last executing test programs: 1m20.949832091s ago: executing program 2 (id=462): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffff3, 0x4031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f00000075c0)={0x2020}, 0x2020) socket$inet6(0xa, 0x3, 0x4) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000040)}, {&(0x7f0000000100)}, {0x0}, {&(0x7f00000003c0)="d10298d3c0e54ffc0c5a7798366a6d67f8f122e9d8a6d60de6a77edcc1efd4f6173a772610b0327aca7042471a20f11ec6b0006b3b98d38ee0be4bc211351c588b62fec867a5acf8dcaf1be6580f6ae0a335965f3227ba6f0008a8b3ecd1c52cc6fef0dce58150e081444fe99a599cdd02dfc7955f596e42cf0c4a2b6ccd4be00b0ce02a809837a94d9b1ebcf6536c7c6e99f64122cf632eeffb7085693c1acc11fbbb2028e48c4b4238b52115c3df59792865ee55", 0xb5}, {&(0x7f0000000300)="2d01d5cefd65b3ee29edbef8904377a50cf4cc8ab148ee042dd6419374f0a58345d8c046166ac1c51cbe3ccb6c42617fe4488e855f3aadc7acf626bbd0ac9329cd9eee8c949273bfc7005917e2b4095acb6f61584b85d487", 0x58}], 0x5) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9, 0x6d, 0x5c, 0x40, 0x2304, 0x23e, 0xd769, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x37, 0x10, 0xeb}}]}}]}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0x1}], 0x1, 0x5, 0xb2) syz_usb_control_io$uac1(r2, 0x0, 0x0) 1m19.266711098s ago: executing program 2 (id=465): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket(0x1e, 0x4, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0xe1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000140)) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000001, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES8], 0x20}, 0x1, 0x0, 0x0, 0x22044000}, 0x40088) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16], 0x20}}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="249400006800010002000000fcff435ba32aee0e76d93afad2302cfff600000c00020001"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1m17.91093234s ago: executing program 2 (id=466): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) unshare(0x2c040000) unshare(0x2c020400) write$tun(r2, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000f5000000000000000000000000000064ace2600f1a2f01fe880000000000000000000000000001200100000000000000000000000000000c21880b00000002000008000c0086dd080088be0000000210230802010000000000003e080022eb000000032248256102000000fffffffbf587051a08006558000000023b4caef13d37b5aec2969ee8dfb0c61838c8e2779da6255efacb0884e77c428f4d86b6e778ee3a1891fedfd7190ffbe3b2e015a550ab6e452b2902440d13bd03605e906d3831f80dd0206c111128aa48442d787c7567db85a59e4ad3cce683b4e10f311b00f815c9ca0df017e1f5fbea8114d1ba6de8010363528577c133ce558e5e5f5bdcb84de895a585525edc929cfa7fcc7c9680b3f037c0659eb1603ad18feb20ffbd689ddb32ebaf48b8003acd66c6bd27bcba284aef84220491b9f9f468dcd85a18625466ea89c06669619527749e024143c8b26e67ae99e7dfcfbce29319044ef1bb29eecac81a47aeaf8af6fb7b9e3f12cd2703a50566b86c041391e05bfe81d6b14d9fa7797e5dcfc41d19260c1a39d48c8d7a11a5645619e2c1bb78dfddb23b88129cfe5d27947881b21b1b4a05ef9940135a9aea70f6633c2d555a4117368ccecfe8b333a9a10a78a0d76549bedd7a1b08f76901369865ca7bdad40ab576acbc6ebe23a0e5636c2941b4f28d5088717bcd59febc6f0b4fb6c5b2e958ce5ce1d8bdc30acfc99b449f06be1a59eaba0d13a0855e387efc64bddb5655d7cd22d97529b8bb6229d822e4340b381c4f212a25bf9a7822dce79c622812837893afa7667128b4e7b40c9b7a54724cde9e8ef2800db8b9009210e092610bf075d3c55691ffef6b4e6a0c670f9a063d0de2fa93c386efc530896aa208cf679c296b26637531cbb2bd3f55a1422d7b08eb39e20b1e5214d1373a2c61c120f237ff5a03c0cf512492d040350e7068ad21bcc69032331a4c7e5902be63f488bc7982643bc1508560a7b528e41db61b9fa8a34c1f53f39461f7daae62dfc9aedc24133bfc142fc9cb8d08e916492be3b4a2b681521dd11a688a2c25cde0aeb88f3ba975c876ab935f58de93881a4b997892fefd1f07501ee8ed0d14d6af02a3661caac723ec062070a5cb498f250e062084ce534289b4facf570536f6bfa698161b6a37501a3fee8aa86839bedc974daa2754320098a96ad47a3a5e753f6acfe3d1ab3a7a464069a35d3f52f0ed722e5c8abcf26a450a8237b0d1ed1c6da1e02af15e0d9f63309eb9da7578426bdcd5362e595127e08bc0214fd5c2d10f9b379558e146524560853c9e929da48df6e894913a419dcb723eb8d32bb82004cb53fcc7260ab74c5b22e41598a1b16deeeb833817c27709e9542b660d6e95e93047fbfba72422d1a0923bda75387d26fce2d4e93e4d0f89a2aadb71f25e03f80ae75b938069bddb2f6d19c6b2c09e4f92c9d4d941980f0989052e49c9d4f7c548a0f4b9aa358aedd738d21b96ae1e4f4fd909b0db87413ef4fd8a71dc63af5aa0e8db2a3a44fffff7731e6f3d69a21f015a8ba46bf2a9cbe799ed4617748975a24a3702f5b113d9556c75a444d6a3154628ea3dbb66488ee7c5c7dbdc3cb6aec8c9843358dfcce06fc23e99daa91001a1ac1846417f37c423cb16dbb65d15a593ef58aec109f88e52b4740804e25e4b640e8474f66f39d252183f3d30a37d36ef02d80a65ff972fcb61a9073e381f2f9ed1910aa9219e7ad34be7159f0343b9"], 0xf54) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x2b00, 0x12) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a6000003f000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007b9f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2301ff00000000000000000014d6d930dfe1d9c322fe040000007025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0xc0) socket$kcm(0x10, 0x5, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x7aa, 0x0, 0x2000000}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) 1m16.009769063s ago: executing program 2 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0000fd32bd67a08de6cd16681f497291b745daf86b477144edc8ec9c8a567e05d34a076e42e38bb7ad6cd11f59c632fc112114aa53303a7e93096fc20e008f84282675c6f4edeed6b89e986c23b36445a6330ec24f710f0ee363f690700c966336b59bf3de62b996de6cb24f480e945aa011bcc6b55ed0286ecec86bd2723eef473b1f41da8f5a5b3151b6fd9ba2eab0613bfb90f647936d725f04c58389c1493a9c8cac8ab6203c8556bd0a69b92d1fe84966e9dfae3ee1421684e5c9f24e60a19c897d523ec82e5386b0878c430b2e47b1ba7d7bfe27371a4e8e55612f5320aa57af0449386f93e8feeb45f553907b8613"]) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0x4, {0x1, 0x9, 0x8, 0x1, 0x6, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r4, r5, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m14.941129675s ago: executing program 2 (id=477): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87}) fsetxattr(r0, &(0x7f0000000080)=@known='com.apple.system.Security\x00', &(0x7f0000000100)='/dev/video#\x00', 0xc, 0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) read$nci(r0, &(0x7f00000002c0)=""/101, 0x65) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x3, 0x8, 0xe, 0x3ff, 0x473, 0x81}) write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4) 1m14.79174385s ago: executing program 2 (id=479): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000880)=0xfbf, 0x4) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e24, 0x25, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x81}, 0x70) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x7, 0x3, 0x5, 0x15d, 0x7ff, 0xff, 0x0, 0x1000, 0x800}) syz_usb_connect(0x3, 0x40c, &(0x7f0000000140)={{0x12, 0x1, 0x1e24e589f39ddce1, 0x77, 0x42, 0x11, 0x40, 0x1410, 0xa007, 0xa560, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3fa, 0x3, 0x7, 0x40, 0x40, 0x80, [{{0x9, 0x4, 0x3, 0xd9, 0x8, 0xcf, 0x9e, 0x0, 0x54, [@uac_as], [{{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xc, 0xf, 0x7, [@generic={0xec, 0x3, "b5cf1632415728c5d1f28c4b075c918268a6ce0376f4c61e3d5b2afbbd69287fa3e55e93800bddb27cd8e6fa24cc4609ef7ab895bb9e086d882f20edbbcb633870aaf0d4149e89a165785b28c909afc984469272e453c91a274487408e63d134196edfb25beab3ffe57ef2c22f0e2bd7b14655796615b1785dc730f6b0ebb3118fe3fb1044d0941f7f773b2bd0a774ab8e87164a94e9d8ea56c742d23c8542ba3fe33159cf06351eee277293441acb70cdcce6b98de49d9e0f61fa92e1379688b6f3c652f566e5e5cc0f4c1537ebea6aaab83e045382cb39252b2d4983cbe764442dee1ed0547a7db985"}]}}, {{0x9, 0x5, 0x8b, 0x10, 0x8, 0x81, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5a}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x2b, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x339}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x9, 0x91, 0x2}}, {{0x9, 0x5, 0xc0411a5664422fe, 0x10, 0x400, 0x83, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x1, 0x6, 0x8, [@generic={0x70, 0xa, "ef9da1818c8e0057f1bf9bc5d7e81d550e3ca30503e8b6141c08267865dc5bd0448fed6812ce5bedc757894234c1c0f429d12496b69eb3c7224d92d439dfcf8b6beb33d700e4fa78bfb08072b89cf8834007a4b74ebb664919adba408e828e6912ed693bd7f99a0e8b636e977926"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x428, 0xd8, 0x89, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x9}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xd, 0xfa, 0x81, [@generic={0xb5, 0x8, "f0c1e76ab1f7dbb99d92718f7d5eee82b31d752a3178e92316079f47d1d6aec7ee51e1fd646b8fca10592629ab2040d1677bf9d4e0786e15ddac5d3675027f47b10f6bd1f63f6404e5d8406df9cf5cec58d135e290ee33b65ffc56e8265e94246ffbc2a65e9338321f2997d64a4fd84058272e46b57038fa7fec37d0e5e26969be770c1fc4bd6632d100d2874dae5ddba85f5ed609e6cc72ae1a8036de56db48425650db212a8dbe7d2003a554b35f26aba80a"}]}}]}}, {{0x9, 0x4, 0xc6, 0xa, 0x3, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x7, 0x1, 0x10, 0x6a, 0xa2, 0x8, [@generic={0xee, 0xc, "5de58c1a38489178bde96c6c7cf721565070a1093e2a3570e4dcfc030b23e8dbb1769878db44257f69835dd89ae7413534bbbe2eb863b0e9ff7a605666dfa84405944ecaf48904918739f00f81e144dcf38b67eb84494bc194aac5ff44cb1e5270d960ce49c9f748856a55b7e7118569420ea3c706984faee63413782698a155e6a7f66c9f56adb5d861739aa95d20a68738bb43f65c7387365312b9860ded8ec1a47e2e40a694612d01606c36bab7e6a356d4d54084ba2f1b98d434847d756dfe36df1d7d03174504f34e23751bd4cbc7a145345f8a7895b7993e29084266a8445d3160a05b411acf1084ef"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x4, 0x6, 0x26}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x0, 0x78, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}]}}, {{0x9, 0x4, 0x29, 0x7, 0x3, 0x4b, 0x33, 0x3e, 0x2, [], [{{0x9, 0x5, 0x80, 0x2, 0x10, 0x7, 0x4, 0xc}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x6, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x6b, 0x9d, 0x0, [@generic={0x36, 0x6, "8e0324f38e1548d66fa2c03f0aea661c6ef5225f99bab9b59004de869f0ce1bb180ec5d1a220b4a2c37ef217e4a8b782220524ba"}]}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xf, 0x8, 0x3, 0x20}, 0x57, &(0x7f0000000580)={0x5, 0xf, 0x57, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0xf3, 0x81, 0xffff}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x5, 0xf00, 0x8001}, @wireless={0xb, 0x10, 0x1, 0x8, 0x21, 0x9, 0x4, 0x4, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x2, 0xf00f, 0x2, [0xff0000, 0xdf8f, 0x0, 0x0, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x8, 0x75f8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x2a, 0x3}]}, 0x2, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xc09}}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="20121d0000001df9a9f364"], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) preadv(r3, &(0x7f0000004300)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1, 0x78, 0xc) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000006c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000147000/0x4000)=nil, 0x4000, 0x7}) 1m14.150798224s ago: executing program 32 (id=479): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000880)=0xfbf, 0x4) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e24, 0x25, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x81}, 0x70) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x7, 0x3, 0x5, 0x15d, 0x7ff, 0xff, 0x0, 0x1000, 0x800}) syz_usb_connect(0x3, 0x40c, &(0x7f0000000140)={{0x12, 0x1, 0x1e24e589f39ddce1, 0x77, 0x42, 0x11, 0x40, 0x1410, 0xa007, 0xa560, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3fa, 0x3, 0x7, 0x40, 0x40, 0x80, [{{0x9, 0x4, 0x3, 0xd9, 0x8, 0xcf, 0x9e, 0x0, 0x54, [@uac_as], [{{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xc, 0xf, 0x7, [@generic={0xec, 0x3, "b5cf1632415728c5d1f28c4b075c918268a6ce0376f4c61e3d5b2afbbd69287fa3e55e93800bddb27cd8e6fa24cc4609ef7ab895bb9e086d882f20edbbcb633870aaf0d4149e89a165785b28c909afc984469272e453c91a274487408e63d134196edfb25beab3ffe57ef2c22f0e2bd7b14655796615b1785dc730f6b0ebb3118fe3fb1044d0941f7f773b2bd0a774ab8e87164a94e9d8ea56c742d23c8542ba3fe33159cf06351eee277293441acb70cdcce6b98de49d9e0f61fa92e1379688b6f3c652f566e5e5cc0f4c1537ebea6aaab83e045382cb39252b2d4983cbe764442dee1ed0547a7db985"}]}}, {{0x9, 0x5, 0x8b, 0x10, 0x8, 0x81, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5a}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x2b, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x339}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x9, 0x91, 0x2}}, {{0x9, 0x5, 0xc0411a5664422fe, 0x10, 0x400, 0x83, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x1, 0x6, 0x8, [@generic={0x70, 0xa, "ef9da1818c8e0057f1bf9bc5d7e81d550e3ca30503e8b6141c08267865dc5bd0448fed6812ce5bedc757894234c1c0f429d12496b69eb3c7224d92d439dfcf8b6beb33d700e4fa78bfb08072b89cf8834007a4b74ebb664919adba408e828e6912ed693bd7f99a0e8b636e977926"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x428, 0xd8, 0x89, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x9}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xd, 0xfa, 0x81, [@generic={0xb5, 0x8, "f0c1e76ab1f7dbb99d92718f7d5eee82b31d752a3178e92316079f47d1d6aec7ee51e1fd646b8fca10592629ab2040d1677bf9d4e0786e15ddac5d3675027f47b10f6bd1f63f6404e5d8406df9cf5cec58d135e290ee33b65ffc56e8265e94246ffbc2a65e9338321f2997d64a4fd84058272e46b57038fa7fec37d0e5e26969be770c1fc4bd6632d100d2874dae5ddba85f5ed609e6cc72ae1a8036de56db48425650db212a8dbe7d2003a554b35f26aba80a"}]}}]}}, {{0x9, 0x4, 0xc6, 0xa, 0x3, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x7, 0x1, 0x10, 0x6a, 0xa2, 0x8, [@generic={0xee, 0xc, "5de58c1a38489178bde96c6c7cf721565070a1093e2a3570e4dcfc030b23e8dbb1769878db44257f69835dd89ae7413534bbbe2eb863b0e9ff7a605666dfa84405944ecaf48904918739f00f81e144dcf38b67eb84494bc194aac5ff44cb1e5270d960ce49c9f748856a55b7e7118569420ea3c706984faee63413782698a155e6a7f66c9f56adb5d861739aa95d20a68738bb43f65c7387365312b9860ded8ec1a47e2e40a694612d01606c36bab7e6a356d4d54084ba2f1b98d434847d756dfe36df1d7d03174504f34e23751bd4cbc7a145345f8a7895b7993e29084266a8445d3160a05b411acf1084ef"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x4, 0x6, 0x26}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x0, 0x78, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}]}}, {{0x9, 0x4, 0x29, 0x7, 0x3, 0x4b, 0x33, 0x3e, 0x2, [], [{{0x9, 0x5, 0x80, 0x2, 0x10, 0x7, 0x4, 0xc}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x6, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x6b, 0x9d, 0x0, [@generic={0x36, 0x6, "8e0324f38e1548d66fa2c03f0aea661c6ef5225f99bab9b59004de869f0ce1bb180ec5d1a220b4a2c37ef217e4a8b782220524ba"}]}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xf, 0x8, 0x3, 0x20}, 0x57, &(0x7f0000000580)={0x5, 0xf, 0x57, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0xf3, 0x81, 0xffff}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x5, 0xf00, 0x8001}, @wireless={0xb, 0x10, 0x1, 0x8, 0x21, 0x9, 0x4, 0x4, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x2, 0xf00f, 0x2, [0xff0000, 0xdf8f, 0x0, 0x0, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x8, 0x75f8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x2a, 0x3}]}, 0x2, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xc09}}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="20121d0000001df9a9f364"], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) preadv(r3, &(0x7f0000004300)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1, 0x78, 0xc) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000006c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000147000/0x4000)=nil, 0x4000, 0x7}) 7.953177029s ago: executing program 3 (id=730): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5, 0x30, 0xffffffffffffffff, 0xfffff000) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, 0x0) 7.013088838s ago: executing program 3 (id=737): socket(0x1, 0x3, 0xfffffffc) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x40648c0) bind$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/129, 0x81}, {&(0x7f0000000380)=""/119, 0x77}], 0x2, &(0x7f0000000400)=""/147, 0x93}, 0xac8}, {{&(0x7f00000004c0)=@tipc, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/15, 0xf}, {&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f00000005c0)=""/128, 0x80}, {&(0x7f0000000640)=""/15, 0xf}, {&(0x7f0000000680)=""/128, 0x80}, {&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/180, 0xb4}], 0x7, &(0x7f0000000940)=""/114, 0x72}, 0x5}, {{&(0x7f00000009c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000a40)=""/239, 0xef}, {&(0x7f0000000b40)=""/67, 0x43}, {&(0x7f0000000740)=""/15, 0xf}, {&(0x7f0000000bc0)=""/152, 0x98}, {&(0x7f0000000c80)=""/135, 0x87}, {&(0x7f0000000d40)=""/59, 0x3b}, {&(0x7f0000000d80)=""/85, 0x55}, {&(0x7f0000000e00)=""/208, 0xd0}, {&(0x7f0000003940)=""/182, 0xb6}], 0x9, &(0x7f0000001040)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000002040)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003280)=[{&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/136, 0x88}, {&(0x7f0000003180)=""/231, 0xe7}], 0x3, &(0x7f00000032c0)=""/40, 0x28}, 0x80000001}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000f00)=""/77, 0x4d}, {&(0x7f0000003380)=""/72, 0x48}, {&(0x7f0000003400)=""/165, 