 0xb8}}, 0x0) 0s ago: executing program 1 (id=1313): r0 = syz_open_dev$media(&(0x7f0000000b40), 0x2e18, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0x55117e) renameat2(r3, &(0x7f0000000040)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus/file0\x00', 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x8, r1}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T9053] kvm: user requested TSC rate below hardware speed [ 369.999259][ T5924] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 370.169000][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 370.212710][ T5924] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.231904][ T5924] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.244840][ T5924] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.255173][ T5924] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.279454][ T5924] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 370.288613][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.530956][ T5924] usb 2-1: GET_CAPABILITIES returned 0 [ 370.536628][ T5924] usbtmc 2-1:16.0: can't read capabilities [ 370.839060][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 370.896945][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.078955][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 371.106835][ T44] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 371.140264][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.175575][ T44] usb 4-1: Product: syz [ 371.190464][ T44] usb 4-1: Manufacturer: syz [ 371.195117][ T44] usb 4-1: SerialNumber: syz [ 371.229831][ T44] usb 4-1: config 0 descriptor?? [ 371.253522][ T44] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 371.304807][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 371.330469][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 371.368381][ T44] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 371.402191][ T44] usb 4-1: media controller created [ 371.437386][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.466841][ T9063] dvb-usb: bulk message failed: -22 (62/0) [ 371.570341][ T9071] dvb-usb: bulk message failed: -22 (6/0) [ 371.686539][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.733518][ T44] usb 4-1: selecting invalid altsetting 7 [ 371.808043][ T44] cxusb: set interface failed [ 371.827004][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 371.970666][ T44] DVB: Unable to find symbol lgdt330x_attach() [ 372.013565][ T44] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 372.089012][ T5912] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 372.289459][ T44] rc_core: IR keymap rc-dvico-portable not found [ 372.289461][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 372.316934][ T5912] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 372.333255][ T5912] usb 1-1: config 0 has no interface number 0 [ 372.356149][ T5912] usb 1-1: config 0 interface 184 has no altsetting 0 [ 372.394110][ T5912] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 372.418402][ T44] Registered IR keymap rc-empty [ 372.436369][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.463874][ T44] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 372.488990][ T57] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 372.497335][ T5912] usb 1-1: Product: syz [ 372.517304][ T5912] usb 1-1: Manufacturer: syz [ 372.529362][ T44] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input38 [ 372.543191][ T5912] usb 1-1: SerialNumber: syz [ 372.572129][ T5912] usb 1-1: config 0 descriptor?? [ 372.593165][ T5912] smsc75xx v1.0.0 [ 372.711260][ T57] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 372.730311][ T57] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.741957][ T57] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 372.751452][ T57] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.764966][ T44] dvb-usb: schedule remote query interval to 100 msecs. [ 372.769366][ T57] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 372.806851][ T44] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 372.826166][ T57] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 372.835442][ T57] usb 6-1: Product: syz [ 372.839831][ T57] usb 6-1: Manufacturer: syz [ 372.923662][ T57] cdc_wdm 6-1:1.0: skipping garbage [ 372.934801][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 372.941665][ T57] cdc_wdm 6-1:1.0: skipping garbage [ 372.947285][ T57] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 373.103563][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 373.174638][ T57] usb 2-1: USB disconnect, device number 20 [ 373.239008][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 373.263470][ T5912] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 373.281583][ T5912] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 373.312118][ T9081] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 373.384039][ T44] usb 6-1: USB disconnect, device number 14 [ 373.453975][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 373.488554][ T5912] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 373.551342][ T5912] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 373.582048][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 373.634707][ T5912] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 373.701073][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 373.775607][ T5924] usb 4-1: USB disconnect, device number 15 [ 373.870903][ T5912] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 373.937661][ T5912] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 373.992771][ T5924] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 374.430260][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 374.579296][ T9098] xt_CT: No such helper "snmp_trap" [ 375.308002][ T9088] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.315861][ T9088] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 375.335565][ T9088] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.342966][ T9088] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.351142][ T9088] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.523922][ T9106] fuse: Bad value for 'fd' [ 375.899155][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 375.988978][ T44] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 376.167272][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 376.190963][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.239045][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.341449][ T44] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 376.396657][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.444791][ T44] usb 6-1: config 0 descriptor?? [ 376.641284][ T9] usb 1-1: USB disconnect, device number 20 [ 376.873341][ T44] ft260 0003:0403:6030.0006: unknown main item tag 0x7 [ 377.119574][ T44] ft260 0003:0403:6030.0006: chip code: 6424 8183 [ 377.330634][ T9] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x4 [ 377.344545][ T9112] netlink: 28 bytes leftover after parsing attributes in process `syz.5.619'. [ 377.379216][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 377.429169][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 377.436436][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 377.452162][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 377.452178][ T9] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 377.452226][ T9] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x2 [ 377.529853][ T5924] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 377.614667][ T9] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 377.648765][ T9] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 377.674415][ T9] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 377.712371][ T9] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 377.747486][ T9] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 377.799264][ T9] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 377.859010][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 377.864172][ T9138] geneve2: entered allmulticast mode [ 377.900618][ T5924] usb 4-1: config 0 has no interfaces? [ 377.926330][ T9] hid-generic 00A0:0006:0003.0007: hidraw0: HID v0.05 Device [syz1] on syz0 [ 378.012753][ T5924] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 378.148865][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.230833][ T5924] usb 4-1: Product: syz [ 378.349488][ T5924] usb 4-1: Manufacturer: syz [ 378.402530][ T5924] usb 4-1: SerialNumber: syz [ 378.475370][ T5924] usb 4-1: config 0 descriptor?? [ 378.772584][ T44] ft260 0003:0403:6030.0006: failed to retrieve system status [ 378.942445][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.948787][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.028303][ T44] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -71 [ 379.225103][ T44] usb 6-1: USB disconnect, device number 15 [ 379.508520][ T9152] netlink: 132 bytes leftover after parsing attributes in process `syz.0.621'. [ 379.598994][ T5912] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 379.749014][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 379.783816][ T5912] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 379.812836][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.852372][ T5912] usb 3-1: Product: syz [ 379.893288][ T5912] usb 3-1: Manufacturer: syz [ 379.954300][ T5912] usb 3-1: SerialNumber: syz [ 380.013844][ T5912] usb 3-1: config 0 descriptor?? [ 380.105348][ T5912] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 380.160392][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 380.263817][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.319612][ T5912] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 380.383929][ T5912] usb 3-1: media controller created [ 380.491888][ T57] usb 4-1: USB disconnect, device number 16 [ 380.548044][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.669146][ T5912] usb 3-1: selecting invalid altsetting 7 [ 380.740470][ T5912] cxusb: set interface failed [ 380.778149][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 380.851490][ T5912] DVB: Unable to find symbol lgdt330x_attach() [ 380.913853][ T5912] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 381.023584][ T5912] rc_core: IR keymap rc-dvico-portable not found [ 381.062207][ T5912] Registered IR keymap rc-empty [ 381.075521][ T5912] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 381.107029][ T5912] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input39 [ 381.137546][ T5912] dvb-usb: schedule remote query interval to 100 msecs. [ 381.153847][ T5912] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 381.259153][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 381.389003][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 381.514002][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 381.642776][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 381.775856][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 381.900240][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 382.038252][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 382.074887][ T9196] fuse: Bad value for 'fd' [ 382.159107][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 382.287456][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 382.439013][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 382.589875][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 382.709108][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 382.848951][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 382.876753][ T9200] geneve2: entered allmulticast mode [ 382.979723][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 383.110047][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 383.245516][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 383.359013][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 383.478977][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 383.600537][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 383.745560][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 383.869001][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 383.903034][ T44] usb 3-1: USB disconnect, device number 26 [ 383.939105][ T5884] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 384.027412][ T44] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 384.099422][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 384.124366][ T5884] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 384.167046][ T5884] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 384.230802][ T5884] usb 2-1: config 0 has no interface number 0 [ 384.290060][ T5884] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 384.365154][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.396058][ T5884] usb 2-1: Product: syz [ 384.410581][ T5884] usb 2-1: Manufacturer: syz [ 384.415209][ T5884] usb 2-1: SerialNumber: syz [ 384.488718][ T5884] usb 2-1: config 0 descriptor?? [ 384.500794][ T9219] geneve2: entered allmulticast mode [ 385.013702][ T9226] netlink: 10 bytes leftover after parsing attributes in process `syz.1.635'. [ 386.622089][ T5884] rndis_host 2-1:0.109: More than one union descriptor, skipping ... [ 386.657962][ T5884] usb 2-1: bad CDC descriptors [ 386.712330][ T5884] cdc_acm 2-1:0.109: More than one union descriptor, skipping ... [ 386.804820][ T5884] usb 2-1: USB disconnect, device number 21 [ 387.238078][ T9251] netdevsim netdevsim0: Direct firmware load for / [ 387.238078][ T9251] failed with error -2 [ 387.249151][ T9251] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 387.249151][ T9251] [ 387.398974][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 387.571774][ T9] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 387.676844][ T9] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 387.743339][ T9] usb 4-1: config 171 has no interface number 0 [ 387.811228][ T9] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 387.844759][ T9] usb 4-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 387.939032][ T9] usb 4-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 388.080911][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 388.111964][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.121198][ T9] usb 4-1: Product: syz [ 388.162577][ T9] usb 4-1: Manufacturer: syz [ 388.179089][ T9] usb 4-1: SerialNumber: syz [ 388.210254][ T9254] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 389.026052][ T9276] netlink: 'syz.3.644': attribute type 21 has an invalid length. [ 389.044216][ T9280] geneve2: entered allmulticast mode [ 389.107422][ T9277] netlink: 'syz.3.644': attribute type 21 has an invalid length. [ 389.125259][ T9279] geneve2: entered allmulticast mode [ 389.174394][ T9276] netlink: 156 bytes leftover after parsing attributes in process `syz.3.644'. [ 389.259352][ T57] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 389.260959][ T9277] netlink: 156 bytes leftover after parsing attributes in process `syz.3.644'. [ 389.409080][ T57] usb 3-1: Using ep0 maxpacket: 16 [ 389.428666][ T57] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 389.467249][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.500682][ T9] ath6kl: Failed to submit usb control message: -110 [ 389.521382][ T57] usb 3-1: config 0 descriptor?? [ 389.549041][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 389.570374][ T57] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 389.587361][ T9] ath6kl: Unable to send get target info: -110 [ 389.621867][ T9] ath6kl: Failed to init ath6kl core: -110 [ 389.668221][ T9] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 390.605139][ T9] usb 4-1: USB disconnect, device number 17 [ 391.337917][ T9303] geneve2: entered allmulticast mode [ 391.598351][ T9282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.648'. [ 391.628962][ T9282] openvswitch: netlink: Flow key attr not present in new flow. [ 392.115263][ T57] gspca_sonixj: reg_w1 err -71 [ 392.130790][ T57] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 392.178181][ T57] usb 3-1: USB disconnect, device number 27 [ 393.117451][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 393.137236][ T9330] F2FS-fs: Conflicting test_dummy_encryption options [ 393.236772][ T9331] netlink: 40 bytes leftover after parsing attributes in process `syz.3.653'. [ 393.370817][ T9324] sch_fq: defrate 0 ignored. [ 394.885519][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.659'. [ 396.019788][ T9362] geneve2: entered allmulticast mode [ 396.595391][ T9379] kAFS: unable to lookup cell 'ÿ' [ 396.671022][ T9379] kAFS: unable to lookup cell '(,c¾Ì' [ 398.142924][ T9397] fuse: Bad value for 'fd' [ 398.530562][ T9400] geneve2: entered allmulticast mode [ 398.639057][ T5884] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 398.854967][ T5884] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 398.895439][ T5884] usb 3-1: config 0 has no interface number 0 [ 398.926026][ T5884] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 399.007915][ T5884] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 399.111420][ T5884] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 399.121405][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.129696][ T5884] usb 3-1: Product: syz [ 399.133944][ T5884] usb 3-1: Manufacturer: syz [ 399.144920][ T5884] usb 3-1: SerialNumber: syz [ 399.176069][ T5884] usb 3-1: config 0 descriptor?? [ 399.194014][ T9399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 399.210158][ T5884] ums-sddr09 3-1:0.20: USB Mass Storage device detected [ 399.323495][ T5884] ums-sddr09 3-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 400.191211][ T9419] input: syz1 as /devices/virtual/input/input40 [ 400.259407][ T57] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 400.305324][ T9419] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 400.448948][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 400.464696][ T57] usb 6-1: config 0 has no interfaces? [ 400.472743][ T57] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 400.514517][ T57] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 400.540241][ T57] usb 6-1: Manufacturer: syz [ 400.570420][ T57] usb 6-1: config 0 descriptor?? [ 401.061406][ T9429] fuse: Unknown parameter '0x0000000000000008' [ 401.728973][ T44] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 401.939066][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 401.950233][ T44] usb 1-1: config 0 has an invalid interface number: 28 but max is 0 [ 402.016391][ T44] usb 1-1: config 0 has no interface number 0 [ 402.046618][ T44] usb 1-1: config 0 interface 28 altsetting 8 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 402.094039][ T44] usb 1-1: config 0 interface 28 has no altsetting 0 [ 402.148697][ T44] usb 1-1: Dual-Role OTG device on HNP port [ 402.162190][ T44] usb 1-1: New USB device found, idVendor=12d1, idProduct=937e, bcdDevice=af.67 [ 402.209585][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.244882][ T44] usb 1-1: Product: syz [ 402.265787][ T44] usb 1-1: Manufacturer: syz [ 402.280645][ T44] usb 1-1: SerialNumber: syz [ 402.303995][ T44] usb 1-1: config 0 descriptor?? [ 402.343651][ T44] hub 1-1:0.28: bad descriptor, ignoring hub [ 402.374554][ T44] hub 1-1:0.28: probe with driver hub failed with error -5 [ 402.400326][ T44] option 1-1:0.28: GSM modem (1-port) converter detected [ 402.696107][ T9] usb 3-1: USB disconnect, device number 28 [ 402.740275][ T44] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 402.917483][ T44] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 402.965495][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 402.998740][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.033639][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.077109][ T44] usb 2-1: config 0 descriptor?? [ 403.408168][ T44] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 403.959122][ T9] usb 6-1: USB disconnect, device number 16 [ 404.449990][ T9479] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 404.880071][ T9483] netlink: 'syz.5.675': attribute type 8 has an invalid length. [ 405.235692][ T5884] usb 2-1: USB disconnect, device number 22 [ 406.509508][ T9524] geneve2: entered allmulticast mode [ 407.620397][ T57] usb 1-1: USB disconnect, device number 21 [ 407.668452][ T57] option 1-1:0.28: device disconnected [ 407.930221][ T9555] input: syz1 as /devices/virtual/input/input41 [ 408.060013][ T9545] geneve2: entered allmulticast mode [ 408.105174][ T9555] netlink: 'syz.5.683': attribute type 1 has an invalid length. [ 408.580081][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 408.774348][ T9558] gretap1: entered allmulticast mode [ 408.794340][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 408.816237][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 408.827618][ T9558] bond1: (slave gretap1): making interface the new active one [ 408.855091][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.880142][ T9558] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 408.911527][ T9] usb 3-1: config 0 has no interface number 0 [ 408.932198][ T9] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.007729][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 409.038588][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.081829][ T9] usb 3-1: config 0 descriptor?? [ 409.201653][ T9] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 409.213417][ T9572] kernel profiling enabled (shift: 9) [ 409.583079][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 409.583102][ T30] audit: type=1326 audit(1767555019.663:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 409.738065][ T30] audit: type=1326 audit(1767555019.663:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 409.841264][ T30] audit: type=1326 audit(1767555019.693:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 409.934807][ T30] audit: type=1326 audit(1767555019.693:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 410.057989][ T30] audit: type=1326 audit(1767555019.693:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 410.104701][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.138394][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.148967][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 410.159989][ T30] audit: type=1326 audit(1767555019.703:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 410.331861][ T30] audit: type=1326 audit(1767555019.703:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 410.358400][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 410.397978][ T9] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 410.462520][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.534580][ T30] audit: type=1326 audit(1767555019.703:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 410.590183][ T9] usb 6-1: config 0 has no interface number 0 [ 410.627512][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 410.682457][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.721815][ T30] audit: type=1326 audit(1767555019.893:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 410.730826][ T9] usb 6-1: Product: syz [ 410.815877][ T9] usb 6-1: Manufacturer: syz [ 410.825501][ T9] usb 6-1: SerialNumber: syz [ 410.904517][ T9] usb 6-1: config 0 descriptor?? [ 410.923449][ T30] audit: type=1326 audit(1767555019.903:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 411.063839][ T9] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 411.094354][ T9] uvcvideo 6-1:0.105: No valid video chain found. [ 411.379199][ T5891] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 411.553013][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 411.564521][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.593628][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.603984][ T5891] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 411.619174][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.635817][ T5891] usb 1-1: config 0 descriptor?? [ 412.793409][ T9] usb 3-1: USB disconnect, device number 29 [ 413.090828][ T9621] loop7: detected capacity change from 0 to 16384 [ 413.263440][ T9624] usb usb8: usbfs: process 9624 (syz.2.692) did not claim interface 0 before use [ 413.316364][ T9623] loop7: detected capacity change from 16384 to 0 [ 413.316703][ C0] I/O error, dev loop7, sector 15984 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 413.343668][ C1] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 413.704910][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'. [ 414.515011][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 414.529745][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 414.564299][ T5891] usb 1-1: USB disconnect, device number 22 [ 414.588651][ T9632] geneve2: entered allmulticast mode [ 414.751469][ T9] IPVS: starting estimator thread 0... [ 414.757669][ T9639] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 414.787035][ T9643] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 414.859069][ T9644] IPVS: using max 54 ests per chain, 129600 per kthread [ 414.937880][ T5891] usb 6-1: USB disconnect, device number 17 [ 415.017129][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 416.167650][ T9664] fuse: Bad value for 'fd' [ 416.210322][ T5891] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 416.337486][ T9665] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 416.373400][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 416.410183][ T5891] usb 2-1: not running at top speed; connect to a high speed hub [ 416.452637][ T5891] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 416.485528][ T5891] usb 2-1: config 5 interface 0 has no altsetting 1 [ 416.545795][ T5891] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 416.570850][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.596237][ T5891] usb 2-1: Product: syz [ 416.613164][ T5891] usb 2-1: Manufacturer: syz [ 416.645294][ T5891] usb 2-1: SerialNumber: syz [ 417.604431][ T9660] geneve2: entered allmulticast mode [ 418.459121][ T5884] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 418.621705][ T5884] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 418.630290][ T5884] usb 4-1: config 0 has no interface number 0 [ 418.646851][ T5884] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 418.702400][ T5884] usb 4-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.777910][ T5884] usb 4-1: config 0 interface 113 has no altsetting 0 [ 418.818303][ T5884] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 418.869625][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.905023][ T5884] usb 4-1: Product: syz [ 418.941343][ T5884] usb 4-1: Manufacturer: syz [ 418.957793][ T5884] usb 4-1: SerialNumber: syz [ 419.002786][ T5884] usb 4-1: config 0 descriptor?? [ 419.048223][ T5884] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 419.239231][ T9665] team0: Port device netdevsim0 added [ 419.378482][ T5891] usb 2-1: USB disconnect, device number 23 [ 419.513381][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.737505][ T9686] hub 1-0:1.0: USB hub found [ 419.745508][ T9686] hub 1-0:1.0: 1 port detected [ 419.941884][ T9694] geneve2: entered allmulticast mode [ 421.453140][ T5891] usb 4-1: USB disconnect, device number 18 [ 421.707454][ T9716] netlink: 40 bytes leftover after parsing attributes in process `syz.3.707'. [ 421.828995][ T5891] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 421.998976][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 422.019711][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.032839][ T9721] block device autoloading is deprecated and will be removed. [ 422.099094][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.124372][ T5891] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 422.155878][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.194913][ T5891] usb 2-1: config 0 descriptor?? [ 422.397244][ T5998] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 422.969044][ T12] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 424.069011][ T57] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 424.127912][ T9735] fuse: Unknown parameter '0x0000000000000008' [ 424.237981][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 424.264458][ T57] usb 6-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 424.327456][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.358711][ T57] usb 6-1: config 0 descriptor?? [ 424.386094][ T9726] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 425.023792][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.709'. [ 425.051473][ T5891] usbhid 2-1:0.0: can't add hid device: -71 [ 425.171870][ T5891] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 425.206931][ T5891] usb 2-1: USB disconnect, device number 24 [ 425.567169][ T57] betop 0003:8380:1850.0008: report_id 1146923772 is invalid [ 425.577282][ T57] betop 0003:8380:1850.0008: item 0 4 1 8 parsing failed [ 425.595358][ T57] betop 0003:8380:1850.0008: parse failed [ 425.605221][ T57] betop 0003:8380:1850.0008: probe with driver betop failed with error -22 [ 426.038955][ T5891] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 426.152979][ T9758] geneve2: entered allmulticast mode [ 426.269071][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 426.283577][ T5891] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 426.385176][ T5891] usb 2-1: config 0 has no interface number 0 [ 426.458484][ T5891] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 426.500786][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.535189][ T5891] usb 2-1: Product: syz [ 426.600881][ T5891] usb 2-1: Manufacturer: syz [ 426.613483][ T5891] usb 2-1: SerialNumber: syz [ 426.645181][ T5891] usb 2-1: config 0 descriptor?? [ 426.678720][ T5891] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 426.733784][ T5891] usb 2-1: selecting invalid altsetting 1 [ 426.753086][ T9763] : renamed from bridge_slave_0 (while UP) [ 426.777849][ T5891] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 426.821675][ T5891] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 426.868429][ T5891] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 426.917990][ T5891] usb 2-1: media controller created [ 427.012431][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.139319][ T5891] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 428.165273][ T5891] zl10353_read_register: readreg error (reg=127, ret==-110) [ 428.175223][ T9750] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 428.361240][ T57] usb 6-1: USB disconnect, device number 18 [ 428.692766][ T9780] input: syz1 as /devices/virtual/input/input42 [ 428.955743][ T9780] netlink: 'syz.5.719': attribute type 1 has an invalid length. [ 430.169338][ T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 430.239019][ T57] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 430.331637][ T24] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 430.355224][ T1217] usb 2-1: USB disconnect, device number 25 [ 430.414306][ T24] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 430.431533][ T57] usb 1-1: Using ep0 maxpacket: 32 [ 430.446894][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 430.466078][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 430.471295][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.545258][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.587891][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.612977][ T57] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 430.636091][ T24] usb 4-1: config 0 descriptor?? [ 430.652601][ T9791] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 430.665431][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.709908][ T57] usb 1-1: config 0 descriptor?? [ 430.788741][ T9808] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 430.900457][ T9810] netlink: 104 bytes leftover after parsing attributes in process `syz.5.725'. [ 430.943364][ T9808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.361468][ T9816] fuse: Unknown parameter 'fd0x0000000000000008' [ 432.762967][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 432.784229][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 432.819230][ T24] usb 4-1: USB disconnect, device number 19 [ 433.652050][ T9832] fuse: Bad value for 'fd' [ 433.771014][ T57] usbhid 1-1:0.0: can't add hid device: -71 [ 433.777311][ T9832] geneve2: entered allmulticast mode [ 433.841226][ T57] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 433.943062][ T57] usb 1-1: USB disconnect, device number 23 [ 434.373802][ T9846] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 434.455601][ T9846] team0: Port device batadv1 added [ 434.517332][ T9846] hub 9-0:1.0: USB hub found [ 434.523749][ T9846] hub 9-0:1.0: 1 port detected [ 435.486483][ T9855] input: syz1 as /devices/virtual/input/input43 [ 435.749333][ T9865] geneve2: entered allmulticast mode [ 435.861831][ T9855] netlink: 'syz.1.733': attribute type 1 has an invalid length. [ 436.269134][ T57] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 436.601689][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 436.627079][ T57] usb 6-1: config 0 has no interfaces? [ 436.659763][ T57] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 436.706959][ T57] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 436.797729][ T57] usb 6-1: Manufacturer: syz [ 436.899418][ T57] usb 6-1: config 0 descriptor?? [ 437.170364][ T9884] openvswitch: netlink: IP tunnel dst address not specified [ 437.213476][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 438.690989][ T9904] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 438.750725][ T9905] fuse: Bad value for 'fd' [ 438.893229][ T9904] hfs: unable to load iocharset "io#harset" [ 440.039805][ T57] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 440.160206][ T5912] usb 6-1: USB disconnect, device number 19 [ 440.245168][ T57] usb 3-1: config 0 has no interfaces? [ 440.278978][ T57] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 440.308709][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.327194][ T57] usb 3-1: Product: syz [ 440.337408][ T57] usb 3-1: Manufacturer: syz [ 440.352268][ T57] usb 3-1: SerialNumber: syz [ 440.382091][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.383153][ T57] usb 3-1: config 0 descriptor?? [ 440.393581][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.601769][ T9931] geneve2: entered allmulticast mode [ 440.609738][ T5912] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 440.812072][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 440.882647][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 440.999314][ T5912] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 441.054202][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.072811][ T5912] usb 6-1: Product: syz [ 441.090436][ T5912] usb 6-1: Manufacturer: syz [ 441.113506][ T5912] usb 6-1: SerialNumber: syz [ 441.122981][ T9916] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.166448][ T5912] usb 6-1: config 0 descriptor?? [ 441.201424][ T5912] em28xx 6-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 441.234302][ T5912] em28xx 6-1:0.0: Device initialization failed. [ 441.283168][ T5912] em28xx 6-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 442.325259][ T9951] input: syz1 as /devices/virtual/input/input44 [ 442.443323][ T9952] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 442.688835][ T5912] usb 3-1: USB disconnect, device number 30 [ 443.240485][ T5912] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 443.376955][ T57] usb 6-1: USB disconnect, device number 20 [ 443.448983][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 443.538781][ T5912] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 443.551129][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.562265][ T5912] usb 4-1: Product: syz [ 443.566597][ T5912] usb 4-1: Manufacturer: syz [ 443.578068][ T5912] usb 4-1: SerialNumber: syz [ 443.595088][ T5912] usb 4-1: config 0 descriptor?? [ 443.604185][ T5912] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 443.833506][ T9963] geneve2: entered allmulticast mode [ 444.749302][ T5912] gspca_topro: reg_w err -110 [ 444.806087][ T5912] gspca_topro: Sensor soi763a [ 445.443420][ T9992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.479129][ T9992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.818959][ T5912] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 446.004666][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 446.047304][ T5912] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 446.122302][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 446.157068][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.188799][ T5912] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.230297][ T5912] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 446.271221][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.296295][T10012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.756'. [ 446.553923][ T5912] usb 3-1: GET_CAPABILITIES returned 0 [ 446.559636][ T5912] usbtmc 3-1:16.0: can't read capabilities [ 446.794429][ T5912] usb 3-1: USB disconnect, device number 31 [ 446.844036][ T24] usb 4-1: USB disconnect, device number 20 [ 447.034729][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 448.157137][T10030] fuse: Unknown parameter 'ÿ0xffffffffffffffff' [ 448.169634][T10030] dlm: non-version read from control device 8192 [ 448.910694][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 448.910712][ T30] audit: type=1326 audit(1767555058.993:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee678f749 code=0x7ffc0000 [ 449.140823][ T30] audit: type=1326 audit(1767555058.993:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6ee678f749 code=0x7ffc0000 [ 449.201620][ T30] audit: type=1326 audit(1767555058.993:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee678f749 code=0x7ffc0000 [ 449.267113][ T30] audit: type=1326 audit(1767555058.993:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee678f749 code=0x7ffc0000 [ 449.337527][ T30] audit: type=1326 audit(1767555058.993:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6ee678f749 code=0x7ffc0000 [ 449.395806][ T30] audit: type=1326 audit(1767555058.993:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee678f749 code=0x7ffc0000 [ 449.482745][ T30] audit: type=1326 audit(1767555058.993:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ee678f749 code=0x7ffc0000 [ 449.507969][ T30] audit: type=1326 audit(1767555058.993:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee678f749 code=0x7ffc0000 [ 449.641352][ T30] audit: type=1326 audit(1767555058.993:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f6ee678f749 code=0x7ffc0000 [ 449.747719][ T30] audit: type=1326 audit(1767555058.993:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee678f749 code=0x7ffc0000 [ 450.079097][T10059] input: syz1 as /devices/virtual/input/input45 [ 450.761791][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 452.275793][T10092] netlink: 35 bytes leftover after parsing attributes in process `syz.3.771'. [ 452.523739][T10093] netlink: 'syz.3.771': attribute type 4 has an invalid length. [ 453.034332][T10100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.772'. [ 454.745841][T10111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.775'. [ 455.899381][ T5884] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 456.059299][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 456.068089][ T5884] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 456.087081][ T5884] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 456.110455][ T5884] usb 1-1: config 0 has no interface number 0 [ 456.136809][ T5884] usb 1-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 456.158068][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.181238][ T5884] usb 1-1: Product: syz [ 456.194530][ T5884] usb 1-1: Manufacturer: syz [ 456.208923][ T5884] usb 1-1: SerialNumber: syz [ 456.235141][ T5884] usb 1-1: config 0 descriptor?? [ 457.100701][T10139] input: syz1 as /devices/virtual/input/input46 [ 457.333210][T10133] syz.5.779 (10133): drop_caches: 0 [ 458.044995][T10146] netlink: 44 bytes leftover after parsing attributes in process `syz.1.781'. [ 458.984730][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 459.118958][ T57] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 459.282630][T10164] sctp: [Deprecated]: syz.3.785 (pid 10164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.282630][T10164] Use struct sctp_sack_info instead [ 459.327051][ T57] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 459.346093][ T57] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.368301][ T57] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 459.390526][ T57] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.442377][ T57] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 459.472319][ T57] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 459.498017][ T57] usb 6-1: Product: syz [ 459.512378][ T57] usb 6-1: Manufacturer: syz [ 459.597126][ T57] cdc_wdm 6-1:1.0: skipping garbage [ 459.604136][ T57] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 459.877626][T10169] delete_channel: no stack [ 459.911090][T10151] netlink: 28 bytes leftover after parsing attributes in process `syz.5.782'. [ 459.967383][ T5924] usb 6-1: USB disconnect, device number 21 [ 460.046422][T10151] openvswitch: netlink: Flow key attr not present in new flow. [ 460.105948][ T5884] rndis_host 1-1:0.109: More than one union descriptor, skipping ... [ 460.127278][ T5884] usb 1-1: bad CDC descriptors [ 460.135644][ T5884] cdc_acm 1-1:0.109: More than one union descriptor, skipping ... [ 460.164288][ T5884] usb 1-1: USB disconnect, device number 24 [ 460.826784][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 461.620951][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 461.620969][ T30] audit: type=1326 audit(1767555071.623:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa512d8f749 code=0x7ffc0000 [ 461.822864][ T30] audit: type=1326 audit(1767555071.623:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa512d8f749 code=0x7ffc0000 [ 461.950360][ T30] audit: type=1326 audit(1767555071.623:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa512d8f749 code=0x7ffc0000 [ 462.058674][ T30] audit: type=1326 audit(1767555071.623:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa512d8f749 code=0x7ffc0000 [ 462.272891][ T30] audit: type=1326 audit(1767555071.633:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa512d8f749 code=0x7ffc0000 [ 462.331262][ T30] audit: type=1326 audit(1767555071.633:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa512d91667 code=0x7ffc0000 [ 462.448989][ T30] audit: type=1326 audit(1767555071.633:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa512d915dc code=0x7ffc0000 [ 462.509062][ T30] audit: type=1326 audit(1767555071.633:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa512d91514 code=0x7ffc0000 [ 462.579074][ T30] audit: type=1326 audit(1767555071.633:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa512d91514 code=0x7ffc0000 [ 462.723833][ T30] audit: type=1326 audit(1767555071.643:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa512d8e3aa code=0x7ffc0000 [ 464.034656][T10209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.793'. [ 464.432051][T10213] input: syz1 as /devices/virtual/input/input47 [ 465.873498][T10227] netlink: 'syz.0.797': attribute type 10 has an invalid length. [ 465.919785][T10227] bond0: (slave wlan1): Opening slave failed [ 466.433373][T10238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.476003][T10238] batadv_slave_0: entered promiscuous mode [ 467.029010][T10245] random: crng reseeded on system resumption [ 467.691467][T10249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.283620][T10261] input: syz1 as /devices/virtual/input/input48 [ 468.350826][ T5912] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 468.483642][T10261] netlink: 'syz.2.803': attribute type 1 has an invalid length. [ 468.527107][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.551050][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 468.569412][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 468.580673][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 468.592258][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.672129][ T5912] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 468.681508][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.689900][ T5912] usb 2-1: Product: syz [ 468.694163][ T5912] usb 2-1: Manufacturer: syz [ 468.698816][ T5912] usb 2-1: SerialNumber: syz [ 468.736402][ T5912] usb 2-1: config 0 descriptor?? [ 468.746216][ T5912] xbox_remote_probe: endpoint_in message size==0? [ 468.950652][ T5884] usb 2-1: USB disconnect, device number 26 [ 469.269121][T10268] geneve2: entered allmulticast mode [ 469.813493][T10282] input: syz1 as /devices/virtual/input/input49 [ 469.983264][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.809'. [ 470.699478][ T5884] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 470.888982][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 470.932972][ T5884] usb 6-1: config 0 has an invalid interface number: 109 but max is 0 [ 471.000583][ T5884] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 471.088890][ T5884] usb 6-1: config 0 has no interface number 0 [ 472.018963][ T5912] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 472.107624][ T5884] usb 6-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 472.116886][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.125042][ T5884] usb 6-1: Product: syz [ 472.129434][ T5884] usb 6-1: Manufacturer: syz [ 472.135222][ T5884] usb 6-1: SerialNumber: syz [ 472.144445][ T5884] usb 6-1: config 0 descriptor?? [ 472.178925][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 472.228036][ T5912] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 472.237194][ T5912] usb 2-1: config 0 has no interface number 0 [ 472.248438][ T5912] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 472.280850][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.289490][ T5912] usb 2-1: Product: syz [ 472.293669][ T5912] usb 2-1: Manufacturer: syz [ 472.298275][ T5912] usb 2-1: SerialNumber: syz [ 472.357828][ T5912] usb 2-1: config 0 descriptor?? [ 472.462258][ T5912] msi2500 2-1:0.246: Registered as swradio24 [ 472.488972][ T5912] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 472.779227][ T5891] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 472.799101][ T5924] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 472.837749][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 472.860337][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 472.880206][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 472.900848][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 472.909194][T10310] trusted_key: syz.1.812 sent an empty control message without MSG_MORE. [ 472.920064][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 472.938553][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 472.951344][ T5891] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.967691][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.968207][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 472.978669][ T5891] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 472.995104][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 473.008933][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.022947][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 473.032643][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.045890][ T5891] usb 3-1: SerialNumber: syz [ 473.056303][ T5924] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 473.065561][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.076108][ T5924] usb 4-1: config 0 descriptor?? [ 473.088188][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 473.114799][ T5924] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 473.122480][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 473.232012][ T5912] usb 2-1: USB disconnect, device number 27 [ 473.277009][ T5891] usb 3-1: invalid UAC_HEADER (v1) [ 473.368286][ T5891] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 473.381159][ T5891] usb 3-1: USB disconnect, device number 32 [ 473.428288][T10309] udevd[10309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.668121][ T5884] rndis_host 6-1:0.109: More than one union descriptor, skipping ... [ 473.694789][ T5884] usb 6-1: bad CDC descriptors [ 473.707958][ T5884] cdc_acm 6-1:0.109: More than one union descriptor, skipping ... [ 473.740776][ T5884] usb 6-1: USB disconnect, device number 22 [ 474.219510][ T5884] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 474.595230][ T5884] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 474.624568][ T5884] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 474.684607][ T5884] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 474.726965][ T5884] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 474.763781][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.833453][ T5884] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 474.937665][ T5884] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 474.970285][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.295233][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.309372][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.335547][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 475.335563][ T30] audit: type=1326 audit(1767555085.413:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 475.371399][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.381350][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.398598][ T30] audit: type=1326 audit(1767555085.443:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81c598df90 code=0x7ffc0000 [ 475.408522][ T5884] usb 6-1: USB disconnect, device number 23 [ 475.465331][ T30] audit: type=1326 audit(1767555085.443:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81c598f34b code=0x7ffc0000 [ 475.527896][ T30] audit: type=1326 audit(1767555085.443:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81c598f34b code=0x7ffc0000 [ 475.591025][ T30] audit: type=1326 audit(1767555085.473:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 475.666724][ T5924] usb 4-1: USB disconnect, device number 21 [ 475.682558][ T30] audit: type=1326 audit(1767555085.483:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 475.707865][ T1217] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 475.756510][ T30] audit: type=1326 audit(1767555085.483:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 475.845763][ T30] audit: type=1326 audit(1767555085.483:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 475.892157][ T1217] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 475.917189][ T1217] usb 3-1: config 7 has no interface number 0 [ 475.936779][ T1217] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 475.952245][ T30] audit: type=1326 audit(1767555085.483:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 475.985783][ T1217] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 476.008679][ T1217] usb 3-1: config 7 interface 252 has no altsetting 0 [ 476.034618][ T30] audit: type=1326 audit(1767555085.483:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 476.092741][ T1217] usb 3-1: string descriptor 0 read error: -22 [ 476.123021][ T1217] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 476.160578][ T1217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.250271][ T1217] idmouse 3-1:7.252: Unable to find bulk-in endpoint. [ 476.841396][T10351] geneve2: entered allmulticast mode [ 476.885593][T10352] usb usb8: usbfs: process 10352 (syz.2.819) did not claim interface 0 before use [ 477.483792][T10357] __nla_validate_parse: 1 callbacks suppressed [ 477.483812][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.827'. [ 477.542238][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.827'. [ 477.989140][ T1217] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 478.179931][ T1217] usb 4-1: config 0 has an invalid interface number: 245 but max is 0 [ 478.216546][ T1217] usb 4-1: config 0 has no interface number 0 [ 478.230892][ T1217] usb 4-1: New USB device found, idVendor=699b, idProduct=9cbd, bcdDevice=76.2a [ 478.265477][ T1217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.296728][ T1217] usb 4-1: config 0 descriptor?? [ 478.525512][ T1217] usb 4-1: string descriptor 0 read error: -71 [ 478.566551][ T1217] usb-storage 4-1:0.245: USB Mass Storage device detected [ 478.594851][T10375] geneve2: entered allmulticast mode [ 478.714963][ T1217] usb 4-1: USB disconnect, device number 22 [ 478.885562][ T5912] usb 3-1: USB disconnect, device number 33 [ 479.000322][T10382] input: syz1 as /devices/virtual/input/input50 [ 479.216411][T10382] netlink: 'syz.5.833': attribute type 1 has an invalid length. [ 479.509098][ T5924] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 479.698959][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 479.713214][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.763171][ T5924] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 479.782385][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.799980][ T5924] usb 3-1: Product: syz [ 479.808730][ T5924] usb 3-1: Manufacturer: syz [ 479.818179][ T5924] usb 3-1: SerialNumber: syz [ 479.837232][ T5924] usb 3-1: config 0 descriptor?? [ 479.855273][ T5924] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 479.871177][ T5924] usb 3-1: selecting invalid altsetting 1 [ 480.080567][ T5924] gspca_stk014: reg_r err -71 [ 480.092456][ T5924] stk014 3-1:0.0: probe with driver stk014 failed with error -71 [ 480.126069][ T5924] usb 3-1: USB disconnect, device number 34 [ 481.285830][T10409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.831479][T10414] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 481.842844][T10414] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 481.871401][T10414] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 482.481384][ T5912] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 482.689058][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 482.695697][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.752126][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.792544][ T5912] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 482.830458][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.898968][ T5924] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 482.909395][ T5912] usb 3-1: config 0 descriptor?? [ 483.058063][ T5924] usb 6-1: config 7 has an invalid interface number: 252 but max is 0 [ 483.067855][ T5924] usb 6-1: config 7 has no interface number 0 [ 483.087309][ T5924] usb 6-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 483.118639][ T5924] usb 6-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 483.150123][ T5924] usb 6-1: config 7 interface 252 has no altsetting 0 [ 483.240551][ T5924] usb 6-1: string descriptor 0 read error: -22 [ 483.297547][ T5924] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 483.329671][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.436976][ T5924] idmouse 6-1:7.252: Unable to find bulk-in endpoint. [ 483.645777][T10446] netlink: 111 bytes leftover after parsing attributes in process `syz.3.850'. [ 484.872095][T10450] usb usb8: usbfs: process 10450 (syz.5.845) did not claim interface 0 before use [ 485.059769][T10453] input: syz1 as /devices/virtual/input/input51 [ 485.266361][T10454] netlink: 'syz.0.851': attribute type 1 has an invalid length. [ 485.856148][ T5912] usbhid 3-1:0.0: can't add hid device: -71 [ 485.884991][ T5912] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 485.945259][ T5912] usb 3-1: USB disconnect, device number 35 [ 486.354754][T10479] netlink: 'syz.2.858': attribute type 10 has an invalid length. [ 486.439063][T10478] geneve2: entered allmulticast mode [ 486.512803][T10479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.858'. [ 486.649039][T10479] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 486.682404][T10479] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 486.697670][T10479] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 486.797213][T10488] input: syz1 as /devices/virtual/input/input52 [ 486.855596][ T5912] usb 6-1: USB disconnect, device number 24 [ 487.030044][T10488] netlink: 'syz.0.860': attribute type 1 has an invalid length. [ 488.007606][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.867'. [ 488.149007][ T57] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 488.318955][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 488.350070][ T57] usb 6-1: config 0 has an invalid interface number: 185 but max is 0 [ 488.375514][ T57] usb 6-1: config 0 has no interface number 0 [ 488.392056][ T57] usb 6-1: config 0 interface 185 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 488.428984][ T57] usb 6-1: config 0 interface 185 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 488.483699][ T57] usb 6-1: New USB device found, idVendor=05ac, idProduct=821a, bcdDevice=e0.f6 [ 488.508955][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.527585][ T57] usb 6-1: Product: syz [ 488.548329][ T57] usb 6-1: Manufacturer: syz [ 488.558220][ T57] usb 6-1: SerialNumber: syz [ 488.580528][ T57] usb 6-1: config 0 descriptor?? [ 488.586993][T10502] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 488.604703][T10502] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 488.868744][ T57] usb 6-1: USB disconnect, device number 25 [ 490.795625][T10558] geneve2: entered allmulticast mode [ 491.323505][ T57] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 491.495205][T10571] input: syz1 as /devices/virtual/input/input53 [ 491.520255][ T57] usb 1-1: Using ep0 maxpacket: 32 [ 491.591244][ T57] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 491.617121][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.635509][ T57] usb 1-1: Product: syz [ 491.660590][ T57] usb 1-1: Manufacturer: syz [ 491.680620][ T57] usb 1-1: SerialNumber: syz [ 491.697639][ T57] usb 1-1: config 0 descriptor?? [ 491.738269][ T57] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 491.777015][ T57] dvb-usb: bulk message failed: -22 (2/0) [ 491.805067][T10572] netlink: 'syz.5.880': attribute type 1 has an invalid length. [ 491.807615][ T57] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 491.919107][ T57] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 491.957714][ T57] usb 1-1: media controller created [ 491.966182][T10560] cxusb: i2c wr: len=80 is too big! [ 491.966182][T10560] [ 492.039993][ T57] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.109327][ T57] usb 1-1: selecting invalid altsetting 7 [ 492.120146][ T57] cxusb: set interface failed [ 492.131240][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 492.201156][ T57] DVB: Unable to find symbol lgdt330x_attach() [ 492.215845][ T57] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 492.329667][ T57] rc_core: IR keymap rc-dvico-portable not found [ 492.371388][ T57] Registered IR keymap rc-empty [ 492.386371][ T57] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 492.456000][ T57] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input54 [ 492.484245][ T57] dvb-usb: schedule remote query interval to 100 msecs. [ 492.507700][ T57] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 492.608915][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 492.733828][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 492.850430][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 493.019219][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 493.146123][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 493.279567][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 493.423409][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 493.514464][T10602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 493.561048][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 493.699000][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 493.863500][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 493.928914][ T5912] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 494.054874][ T5891] usb 1-1: USB disconnect, device number 25 [ 494.069023][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 494.142974][ T5912] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18432, setting to 64 [ 494.227603][ T5891] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 494.250309][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 494.292788][ T5912] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 494.364200][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 494.393171][ T5912] usb 3-1: Product: syz [ 494.397430][ T5912] usb 3-1: Manufacturer: syz [ 494.434975][ T5912] usb 3-1: SerialNumber: syz [ 494.479310][ T5912] usb 3-1: config 0 descriptor?? [ 494.565188][ T5912] usb 3-1: selecting invalid altsetting 0 [ 494.779093][ T57] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 494.970499][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 495.018188][ T57] usb 1-1: config 0 has no interfaces? [ 495.035252][T10583] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 495.070668][ T57] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 495.099090][ T57] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 495.128797][ T57] usb 1-1: Manufacturer: syz [ 495.205384][ T57] usb 1-1: config 0 descriptor?? [ 495.437352][T10583] syzkaller1: entered promiscuous mode [ 495.483594][T10583] syzkaller1: entered allmulticast mode [ 496.260948][T10638] input: syz1 as /devices/virtual/input/input55 [ 496.312527][T10631] geneve2: entered allmulticast mode [ 496.337888][T10637] netlink: 'syz.5.897': attribute type 1 has an invalid length. [ 496.795991][T10647] input: syz1 as /devices/virtual/input/input56 [ 497.039269][T10647] netlink: 'syz.1.899': attribute type 1 has an invalid length. [ 497.914541][ T5884] usb 3-1: USB disconnect, device number 36 [ 497.952547][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.904'. [ 497.984758][T10647] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 498.043814][ T57] usb 1-1: USB disconnect, device number 26 [ 498.314233][T10676] vlan0: entered promiscuous mode [ 498.539065][ T57] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 498.699169][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 498.738321][T10690] geneve2: entered allmulticast mode [ 498.773377][ T57] usb 1-1: unable to get BOS descriptor or descriptor too short [ 498.796630][ T57] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 498.844961][ T57] usb 1-1: config 13 has no interface number 0 [ 498.872990][ T57] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 498.919254][ T5884] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 498.933958][ T57] usb 1-1: config 13 interface 50 has no altsetting 0 [ 499.114033][T10702] geneve2: entered allmulticast mode [ 499.126834][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 499.134198][ T57] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 499.157529][ T5884] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 499.168770][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.198649][ T57] usb 1-1: Product: syz [ 499.216007][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.226348][ T5884] usb 4-1: Product: syz [ 499.233469][ T5884] usb 4-1: Manufacturer: syz [ 499.238160][ T5884] usb 4-1: SerialNumber: syz [ 499.257486][ T5884] usb 4-1: config 0 descriptor?? [ 499.277252][ T5884] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 499.286615][ T5884] dvb-usb: bulk message failed: -22 (2/0) [ 499.302935][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 499.319628][ T57] usb 1-1: Manufacturer: syz [ 499.338779][ T57] usb 1-1: SerialNumber: syz [ 499.339205][ T5884] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 499.351942][ T5884] usb 4-1: media controller created [ 499.365285][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.396553][T10670] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.404866][ T5884] usb 4-1: selecting invalid altsetting 7 [ 499.425533][ T5884] cxusb: set interface failed [ 499.434707][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 499.497677][T10660] cxusb: i2c wr: len=80 is too big! [ 499.497677][T10660] [ 499.529454][ T5884] DVB: Unable to find symbol lgdt330x_attach() [ 499.545527][ T5884] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 499.823802][ T57] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 499.839837][ T5884] rc_core: IR keymap rc-dvico-portable not found [ 499.854697][ T5884] Registered IR keymap rc-empty [ 499.866119][ T5884] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 499.893832][ T5884] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input57 [ 499.951167][ T57] usb 1-1: MIDIStreaming interface descriptor not found [ 499.975590][ T5884] dvb-usb: schedule remote query interval to 100 msecs. [ 500.001359][ T5884] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 500.020103][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 500.020120][ T30] audit: type=1326 audit(1767555110.103:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10709 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 500.109027][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 500.169017][ T30] audit: type=1326 audit(1767555110.103:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10709 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 500.201425][ T57] usb 1-1: USB disconnect, device number 27 [ 500.229009][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 500.346487][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.389480][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 500.429263][ T30] audit: type=1326 audit(1767555110.113:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10709 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 500.508943][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 500.536647][ T30] audit: type=1326 audit(1767555110.113:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10709 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 500.629248][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 500.686229][ T30] audit: type=1326 audit(1767555110.113:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10709 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x7ffc0000 [ 500.739011][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 500.747505][T10720] input: syz1 as /devices/virtual/input/input58 [ 500.781569][ T30] audit: type=1326 audit(1767555110.603:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.5.921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x0 [ 500.860169][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 500.869466][T10720] netlink: 'syz.0.922': attribute type 1 has an invalid length. [ 500.971464][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 501.078977][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 501.258961][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 501.388262][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 501.442935][ T24] usb 4-1: USB disconnect, device number 23 [ 501.755223][ T24] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 501.831991][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.852443][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.049597][T10790] input: syz1 as /devices/virtual/input/input59 [ 504.183831][T10790] netlink: 'syz.5.943': attribute type 1 has an invalid length. [ 506.008516][ T30] audit: type=1326 audit(1767555116.083:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694fb8f749 code=0x7ffc0000 [ 506.036371][ T30] audit: type=1326 audit(1767555116.113:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694fb8f749 code=0x7ffc0000 [ 506.102165][ T30] audit: type=1326 audit(1767555116.183:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f694fb8f749 code=0x7ffc0000 [ 506.216551][ T30] audit: type=1326 audit(1767555116.203:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694fb8f749 code=0x7ffc0000 [ 506.310147][T10854] geneve2: entered allmulticast mode [ 506.360651][ T30] audit: type=1326 audit(1767555116.203:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694fb8f749 code=0x7ffc0000 [ 506.497451][ T30] audit: type=1326 audit(1767555116.273:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f694fb8f749 code=0x7ffc0000 [ 506.618231][ T30] audit: type=1326 audit(1767555116.273:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694fb8f749 code=0x7ffc0000 [ 506.726648][ T30] audit: type=1326 audit(1767555116.273:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694fb8f749 code=0x7ffc0000 [ 507.590540][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.975'. [ 508.379155][ T57] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 508.404926][T10898] input: syz1 as /devices/virtual/input/input60 [ 508.571534][T10903] input: syz1 as /devices/virtual/input/input61 [ 508.578901][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 508.618940][ T57] usb 6-1: unable to get BOS descriptor or descriptor too short [ 508.629579][T10901] gretap1: entered allmulticast mode [ 508.636391][ T57] usb 6-1: config 13 has an invalid interface number: 218 but max is 0 [ 508.645342][ T57] usb 6-1: config 13 has no interface number 0 [ 508.651597][ T57] usb 6-1: config 13 interface 218 altsetting 6 endpoint 0x7 has invalid maxpacket 3088, setting to 64 [ 508.669021][ T57] usb 6-1: config 13 interface 218 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 508.680875][ T57] usb 6-1: config 13 interface 218 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 508.701257][ T57] usb 6-1: config 13 interface 218 has no altsetting 0 [ 508.726995][ T57] usb 6-1: New USB device found, idVendor=1199, idProduct=0220, bcdDevice= a.bd [ 508.737466][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.745742][ T57] usb 6-1: Product: syz [ 508.759071][ T57] usb 6-1: Manufacturer: syz [ 508.764336][ T57] usb 6-1: SerialNumber: syz [ 509.024379][ T57] sierra 6-1:13.218: Sierra USB modem converter detected [ 509.061431][ T57] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 509.148414][ T57] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 509.341432][ T57] usb 6-1: Sierra USB modem converter now attached to ttyUSB2 [ 509.523478][ T57] usb 6-1: USB disconnect, device number 26 [ 509.611092][ T57] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 509.699582][ T57] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 509.824119][ T57] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 509.859634][ T57] sierra 6-1:13.218: device disconnected [ 509.942722][T10912] input: syz1 as /devices/virtual/input/input62 [ 510.169015][T10920] bridge_slave_0: default FDB implementation only supports local addresses [ 510.223740][T10912] netlink: 'syz.0.986': attribute type 1 has an invalid length. [ 510.623432][T10932] program syz.3.994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 511.786692][T10948] program syz.0.998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.474414][T10966] bridge_slave_1: entered promiscuous mode [ 513.074248][T10988] team_slave_0: entered promiscuous mode [ 513.080291][T10988] team_slave_1: entered promiscuous mode [ 513.126750][T10988] macvtap1: entered promiscuous mode [ 513.146971][T10988] team0: entered promiscuous mode [ 513.169987][T10988] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 513.203044][T10988] team0: Device macvtap1 is already an upper device of the team interface [ 513.277589][T10988] team0: left promiscuous mode [ 513.290485][T10988] team_slave_0: left promiscuous mode [ 513.296034][T10988] team_slave_1: left promiscuous mode [ 513.849729][T11011] warning: `syz.0.1019' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 514.515898][T11017] fuse: Bad value for 'fd' [ 517.105427][T11016] geneve2: entered allmulticast mode [ 517.292091][T11069] netlink: 'syz.5.1038': attribute type 12 has an invalid length. [ 517.310157][T11069] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1038'. [ 518.048986][ T1217] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 518.294101][ T1217] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 518.321640][ T5891] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 518.370673][ T1217] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 518.460670][ T1217] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 518.491557][ T1217] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 518.502180][ T1217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.527063][ T5891] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 518.540612][T11095] sctp: [Deprecated]: syz.2.1045 (pid 11095) Use of int in max_burst socket option. [ 518.540612][T11095] Use struct sctp_assoc_value instead [ 518.581077][ T5891] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 518.639214][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 518.669774][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 518.713790][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.737901][ T1217] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 518.751623][ T5891] usb 2-1: config 0 descriptor?? [ 518.792403][T11089] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 520.710796][ T5891] usbhid 2-1:0.0: can't add hid device: -71 [ 520.716852][ T5891] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 520.747652][ T5891] usb 2-1: USB disconnect, device number 28 [ 520.876915][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.922289][ T1217] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 520.967916][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.034530][T11128] tipc: Enabled bearer , priority 10 [ 521.061665][T11130] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 