0xa5}, {&(0x7f00000034c0)=""/118, 0x76}, {&(0x7f0000003540)=""/238, 0xee}, {&(0x7f0000003640)=""/51, 0x33}, {&(0x7f0000003680)=""/255, 0xff}, {&(0x7f0000003780)=""/51, 0x33}], 0x8, &(0x7f0000003800)=""/102, 0x66}, 0x69}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) shutdown(r2, 0x0) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) lseek(r3, 0x5, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xf, 0x803, 0x9) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) socket$pppoe(0x18, 0x1, 0x0) shmctl$SHM_LOCK(0x0, 0xb) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x7344, &(0x7f0000000300)={0x0, 0xbeed, 0x8000, 0x1, 0x121}, &(0x7f0000000280)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000780)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa}}) io_uring_enter(r7, 0x47f6, 0x0, 0x60, 0x0, 0x0) 5.633612528s ago: executing program 1 (id=743): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffff3, 0x4031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000075c0)={0x2020}, 0x2020) r1 = socket$inet6(0xa, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000040)}, {&(0x7f0000000180)="f57319932b779155950632bd46a59c10e92247945d2267fba0fad196dc30e0eac99e79823bb4b09685998be6da5f68b8927080afd8126c8629b6086e7323d50e770925ea7ea48a72d17f012ded9ad18e01752fd1925fb80a36f29feb312ef76495c40708e9aba96eb053aa706270a4ea3961f7081b499d15113cf78afe1ce3dee1fdfabe2ff6e6f39b282a617a2eb157b568a2ed716ed8fef99ad8c9f8d35c3ec47de68398848b", 0xa7}, {&(0x7f0000000100)="e4ab7d1ff09ae284943b53f2300d3f0bd1d498cfd8e6a708b6f56f8f71fb954d4112fa9ebe", 0x25}, {&(0x7f0000000240)="175cc2fbd31a414ca8f11f6dfe04a0f239947e71130496c8d2a3833622786003d4c7210f5a346c0543613d3b3cd841292ca1cf143f855e94a5cc18b2bb4d389130c8c081034c97065f6d9da8b78655e5e7339b7f94487a91b88604a8cf121bc6743dca827bf8f16263f8e4a57850bb05280e53514fd010fe889f4da1991246a781501aa090b49dee4c83318d05694dfe169d5f05b81c111e2c2aea", 0x9b}, {&(0x7f00000003c0)="d10298d3c0e54ffc0c5a7798366a6d67f8f122e9d8a6d60de6a77edcc1efd4f6173a772610b0327aca7042471a20f11ec6b0006b3b98d38ee0be4bc211351c588b62fec867a5acf8dcaf1be6580f6ae0a335965f3227ba6f0008a8b3ecd1c52cc6fef0dce58150e081444fe99a599cdd02dfc7955f596e42cf0c4a2b6ccd4be00b0ce02a809837a94d9b1ebcf6536c7c6e99f64122cf632eeffb7085693c1acc11fbbb2028e48c4b4238b52115c3df59792865ee55", 0xb5}, {&(0x7f0000000300)="2d01d5cefd65b3ee29edbef8904377a50cf4cc8ab148ee042dd6419374f0a58345d8c046166ac1c51cbe3ccb6c42617fe4488e855f3aadc7acf626bbd0ac9329cd9eee8c949273bfc7005917e2b4095acb6f61584b85d487", 0x58}], 0x6) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9, 0x6d, 0x5c, 0x40, 0x2304, 0x23e, 0xd769, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x37, 0x10, 0xeb}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$sndseq(r4, 0x0, 0x0) poll(&(0x7f0000000000)=[{r4, 0x8a}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x80000000, 0x0, 0x60, 0x8}) r5 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0xd, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xd9, 0x29}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0xfc, 0x10, 0x6, 0x20, 0x7}, 0x15, &(0x7f0000000540)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x2, 0xf00, 0x5, [0x3f00]}]}, 0x1, [{0xb6, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"]}]}) syz_usb_control_io$printer(r5, &(0x7f00000005c0)={0xc, &(0x7f0000000700)={0x0, 0x23, 0xf2, {0xf2, 0x5, "e7771b2196725cbaf71e5c0485b6ea179faa45c7918497620771eec2ddabe273bdda1b6ee9c1c5a4d6ac007a6165e86de4095db164dbbc25e480586bc0cdf37d53359f373eaea831127d5dab7a1fa5862b1a1a44f4efc6a09a38628e513fb75d3e6afb8c3015a594e01e6151e45486924f1ef395aaa985a47dd1ae28a282750296763db621f13927b656e012070c2e480fc5a6f7673c70bc8c7d2e44fde2279f146bd13035f570c14d110a88e0aa40ae0c47db282fa42d2f54ec8d820b909eda7a9d5cd6e28f831d52a898dc2896dcb6046071eb1db7398aef9c4999a4b8f81617f40cc33b6c3760805b867da210891c"}}, &(0x7f0000000880)=ANY=[@ANYBLOB="00039e000000073ddd0797b468f3083f0cfb6cd6ac98fdfe6d84d8dafc74e147b9d1a55cf011cd3e2add452f0832b9500cd6676d9ba4ea092cc2490ad7adbb6ed53f8a438d89c298ab7ee577a122ec830d0ba8f62a1dd8c04769a2367b1c40af95303d20e01d26637aac66416212096945f7c411d4ed1505c8120fc0b2818cbe61f806d0447bfe83ea689e36532481ef8a3a2eac8da6c26fd1f369de56"]}, &(0x7f0000000b00)={0x1c, &(0x7f0000000800)={0x20, 0x16, 0x1b, "40f5f6d74bfbc7c7b4d9baebe0718bd5b75580d48aeb1aa8adab96"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x59}, &(0x7f00000009c0)={0x20, 0x0, 0x89, {0x87, "1baf26cfe7155af04fa95658b010a6b814c6f90095682f3dfc13eb3f8ae1f205b7d09e491e0e87e3eac93bf42cadcb70c47bef9decaf6e95dae34992452f11b8b4fb865dcb3abd0193eea90065715d0d2809f46366a7e6b57d81f4910812f3165271142b2c5031ff97806eb0d9a289b5d02e99a99321e65351a33a944cb57ce66249cf01cc9b8f"}}, &(0x7f0000000a80)={0x20, 0x1, 0x1, 0x1f}, &(0x7f0000000ac0)={0x20, 0x0, 0x1, 0x9}}) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0x1}], 0x1, 0x5, 0xb2) syz_usb_control_io$uac1(r2, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0xe10, @private1={0xfc, 0x1, '\x00', 0x81}, 0x2e3}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b00"]) 4.935889344s ago: executing program 0 (id=747): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5, 0x30, 0xffffffffffffffff, 0xfffff000) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, 0x0) 4.619109848s ago: executing program 5 (id=751): r0 = epoll_create1(0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x30000018}) 4.495031853s ago: executing program 5 (id=752): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffff3, 0x4031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f00000075c0)={0x2020}, 0x2020) socket$inet6(0xa, 0x3, 0x4) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) writev(r1, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000100)="e4ab7d1ff09ae284943b53f2300d3f", 0xf}, {0x0}, {&(0x7f00000003c0)="d10298d3c0e54ffc0c5a7798366a6d67f8f122e9d8a6d60de6a77edcc1efd4f6173a772610b0327aca7042471a20f11ec6b0006b3b98d38ee0be4bc211351c588b62fec867a5acf8dcaf1be6580f6ae0a335965f3227ba6f0008a8b3ecd1c52cc6fef0dce58150e081444fe99a599cdd02dfc7955f596e42cf0c4a2b6ccd4be00b0ce02a809837a94d9b1ebcf6536c7c6e99f64122cf632eeffb7085693c1acc11fbbb2028e48c4b4238b52115c3df59792865ee55", 0xb5}, {&(0x7f0000000300)="2d01d5cefd65b3ee29edbef8904377a50cf4cc8ab148ee042dd6419374f0a58345d8c046166ac1c51cbe3ccb6c42617fe4488e855f3aadc7acf626bbd0ac9329cd9eee8c949273bfc7005917e2b4095acb6f61584b85d487", 0x58}], 0x5) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9, 0x6d, 0x5c, 0x40, 0x2304, 0x23e, 0xd769, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x37, 0x10, 0xeb}}]}}]}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0x1}], 0x1, 0x5, 0xb2) syz_usb_control_io$uac1(r2, 0x0, 0x0) 4.134829205s ago: executing program 4 (id=755): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 4.053735655s ago: executing program 4 (id=756): r0 = epoll_create1(0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x30000018}) (fail_nth: 2) 3.963981367s ago: executing program 0 (id=757): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys\x00\x00et/\x80\x00v4\x00\x00s\xe1tP+f[g\x96\xcf\xdd\xc3 \xb2@f/\x92ync_\x00l'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/206, 0xce}, {&(0x7f0000000340)=""/253, 0xfd}], 0x2, &(0x7f0000000440)=""/34, 0x22}, 0x9}], 0x1, 0x2, 0x0) 3.61303491s ago: executing program 3 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) r0 = inotify_init1(0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x43000c80) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 3.612788097s ago: executing program 4 (id=759): bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r8, &(0x7f0000000040)="240000001e005f0214fffffffffffff80700000001000000000000000500092b126ad900", 0x24) r9 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r9, 0x8001af71, &(0x7f00000000c0)) 3.51375731s ago: executing program 3 (id=760): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x15, r0, 0x0, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000009c0)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0xfffffffe, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000800}, 0x0, 0x3f0, 0x0, 0xd613, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x4}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) epoll_create1(0x80000) syz_usb_control_io(r3, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="0000040000000b0f0667"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12015002070103202501f0a440000102030109021b000101052009090400f901000000040905010240000a0300e3e6b2a2960ac1a85e1ac92ea1d641b91fd049fbdb8db74130e392a390c906d6a0fd6b7fadb174ce4554938597d3007ae0d47ac020a5fb03af1b853afbfbad56bbeeb9197d194df8f192c03faaf7e92a8f0860ef5573f64cb3bbc4543aad0d659dd07dabc75913e211ff8f52fbbe59a8809123daca2928f172fd2ef99cfdf93053fd6774a8a0bd46256e5f163ae8b7"], &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x40, 0xda, 0x4, 0xff, 0x4}, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="f9d272a3c268c88b0b30eec156ea485cf5b3a41ec3959e9469b60e276692036cfd239ef396fb748323c878dea6f3fad9ce14b2b3971d51dccf05c387e119"], 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2012}}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0xffffffffffffffe6, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0f", 0x1b}], 0x1}}], 0x1, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r5 = socket$inet(0x2, 0x800, 0x30) getsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000180)={@dev, @local, @broadcast}, &(0x7f0000000240)=0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYBLOB="b8000000000000e16e0002c0fcb0e3356356", @ANYRES32=r4, @ANYRES32=r0], 0x6f4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x4a) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) truncate(&(0x7f0000000680)='./file1\x00', 0x6) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r8, &(0x7f00000037c0)={0x3, 0x20, 0x44, 0x20, 0xfffffffffffffffa}, 0x7ff) r9 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="059f257100000000280012800b00010065727370616e00001800028004001200050016000100000008ef140015601f62207e287c0600"], 0x48}, 0x1, 0x0, 0x0, 0x24008c04}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) unshare(0x62040200) socket$inet(0x2, 0x3, 0x8d) 2.520590935s ago: executing program 5 (id=761): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f00000000c0)="940910bc996c301c8107070400", 0xd) 2.464866455s ago: executing program 1 (id=762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffd) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000001280)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000edfc054d564b"]) 2.221108757s ago: executing program 0 (id=763): r0 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x4f06c3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000000)={0x0, 0x0, 0x0, @raw}) 2.202866736s ago: executing program 5 (id=764): creat(&(0x7f00000000c0)='./file0\x00', 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0xfffffffe, @private0}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x815) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 2.124949445s ago: executing program 4 (id=765): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100014e88"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x2004c4c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400266b1000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800a000100717565756500000014000280060001400000000008000440000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a60000000060a010400000000000000000a0000050900020073797a320000000034000480200001800d00010073796e70726f7879000000000c0002800800034000000008100001800800010064757000040002800900010073797a31"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4ebe, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xfa}}]}, 0xac}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, &(0x7f0000000280)) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f00000000c0)="940910bc996c301c8107070400", 0xd) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3aa2, 0x3110c2) ioctl$SNDRV_PCM_IOCTL_LINK(r6, 0x40044160, &(0x7f0000000040)=0x6) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2600c010) 2.057255513s ago: executing program 1 (id=766): r0 = epoll_create1(0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0xa, &(0x7f00000000c0)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0xa}) 2.057094136s ago: executing program 0 (id=767): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@gettaction={0x24, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x18, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x2}]}, 0x24}}, 0x10000000) 1.92765623s ago: executing program 0 (id=768): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) r1 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) 1.90168025s ago: executing program 1 (id=769): msgsnd(0x0, 0x0, 0x8, 0x800) msgsnd(0x0, 0x0, 0x8, 0x800) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/24}, 0x20, 0x8ee78e64c627ede6, 0x3000) 1.899866549s ago: executing program 5 (id=770): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, 0x0) 1.740996229s ago: executing program 4 (id=771): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffff3, 0x4031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f00000075c0)={0x2020}, 0x2020) socket$inet6(0xa, 0x3, 0x4) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000040)}, {&(0x7f0000000100)="e4ab7d1ff09ae284943b53f2300d3f", 0xf}, {0x0}, {&(0x7f00000003c0)="d10298d3c0e54ffc0c5a7798366a6d67f8f122e9d8a6d60de6a77edcc1efd4f6173a772610b0327aca7042471a20f11ec6b0006b3b98d38ee0be4bc211351c588b62fec867a5acf8dcaf1be6580f6ae0a335965f3227ba6f0008a8b3ecd1c52cc6fef0dce58150e081444fe99a599cdd02dfc7955f596e42cf0c4a2b6ccd4be00b0ce02a809837a94d9b1ebcf6536c7c6e99f64122cf632eeffb7085693c1acc11fbbb2028e48c4b4238b52115c3df59792865ee55", 0xb5}, {&(0x7f0000000300)="2d01d5cefd65b3ee29edbef8904377a50cf4cc8ab148ee042dd6419374f0a58345d8c046166ac1c51cbe3ccb6c42617fe4488e855f3aadc7acf626bbd0ac9329cd9eee8c949273bfc7005917e2b4095acb6f61584b85d487", 0x58}], 0x5) r2 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0x1}], 0x1, 0x5, 0xb2) syz_usb_control_io$uac1(r2, 0x0, 0x0) 1.686514729s ago: executing program 0 (id=772): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffff3, 0x4031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000075c0)={0x2020}, 0x2020) r1 = socket$inet6(0xa, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000040)}, {&(0x7f0000000180)="f57319932b779155950632bd46a59c10e92247945d2267fba0fad196dc30e0eac99e79823bb4b09685998be6da5f68b8927080afd8126c8629b6086e7323d50e770925ea7ea48a72d17f012ded9ad18e01752fd1925fb80a36f29feb312ef76495c40708e9aba96eb053aa706270a4ea3961f7081b499d15113cf78afe1ce3dee1fdfabe2ff6e6f39b282a617a2eb157b568a2ed716ed8fef99ad8c9f8d35c3ec47de68398848b", 0xa7}, {&(0x7f0000000100)="e4ab7d1ff09ae284943b53f2300d3f0bd1d498cfd8e6a708b6f56f8f71fb954d4112fa9ebe", 0x25}, {&(0x7f0000000240)="175cc2fbd31a414ca8f11f6dfe04a0f239947e71130496c8d2a3833622786003d4c7210f5a346c0543613d3b3cd841292ca1cf143f855e94a5cc18b2bb4d389130c8c081034c97065f6d9da8b78655e5e7339b7f94487a91b88604a8cf121bc6743dca827bf8f16263f8e4a57850bb05280e53514fd010fe889f4da1991246a781501aa090b49dee4c83318d05694dfe169d5f05b81c111e2c2aea", 0x9b}, {&(0x7f00000003c0)="d10298d3c0e54ffc0c5a7798366a6d67f8f122e9d8a6d60de6a77edcc1efd4f6173a772610b0327aca7042471a20f11ec6b0006b3b98d38ee0be4bc211351c588b62fec867a5acf8dcaf1be6580f6ae0a335965f3227ba6f0008a8b3ecd1c52cc6fef0dce58150e081444fe99a599cdd02dfc7955f596e42cf0c4a2b6ccd4be00b0ce02a809837a94d9b1ebcf6536c7c6e99f64122cf632eeffb7085693c1acc11fbbb2028e48c4b4238b52115c3df59792865ee55", 0xb5}, {&(0x7f0000000300)="2d01d5cefd65b3ee29edbef8904377a50cf4cc8ab148ee042dd6419374f0a58345d8c046166ac1c51cbe3ccb6c42617fe4488e855f3aadc7acf626bbd0ac9329cd9eee8c949273bfc7005917e2b4095acb6f61584b85d487", 0x58}], 0x6) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9, 0x6d, 0x5c, 0x40, 0x2304, 0x23e, 0xd769, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x37, 0x10, 0xeb}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$sndseq(r4, 0x0, 0x0) poll(&(0x7f0000000000)=[{r4, 0x8a}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x80000000, 0x0, 0x60, 0x8}) r5 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0xd, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xd9, 0x29}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0xfc, 0x10, 0x6, 0x20, 0x7}, 0x15, &(0x7f0000000540)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x2, 0xf00, 0x5, [0x3f00]}]}, 0x1, [{0xb6, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"]}]}) syz_usb_control_io$printer(r5, &(0x7f00000005c0)={0xc, &(0x7f0000000700)={0x0, 0x23, 0xf2, {0xf2, 