521.648734][T11151] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 521.662029][T11148] geneve2: entered allmulticast mode [ 522.161431][ T5891] tipc: Node number set to 3390120581 [ 522.508956][ T5891] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 522.730804][ T5891] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 522.761958][ T5891] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 522.796223][ T5891] usb 1-1: config 0 interface 0 has no altsetting 0 [ 522.823348][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 522.867568][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.907698][ T5891] usb 1-1: config 0 descriptor?? [ 522.970227][T11166] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 523.596074][ T24] usb 4-1: USB disconnect, device number 24 [ 523.643624][T11172] geneve2: entered allmulticast mode [ 525.304715][T11190] program syz.3.1073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.803647][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 525.812972][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 525.855971][ T5891] usb 1-1: USB disconnect, device number 28 [ 526.573504][ T30] audit: type=1326 audit(1767555136.653:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11208 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5898f749 code=0x7ffc0000 [ 526.648930][ T30] audit: type=1326 audit(1767555136.653:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11208 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f4c5898f749 code=0x7ffc0000 [ 526.752784][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 526.761853][ T57] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 526.797779][ T30] audit: type=1326 audit(1767555136.653:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11208 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5898f749 code=0x7ffc0000 [ 526.939499][ T57] usb 3-1: Using ep0 maxpacket: 8 [ 526.951510][ T57] usb 3-1: unable to get BOS descriptor or descriptor too short [ 526.971107][ T57] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 526.980591][ T57] usb 3-1: config 4 has no interface number 0 [ 526.986772][ T57] usb 3-1: config 4 interface 30 has no altsetting 0 [ 527.029104][ T57] usb 3-1: string descriptor 0 read error: -22 [ 527.055638][ T57] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 527.072385][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.093559][T11218] input: syz1 as /devices/virtual/input/input63 [ 527.149987][ T57] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 527.178015][ T57] dw2102: su3000_power_ctrl: 1, initialized 0 [ 527.201249][ T57] dvb-usb: bulk message failed: -22 (2/0) [ 527.235519][ T57] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 527.272890][ T57] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 527.281297][T11218] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1081'. [ 527.319190][ T57] usb 3-1: media controller created [ 527.379792][T11206] dvb-usb: bulk message failed: -22 (4/0) [ 527.422080][ T5898] kworker/0:5 (5898) used greatest stack depth: 15832 bytes left [ 527.455456][T11206] dw2102: i2c transfer failed. [ 527.461752][T11206] dvb-usb: bulk message failed: -22 (4/0) [ 527.467667][T11206] dw2102: i2c transfer failed. [ 527.474157][ T57] dvb-usb: bulk message failed: -22 (6/0) [ 527.515665][ T57] dw2102: i2c transfer failed. [ 527.783655][ T57] dvb-usb: bulk message failed: -22 (6/0) [ 527.961759][ T57] dw2102: i2c transfer failed. [ 527.966765][ T57] dvb-usb: bulk message failed: -22 (6/0) [ 528.090312][ T57] dw2102: i2c transfer failed. [ 528.203714][ T57] dvb-usb: bulk message failed: -22 (6/0) [ 528.243274][ T57] dw2102: i2c transfer failed. [ 528.264230][ T57] dvb-usb: bulk message failed: -22 (6/0) [ 528.365939][ T57] dw2102: i2c transfer failed. [ 528.378520][ T57] dvb-usb: bulk message failed: -22 (6/0) [ 528.391132][ T57] dw2102: i2c transfer failed. [ 528.405707][ T57] dvb-usb: MAC address: 02:02:02:02:02:02 [ 528.483273][ T57] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.526521][ T57] dvb-usb: bulk message failed: -22 (3/0) [ 528.587851][ T57] dw2102: command 0x0e transfer failed. [ 528.599076][ T57] dvb-usb: bulk message failed: -22 (3/0) [ 528.607462][ T57] dw2102: command 0x0e transfer failed. [ 528.801475][T11248] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1089'. [ 528.833748][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 528.853917][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1089'. [ 528.864114][T11236] geneve2: entered allmulticast mode [ 528.922925][ T57] dvb-usb: bulk message failed: -22 (3/0) [ 528.931749][ T57] dw2102: command 0x0e transfer failed. [ 528.937350][ T57] dvb-usb: bulk message failed: -22 (3/0) [ 528.944442][ T57] dw2102: command 0x0e transfer failed. [ 528.958981][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 528.980535][ T57] dw2102: command 0x51 transfer failed. [ 528.995046][ T57] dvb-usb: bulk message failed: -22 (5/0) [ 529.008220][ T57] dw2102: i2c probe for address 0x68 failed. [ 529.023080][ T57] dvb-usb: bulk message failed: -22 (5/0) [ 529.035259][ T57] dw2102: i2c probe for address 0x69 failed. [ 529.047944][ T57] dvb-usb: bulk message failed: -22 (5/0) [ 529.064616][ T57] dw2102: i2c probe for address 0x6a failed. [ 529.085090][ T57] dw2102: probing for demodulator failed. Is the external power switched on? [ 529.137865][ T57] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 529.919662][ T57] rc_core: IR keymap rc-tt-1500 not found [ 529.926484][ T57] Registered IR keymap rc-empty [ 529.933630][ T57] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 529.962146][ T57] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input64 [ 529.994685][ T57] dvb-usb: schedule remote query interval to 250 msecs. [ 530.023898][ T57] dw2102: su3000_power_ctrl: 0, initialized 1 [ 530.034039][ T57] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 530.051109][ T57] usb 3-1: USB disconnect, device number 37 [ 530.099167][ T5924] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 530.155455][ T57] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 530.259322][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 530.266462][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.345254][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.363954][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 530.519088][ T5924] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 530.544137][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.564467][ T5924] usb 1-1: config 0 descriptor?? [ 531.258145][ T5924] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 531.333016][ T5924] microsoft 0003:045E:07DA.0009: no inputs found [ 531.345686][ T5924] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 531.379135][ T5924] usb 1-1: USB disconnect, device number 29 [ 531.889013][ T57] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 532.061886][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 532.083711][ T57] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 532.166639][ T57] usb 4-1: config 179 has no interface number 0 [ 532.195266][ T57] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 532.241925][ T57] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 532.297207][ T57] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 532.348909][ T57] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 532.378945][ T57] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 532.436783][ T57] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 532.466489][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.495689][T11294] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 532.609054][ T5924] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 532.811855][ T5924] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 532.869929][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 532.870061][ T57] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input66 [ 532.944415][ T5924] usb 6-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 532.966370][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.009623][ T5924] usb 6-1: config 0 descriptor?? [ 533.062136][T11318] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 533.077575][ T24] usb 4-1: USB disconnect, device number 25 [ 533.077642][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 533.092831][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 533.179372][ T5891] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 533.360202][ T5891] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 533.390244][ T5891] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 533.418251][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0 [ 533.435285][ T5891] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 533.454566][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.491867][ T5891] usb 3-1: config 0 descriptor?? [ 533.516483][T11324] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 533.540006][ T5924] kye 0003:0458:5014.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 533.578011][ T5924] kye 0003:0458:5014.000A: hidraw0: USB HID v0.01 Device [HID 0458:5014] on usb-dummy_hcd.5-1/input0 [ 533.602319][ T5924] kye 0003:0458:5014.000A: tablet-enabling feature report not found [ 533.622567][ T5924] kye 0003:0458:5014.000A: tablet enabling failed [ 533.779626][ T5924] usb 6-1: USB disconnect, device number 27 [ 533.907908][T11331] fido_id[11331]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 535.742795][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 535.780723][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 535.875116][ T5891] usb 3-1: USB disconnect, device number 38 [ 536.194431][T11370] netlink: 'syz.1.1129': attribute type 10 has an invalid length. [ 536.348926][ T5891] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 536.452197][T11375] input: syz1 as /devices/virtual/input/input67 [ 536.521412][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.572202][ T5891] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 536.591766][ T5891] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 536.609019][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.636445][ T5891] usb 3-1: config 0 descriptor?? [ 536.655101][ T5891] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 536.668921][ T5891] dvb-usb: bulk message failed: -22 (3/0) [ 536.684102][T11376] netlink: 'syz.3.1130': attribute type 1 has an invalid length. [ 536.719694][ T5891] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 536.762514][ T5891] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 536.789222][ T5891] usb 3-1: media controller created [ 536.823061][T11378] gretap1: entered allmulticast mode [ 536.829516][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.851696][ T5891] dvb-usb: bulk message failed: -22 (6/0) [ 536.865590][T11378] bond1: (slave gretap1): making interface the new active one [ 536.873276][ T5891] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 536.888140][T11378] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 536.902723][ T5891] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input68 [ 536.971055][ T5891] dvb-usb: schedule remote query interval to 150 msecs. [ 536.992864][ T5891] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 537.151246][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 537.157034][ T5891] dvb-usb: error while querying for an remote control event. [ 537.327458][ T24] usb 3-1: USB disconnect, device number 39 [ 537.654888][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 538.568975][ T5891] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 538.858964][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 538.901428][ T5891] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 538.962552][ T5891] usb 3-1: config 0 has no interface number 0 [ 538.968702][ T5891] usb 3-1: config 0 interface 12 has no altsetting 0 [ 538.979197][ T5891] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 538.988427][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.996813][ T5891] usb 3-1: Product: syz [ 539.003979][ T5891] usb 3-1: Manufacturer: syz [ 539.008708][ T5891] usb 3-1: SerialNumber: syz [ 539.041342][ T5891] usb 3-1: config 0 descriptor?? [ 539.284536][T11414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.315398][T11414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.353599][ T5891] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 539.365692][ T5891] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 539.373513][ T5891] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 539.381571][ T5891] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 539.400244][ T5891] usb 3-1: USB disconnect, device number 40 [ 539.748928][ T5891] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 539.919054][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 539.950850][ T5891] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 539.973227][ T5891] usb 3-1: config 0 has no interface number 0 [ 540.028921][ T5891] usb 3-1: config 0 interface 12 has no altsetting 0 [ 540.058058][ T5891] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 540.084275][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 540.110279][ T5891] usb 3-1: Product: syz [ 540.130478][ T5891] usb 3-1: Manufacturer: syz [ 540.149634][ T5891] usb 3-1: SerialNumber: syz [ 540.174692][ T5891] usb 3-1: config 0 descriptor?? [ 540.553229][ T5912] usb 3-1: USB disconnect, device number 41 [ 540.595534][T11439] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1150'. [ 541.132491][T11460] input: syz1 as /devices/virtual/input/input69 [ 541.155160][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1158'. [ 543.184583][T11496] loop4: detected capacity change from 0 to 1 [ 543.249988][T11496] Dev loop4: unable to read RDB block 1 [ 543.261708][T11496] loop4: unable to read partition table [ 543.330265][T11496] loop4: partition table beyond EOD, truncated [ 543.358077][T11496] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 543.756372][T11509] input: syz1 as /devices/virtual/input/input70 [ 544.095136][T11514] input: syz1 as /devices/virtual/input/input71 [ 544.339674][T11514] netlink: 'syz.2.1174': attribute type 1 has an invalid length. [ 544.367591][ T1217] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 544.539208][ T1217] usb 4-1: Using ep0 maxpacket: 16 [ 544.580748][ T1217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 544.694287][ T1217] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 544.714524][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.787016][ T1217] usb 4-1: Product: syz [ 544.870022][ T1217] usb 4-1: Manufacturer: syz [ 544.885550][ T1217] usb 4-1: SerialNumber: syz [ 544.936816][ T1217] usb 4-1: config 0 descriptor?? [ 544.975778][T11528] input: syz1 as /devices/virtual/input/input72 [ 545.215420][ T1217] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 545.381876][ T1217] usb 4-1: USB disconnect, device number 26 [ 545.387962][ T1165] usb 4-1: Failed to submit usb control message: -71 [ 545.407440][ T1165] usb 4-1: unable to send the bmi data to the device: -71 [ 545.424915][ T1165] usb 4-1: unable to get target info from device [ 545.469128][ T1165] usb 4-1: could not get target info (-71) [ 545.484899][ T1165] usb 4-1: could not probe fw (-71) [ 546.603123][T11541] geneve2: entered allmulticast mode [ 547.354147][T11578] input: syz1 as /devices/virtual/input/input73 [ 548.594611][T11597] input: syz1 as /devices/virtual/input/input74 [ 548.932158][T11600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1195'. [ 550.519616][ T5912] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 550.691562][ T5912] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 550.721212][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.749839][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.795508][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 550.829211][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.851121][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.867908][T11632] input: syz1 as /devices/virtual/input/input75 [ 550.949420][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 550.980538][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.020906][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.068933][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 551.106125][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.153175][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.177680][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 551.199896][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.230653][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.289321][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 551.333734][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.389141][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.429027][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 551.464213][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.481332][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.519027][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 551.540523][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.557305][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.598865][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 551.634594][ T5912] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 551.660586][ T5912] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 551.670359][ T5912] usb 4-1: Product: syz [ 551.674566][ T5912] usb 4-1: Manufacturer: syz [ 551.692976][ T5912] usb 4-1: SerialNumber: syz [ 551.700764][ T5912] usb 4-1: config 0 descriptor?? [ 551.759672][ T5912] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 551.786915][T11651] input: syz1 as /devices/virtual/input/input76 [ 551.979458][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 552.009062][ T1217] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 552.024218][T11651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1211'. [ 552.198950][ T1217] usb 6-1: Using ep0 maxpacket: 16 [ 552.205889][ T1217] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 552.216058][ T1217] usb 6-1: config 0 has no interface number 0 [ 552.226757][ T1217] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 552.307775][ T1217] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 552.325292][ T1217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.337397][ T1217] usb 6-1: Product: syz [ 552.347611][ T1217] usb 6-1: Manufacturer: syz [ 552.355783][ T1217] usb 6-1: SerialNumber: syz [ 552.493122][ T1217] usb 6-1: config 0 descriptor?? [ 552.775459][T11662] input: syz1 as /devices/virtual/input/input78 [ 552.932728][T11662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1214'. [ 553.160373][ T1217] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.214/input/input77 [ 553.402057][ T5884] usb 6-1: USB disconnect, device number 28 [ 553.446306][ T1217] usb 4-1: USB disconnect, device number 27 [ 553.490442][ T1217] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 553.921462][T11680] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 554.808883][ T1217] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 554.988878][ T1217] usb 6-1: Using ep0 maxpacket: 32 [ 555.057416][ T1217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.098549][ T1217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.146653][ T1217] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 555.170865][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 555.187438][ T1217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.243680][ T1217] usb 6-1: config 0 descriptor?? [ 555.636771][T11722] input: syz1 as /devices/virtual/input/input79 [ 555.645984][ T5912] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 555.843172][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 555.858863][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 555.875175][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 555.896701][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 555.913914][ T5912] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.923458][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.940314][ T5912] usb 1-1: config 0 descriptor?? [ 555.958321][T11722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1234'. [ 556.006091][T11711] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 556.451234][ T5912] hid_parser_main: 2 callbacks suppressed [ 556.451257][ T5912] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 556.488898][ T5912] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 556.512110][ T5912] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 556.533227][ T5912] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 556.551028][ T5912] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 556.562899][ T5912] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 556.578637][ T5912] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 556.591192][ T5912] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 556.621564][ T5912] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 556.675615][ T5912] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 556.692220][T11736] input: syz1 as /devices/virtual/input/input80 [ 556.772942][ T5912] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 556.870876][ T5912] usb 1-1: USB disconnect, device number 30 [ 556.893760][T11737] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 557.015957][T11738] fido_id[11738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 558.188142][ T1217] usbhid 6-1:0.0: can't add hid device: -71 [ 558.223957][ T1217] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 558.233946][T11753] loop8: detected capacity change from 0 to 7 [ 558.267292][T11753] Dev loop8: unable to read RDB block 7 [ 558.278903][ T5912] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 558.293455][T11753] loop8: unable to read partition table [ 558.301577][ T1217] usb 6-1: USB disconnect, device number 29 [ 558.322494][T11753] loop8: partition table beyond EOD, truncated [ 558.352262][ T30] audit: type=1326 audit(1767555168.433:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.5.1246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81c598f749 code=0x0 [ 558.374852][T11753] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 558.502092][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.534973][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.564328][ T5912] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 558.587348][ T5912] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 558.614415][ T5912] usb 4-1: Manufacturer: syz [ 558.638235][ T5912] usb 4-1: config 0 descriptor?? [ 558.664772][T11763] input: syz1 as /devices/virtual/input/input81 [ 559.134093][ T5912] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 559.740601][ T5912] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 559.765050][ T5912] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 559.815590][ T5912] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71 [ 559.841194][ T5912] usb 4-1: USB disconnect, device number 28 [ 559.987994][T11782] input: syz1 as /devices/virtual/input/input82 [ 560.166904][T11782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1252'. [ 560.300937][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 560.314011][T11789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.456854][T11789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.739137][ T1217] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 560.939898][ T1217] usb 4-1: Using ep0 maxpacket: 32 [ 560.958411][ T1217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.984384][ T1217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.996244][ T1217] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 561.011704][ T1217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.051311][ T1217] usb 4-1: config 0 descriptor?? [ 561.134269][T11801] geneve2: entered allmulticast mode [ 562.479856][T11821] fuse: Bad value for 'fd' [ 562.506250][T11828] geneve2: entered allmulticast mode [ 563.262651][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.269713][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.128921][T11853] input: syz1 as /devices/virtual/input/input83 [ 564.347972][T11857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1272'. [ 564.447803][ T1217] usbhid 4-1:0.0: can't add hid device: -71 [ 564.487038][ T1217] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 564.562995][ T1217] usb 4-1: USB disconnect, device number 29 [ 564.891885][ T24] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 564.942185][T11872] input: syz1 as /devices/virtual/input/input84 [ 564.984565][ T1217] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 565.117716][T11872] netlink: 'syz.1.1277': attribute type 1 has an invalid length. [ 565.136410][ T24] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 565.179504][ T1217] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 565.197457][ T24] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 565.237332][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 565.244334][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 565.253451][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.259779][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 565.271382][ T24] usb 1-1: config 0 descriptor?? [ 565.302329][T11861] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 565.331835][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 565.377916][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 565.401707][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 565.417860][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 565.441133][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 565.473753][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 565.507680][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 565.568078][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 565.609756][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 565.650843][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 565.707950][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 565.742680][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 565.783913][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 565.846642][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 565.885314][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 565.927534][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 565.995446][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 566.027239][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.073476][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.114507][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 566.150474][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.182839][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.244689][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 566.271137][ T1217] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 566.289150][ T1217] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 566.312279][ T1217] usb 4-1: Product: syz [ 566.316658][ T1217] usb 4-1: Manufacturer: syz [ 566.321555][ T1217] usb 4-1: SerialNumber: syz [ 566.336838][ T1217] usb 4-1: config 0 descriptor?? [ 566.357141][ T1217] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 567.668226][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 567.706112][ T1217] usb 4-1: USB disconnect, device number 30 [ 567.737280][ T1217] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 567.868632][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 567.882370][T11897] syzkaller1: entered promiscuous mode [ 567.905253][T11897] syzkaller1: entered allmulticast mode [ 567.924138][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 567.942832][ T24] usb 1-1: USB disconnect, device number 31 [ 568.234248][T11909] syzkaller1: entered promiscuous mode [ 568.251764][T11909] syzkaller1: entered allmulticast mode [ 568.611691][T11923] syzkaller1: entered promiscuous mode [ 568.617386][T11923] syzkaller1: entered allmulticast mode [ 568.761469][ T5912] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 568.939061][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.966106][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.996217][ T5912] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 569.019301][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.034745][ T5912] usb 6-1: config 0 descriptor?? [ 569.257530][ T5912] usbhid 6-1:0.0: can't add hid device: -71 [ 569.272750][ T5912] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 569.293393][ T5912] usb 6-1: USB disconnect, device number 30 [ 569.368901][ T57] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 569.373432][T11949] input: syz1 as /devices/virtual/input/input85 [ 569.538941][ T57] usb 2-1: Using ep0 maxpacket: 8 [ 569.548122][ T57] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 569.570244][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.614075][ T57] pvrusb2: Hardware description: Terratec Grabster AV400 [ 569.648033][ T57] pvrusb2: ********** [ 569.665043][ T57] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 569.694410][ T57] pvrusb2: Important functionality might not be entirely working. [ 569.719525][ T57] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 569.752204][ T57] pvrusb2: ********** [ 569.758946][ T5912] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 569.813889][ T2345] pvrusb2: Invalid write control endpoint [ 569.889331][ T2345] pvrusb2: Invalid write control endpoint [ 569.896562][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 569.915775][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 569.928987][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 569.935124][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 569.948262][ T2345] pvrusb2: Device being rendered inoperable [ 569.958391][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 569.958645][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.994005][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 570.005013][ T2345] pvrusb2: Attached sub-driver cx25840 [ 570.020677][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 570.020715][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.088176][ T24] usb 2-1: USB disconnect, device number 29 [ 570.105242][ T5912] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 570.129202][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 570.143440][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.164596][ T5912] usb 6-1: config 0 descriptor?? [ 570.631803][ T5912] kye 0003:0458:5016.