0x5, "e7771b2196725cbaf71e5c0485b6ea179faa45c7918497620771eec2ddabe273bdda1b6ee9c1c5a4d6ac007a6165e86de4095db164dbbc25e480586bc0cdf37d53359f373eaea831127d5dab7a1fa5862b1a1a44f4efc6a09a38628e513fb75d3e6afb8c3015a594e01e6151e45486924f1ef395aaa985a47dd1ae28a282750296763db621f13927b656e012070c2e480fc5a6f7673c70bc8c7d2e44fde2279f146bd13035f570c14d110a88e0aa40ae0c47db282fa42d2f54ec8d820b909eda7a9d5cd6e28f831d52a898dc2896dcb6046071eb1db7398aef9c4999a4b8f81617f40cc33b6c3760805b867da210891c"}}, &(0x7f0000000880)=ANY=[@ANYBLOB="00039e000000073ddd0797b468f3083f0cfb6cd6ac98fdfe6d84d8dafc74e147b9d1a55cf011cd3e2add452f0832b9500cd6676d9ba4ea092cc2490ad7adbb6ed53f8a438d89c298ab7ee577a122ec830d0ba8f62a1dd8c04769a2367b1c40af95303d20e01d26637aac66416212096945f7c411d4ed1505c8120fc0b2818cbe61f806d0447bfe83ea689e36532481ef8a3a2eac8da6c26fd1f369de56"]}, &(0x7f0000000b00)={0x1c, &(0x7f0000000800)={0x20, 0x16, 0x1b, "40f5f6d74bfbc7c7b4d9baebe0718bd5b75580d48aeb1aa8adab96"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x59}, &(0x7f00000009c0)={0x20, 0x0, 0x89, {0x87, "1baf26cfe7155af04fa95658b010a6b814c6f90095682f3dfc13eb3f8ae1f205b7d09e491e0e87e3eac93bf42cadcb70c47bef9decaf6e95dae34992452f11b8b4fb865dcb3abd0193eea90065715d0d2809f46366a7e6b57d81f4910812f3165271142b2c5031ff97806eb0d9a289b5d02e99a99321e65351a33a944cb57ce66249cf01cc9b8f"}}, &(0x7f0000000a80)={0x20, 0x1, 0x1, 0x1f}, &(0x7f0000000ac0)={0x20, 0x0, 0x1, 0x9}}) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0x1}], 0x1, 0x5, 0xb2) syz_usb_control_io$uac1(r2, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0xe10, @private1={0xfc, 0x1, '\x00', 0x81}, 0x2e3}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b00"]) 1.514589215s ago: executing program 5 (id=773): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') syz_emit_ethernet(0x0, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x1e, 0x16800, 0x0, 0x0}, {0x6, 0x4001, 0x0, 0x0}], 0x2}) 1.101021259s ago: executing program 4 (id=774): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0xfffffffe, @private0}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x815) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "4eab2a1810f97e7b", "1e4617a52b69eff1cb9ad5cce3fb521c4bcad39a250cda7a5e8ea31d410cb56d", "a4e13d48", "00f58cc267fa5f34"}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x81) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x2, 0x81, 0xce50, 'syz1\x00', 0x9}, 0x0, [0x380, 0x10e8af, 0x1, 0xcc0, 0xe, 0x101, 0x80000001, 0xa6da, 0x2, 0x1, 0x9, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x40f, 0x80, 0x962, 0x2, 0x1, 0x400, 0x7fffffff, 0xc360, 0x80000001, 0x6, 0x60e3, 0xa12, 0x8, 0x10000, 0x7, 0x9, 0x107430, 0x2, 0x2, 0x609, 0x2419d8e8, 0x3, 0x8, 0x5, 0x8001, 0x8, 0x5, 0x1, 0x8, 0x0, 0x1, 0x4, 0x0, 0x4, 0x9000, 0xe93, 0x4, 0x7ff, 0x7, 0x81, 0x50a, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x4, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x3, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x8000, 0x9, 0x4, 0x7, 0xd, 0x7, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x4, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x5, 0x4, 0xe, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x6, 0xfffffff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xffffffff, 0x73938332, 0x7763]}) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f00000003c0)={0x8, 0x1000, "88ccc5daf80cd6a4471030967393bca9378705edf628163e", {0x7, 0x2}, 0x800}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x4, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {0x0, 0xffffffff}, {0x6}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0xf0f015, 0x4}) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) 969.129017ms ago: executing program 1 (id=775): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100e180, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) (fail_nth: 3) 421.705058ms ago: executing program 3 (id=776): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xe) ioctl$TIOCSBRK(r1, 0x5427) 12.930067ms ago: executing program 1 (id=777): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={0x0, 0x60}, 0x1, 0x400000000000000}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1c1900, 0x0) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680)) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101000) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0445624, &(0x7f0000000300)={0x980915, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0xd5a, 0x100000000, 0xfffffffffdfff003, 0x0, 0x9, 0x5, 0x2, 0x2, [0x9, 0x2, 0x0, 0xfffffffd]}) gettid() r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) unshare(0x20040600) unshare(0x24060400) shmctl$SHM_LOCK(r6, 0xb) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1) bind$can_j1939(r0, &(0x7f0000000300)={0x1d, r1, 0x2, {}, 0xc295a7c9ee09b05e}, 0x18) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2, {0x0, 0xff}, 0xfe}, 0x18) 0s ago: executing program 3 (id=778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x2710, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): dProduct=810a, bcdDevice=92.b8 [ 247.586633][ T7914] team0: Port device team_slave_0 added [ 247.589215][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.646643][ T7914] team0: Port device team_slave_1 added [ 247.659962][ T5916] usb 4-1: config 0 descriptor?? [ 247.705260][ T5916] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 247.717432][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 247.770721][ T5916] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 247.795755][ T5916] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 247.815888][ T5916] usb 4-1: media controller created [ 247.847193][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.849212][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.863034][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.898692][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.907937][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.914596][ T7914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.931499][ T8012] syz_tun: entered allmulticast mode [ 247.941157][ T8012] dvb-usb: bulk message failed: -22 (2/0) [ 247.951788][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.960105][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 247.969292][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.996371][ T7914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.996472][ T5916] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 248.017456][ T5916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 248.029196][ T5964] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 248.038233][ T5916] dvb-usb: schedule remote query interval to 150 msecs. [ 248.045894][ T5916] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 248.204884][ T5979] dvb-usb: bulk message failed: -22 (1/0) [ 248.211629][ T5979] dvb-usb: error while querying for an remote control event. [ 248.214382][ T5964] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 248.238313][ T5964] usb 5-1: config 0 has no interface number 0 [ 248.263070][ T5964] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 248.273573][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.281619][ T5964] usb 5-1: Product: syz [ 248.312008][ T5964] usb 5-1: Manufacturer: syz [ 248.318285][ T5964] usb 5-1: SerialNumber: syz [ 248.372502][ T5964] usb 5-1: config 0 descriptor?? [ 248.379648][ T5964] hub 5-1:0.217: bad descriptor, ignoring hub [ 248.393402][ T5964] hub 5-1:0.217: probe with driver hub failed with error -5 [ 248.394200][ T5979] dvb-usb: bulk message failed: -22 (1/0) [ 248.421407][ T5979] dvb-usb: error while querying for an remote control event. [ 248.428001][ T7914] hsr_slave_0: entered promiscuous mode [ 248.439844][ T7914] hsr_slave_1: entered promiscuous mode [ 248.450590][ T7914] debugfs: 'hsr0' already exists in 'hsr' [ 248.456635][ T5148] Bluetooth: hci2: command tx timeout [ 248.463037][ T7914] Cannot create hsr debugfs directory [ 248.581761][ T8019] dvb-usb: bulk message failed: -22 (3/0) [ 248.592946][ T5979] dvb-usb: bulk message failed: -22 (1/0) [ 248.595966][ T5964] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 248.648832][ T5964] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 248.652606][ T5979] dvb-usb: error while querying for an remote control event. [ 248.664771][ T5964] dib0700: firmware download failed at 7 with -22 [ 248.705826][ T8033] input: syz0 as /devices/virtual/input/input22 [ 248.733010][ T5964] usb 5-1: USB disconnect, device number 30 [ 248.742158][ T8012] syz_tun: left allmulticast mode [ 248.790356][ T983] usb 4-1: USB disconnect, device number 16 [ 249.010640][ T983] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 249.091437][ T8041] FAULT_INJECTION: forcing a failure. [ 249.091437][ T8041] name failslab, interval 1, probability 0, space 0, times 0 [ 249.145422][ T8041] CPU: 1 UID: 0 PID: 8041 Comm: syz.3.504 Not tainted syzkaller #0 PREEMPT(full) [ 249.145454][ T8041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.145473][ T8041] Call Trace: [ 249.145480][ T8041] [ 249.145487][ T8041] dump_stack_lvl+0x189/0x250 [ 249.145509][ T8041] ? __pfx____ratelimit+0x10/0x10 [ 249.145533][ T8041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.145550][ T8041] ? __pfx__printk+0x10/0x10 [ 249.145579][ T8041] ? __pfx___might_resched+0x10/0x10 [ 249.145604][ T8041] should_fail_ex+0x414/0x560 [ 249.145632][ T8041] should_failslab+0xa8/0x100 [ 249.145654][ T8041] __kmalloc_noprof+0xcb/0x7f0 [ 249.145671][ T8041] ? kfree+0x4d/0x6d0 [ 249.145683][ T8041] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 249.145706][ T8041] tomoyo_realpath_from_path+0xe3/0x5d0 [ 249.145726][ T8041] ? tomoyo_domain+0xd9/0x130 [ 249.145748][ T8041] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 249.145772][ T8041] tomoyo_path_number_perm+0x1e8/0x5a0 [ 249.145798][ T8041] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 249.145847][ T8041] ? __lock_acquire+0xab9/0xd20 [ 249.145882][ T8041] ? __fget_files+0x2a/0x420 [ 249.145905][ T8041] ? __fget_files+0x3a0/0x420 [ 249.145928][ T8041] ? __fget_files+0x2a/0x420 [ 249.145950][ T8041] security_file_ioctl_compat+0xcb/0x2d0 [ 249.145975][ T8041] __ia32_compat_sys_ioctl+0x128/0x840 [ 249.145993][ T8041] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 249.146008][ T8041] ? __fget_files+0x3a0/0x420 [ 249.146032][ T8041] ? fput+0xa0/0xd0 [ 249.146054][ T8041] ? ksys_write+0x22a/0x250 [ 249.146068][ T8041] ? exc_page_fault+0x82/0x100 [ 249.146084][ T8041] ? __pfx_ksys_write+0x10/0x10 [ 249.146102][ T8041] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 249.146119][ T8041] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.146137][ T8041] __do_fast_syscall_32+0xb6/0x2b0 [ 249.146154][ T8041] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.146172][ T8041] do_fast_syscall_32+0x34/0x80 [ 249.146188][ T8041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.146207][ T8041] RIP: 0023:0xf702d539 [ 249.146221][ T8041] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 249.146235][ T8041] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 249.146251][ T8041] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c06 [ 249.146262][ T8041] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.146271][ T8041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.146279][ T8041] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 249.146288][ T8041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.146311][ T8041] [ 249.146318][ T8041] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.948318][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 250.003264][ T8051] syz.3.508 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 250.042186][ T5916] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 250.092670][ T30] audit: type=1326 audit(1760372726.454:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.4.509" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x0 [ 250.205225][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.233220][ T30] audit: type=1326 audit(1760372726.604:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.3.510" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 250.265180][ T7914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 250.272339][ T5916] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 250.281403][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.296810][ T7914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 250.323288][ T5916] usb 2-1: config 0 descriptor?? [ 250.334464][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 250.344778][ T7914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 250.361214][ T7914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 250.520755][ T7914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.552276][ T983] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 250.562973][ T7914] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.580910][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.588139][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.609509][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.616778][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.652058][ T5979] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 250.704814][ T5964] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 250.730836][ T983] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 250.739273][ T7914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.753588][ T983] usb 5-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 250.774678][ T983] usb 5-1: config 0 has no interface number 0 [ 250.780841][ T983] usb 5-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 250.782223][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 250.813993][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 250.818174][ T983] usb 5-1: config 0 interface 20 altsetting 119 has an endpoint descriptor with address 0x6E, changing to 0xE [ 250.833733][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 250.844910][ T5979] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 250.845192][ T983] usb 5-1: config 0 interface 20 altsetting 119 endpoint 0xE has invalid maxpacket 56345, setting to 64 [ 250.856639][ T5979] usb 1-1: config 0 has no interface number 0 [ 250.870763][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 250.879246][ T7914] veth0_vlan: entered promiscuous mode [ 250.885569][ T983] usb 5-1: config 0 interface 20 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 250.886659][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 250.901256][ T983] usb 5-1: config 0 interface 20 has no altsetting 0 [ 250.917290][ T5979] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 250.927473][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.928196][ T983] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 250.936847][ T7914] veth1_vlan: entered promiscuous mode [ 250.950993][ T5964] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 250.955647][ T5979] usb 1-1: Product: syz [ 250.965030][ T5916] pwc: recv_control_msg error -32 req 04 val 1400 [ 250.972593][ T5964] usb 4-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 250.974791][ T5916] pwc: recv_control_msg error -32 req 02 val 2000 [ 250.992316][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.992447][ T5979] usb 1-1: Manufacturer: syz [ 251.000633][ T5964] usb 4-1: config 0 has no interface number 0 [ 251.012071][ T5916] pwc: recv_control_msg error -32 req 02 val 2100 [ 251.018726][ T983] usb 5-1: Product: syz [ 251.019939][ T5979] usb 1-1: SerialNumber: syz [ 251.030213][ T983] usb 5-1: Manufacturer: syz [ 251.032333][ T5916] pwc: recv_control_msg error -32 req 04 val 1500 [ 251.042438][ T5964] usb 4-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 251.054045][ T5916] pwc: recv_control_msg error -32 req 02 val 2500 [ 251.054603][ T983] usb 5-1: SerialNumber: syz [ 251.082941][ T5916] pwc: recv_control_msg error -32 req 02 val 2400 [ 251.084610][ T5964] usb 4-1: config 0 interface 20 altsetting 119 has an endpoint descriptor with address 0x6E, changing to 0xE [ 251.096820][ T7914] veth0_macvtap: entered promiscuous mode [ 251.109889][ T5979] usb 1-1: config 0 descriptor?? [ 251.117081][ T983] usb 5-1: config 0 descriptor?? [ 251.129549][ T5964] usb 4-1: config 0 interface 20 altsetting 119 endpoint 0xE has invalid maxpacket 56345, setting to 64 [ 251.129888][ T5979] hub 1-1:0.217: bad descriptor, ignoring hub [ 251.141513][ T5964] usb 4-1: config 0 interface 20 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 251.148024][ T8059] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 251.175996][ T7914] veth1_macvtap: entered promiscuous mode [ 251.184619][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 251.199391][ T5979] hub 1-1:0.217: probe with driver hub failed with error -5 [ 251.208839][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 251.221593][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 251.241086][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 251.251153][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.269584][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 251.271337][ T5964] usb 4-1: config 0 interface 20 has no altsetting 0 [ 251.305226][ T5964] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 251.306509][ T5916] pwc: Registered as video103. [ 251.315088][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.315116][ T5964] usb 4-1: Product: syz [ 251.315132][ T5964] usb 4-1: Manufacturer: syz [ 251.315150][ T5964] usb 4-1: SerialNumber: syz [ 251.321112][ T5964] usb 4-1: config 0 descriptor?? [ 251.351252][ T5979] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 251.365769][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.388609][ T5979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 251.400587][ T3542] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.410678][ T8071] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 251.426414][ T8059] netlink: 41 bytes leftover after parsing attributes in process `syz.4.509'. [ 251.432242][ T3542] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.447158][ T5979] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 251.456681][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 251.469332][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 251.485101][ T5979] usb 1-1: media controller created [ 251.523470][ T3542] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.524662][ T5916] usb 2-1: USB disconnect, device number 28 [ 251.576205][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.609585][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.619303][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.640957][ T3542] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.720346][ T8071] netlink: 41 bytes leftover after parsing attributes in process `syz.3.510'. [ 251.753957][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 251.801029][ T5979] DVB: Unable to find symbol dib7000p_attach() [ 251.822279][ T5979] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 252.295406][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.316409][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.325640][ T5979] rc_core: IR keymap rc-dib0700-rc5 not found [ 252.337616][ T5979] Registered IR keymap rc-empty [ 252.349672][ T5979] dvb-usb: could not initialize remote control. [ 252.368075][ T5979] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 252.419030][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.430642][ T5979] usb 1-1: USB disconnect, device number 36 [ 252.438289][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.544333][ T5979] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 253.052599][ T983] keyspan 5-1:0.20: Keyspan 1 port adapter converter detected [ 253.060697][ T983] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 87 [ 253.069785][ T983] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 7 [ 253.083809][ T983] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 81 [ 253.102088][ T983] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 1 [ 253.109895][ T983] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 2 [ 253.118610][ T983] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 85 [ 253.126606][ T983] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 5 [ 253.137632][ T983] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 253.159149][ T983] usb 5-1: USB disconnect, device number 31 [ 253.178132][ T983] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 253.189409][ T983] keyspan 5-1:0.20: device disconnected [ 253.203928][ T5979] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 253.232373][ T5840] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 253.284317][ T5964] keyspan 4-1:0.20: Keyspan 1 port adapter converter detected [ 253.309768][ T5964] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 87 [ 253.335680][ T5964] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 7 [ 253.353491][ T5964] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 81 [ 253.368889][ T5964] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 1 [ 253.382415][ T5979] usb 2-1: Using ep0 maxpacket: 8 [ 253.387563][ T5840] usb 1-1: Using ep0 maxpacket: 16 [ 253.397175][ T5979] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 253.408641][ T5964] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 2 [ 253.414227][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.428684][ T5979] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 253.432253][ T5964] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 85 [ 253.448910][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.463174][ T5979] usb 2-1: config 0 has no interface number 0 [ 253.469613][ T5979] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 253.470256][ T5964] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 5 [ 253.481330][ T5840] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 253.481360][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.484717][ T5840] usb 1-1: config 0 descriptor?? [ 253.517212][ T5979] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 253.538624][ T5979] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.553359][ T5964] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 253.565962][ T5979] usb 2-1: config 0 interface 52 has no altsetting 0 [ 253.589201][ T5964] usb 4-1: USB disconnect, device number 17 [ 253.647065][ T5964] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 253.686014][ T5964] keyspan 4-1:0.20: device disconnected [ 253.731339][ T5979] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 253.744754][ T983] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 253.752251][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 253.752305][ T5979] usb 2-1: Product: syz [ 253.752322][ T5979] usb 2-1: SerialNumber: syz [ 253.793557][ T5979] usb 2-1: config 0 descriptor?? [ 253.986003][ T983] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 253.996966][ T983] usb 6-1: config 0 has no interface number 0 [ 254.007004][ T5840] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 254.113641][ T983] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 254.118968][ T5979] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input25 [ 254.133769][ T5840] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 254.141530][ T5840] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 254.148601][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.148629][ T983] usb 6-1: Product: syz [ 254.148646][ T983] usb 6-1: Manufacturer: syz [ 254.148662][ T983] usb 6-1: SerialNumber: syz [ 254.152206][ T983] usb 6-1: config 0 descriptor?? [ 254.165947][ T5840] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 254.199175][ T5840] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 254.491706][ T983] hub 6-1:0.217: bad descriptor, ignoring hub [ 254.500558][ T983] hub 6-1:0.217: probe with driver hub failed with error -5 [ 254.568001][ T5840] appleir 0003:05AC:8241.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 254.697283][ T983] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 254.738855][ T983] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 255.152333][ T983] dib0700: firmware download failed at 7 with -22 [ 255.253308][ T983] usb 6-1: USB disconnect, device number 2 [ 255.932496][ T5964] usb 1-1: reset high-speed USB device number 37 using dummy_hcd [ 255.977973][ T5914] usb 2-1: USB disconnect, device number 29 [ 255.977993][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 256.110815][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 256.152784][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 256.217121][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 256.272091][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 256.283600][ T8141] syzkaller0: entered promiscuous mode [ 256.289120][ T8141] syzkaller0: entered allmulticast mode [ 256.307652][ T30] audit: type=1326 audit(1760372732.684:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.0.526" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 256.398092][ T30] audit: type=1326 audit(1760372732.724:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 256.422978][ T30] audit: type=1326 audit(1760372732.724:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 256.447916][ T30] audit: type=1326 audit(1760372732.724:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d558 code=0x7ffc0000 [ 256.470664][ T30] audit: type=1326 audit(1760372732.724:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 256.508226][ T24] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 256.529686][ T24] usb 6-1: config 0 has no interface number 0 [ 256.544176][ T30] audit: type=1326 audit(1760372732.724:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d558 code=0x7ffc0000 [ 256.579526][ T24] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 256.589130][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.602391][ T24] usb 6-1: Product: syz [ 256.606663][ T30] audit: type=1326 audit(1760372732.724:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d558 code=0x7ffc0000 [ 256.631954][ T24] usb 6-1: Manufacturer: syz [ 256.638028][ T24] usb 6-1: SerialNumber: syz [ 256.649993][ T24] usb 6-1: config 0 descriptor?? [ 256.667257][ T24] hub 6-1:0.217: bad descriptor, ignoring hub [ 256.674016][ T24] hub 6-1:0.217: probe with driver hub failed with error -5 [ 256.676572][ T30] audit: type=1326 audit(1760372732.724:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d558 code=0x7ffc0000 [ 256.705105][ T30] audit: type=1326 audit(1760372732.724:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d558 code=0x7ffc0000 [ 256.846342][ T983] usb 1-1: USB disconnect, device number 37 [ 256.876756][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 256.912236][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.918396][ T30] audit: type=1326 audit(1760372732.724:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d558 code=0x7ffc0000 [ 256.961481][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 257.002051][ T24] usb 6-1: media controller created [ 257.043018][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.120740][ T983] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 257.132121][ T8158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.140942][ T8158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.309381][ T24] DVB: Unable to find symbol dib7000p_attach() [ 257.320231][ T983] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 257.430263][ T983] usb 1-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 257.443851][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 257.493731][ T983] usb 1-1: config 0 has no interface number 0 [ 257.499897][ T983] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 257.587179][ T983] usb 1-1: config 0 interface 20 altsetting 119 has an endpoint descriptor with address 0x6E, changing to 0xE [ 257.600444][ T983] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0xE has invalid maxpacket 56345, setting to 64 [ 257.619907][ T983] usb 1-1: config 0 interface 20 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 257.640192][ T983] usb 1-1: config 0 interface 20 has no altsetting 0 [ 257.647057][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 257.659683][ T24] Registered IR keymap rc-empty [ 257.665142][ T24] dvb-usb: could not initialize remote control. [ 257.679089][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 257.698287][ T983] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 257.718705][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.731477][ T24] usb 6-1: USB disconnect, device number 3 [ 257.738125][ T983] usb 1-1: Product: syz [ 257.802346][ T983] usb 1-1: Manufacturer: syz [ 257.822128][ T983] usb 1-1: SerialNumber: syz [ 257.860840][ T983] usb 1-1: config 0 descriptor?? [ 257.872684][ T8149] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 257.894732][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 258.106365][ T8149] netlink: 41 bytes leftover after parsing attributes in process `syz.0.526'. [ 258.129019][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 258.494861][ T8175] netlink: 71 bytes leftover after parsing attributes in process `syz.5.531'. [ 258.592293][ T5840] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 258.754200][ T5840] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 258.776778][ T5840] usb 5-1: config 0 has no interface number 0 [ 258.810595][ T5840] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 258.857450][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.892626][ T5840] usb 5-1: Product: syz [ 258.920289][ T5840] usb 5-1: Manufacturer: syz [ 258.992017][ T5840] usb 5-1: SerialNumber: syz [ 259.039068][ T5840] usb 5-1: config 0 descriptor?? [ 259.058979][ T5840] hub 5-1:0.217: bad descriptor, ignoring hub [ 259.077656][ T5840] hub 5-1:0.217: probe with driver hub failed with error -5 [ 259.281175][ T5840] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 259.380263][ T5840] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 259.397811][ T5840] dib0700: firmware download failed at 7 with -22 [ 259.453993][ T5840] usb 5-1: USB disconnect, device number 32 [ 259.480337][ T983] keyspan 1-1:0.20: Keyspan 1 port adapter converter detected [ 259.515036][ T983] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 87 [ 259.549517][ T983] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 7 [ 259.596673][ T983] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 81 [ 259.666766][ T983] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 1 [ 259.676194][ T983] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 2 [ 259.684246][ T983] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 85 [ 259.692791][ T983] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 5 [ 259.705366][ T983] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 259.757650][ T983] usb 1-1: USB disconnect, device number 38 [ 259.843715][ T983] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 259.868900][ T983] keyspan 1-1:0.20: device disconnected [ 260.212098][ T983] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 260.378744][ T983] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.389135][ T983] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 260.403949][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.432101][ T983] usb 1-1: config 0 descriptor?? [ 260.443212][ T983] pwc: Askey VC010 type 2 USB webcam detected. [ 260.769341][ T8182] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 260.800758][ T8182] batman_adv: batadv0: Adding interface: ip6gretap1 [ 260.809515][ T8182] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.835161][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.848460][ T8182] batman_adv: batadv0: Interface activated: ip6gretap1 [ 261.008051][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.014913][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.122588][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.135078][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.226389][ T8199] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 261.236480][ T8199] block device autoloading is deprecated and will be removed. [ 261.260945][ T983] pwc: recv_control_msg error -71 req 02 val 2700 [ 261.282479][ T983] pwc: recv_control_msg error -71 req 02 val 2c00 [ 261.299224][ T983] pwc: recv_control_msg error -71 req 04 val 1000 [ 261.331312][ T983] pwc: recv_control_msg error -71 req 04 val 1300 [ 261.349179][ T983] pwc: recv_control_msg error -71 req 04 val 1400 [ 261.368794][ T983] pwc: recv_control_msg error -71 req 02 val 2000 [ 261.422224][ T983] pwc: recv_control_msg error -71 req 02 val 2100 [ 261.453432][ T983] pwc: recv_control_msg error -71 req 04 val 1500 [ 261.541644][ T983] pwc: recv_control_msg error -71 req 02 val 2500 [ 261.604436][ T983] pwc: recv_control_msg error -71 req 02 val 2400 [ 261.684689][ T983] pwc: recv_control_msg error -71 req 02 val 2600 [ 261.822708][ T983] pwc: recv_control_msg error -71 req 02 val 2900 [ 261.904084][ T983] pwc: recv_control_msg error -71 req 02 val 2800 [ 261.942143][ T983] pwc: recv_control_msg error -71 req 04 val 1100 [ 262.032942][ T983] pwc: recv_control_msg error -71 req 04 val 1200 [ 262.084606][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 262.109032][ T983] pwc: Registered as video103. [ 262.146307][ T983] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 262.236455][ T983] usb 1-1: USB disconnect, device number 39 [ 262.316860][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 262.316879][ T30] audit: type=1326 audit(1760372738.694:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8215 comm="syz.5.543" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x0 [ 262.354606][ T5889] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 262.522461][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 262.537991][ T5889] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.546366][ T5889] usb 4-1: config 0 has no interface number 0 [ 262.560917][ T5889] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 262.586155][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.597757][ T5889] usb 4-1: Product: syz [ 262.607921][ T5889] usb 4-1: Manufacturer: syz [ 262.618425][ T5889] usb 4-1: SerialNumber: syz [ 262.647526][ T5889] usb 4-1: config 0 descriptor?? [ 262.661289][ T5889] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 