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 570.713167][T11972] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1312'. [ 570.752947][ T5912] hid_parser_main: 12 callbacks suppressed [ 570.752964][ T5912] kye 0003:0458:5016.000D: unknown main item tag 0x0 [ 570.827504][ T5912] kye 0003:0458:5016.000D: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 570.928094][ T5912] kye 0003:0458:5016.000D: tablet-enabling feature report not found [ 570.972378][ T5912] kye 0003:0458:5016.000D: tablet enabling failed [ 571.049451][T11975] ================================================================== [ 571.057545][T11975] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 571.065778][T11975] Read of size 1 at addr ffff888020f6a6e0 by task fido_id/11975 [ 571.073396][T11975] [ 571.075717][T11975] CPU: 1 UID: 0 PID: 11975 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 571.075733][T11975] Tainted: [L]=SOFTLOCKUP [ 571.075737][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.075750][T11975] Call Trace: [ 571.075755][T11975] [ 571.075760][T11975] dump_stack_lvl+0xe8/0x150 [ 571.075776][T11975] print_report+0xca/0x240 [ 571.075788][T11975] ? report_descriptor_read+0xb5/0x100 [ 571.075802][T11975] kasan_report+0x118/0x150 [ 571.075815][T11975] ? report_descriptor_read+0xb5/0x100 [ 571.075830][T11975] kasan_check_range+0x2b0/0x2c0 [ 571.075842][T11975] ? report_descriptor_read+0xb5/0x100 [ 571.075855][T11975] __asan_memcpy+0x29/0x70 [ 571.075870][T11975] report_descriptor_read+0xb5/0x100 [ 571.075884][T11975] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 571.075893][T11975] kernfs_fop_read_iter+0x451/0x6b0 [ 571.075909][T11975] vfs_read+0x55a/0xa30 [ 571.075920][T11975] ? __pfx_vfs_read+0x10/0x10 [ 571.075928][T11975] ? kmem_cache_free+0x197/0x620 [ 571.075938][T11975] ? do_sys_openat2+0x15a/0x200 [ 571.075954][T11975] ksys_read+0x145/0x250 [ 571.075963][T11975] ? __pfx_ksys_read+0x10/0x10 [ 571.075974][T11975] do_syscall_64+0xec/0xf80 [ 571.075986][T11975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.075996][T11975] ? trace_irq_disable+0x37/0x100 [ 571.076010][T11975] ? clear_bhb_loop+0x60/0xb0 [ 571.076021][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.076033][T11975] RIP: 0033:0x7faa186a7407 [ 571.076044][T11975] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 571.076054][T11975] RSP: 002b:00007fff68f7f2d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 571.076066][T11975] RAX: ffffffffffffffda RBX: 00007faa18d8f880 RCX: 00007faa186a7407 [ 571.076074][T11975] RDX: 0000000000001000 RSI: 00007fff68f7f320 RDI: 0000000000000004 [ 571.076081][T11975] RBP: 000055b993ea6730 R08: 0000000000000000 R09: 0000000000000000 [ 571.076087][T11975] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b993ea5930 [ 571.076094][T11975] R13: 00007fff68f7f320 R14: 0000000000000004 R15: 000055b96b2c74d8 [ 571.076105][T11975] [ 571.076108][T11975] [ 571.293072][T11975] Allocated by task 5912: [ 571.297380][T11975] kasan_save_track+0x3e/0x80 [ 571.302045][T11975] __kasan_kmalloc+0x93/0xb0 [ 571.306618][T11975] __kmalloc_node_track_caller_noprof+0x575/0x820 [ 571.313020][T11975] kmemdup_noprof+0x2b/0x70 [ 571.317513][T11975] hid_open_report+0x208/0xee0 [ 571.322260][T11975] kye_probe+0x21/0x5f0 [ 571.326399][T11975] hid_device_probe+0x416/0x7a0 [ 571.331233][T11975] really_probe+0x26d/0xad0 [ 571.335727][T11975] __driver_probe_device+0x18c/0x320 [ 571.341001][T11975] driver_probe_device+0x4f/0x240 [ 571.346005][T11975] __device_attach_driver+0x279/0x430 [ 571.351364][T11975] bus_for_each_drv+0x251/0x2e0 [ 571.356198][T11975] __device_attach+0x2b8/0x430 [ 571.360941][T11975] device_initial_probe+0xa1/0xd0 [ 571.365947][T11975] bus_probe_device+0x12a/0x220 [ 571.370778][T11975] device_add+0x7b6/0xb80 [ 571.375092][T11975] hid_add_device+0x272/0x3e0 [ 571.379750][T11975] usbhid_probe+0xe13/0x12c0 [ 571.384316][T11975] usb_probe_interface+0x668/0xc90 [ 571.389406][T11975] really_probe+0x26d/0xad0 [ 571.393886][T11975] __driver_probe_device+0x18c/0x320 [ 571.399148][T11975] driver_probe_device+0x4f/0x240 [ 571.404153][T11975] __device_attach_driver+0x279/0x430 [ 571.409507][T11975] bus_for_each_drv+0x251/0x2e0 [ 571.414340][T11975] __device_attach+0x2b8/0x430 [ 571.419082][T11975] device_initial_probe+0xa1/0xd0 [ 571.424086][T11975] bus_probe_device+0x12a/0x220 [ 571.428917][T11975] device_add+0x7b6/0xb80 [ 571.433224][T11975] usb_set_configuration+0x1a87/0x2110 [ 571.438837][T11975] usb_generic_driver_probe+0x8d/0x150 [ 571.444352][T11975] usb_probe_device+0x1c4/0x3c0 [ 571.449192][T11975] really_probe+0x26d/0xad0 [ 571.453675][T11975] __driver_probe_device+0x18c/0x320 [ 571.458942][T11975] driver_probe_device+0x4f/0x240 [ 571.463966][T11975] __device_attach_driver+0x279/0x430 [ 571.469433][T11975] bus_for_each_drv+0x251/0x2e0 [ 571.474272][T11975] __device_attach+0x2b8/0x430 [ 571.479017][T11975] device_initial_probe+0xa1/0xd0 [ 571.484024][T11975] bus_probe_device+0x12a/0x220 [ 571.488860][T11975] device_add+0x7b6/0xb80 [ 571.493171][T11975] usb_new_device+0xa39/0x1720 [ 571.497915][T11975] hub_event+0x29b1/0x4ef0 [ 571.502314][T11975] process_scheduled_works+0xad1/0x1770 [ 571.507840][T11975] worker_thread+0x8a0/0xda0 [ 571.512410][T11975] kthread+0x711/0x8a0 [ 571.516464][T11975] ret_from_fork+0x510/0xa50 [ 571.521030][T11975] ret_from_fork_asm+0x1a/0x30 [ 571.525774][T11975] [ 571.528076][T11975] Freed by task 5912: [ 571.532032][T11975] kasan_save_track+0x3e/0x80 [ 571.536685][T11975] kasan_save_free_info+0x46/0x50 [ 571.541691][T11975] __kasan_slab_free+0x5c/0x80 [ 571.546432][T11975] kfree+0x1c0/0x660 [ 571.550309][T11975] hid_close_report+0x632/0x720 [ 571.555141][T11975] hid_device_probe+0x659/0x7a0 [ 571.559977][T11975] really_probe+0x26d/0xad0 [ 571.564487][T11975] __driver_probe_device+0x18c/0x320 [ 571.569756][T11975] driver_probe_device+0x4f/0x240 [ 571.574758][T11975] __device_attach_driver+0x279/0x430 [ 571.580112][T11975] bus_for_each_drv+0x251/0x2e0 [ 571.584944][T11975] __device_attach+0x2b8/0x430 [ 571.589684][T11975] device_initial_probe+0xa1/0xd0 [ 571.594705][T11975] bus_probe_device+0x12a/0x220 [ 571.599642][T11975] device_add+0x7b6/0xb80 [ 571.603949][T11975] hid_add_device+0x272/0x3e0 [ 571.608605][T11975] usbhid_probe+0xe13/0x12c0 [ 571.613176][T11975] usb_probe_interface+0x668/0xc90 [ 571.618272][T11975] really_probe+0x26d/0xad0 [ 571.622754][T11975] __driver_probe_device+0x18c/0x320 [ 571.628019][T11975] driver_probe_device+0x4f/0x240 [ 571.633021][T11975] __device_attach_driver+0x279/0x430 [ 571.638370][T11975] bus_for_each_drv+0x251/0x2e0 [ 571.643232][T11975] __device_attach+0x2b8/0x430 [ 571.647973][T11975] device_initial_probe+0xa1/0xd0 [ 571.652976][T11975] bus_probe_device+0x12a/0x220 [ 571.657817][T11975] device_add+0x7b6/0xb80 [ 571.662137][T11975] usb_set_configuration+0x1a87/0x2110 [ 571.667584][T11975] usb_generic_driver_probe+0x8d/0x150 [ 571.673039][T11975] usb_probe_device+0x1c4/0x3c0 [ 571.677871][T11975] really_probe+0x26d/0xad0 [ 571.682383][T11975] __driver_probe_device+0x18c/0x320 [ 571.687647][T11975] driver_probe_device+0x4f/0x240 [ 571.692646][T11975] __device_attach_driver+0x279/0x430 [ 571.697996][T11975] bus_for_each_drv+0x251/0x2e0 [ 571.702838][T11975] __device_attach+0x2b8/0x430 [ 571.707579][T11975] device_initial_probe+0xa1/0xd0 [ 571.712582][T11975] bus_probe_device+0x12a/0x220 [ 571.717427][T11975] device_add+0x7b6/0xb80 [ 571.721745][T11975] usb_new_device+0xa39/0x1720 [ 571.726496][T11975] hub_event+0x29b1/0x4ef0 [ 571.730895][T11975] process_scheduled_works+0xad1/0x1770 [ 571.736423][T11975] worker_thread+0x8a0/0xda0 [ 571.740990][T11975] kthread+0x711/0x8a0 [ 571.745043][T11975] ret_from_fork+0x510/0xa50 [ 571.749632][T11975] ret_from_fork_asm+0x1a/0x30 [ 571.754382][T11975] [ 571.756686][T11975] The buggy address belongs to the object at ffff888020f6a6e0 [ 571.756686][T11975] which belongs to the cache kmalloc-8 of size 8 [ 571.770371][T11975] The buggy address is located 0 bytes inside of [ 571.770371][T11975] freed 8-byte region [ffff888020f6a6e0, ffff888020f6a6e8) [ 571.783803][T11975] [ 571.786110][T11975] The buggy address belongs to the physical page: [ 571.792506][T11975] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20f6a [ 571.801242][T11975] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 571.808760][T11975] page_type: f5(slab) [ 571.812725][T11975] raw: 00fff00000000000 ffff88813ffa6500 0000000000000000 dead000000000001 [ 571.821290][T11975] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 571.829844][T11975] page dumped because: kasan: bad access detected [ 571.836246][T11975] page_owner tracks the page as allocated [ 571.841938][T11975] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5840, tgid 5840 (syz-executor), ts 150658055134, free_ts 150658036003 [ 571.861374][T11975] post_alloc_hook+0x234/0x290 [ 571.866125][T11975] get_page_from_freelist+0x24e0/0x2580 [ 571.871661][T11975] __alloc_frozen_pages_noprof+0x181/0x370 [ 571.877448][T11975] alloc_pages_mpol+0x232/0x4a0 [ 571.882291][T11975] allocate_slab+0x86/0x3b0 [ 571.886783][T11975] ___slab_alloc+0xe53/0x1820 [ 571.891436][T11975] __slab_alloc+0x65/0x100 [ 571.895830][T11975] __kmalloc_node_noprof+0x5d9/0x820 [ 571.901099][T11975] __vmalloc_node_range_noprof+0x5df/0x16a0 [ 571.906969][T11975] vzalloc_noprof+0xb2/0xf0 [ 571.911446][T11975] alloc_counters+0x64/0x5d0 [ 571.916020][T11975] do_ip6t_get_ctl+0xa94/0x1180 [ 571.920852][T11975] nf_getsockopt+0x26e/0x290 [ 571.925443][T11975] ipv6_getsockopt+0x1ed/0x290 [ 571.930450][T11975] do_sock_getsockopt+0x2b4/0x3d0 [ 571.935456][T11975] __x64_sys_getsockopt+0x1a5/0x250 [ 571.940632][T11975] page last free pid 5840 tgid 5840 stack trace: [ 571.946942][T11975] __free_frozen_pages+0xbc8/0xd30 [ 571.952032][T11975] __kasan_populate_vmalloc+0x1b2/0x1d0 [ 571.957554][T11975] alloc_vmap_area+0xdc4/0x14e0 [ 571.962390][T11975] __get_vm_area_node+0x1f8/0x300 [ 571.967405][T11975] __vmalloc_node_range_noprof+0x371/0x16a0 [ 571.973279][T11975] vzalloc_noprof+0xb2/0xf0 [ 571.977761][T11975] alloc_counters+0x64/0x5d0 [ 571.982331][T11975] do_ip6t_get_ctl+0xa94/0x1180 [ 571.987170][T11975] nf_getsockopt+0x26e/0x290 [ 571.991736][T11975] ipv6_getsockopt+0x1ed/0x290 [ 571.996479][T11975] do_sock_getsockopt+0x2b4/0x3d0 [ 572.001481][T11975] __x64_sys_getsockopt+0x1a5/0x250 [ 572.006657][T11975] do_syscall_64+0xec/0xf80 [ 572.011144][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.017021][T11975] [ 572.019326][T11975] Memory state around the buggy address: [ 572.024938][T11975] ffff888020f6a580: fa fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc [ 572.032975][T11975] ffff888020f6a600: 05 fc fc fc 05 fc fc fc 00 fc fc fc fa fc fc fc [ 572.041012][T11975] >ffff888020f6a680: 06 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 572.049053][T11975] ^ [ 572.056229][T11975] ffff888020f6a700: fa fc fc fc 05 fc fc fc fa fc fc fc 05 fc fc fc [ 572.064278][T11975] ffff888020f6a780: 05 fc fc fc fa fc fc fc fa fc fc fc 06 fc fc fc [ 572.072325][T11975] ================================================================== [ 572.236583][ T5912] usb 6-1: USB disconnect, device number 31 [ 572.336169][T11975] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 572.343414][T11975] CPU: 1 UID: 0 PID: 11975 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 572.354117][T11975] Tainted: [L]=SOFTLOCKUP [ 572.358448][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 572.368515][T11975] Call Trace: [ 572.371804][T11975] [ 572.374746][T11975] vpanic+0x1e0/0x670 [ 572.378747][T11975] panic+0xb9/0xc0 [ 572.382478][T11975] ? __pfx_panic+0x10/0x10 [ 572.386884][T11975] ? report_descriptor_read+0xb5/0x100 [ 572.392342][T11975] ? report_descriptor_read+0xb5/0x100 [ 572.397799][T11975] check_panic_on_warn+0x89/0xb0 [ 572.402732][T11975] ? report_descriptor_read+0xb5/0x100 [ 572.408205][T11975] end_report+0x6f/0x140 [ 572.412482][T11975] kasan_report+0x129/0x150 [ 572.416971][T11975] ? report_descriptor_read+0xb5/0x100 [ 572.422423][T11975] kasan_check_range+0x2b0/0x2c0 [ 572.427375][T11975] ? report_descriptor_read+0xb5/0x100 [ 572.432826][T11975] __asan_memcpy+0x29/0x70 [ 572.437269][T11975] report_descriptor_read+0xb5/0x100 [ 572.442542][T11975] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 572.447984][T11975] kernfs_fop_read_iter+0x451/0x6b0 [ 572.453172][T11975] vfs_read+0x55a/0xa30 [ 572.457371][T11975] ? __pfx_vfs_read+0x10/0x10 [ 572.462044][T11975] ? kmem_cache_free+0x197/0x620 [ 572.466993][T11975] ? do_sys_openat2+0x15a/0x200 [ 572.471853][T11975] ksys_read+0x145/0x250 [ 572.476109][T11975] ? __pfx_ksys_read+0x10/0x10 [ 572.480865][T11975] do_syscall_64+0xec/0xf80 [ 572.485360][T11975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.491411][T11975] ? trace_irq_disable+0x37/0x100 [ 572.496421][T11975] ? clear_bhb_loop+0x60/0xb0 [ 572.501170][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.507046][T11975] RIP: 0033:0x7faa186a7407 [ 572.511457][T11975] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 572.531134][T11975] RSP: 002b:00007fff68f7f2d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 572.539535][T11975] RAX: ffffffffffffffda RBX: 00007faa18d8f880 RCX: 00007faa186a7407 [ 572.547509][T11975] RDX: 0000000000001000 RSI: 00007fff68f7f320 RDI: 0000000000000004 [ 572.555476][T11975] RBP: 000055b993ea6730 R08: 0000000000000000 R09: 0000000000000000 [ 572.563438][T11975] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b993ea5930 [ 572.571407][T11975] R13: 00007fff68f7f320 R14: 0000000000000004 R15: 000055b96b2c74d8 [ 572.579392][T11975] [ 572.582797][T11975] Kernel Offset: disabled [ 572.587203][T11975] Rebooting in 86400 seconds..