262.674538][ T5889] usb 4-1: selecting invalid altsetting 1 [ 262.680735][ T5889] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 262.789908][ T5889] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 262.831732][ T5889] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 262.840498][ T983] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 262.878373][ T5889] usb 4-1: media controller created [ 263.027165][ T983] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 263.040675][ T983] usb 6-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 263.107650][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.120584][ T983] usb 6-1: config 0 has no interface number 0 [ 263.141194][ T983] usb 6-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 263.226354][ T983] usb 6-1: config 0 interface 20 altsetting 119 has an endpoint descriptor with address 0x6E, changing to 0xE [ 263.305047][ T983] usb 6-1: config 0 interface 20 altsetting 119 endpoint 0xE has invalid maxpacket 56345, setting to 64 [ 263.352768][ T983] usb 6-1: config 0 interface 20 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 263.523246][ T983] usb 6-1: config 0 interface 20 has no altsetting 0 [ 263.555502][ T983] usb 6-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 263.566197][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.633840][ T983] usb 6-1: Product: syz [ 263.662129][ T983] usb 6-1: Manufacturer: syz [ 263.686898][ T983] usb 6-1: SerialNumber: syz [ 263.713001][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 263.744361][ T983] usb 6-1: config 0 descriptor?? [ 263.793515][ T8226] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 263.888328][ T10] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 263.900024][ T10] usb 2-1: config 0 has no interface number 0 [ 263.944200][ T10] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 263.984716][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.012006][ T10] usb 2-1: Product: syz [ 264.023340][ T10] usb 2-1: Manufacturer: syz [ 264.032786][ T8226] netlink: 41 bytes leftover after parsing attributes in process `syz.5.543'. [ 264.042188][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.543'. [ 264.138416][ T10] usb 2-1: SerialNumber: syz [ 264.189832][ T10] usb 2-1: config 0 descriptor?? [ 264.211061][ T10] hub 2-1:0.217: bad descriptor, ignoring hub [ 264.217918][ T10] hub 2-1:0.217: probe with driver hub failed with error -5 [ 264.282366][ T5889] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 264.339038][ T5889] zl10353_read_register: readreg error (reg=127, ret==-110) [ 264.423695][ T8237] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 264.455316][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 264.617157][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 264.675301][ T10] dib0700: firmware download failed at 7 with -22 [ 264.764572][ T5889] usb 4-1: USB disconnect, device number 18 [ 264.837885][ T10] usb 2-1: USB disconnect, device number 30 [ 265.312483][ T983] keyspan 6-1:0.20: Keyspan 1 port adapter converter detected [ 265.320288][ T983] keyspan 6-1:0.20: found no endpoint descriptor for endpoint 87 [ 265.366102][ T983] keyspan 6-1:0.20: found no endpoint descriptor for endpoint 7 [ 265.390132][ T983] keyspan 6-1:0.20: found no endpoint descriptor for endpoint 81 [ 265.408102][ T983] keyspan 6-1:0.20: found no endpoint descriptor for endpoint 1 [ 265.416388][ T5889] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 265.480449][ T983] keyspan 6-1:0.20: found no endpoint descriptor for endpoint 2 [ 265.514160][ T983] keyspan 6-1:0.20: found no endpoint descriptor for endpoint 85 [ 265.533581][ T983] keyspan 6-1:0.20: found no endpoint descriptor for endpoint 5 [ 265.568019][ T983] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 265.576204][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 265.584674][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.603137][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 265.650934][ T983] usb 6-1: USB disconnect, device number 4 [ 265.668270][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 265.693412][ T5889] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 265.714861][ T983] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 265.736829][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.755203][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 265.756503][ T983] keyspan 6-1:0.20: device disconnected [ 265.806599][ T5889] usb 4-1: config 0 descriptor?? [ 265.826558][ T8251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 265.840636][ T5889] hub 4-1:0.0: USB hub found [ 265.936341][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 265.966069][ T10] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 266.010199][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.039211][ T5889] hub 4-1:0.0: 2 ports detected [ 266.052367][ T10] usb 2-1: Product: syz [ 266.070568][ T10] usb 2-1: Manufacturer: syz [ 266.095934][ T10] usb 2-1: SerialNumber: syz [ 266.121154][ T10] usb 2-1: config 0 descriptor?? [ 266.159046][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 266.191376][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 266.224006][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.242454][ T5889] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 266.249603][ T5889] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 266.284823][ T5889] usbhid 4-1:0.0: can't add hid device: -71 [ 266.293852][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 266.298673][ T5889] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 266.324821][ T5840] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 266.332908][ T10] usb 2-1: media controller created [ 266.366472][ T5889] usb 4-1: USB disconnect, device number 19 [ 266.381309][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.506647][ T5840] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 266.524025][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.532181][ T5840] usb 5-1: config 5 has no interface number 0 [ 266.533050][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.538553][ T5840] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 266.643113][ T5840] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 266.663309][ T5840] usb 5-1: config 5 interface 123 has no altsetting 0 [ 266.683870][ T5840] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 266.690257][ T8281] netlink: 71 bytes leftover after parsing attributes in process `syz.5.551'. [ 266.693233][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.713794][ T5840] usb 5-1: Product: syz [ 266.718672][ T5840] usb 5-1: Manufacturer: syz [ 266.725429][ T5840] usb 5-1: SerialNumber: syz [ 266.971393][ T8287] netlink: 71 bytes leftover after parsing attributes in process `syz.5.552'. [ 268.397737][ T10] cxusb: set interface failed [ 268.416529][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 268.715742][ T10] DVB: Unable to find symbol mt352_attach() [ 268.812073][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 269.185019][ T10] rc_core: IR keymap rc-dvico-portable not found [ 269.223299][ T5840] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 269.233941][ T10] Registered IR keymap rc-empty [ 269.258220][ T10] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 269.281398][ T5840] usb 5-1: USB disconnect, device number 33 [ 269.316211][ T10] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input28 [ 269.411299][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 269.446516][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 269.514972][ T10] usb 2-1: USB disconnect, device number 31 [ 269.798739][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 269.856064][ T8334] netlink: 71 bytes leftover after parsing attributes in process `syz.0.562'. [ 270.106789][ T8321] usb usb8: usbfs: process 8321 (syz.5.558) did not claim interface 0 before use [ 270.344195][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 270.367232][ T8347] netlink: 277 bytes leftover after parsing attributes in process `syz.4.563'. [ 270.376626][ T8347] netlink: 277 bytes leftover after parsing attributes in process `syz.4.563'. [ 271.422190][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 271.653232][ T10] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 271.682582][ T10] usb 1-1: config 0 has no interface number 0 [ 271.696919][ T10] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 271.729462][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.757902][ T10] usb 1-1: Product: syz [ 271.772465][ T10] usb 1-1: Manufacturer: syz [ 271.777109][ T10] usb 1-1: SerialNumber: syz [ 271.847220][ T10] usb 1-1: config 0 descriptor?? [ 271.896112][ T10] hub 1-1:0.217: bad descriptor, ignoring hub [ 271.939663][ T10] hub 1-1:0.217: probe with driver hub failed with error -5 [ 272.108677][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 272.143151][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 272.198309][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.569'. [ 272.364435][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 272.378261][ T10] usb 1-1: media controller created [ 272.401035][ T8365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.484768][ T8365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.607985][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.723324][ T10] DVB: Unable to find symbol dib7000p_attach() [ 272.763158][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 272.892208][ T5979] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 273.022420][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 273.028535][ T10] Registered IR keymap rc-empty [ 273.073723][ T5979] usb 2-1: config index 0 descriptor too short (expected 61256, got 72) [ 273.101741][ T5979] usb 2-1: config 1 has an invalid interface number: 0 but max is -1 [ 273.177689][ T10] dvb-usb: could not initialize remote control. [ 273.244433][ T5979] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.260711][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 273.279333][ T5979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 273.380014][ T10] usb 1-1: USB disconnect, device number 40 [ 273.399992][ T5979] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 273.515236][ T5979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.540113][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 273.552947][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 273.563349][ T5979] usb 2-1: SerialNumber: syz [ 273.581077][ T5979] cdc_acm 2-1:1.0: skipping garbage [ 273.586855][ T5979] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 273.600066][ T5979] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 273.607445][ T5979] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 273.681172][ T8379] input: syz1 as /devices/virtual/input/input30 [ 273.802190][ T8367] fuse: Bad value for 'rootmode' [ 273.813251][ T10] usb 2-1: USB disconnect, device number 32 [ 273.971353][ T8387] netlink: 71 bytes leftover after parsing attributes in process `syz.4.575'. [ 274.302558][ T5889] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 275.091019][ T5889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 275.122725][ T5889] usb 6-1: config index 0 descriptor too short (expected 12592, got 95) [ 275.146867][ T5889] usb 6-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 275.165823][ T5889] usb 6-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 275.201847][ T5889] usb 6-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 275.229906][ T5889] usb 6-1: config index 1 descriptor too short (expected 12592, got 95) [ 275.244697][ T5889] usb 6-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 275.272195][ T5889] usb 6-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 275.314974][ T5889] usb 6-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 275.348839][ T5889] usb 6-1: config index 2 descriptor too short (expected 12592, got 95) [ 275.366770][ T5889] usb 6-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 275.391480][ T5889] usb 6-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 275.425097][ T5889] usb 6-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 275.453207][ T5889] usb 6-1: config index 3 descriptor too short (expected 12592, got 95) [ 275.468406][ T5889] usb 6-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 275.502313][ T5889] usb 6-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 275.558890][ T5889] usb 6-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 275.603217][ T5889] usb 6-1: config index 4 descriptor too short (expected 12592, got 95) [ 275.628573][ T5889] usb 6-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 275.683437][ T5889] usb 6-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 275.740079][ T5889] usb 6-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 275.795697][ T5889] usb 6-1: string descriptor 0 read error: -22 [ 275.825045][ T5889] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.867387][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.258731][ T5889] usb 6-1: USB disconnect, device number 5 [ 277.089120][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 277.370561][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 277.559547][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 277.585336][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 277.594070][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.612112][ T24] usb 2-1: config 0 has no interface number 0 [ 277.633497][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 277.652186][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.680815][ T24] usb 2-1: Product: syz [ 277.701140][ T24] usb 2-1: Manufacturer: syz [ 277.711331][ T24] usb 2-1: SerialNumber: syz [ 277.837252][ T24] usb 2-1: config 0 descriptor?? [ 277.854780][ T24] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 277.871997][ T24] usb 2-1: selecting invalid altsetting 1 [ 277.879093][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 277.892016][ T983] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 277.923280][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 277.947987][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 277.966524][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 277.986913][ T24] usb 2-1: media controller created [ 278.024708][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.073418][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 278.134462][ T983] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.153691][ T983] usb 4-1: config 0 has no interface number 0 [ 278.211505][ T983] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 278.221050][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.229688][ T983] usb 4-1: Product: syz [ 278.234798][ T983] usb 4-1: Manufacturer: syz [ 278.239512][ T983] usb 4-1: SerialNumber: syz [ 278.257788][ T983] usb 4-1: config 0 descriptor?? [ 278.268231][ T983] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 278.278096][ T10] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 278.295783][ T983] usb 4-1: selecting invalid altsetting 1 [ 278.301771][ T983] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 278.375946][ T983] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 278.411459][ T983] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 278.450483][ T10] usb 6-1: config 0 has no interface number 0 [ 278.478113][ T983] usb 4-1: media controller created [ 278.501543][ T10] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 278.584676][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.605122][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.684568][ T10] usb 6-1: Product: syz [ 278.697441][ T10] usb 6-1: Manufacturer: syz [ 278.722794][ T10] usb 6-1: SerialNumber: syz [ 278.778700][ T10] usb 6-1: config 0 descriptor?? [ 278.819221][ T10] hub 6-1:0.217: bad descriptor, ignoring hub [ 278.826439][ T10] hub 6-1:0.217: probe with driver hub failed with error -5 [ 279.087133][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 279.211813][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 279.249899][ T10] dib0700: firmware download failed at 7 with -22 [ 279.249962][ T24] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 279.370459][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 279.514018][ T8430] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 279.576603][ T5916] IPVS: starting estimator thread 0... [ 279.579675][ T8436] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 279.632573][ T5979] usb 6-1: USB disconnect, device number 6 [ 279.672360][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 279.672480][ T8438] IPVS: using max 36 ests per chain, 86400 per kthread [ 279.802588][ T983] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 279.809893][ T983] zl10353_read_register: readreg error (reg=127, ret==-110) [ 279.953328][ T10] usb 5-1: device descriptor read/64, error -71 [ 280.048876][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 280.209304][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 280.372602][ T10] usb 5-1: device descriptor read/64, error -71 [ 280.507816][ T30] audit: type=1326 audit(1760372756.884:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 280.562049][ T983] usb 4-1: USB disconnect, device number 20 [ 280.571081][ T10] usb usb5-port1: attempt power cycle [ 280.583189][ T24] usb 2-1: USB disconnect, device number 33 [ 280.652060][ T30] audit: type=1326 audit(1760372756.884:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f97558 code=0x7ffc0000 [ 280.710959][ T30] audit: type=1326 audit(1760372756.884:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f97558 code=0x7ffc0000 [ 280.742168][ T5889] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 280.758921][ T30] audit: type=1326 audit(1760372756.884:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 280.842633][ T8450] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 280.873664][ T30] audit: type=1326 audit(1760372756.884:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 280.902023][ T30] audit: type=1326 audit(1760372756.884:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 280.924732][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 280.939123][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.952190][ T30] audit: type=1326 audit(1760372756.884:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f97558 code=0x7ffc0000 [ 280.993584][ T5889] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 281.003238][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.021952][ T30] audit: type=1326 audit(1760372756.884:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 281.021996][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 281.044037][ T5889] usb 1-1: Product: syz [ 281.085326][ T5889] usb 1-1: Manufacturer: syz [ 281.102327][ T5889] usb 1-1: SerialNumber: syz [ 281.125213][ T30] audit: type=1326 audit(1760372756.884:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f97558 code=0x7ffc0000 [ 281.152941][ T5889] usb 1-1: config 0 descriptor?? [ 281.176719][ T10] usb 5-1: device descriptor read/8, error -71 [ 281.215351][ T5889] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 281.252016][ T5889] usb 1-1: selecting invalid altsetting 1 [ 281.262014][ T30] audit: type=1326 audit(1760372756.884:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.5.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f97558 code=0x7ffc0000 [ 281.411346][ T8446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.423107][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 281.437981][ T8446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.455428][ T8446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.470711][ T10] usb 5-1: device descriptor read/8, error -71 [ 281.483525][ T8446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.493798][ T5889] gspca_stk014: reg_r err -71 [ 281.499293][ T5889] stk014 1-1:0.0: probe with driver stk014 failed with error -71 [ 281.522614][ T5979] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 281.552991][ T5889] usb 1-1: USB disconnect, device number 41 [ 281.593026][ T10] usb usb5-port1: unable to enumerate USB device [ 281.684430][ T5979] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 281.693101][ T5979] usb 2-1: config 0 has no interface number 0 [ 281.701615][ T5979] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 281.711862][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.720195][ T5979] usb 2-1: Product: syz [ 281.724948][ T5979] usb 2-1: Manufacturer: syz [ 281.729579][ T5979] usb 2-1: SerialNumber: syz [ 281.740638][ T5979] usb 2-1: config 0 descriptor?? [ 281.753973][ T5979] hub 2-1:0.217: bad descriptor, ignoring hub [ 281.760366][ T5979] hub 2-1:0.217: probe with driver hub failed with error -5 [ 281.922011][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 281.949934][ T5979] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 281.968507][ T5979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 281.982397][ T5979] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 281.990992][ T5979] usb 2-1: media controller created [ 282.019913][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.095048][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 282.108985][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 282.130173][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.145021][ T24] usb 6-1: Product: syz [ 282.145179][ T5979] DVB: Unable to find symbol dib7000p_attach() [ 282.149309][ T24] usb 6-1: Manufacturer: syz [ 282.163296][ T24] usb 6-1: SerialNumber: syz [ 282.167015][ T5979] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 282.171223][ T24] usb 6-1: config 0 descriptor?? [ 282.189381][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 282.322479][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.322849][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.592589][ T5979] rc_core: IR keymap rc-dib0700-rc5 not found [ 282.598783][ T5979] Registered IR keymap rc-empty [ 282.604339][ T5979] dvb-usb: could not initialize remote control. [ 282.610721][ T5979] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 282.675816][ T8459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.703411][ T8459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.730291][ T24] gspca_sn9c2028: read1 error -71 [ 282.739759][ T24] gspca_sn9c2028: read1 error -71 [ 282.747551][ T5979] usb 2-1: USB disconnect, device number 34 [ 282.750815][ T24] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 282.768770][ T24] usb 6-1: USB disconnect, device number 7 [ 282.881376][ T5979] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 283.152021][ T5916] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 283.309158][ T5916] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 283.332294][ T5916] usb 5-1: config 0 has no interface number 0 [ 283.349400][ T5916] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 283.373488][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.415747][ T5916] usb 5-1: Product: syz [ 283.419971][ T5916] usb 5-1: Manufacturer: syz [ 283.443254][ T5916] usb 5-1: SerialNumber: syz [ 283.467139][ T5916] usb 5-1: config 0 descriptor?? [ 283.500427][ T5916] hub 5-1:0.217: bad descriptor, ignoring hub [ 283.507728][ T5916] hub 5-1:0.217: probe with driver hub failed with error -5 [ 283.537764][ T8478] netlink: 71 bytes leftover after parsing attributes in process `syz.0.604'. [ 283.711862][ T5916] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 283.736012][ T5916] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 283.744803][ T5916] dib0700: firmware download failed at 7 with -22 [ 283.774081][ T5916] usb 5-1: USB disconnect, device number 38 [ 283.856503][ T8489] loop4: detected capacity change from 0 to 7 [ 283.895719][ T8489] Dev loop4: unable to read RDB block 7 [ 283.901544][ T8489] loop4: unable to read partition table [ 283.922735][ T8489] loop4: partition table beyond EOD, truncated [ 283.939212][ T8489] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 285.542037][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 285.699000][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.727117][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.740698][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.756071][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.767497][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.782743][ T10] usb 5-1: config 0 descriptor?? [ 286.210978][ T10] plantronics 0003:047F:FFFF.0005: unbalanced delimiter at end of report description [ 286.232517][ T10] plantronics 0003:047F:FFFF.0005: parse failed [ 286.248270][ T10] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 286.293183][ T8524] netlink: 71 bytes leftover after parsing attributes in process `syz.1.620'. [ 286.343869][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 286.500185][ T5916] usb 5-1: USB disconnect, device number 39 [ 286.554777][ T24] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 286.572367][ T24] usb 4-1: config 0 has no interface number 0 [ 286.590549][ T24] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 286.650765][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.675026][ T24] usb 4-1: Product: syz [ 286.692159][ T24] usb 4-1: Manufacturer: syz [ 286.721655][ T24] usb 4-1: SerialNumber: syz [ 286.749528][ T24] usb 4-1: config 0 descriptor?? [ 286.770037][ T24] hub 4-1:0.217: bad descriptor, ignoring hub [ 286.783747][ T24] hub 4-1:0.217: probe with driver hub failed with error -5 [ 286.822187][ T8533] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 286.971830][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 287.107981][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 287.135524][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 287.154333][ T24] usb 4-1: media controller created [ 287.182786][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.623'. [ 287.214770][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.245086][ T8541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.254271][ T8541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.390464][ T24] DVB: Unable to find symbol dib7000p_attach() [ 287.425149][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 287.523969][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 287.707736][ T5914] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 287.733179][ T24] Registered IR keymap rc-empty [ 287.763452][ T24] dvb-usb: could not initialize remote control. [ 287.779309][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 287.794955][ T24] usb 4-1: USB disconnect, device number 21 [ 287.848436][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 287.936252][ T5914] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 287.949374][ T5914] usb 5-1: config 0 has no interface number 0 [ 287.966599][ T5914] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 288.012182][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.080921][ T5914] usb 5-1: Product: syz [ 288.094821][ T5914] usb 5-1: Manufacturer: syz [ 288.152074][ T5914] usb 5-1: SerialNumber: syz [ 288.198545][ T5914] usb 5-1: config 0 descriptor?? [ 288.256819][ T5914] hub 5-1:0.217: bad descriptor, ignoring hub [ 288.274652][ T5914] hub 5-1:0.217: probe with driver hub failed with error -5 [ 288.403106][ T8553] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3884342965 (248597949760 ns) > initial count (83991646528 ns). Using initial count to start timer. [ 288.424139][ T5914] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 288.463874][ T5914] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 288.519552][ T8556] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 288.580654][ T5914] dib0700: firmware download failed at 7 with -22 [ 288.688095][ T5914] usb 5-1: USB disconnect, device number 40 [ 288.811975][ T5916] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 288.949293][ T8562] netlink: 280 bytes leftover after parsing attributes in process `syz.1.629'. [ 289.005691][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 289.050876][ T5916] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.068353][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 289.091368][ T5916] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.107027][ T8562] ALSA: mixer_oss: invalid OSS volume 'LIN$' [ 289.166728][ T5916] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.208918][ T5916] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.224892][ T5916] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.244709][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.450642][ T30] kauditd_printk_skb: 263 callbacks suppressed [ 289.450662][ T30] audit: type=1326 audit(1760372765.824:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 289.484997][ T5916] usb 1-1: GET_CAPABILITIES returned 0 [ 289.497026][ T5916] usbtmc 1-1:16.0: can't read capabilities [ 289.512470][ T30] audit: type=1326 audit(1760372765.854:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 289.535270][ T30] audit: type=1326 audit(1760372765.854:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 289.560374][ T30] audit: type=1326 audit(1760372765.854:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 289.582671][ T30] audit: type=1326 audit(1760372765.884:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 289.608942][ T30] audit: type=1326 audit(1760372765.884:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 289.640105][ T30] audit: type=1326 audit(1760372765.884:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 289.738515][ T30] audit: type=1326 audit(1760372765.884:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 289.758220][ T8572] netlink: 71 bytes leftover after parsing attributes in process `syz.5.632'. [ 289.760551][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.794072][ T30] audit: type=1326 audit(1760372765.884:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 289.825332][ T30] audit: type=1326 audit(1760372765.884:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 290.497963][ T8598] netlink: 71 bytes leftover after parsing attributes in process `syz.3.643'. [ 290.533102][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 290.578476][ T5914] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 290.744967][ T5914] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 290.745865][ T10] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 290.761716][ T10] usb 2-1: config 0 has no interface number 0 [ 290.764896][ T5914] usb 6-1: config 0 has no interface number 0 [ 290.784497][ T5914] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 290.796999][ T10] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 290.808233][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.808238][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.808264][ T5914] usb 6-1: Product: syz [ 290.836926][ T10] usb 2-1: Product: syz [ 290.847153][ T10] usb 2-1: Manufacturer: syz [ 290.852382][ T5914] usb 6-1: Manufacturer: syz [ 290.857027][ T5914] usb 6-1: SerialNumber: syz [ 290.858965][ T10] usb 2-1: SerialNumber: syz [ 290.876628][ T5914] usb 6-1: config 0 descriptor?? [ 290.905535][ T5914] hub 6-1:0.217: bad descriptor, ignoring hub [ 290.912506][ T5914] hub 6-1:0.217: probe with driver hub failed with error -5 [ 290.921441][ T10] usb 2-1: config 0 descriptor?? [ 290.940498][ T10] hub 2-1:0.217: bad descriptor, ignoring hub [ 290.965524][ T10] hub 2-1:0.217: probe with driver hub failed with error -5 [ 291.119854][ T5914] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 291.140109][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 291.146717][ T5914] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 291.163549][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 291.179622][ T5914] dib0700: firmware download failed at 7 with -22 [ 291.187190][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 291.197288][ T10] usb 2-1: media controller created [ 291.224703][ T5914] usb 6-1: USB disconnect, device number 8 [ 291.383674][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.398302][ T24] usb 1-1: USB disconnect, device number 42 [ 291.431105][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.446790][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.868676][ T10] DVB: Unable to find symbol dib7000p_attach() [ 291.875017][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 292.093621][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 292.099797][ T10] Registered IR keymap rc-empty [ 292.115818][ T8617] netlink: 'syz.0.648': attribute type 16 has an invalid length. [ 292.130320][ T10] dvb-usb: could not initialize remote control. [ 292.138361][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 292.151438][ T8617] fuse: Bad value for 'group_id' [ 292.156614][ T8617] fuse: Bad value for 'group_id' [ 292.184674][ T10] usb 2-1: USB disconnect, device number 35 [ 292.281446][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 292.291851][ T8619] fuse: Unknown parameter 'subj_role' [ 292.298443][ T8619] fuse: Unknown parameter '' [ 292.648389][ T8632] netlink: 71 bytes leftover after parsing attributes in process `syz.1.654'. [ 292.794707][ T8634] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 292.822559][ T8638] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 292.829244][ T8638] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 292.863111][ T8638] vhci_hcd vhci_hcd.0: Device attached [ 292.863868][ T8634] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 292.899069][ T8639] vhci_hcd: connection closed [ 292.900187][ T13] vhci_hcd: stop threads [ 292.909614][ T13] vhci_hcd: release socket [ 292.916057][ T13] vhci_hcd: disconnect device [ 293.142641][ T5840] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 293.303897][ T5840] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 293.331165][ T5840] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 293.343555][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.351748][ T5840] usb 1-1: Product: syz [ 293.378882][ T5840] usb 1-1: Manufacturer: syz [ 293.391562][ T5840] usb 1-1: SerialNumber: syz [ 293.423944][ T5840] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 293.451663][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 293.494899][ T5840] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 293.518643][ T5840] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 293.531968][ T5840] dvb_usb_umt_010 1-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 293.620345][ T5840] usb 1-1: USB disconnect, device number 43 [ 294.058213][ T8664] netlink: 14 bytes leftover after parsing attributes in process `syz.1.661'. [ 294.404592][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 294.602768][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 294.618423][ T24] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 294.628055][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.671187][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 294.703675][ T8664] team0: Port device bond0 removed [ 294.711565][ T24] usb 4-1: Product: syz [ 294.784241][ T24] usb 4-1: Manufacturer: syz [ 294.785001][ T8664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.803205][ T24] usb 4-1: SerialNumber: syz [ 294.831596][ T24] usb 4-1: config 0 descriptor?? [ 294.855580][ T10] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 294.857442][ T24] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 294.864165][ T10] usb 1-1: config 0 has no interface number 0 [ 294.885607][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 294.888472][ T10] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 294.902199][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.910325][ T10] usb 1-1: Product: syz [ 294.919539][ T8664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.928295][ T5914] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 294.931640][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.943927][ T10] usb 1-1: Manufacturer: syz [ 294.965943][ T8664] bond0 (unregistering): Released all slaves [ 294.972780][ T24] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 294.982007][ T24] usb 4-1: media controller created [ 294.988267][ T10] usb 1-1: SerialNumber: syz [ 295.000360][ T10] usb 1-1: config 0 descriptor?? [ 295.017555][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.063217][ T8667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.662'. [ 295.081489][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 295.088478][ T10] hub 1-1:0.217: bad descriptor, ignoring hub [ 295.092596][ T5914] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 295.103999][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.116896][ T24] cxusb: set interface failed [ 295.121598][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 295.128628][ T5914] usb 5-1: Product: syz [ 295.148671][ T10] hub 1-1:0.217: probe with driver hub failed with error -5 [ 295.161864][ T5914] usb 5-1: Manufacturer: syz [ 295.185642][ T5914] usb 5-1: SerialNumber: syz [ 295.218064][ T5914] usb 5-1: config 0 descriptor?? [ 295.231649][ T8666] syzkaller1: entered promiscuous mode [ 295.246669][ T8666] syzkaller1: entered allmulticast mode [ 295.270887][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 295.295860][ T5914] gspca_main: sq930x-2.14.0 probing 2770:930c [ 295.442851][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.456380][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 295.472451][ T10] usb 1-1: media controller created [ 295.484584][ T24] DVB: Unable to find symbol mt352_attach() [ 295.505610][ T24] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 295.528187][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.540621][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.558143][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.571052][ T8689] dvb-usb: bulk message failed: -22 (4/0) [ 295.744922][ T24] rc_core: IR keymap rc-dvico-portable not found [ 295.756995][ T24] Registered IR keymap rc-empty [ 295.781864][ T10] DVB: Unable to find symbol dib7000p_attach() [ 295.791481][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 295.821759][ T24] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 295.871179][ T24] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input35 [ 295.974719][ T5914] gspca_sq930x: reg_r 001f failed -110 [ 295.994990][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 296.016250][ T5914] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 296.035746][ T24] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 296.114845][ T8697] capability: warning: `syz.3.669' uses deprecated v2 capabilities in a way that may be insecure [ 296.125688][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 296.146832][ T5914] dvb-usb: bulk message failed: -22 (1/0) [ 296.152926][ T10] Registered IR keymap rc-empty [ 296.159031][ T10] dvb-usb: could not initialize remote control. [ 296.185862][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 296.192764][ T24] usb 4-1: USB disconnect, device number 22 [ 296.491269][ T10] usb 1-1: USB disconnect, device number 44 [ 296.506909][ T24] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 296.905866][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 297.005189][ T8708] FAULT_INJECTION: forcing a failure. [ 297.005189][ T8708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.020653][ T8708] CPU: 0 UID: 0 PID: 8708 Comm: syz.5.673 Not tainted syzkaller #0 PREEMPT(full) [ 297.020682][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.020695][ T8708] Call Trace: [ 297.020703][ T8708] [ 297.020711][ T8708] dump_stack_lvl+0x189/0x250 [ 297.020756][ T8708] ? __pfx____ratelimit+0x10/0x10 [ 297.020814][ T8708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.020848][ T8708] ? __pfx__printk+0x10/0x10 [ 297.020893][ T8708] should_fail_ex+0x414/0x560 [ 297.020945][ T8708] _copy_to_user+0x31/0xb0 [ 297.020986][ T8708] simple_read_from_buffer+0xe1/0x170 [ 297.021029][ T8708] proc_fail_nth_read+0x1b3/0x220 [ 297.021094][ T8708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.021139][ T8708] ? rw_verify_area+0x2a6/0x4d0 [ 297.021170][ T8708] ? __lock_acquire+0xab9/0xd20 [ 297.021200][ T8708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.021252][ T8708] vfs_read+0x200/0xa30 [ 297.021285][ T8708] ? fdget_pos+0x247/0x320 [ 297.021327][ T8708] ? __pfx___mutex_lock+0x10/0x10 [ 297.021353][ T8708] ? __pfx_vfs_read+0x10/0x10 [ 297.021384][ T8708] ? __fget_files+0x2a/0x420 [ 297.021420][ T8708] ? __fget_files+0x3a0/0x420 [ 297.021445][ T8708] ? __fget_files+0x2a/0x420 [ 297.021488][ T8708] ksys_read+0x145/0x250 [ 297.021523][ T8708] ? __pfx_ksys_read+0x10/0x10 [ 297.021552][ T8708] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 297.021581][ T8708] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.021609][ T8708] __do_fast_syscall_32+0xb6/0x2b0 [ 297.021638][ T8708] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.021667][ T8708] do_fast_syscall_32+0x34/0x80 [ 297.021695][ T8708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.021744][ T8708] RIP: 0023:0xf7f97539 [ 297.021766][ T8708] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 297.021784][ T8708] RSP: 002b:00000000f5486590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 297.021806][ T8708] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5486620 [ 297.021821][ T8708] RDX: 000000000000000f RSI: 00000000f7425ff4 RDI: 0000000000000000 [ 297.021833][ T8708] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 297.021846][ T8708] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 297.021857][ T8708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.021889][ T8708] [ 297.560406][ T5964] usb 5-1: USB disconnect, device number 41 [ 297.641957][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 297.802143][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 297.811120][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.827270][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.888499][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 297.901246][ T10] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 297.927496][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.961593][ T10] usb 1-1: config 0 descriptor?? [ 298.467385][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 298.494487][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 298.568099][ T10] usb 1-1: USB disconnect, device number 45 [ 298.835213][ T8750] FAULT_INJECTION: forcing a failure. [ 298.835213][ T8750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.870265][ T8750] CPU: 0 UID: 0 PID: 8750 Comm: syz.1.689 Not tainted syzkaller #0 PREEMPT(full) [ 298.870296][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.870310][ T8750] Call Trace: [ 298.870318][ T8750] [ 298.870328][ T8750] dump_stack_lvl+0x189/0x250 [ 298.870356][ T8750] ? __pfx____ratelimit+0x10/0x10 [ 298.870389][ T8750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.870410][ T8750] ? __pfx__printk+0x10/0x10 [ 298.870446][ T8750] should_fail_ex+0x414/0x560 [ 298.870485][ T8750] _copy_to_user+0x31/0xb0 [ 298.870516][ T8750] simple_read_from_buffer+0xe1/0x170 [ 298.870547][ T8750] proc_fail_nth_read+0x1b3/0x220 [ 298.870585][ T8750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.870622][ T8750] ? rw_verify_area+0x2a6/0x4d0 [ 298.870642][ T8750] ? __lock_acquire+0xab9/0xd20 [ 298.870668][ T8750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.870702][ T8750] vfs_read+0x200/0xa30 [ 298.870723][ T8750] ? fdget_pos+0x247/0x320 [ 298.870754][ T8750] ? __pfx___mutex_lock+0x10/0x10 [ 298.870777][ T8750] ? __pfx_vfs_read+0x10/0x10 [ 298.870801][ T8750] ? __fget_files+0x2a/0x420 [ 298.870833][ T8750] ? __fget_files+0x3a0/0x420 [ 298.870867][ T8750] ? __fget_files+0x2a/0x420 [ 298.870904][ T8750] ksys_read+0x145/0x250 [ 298.870933][ T8750] ? __pfx_ksys_read+0x10/0x10 [ 298.870959][ T8750] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 298.870984][ T8750] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.871007][ T8750] __do_fast_syscall_32+0xb6/0x2b0 [ 298.871032][ T8750] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.871057][ T8750] do_fast_syscall_32+0x34/0x80 [ 298.871079][ T8750] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.871105][ T8750] RIP: 0023:0xf708d539 [ 298.871124][ T8750] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 298.871143][ T8750] RSP: 002b:00000000f547d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 298.871166][ T8750] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d620 [ 298.871181][ T8750] RDX: 000000000000000f RSI: 00000000f7425ff4 RDI: 0000000000000000 [ 298.871194][ T8750] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 298.871206][ T8750] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.871219][ T8750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.871252][ T8750] [ 299.716161][ T8768] FAULT_INJECTION: forcing a failure. [ 299.716161][ T8768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.772877][ T8768] CPU: 1 UID: 0 PID: 8768 Comm: syz.3.696 Not tainted syzkaller #0 PREEMPT(full) [ 299.772907][ T8768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.772921][ T8768] Call Trace: [ 299.772929][ T8768] [ 299.772938][ T8768] dump_stack_lvl+0x189/0x250 [ 299.772966][ T8768] ? __pfx____ratelimit+0x10/0x10 [ 299.772999][ T8768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.773022][ T8768] ? __pfx__printk+0x10/0x10 [ 299.773043][ T8768] ? __might_fault+0xb0/0x130 [ 299.773078][ T8768] should_fail_ex+0x414/0x560 [ 299.773117][ T8768] _copy_from_user+0x2d/0xb0 [ 299.773148][ T8768] memdup_user+0x5e/0xd0 [ 299.773180][ T8768] strndup_user+0x68/0xd0 [ 299.773211][ T8768] __se_sys_add_key+0x1af/0x410 [ 299.773244][ T8768] ? __pfx___se_sys_add_key+0x10/0x10 [ 299.773279][ T8768] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 299.773304][ T8768] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.773323][ T8768] ? __ia32_sys_add_key+0x20/0xc0 [ 299.773355][ T8768] __do_fast_syscall_32+0xb6/0x2b0 [ 299.773380][ T8768] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.773405][ T8768] do_fast_syscall_32+0x34/0x80 [ 299.773429][ T8768] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.773455][ T8768] RIP: 0023:0xf702d539 [ 299.773473][ T8768] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 299.773492][ T8768] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 000000000000011e [ 299.773515][ T8768] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000080000180 [ 299.773530][ T8768] RDX: 0000000080000100 RSI: 00000000000000ca RDI: 00000000fffffffe [ 299.773545][ T8768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.773557][ T8768] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 299.773570][ T8768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.773603][ T8768] [ 300.101197][ T8779] FAULT_INJECTION: forcing a failure. [ 300.101197][ T8779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.102530][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 300.114454][ T8779] CPU: 1 UID: 0 PID: 8779 Comm: syz.3.700 Not tainted syzkaller #0 PREEMPT(full) [ 300.114481][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.114495][ T8779] Call Trace: [ 300.114505][ T8779] [ 300.114515][ T8779] dump_stack_lvl+0x189/0x250 [ 300.114549][ T8779] ? __pfx____ratelimit+0x10/0x10 [ 300.114590][ T8779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.114617][ T8779] ? __pfx__printk+0x10/0x10 [ 300.114659][ T8779] should_fail_ex+0x414/0x560 [ 300.114703][ T8779] _copy_to_user+0x31/0xb0 [ 300.114739][ T8779] simple_read_from_buffer+0xe1/0x170 [ 300.114773][ T8779] proc_fail_nth_read+0x1b3/0x220 [ 300.114817][ T8779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.114860][ T8779] ? rw_verify_area+0x2a6/0x4d0 [ 300.114883][ T8779] ? __lock_acquire+0xab9/0xd20 [ 300.114912][ T8779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.114953][ T8779] vfs_read+0x200/0xa30 [ 300.114977][ T8779] ? fdget_pos+0x247/0x320 [ 300.115021][ T8779] ? __pfx___mutex_lock+0x10/0x10 [ 300.115048][ T8779] ? __pfx_vfs_read+0x10/0x10 [ 300.115076][ T8779] ? __fget_files+0x2a/0x420 [ 300.115112][ T8779] ? __fget_files+0x3a0/0x420 [ 300.115141][ T8779] ? __fget_files+0x2a/0x420 [ 300.115181][ T8779] ksys_read+0x145/0x250 [ 300.115210][ T8779] ? __pfx_ksys_read+0x10/0x10 [ 300.115239][ T8779] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 300.115268][ T8779] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.115296][ T8779] __do_fast_syscall_32+0xb6/0x2b0 [ 300.115325][ T8779] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.115355][ T8779] do_fast_syscall_32+0x34/0x80 [ 300.115381][ T8779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.115412][ T8779] RIP: 0023:0xf702d539 [ 300.115433][ T8779] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 300.115454][ T8779] RSP: 002b:00000000f541d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 300.115479][ T8779] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d620 [ 300.115497][ T8779] RDX: 000000000000000f RSI: 00000000f73c5ff4 RDI: 0000000000000000 [ 300.115511][ T8779] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 300.115526][ T8779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 300.115539][ T8779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.115576][ T8779] [ 300.532001][ T10] usb 1-1: device descriptor read/64, error -71 [ 300.821983][ T5964] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 300.821989][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 300.991998][ T5964] usb 6-1: Using ep0 maxpacket: 32 [ 300.999273][ T5964] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 301.002291][ T10] usb 1-1: device descriptor read/64, error -71 [ 301.008516][ T5964] usb 6-1: config 0 has no interface number 0 [ 301.035021][ T5964] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 301.044669][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.071724][ T5964] usb 6-1: Product: syz [ 301.085623][ T5964] usb 6-1: Manufacturer: syz [ 301.100233][ T5964] usb 6-1: SerialNumber: syz [ 301.148485][ T5964] usb 6-1: config 0 descriptor?? [ 301.151127][ T10] usb usb1-port1: attempt power cycle [ 301.173603][ T5964] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 301.370587][ T5964] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 301.377856][ T5964] quatech2 6-1:0.51: probe with driver quatech2 failed with error -8 [ 301.752025][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 301.795633][ T10] usb 1-1: device descriptor read/8, error -71 [ 301.835174][ T8791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.845013][ T8791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.992971][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 301.992989][ T30] audit: type=1326 audit(1760372778.374:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 302.002051][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 302.043768][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 302.072651][ T10] usb 1-1: device descriptor read/8, error -71 [ 302.090414][ T30] audit: type=1326 audit(1760372778.404:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 302.113001][ T30] audit: type=1326 audit(1760372778.404:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 302.167495][ T30] audit: type=1326 audit(1760372778.404:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 302.192326][ T10] usb usb1-port1: unable to enumerate USB device [ 302.198366][ T8809] trusted_key: encrypted_key: master key parameter is missing [ 302.259481][ T30] audit: type=1326 audit(1760372778.404:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 302.376512][ T30] audit: type=1326 audit(1760372778.404:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 302.401031][ T30] audit: type=1326 audit(1760372778.404:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 302.411948][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 302.471644][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 302.487290][ T24] usb 2-1: config 7 has an invalid interface number: 128 but max is 0 [ 302.495907][ T30] audit: type=1326 audit(1760372778.404:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 302.518172][ T24] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 302.522110][ T5840] usb 6-1: USB disconnect, device number 9 [ 302.558312][ T24] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 302.580950][ T24] usb 2-1: config 7 has no interface number 0 [ 302.588941][ T30] audit: type=1326 audit(1760372778.414:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 302.610896][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.624363][ T24] usb 2-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 302.656281][ T24] usb 2-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 302.666883][ T24] usb 2-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 302.680362][ T30] audit: type=1326 audit(1760372778.414:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 302.702965][ T24] usb 2-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 302.718128][ T24] usb 2-1: config 7 interface 128 has no altsetting 0 [ 302.731601][ T8818] FAULT_INJECTION: forcing a failure. [ 302.731601][ T8818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.747587][ T8818] CPU: 1 UID: 0 PID: 8818 Comm: syz.4.713 Not tainted syzkaller #0 PREEMPT(full) [ 302.747620][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.747635][ T8818] Call Trace: [ 302.747644][ T8818] [ 302.747653][ T8818] dump_stack_lvl+0x189/0x250 [ 302.747682][ T8818] ? __pfx____ratelimit+0x10/0x10 [ 302.747717][ T8818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.747741][ T8818] ? __pfx__printk+0x10/0x10 [ 302.747764][ T8818] ? __might_fault+0xb0/0x130 [ 302.747800][ T8818] should_fail_ex+0x414/0x560 [ 302.747846][ T8818] _copy_from_user+0x2d/0xb0 [ 302.747878][ T8818] kstrtouint_from_user+0xc4/0x170 [ 302.747905][ T8818] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 302.747949][ T8818] proc_fail_nth_write+0x88/0x200 [ 302.747989][ T8818] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 302.748030][ T8818] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 302.748067][ T8818] vfs_write+0x27e/0xb30 [ 302.748100][ T8818] ? __pfx_vfs_write+0x10/0x10 [ 302.748126][ T8818] ? __fget_files+0x2a/0x420 [ 302.748157][ T8818] ? __fget_files+0x3a0/0x420 [ 302.748183][ T8818] ? __fget_files+0x2a/0x420 [ 302.748221][ T8818] ksys_write+0x145/0x250 [ 302.748247][ T8818] ? __pfx_ksys_write+0x10/0x10 [ 302.748274][ T8818] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 302.748300][ T8818] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.748325][ T8818] __do_fast_syscall_32+0xb6/0x2b0 [ 302.748350][ T8818] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.748376][ T8818] do_fast_syscall_32+0x34/0x80 [ 302.748400][ T8818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.748431][ T8818] RIP: 0023:0xf705d539 [ 302.748450][ T8818] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 302.748469][ T8818] RSP: 002b:00000000f544d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 302.748491][ T8818] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f544d620 [ 302.748505][ T8818] RDX: 0000000000000001 RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 302.748519][ T8818] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 302.748531][ T8818] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 302.748544][ T8818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.748578][ T8818] [ 302.751390][ T24] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 302.994025][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.002656][ T24] usb 2-1: Product: syz [ 303.006973][ T24] usb 2-1: Manufacturer: syz [ 303.011720][ T24] usb 2-1: SerialNumber: syz [ 303.039326][ T8805] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 303.432225][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 303.582010][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 303.590501][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 303.649144][ T10] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 303.677363][ T10] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 303.705676][ T10] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 303.729442][ T10] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 303.755280][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 303.769946][ T10] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 303.779449][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.787718][ T5840] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 303.814157][ T10] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 303.944598][ T5840] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 303.953007][ T5840] usb 6-1: config 0 has no interface number 0 [ 303.978188][ T5840] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 303.987595][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.995889][ T5840] usb 6-1: Product: syz [ 304.000250][ T5840] usb 6-1: Manufacturer: syz [ 304.005359][ T5840] usb 6-1: SerialNumber: syz [ 304.023326][ T5840] usb 6-1: config 0 descriptor?? [ 304.040805][ T5840] hub 6-1:0.217: bad descriptor, ignoring hub [ 304.056670][ T5840] hub 6-1:0.217: probe with driver hub failed with error -5 [ 304.066724][ T10] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 304.104013][ T10] usb 5-1: USB disconnect, device number 42 [ 304.236840][ T5840] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 304.253482][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 304.272524][ T5840] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 304.302103][ T5840] usb 6-1: media controller created [ 304.367453][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.374827][ T24] usb 2-1: MIDIStreaming interface descriptor not found [ 304.398084][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.494542][ T8842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.535293][ T8842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.554543][ T24] usb 2-1: USB disconnect, device number 36 [ 304.629016][ T5840] DVB: Unable to find symbol dib7000p_attach() [ 304.653069][ T5840] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 304.858014][ T8851] FAULT_INJECTION: forcing a failure. [ 304.858014][ T8851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.875422][ T8853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.725'. [ 304.892383][ T5840] rc_core: IR keymap rc-dib0700-rc5 not found [ 304.916948][ T5840] Registered IR keymap rc-empty [ 304.924601][ T5840] dvb-usb: could not initialize remote control. [ 304.930904][ T5840] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 304.943076][ T8851] CPU: 0 UID: 0 PID: 8851 Comm: syz.3.726 Not tainted syzkaller #0 PREEMPT(full) [ 304.943104][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 304.943117][ T8851] Call Trace: [ 304.943126][ T8851] [ 304.943135][ T8851] dump_stack_lvl+0x189/0x250 [ 304.943165][ T8851] ? __pfx____ratelimit+0x10/0x10 [ 304.943198][ T8851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.943221][ T8851] ? __pfx__printk+0x10/0x10 [ 304.943244][ T8851] ? __might_fault+0xb0/0x130 [ 304.943280][ T8851] should_fail_ex+0x414/0x560 [ 304.943316][ T8851] ? __pfx_do_get_msr+0x10/0x10 [ 304.943349][ T8851] _copy_from_user+0x2d/0xb0 [ 304.943381][ T8851] msr_io+0xa2/0x570 [ 304.943417][ T8851] ? kvm_arch_vcpu_ioctl+0x11b1/0x2b40 [ 304.943457][ T8851] ? __pfx_msr_io+0x10/0x10 [ 304.943499][ T8851] kvm_arch_vcpu_ioctl+0x11ee/0x2b40 [ 304.943529][ T8851] ? __lock_acquire+0xab9/0xd20 [ 304.943557][ T8851] ? kvm_arch_vcpu_ioctl+0x11b1/0x2b40 [ 304.943592][ T8851] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 304.943630][ T8851] ? __lock_acquire+0xab9/0xd20 [ 304.943672][ T8851] ? __lock_acquire+0xab9/0xd20 [ 304.943724][ T8851] ? is_bpf_text_address+0x26/0x2b0 [ 304.943761][ T8851] ? is_bpf_text_address+0x292/0x2b0 [ 304.943791][ T8851] ? is_bpf_text_address+0x26/0x2b0 [ 304.943825][ T8851] ? kernel_text_address+0xa5/0xe0 [ 304.943852][ T8851] ? __kernel_text_address+0xd/0x40 [ 304.943877][ T8851] ? unwind_get_return_address+0x4d/0x90 [ 304.943909][ T8851] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 304.943932][ T8851] ? arch_stack_walk+0xfc/0x150 [ 304.943988][ T8851] ? __lock_acquire+0xab9/0xd20 [ 304.944026][ T8851] ? __mutex_trylock_common+0x153/0x260 [ 304.944064][ T8851] ? __pfx___mutex_trylock_common+0x10/0x10 [ 304.944100][ T8851] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.944132][ T8851] ? rcu_is_watching+0x15/0xb0 [ 304.944165][ T8851] ? trace_contention_end+0x39/0x120 [ 304.944199][ T8851] ? __mutex_lock+0x335/0x1350 [ 304.944236][ T8851] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 304.944265][ T8851] ? __pfx___mutex_lock+0x10/0x10 [ 304.944296][ T8851] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.944330][ T8851] kvm_vcpu_ioctl+0x74d/0xe90 [ 304.944360][ T8851] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 304.944382][ T8851] ? do_vfs_ioctl+0xbe8/0x1430 [ 304.944406][ T8851] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 304.944449][ T8851] ? __lock_acquire+0xab9/0xd20 [ 304.944498][ T8851] kvm_vcpu_compat_ioctl+0x203/0x390 [ 304.944527][ T8851] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 304.944553][ T8851] ? __fget_files+0x3a0/0x420 [ 304.944579][ T8851] ? __fget_files+0x2a/0x420 [ 304.944611][ T8851] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 304.944646][ T8851] __ia32_compat_sys_ioctl+0x543/0x840 [ 304.944672][ T8851] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 304.944696][ T8851] ? __fget_files+0x3a0/0x420 [ 304.944731][ T8851] ? fput+0xa0/0xd0 [ 304.944762][ T8851] ? ksys_write+0x22a/0x250 [ 304.944784][ T8851] ? exc_page_fault+0x82/0x100 [ 304.944805][ T8851] ? __pfx_ksys_write+0x10/0x10 [ 304.944832][ T8851] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 304.944856][ T8851] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.944882][ T8851] __do_fast_syscall_32+0xb6/0x2b0 [ 304.944906][ T8851] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.944932][ T8851] do_fast_syscall_32+0x34/0x80 [ 304.944956][ T8851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.944982][ T8851] RIP: 0023:0xf702d539 [ 304.945001][ T8851] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 304.945020][ T8851] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 304.945042][ T8851] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c008ae88 [ 304.945058][ T8851] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.945070][ T8851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.945083][ T8851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 304.945095][ T8851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.945128][ T8851] [ 305.423456][ T5840] usb 6-1: USB disconnect, device number 10 [ 305.519354][ T5840] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 308.317224][ T8921] FAULT_INJECTION: forcing a failure. [ 308.317224][ T8921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.333472][ T8921] CPU: 1 UID: 0 PID: 8921 Comm: syz.4.746 Not tainted syzkaller #0 PREEMPT(full) [ 308.333501][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.333515][ T8921] Call Trace: [ 308.333525][ T8921] [ 308.333534][ T8921] dump_stack_lvl+0x189/0x250 [ 308.333563][ T8921] ? __pfx____ratelimit+0x10/0x10 [ 308.333597][ T8921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.333619][ T8921] ? __pfx__printk+0x10/0x10 [ 308.333655][ T8921] should_fail_ex+0x414/0x560 [ 308.333696][ T8921] _copy_to_user+0x31/0xb0 [ 308.333728][ T8921] simple_read_from_buffer+0xe1/0x170 [ 308.333759][ T8921] proc_fail_nth_read+0x1b3/0x220 [ 308.333798][ T8921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.333837][ T8921] ? rw_verify_area+0x2a6/0x4d0 [ 308.333858][ T8921] ? __lock_acquire+0xab9/0xd20 [ 308.333884][ T8921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.333920][ T8921] vfs_read+0x200/0xa30 [ 308.333941][ T8921] ? fdget_pos+0x247/0x320 [ 308.333973][ T8921] ? __pfx___mutex_lock+0x10/0x10 [ 308.333996][ T8921] ? __pfx_vfs_read+0x10/0x10 [ 308.334022][ T8921] ? __fget_files+0x2a/0x420 [ 308.334053][ T8921] ? __fget_files+0x3a0/0x420 [ 308.334079][ T8921] ? __fget_files+0x2a/0x420 [ 308.334116][ T8921] ksys_read+0x145/0x250 [ 308.334143][ T8921] ? __pfx_ksys_read+0x10/0x10 [ 308.334170][ T8921] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 308.334194][ T8921] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.334219][ T8921] __do_fast_syscall_32+0xb6/0x2b0 [ 308.334243][ T8921] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.334270][ T8921] do_fast_syscall_32+0x34/0x80 [ 308.334294][ T8921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 308.334321][ T8921] RIP: 0023:0xf705d539 [ 308.334339][ T8921] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 308.334358][ T8921] RSP: 002b:00000000f544d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 308.334386][ T8921] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f544d620 [ 308.334400][ T8921] RDX: 000000000000000f RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 308.334413][ T8921] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 308.334426][ T8921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 308.334438][ T8921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.334475][ T8921] [ 308.576371][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.676142][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 308.815930][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.748'. [ 308.841360][ T24] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 308.850112][ T24] usb 2-1: config 0 has no interface number 0 [ 308.868007][ T24] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 308.898028][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.906570][ T24] usb 2-1: Product: syz [ 308.910807][ T24] usb 2-1: Manufacturer: syz [ 308.916695][ T24] usb 2-1: SerialNumber: syz [ 308.938470][ T24] usb 2-1: config 0 descriptor?? [ 308.954296][ T24] hub 2-1:0.217: bad descriptor, ignoring hub [ 308.964612][ T24] hub 2-1:0.217: probe with driver hub failed with error -5 [ 308.987641][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 309.031219][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 309.049144][ T8932] netlink: 'syz.4.750': attribute type 10 has an invalid length. [ 309.058572][ T8932] netlink: 40 bytes leftover after parsing attributes in process `syz.4.750'. [ 309.074350][ T8932] batman_adv: batadv0: Adding interface: virt_wifi0 [ 309.081138][ T8932] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.113460][ T8932] batman_adv: batadv0: Interface activated: virt_wifi0 [ 309.155785][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 309.184302][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 309.202433][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 309.211203][ T24] usb 2-1: media controller created [ 309.250219][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.318257][ T24] DVB: Unable to find symbol dib7000p_attach() [ 309.326398][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 309.392106][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 309.405686][ T24] Registered IR keymap rc-empty [ 309.418646][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.423085][ T24] dvb-usb: could not initialize remote control. [ 309.430872][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.449696][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 309.472710][ T980] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 309.617145][ T8948] FAULT_INJECTION: forcing a failure. [ 309.617145][ T8948] name failslab, interval 1, probability 0, space 0, times 0 [ 309.633077][ T8948] CPU: 0 UID: 0 PID: 8948 Comm: syz.4.756 Not tainted syzkaller #0 PREEMPT(full) [ 309.633112][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 309.633126][ T8948] Call Trace: [ 309.633135][ T8948] [ 309.633145][ T8948] dump_stack_lvl+0x189/0x250 [ 309.633176][ T8948] ? __pfx____ratelimit+0x10/0x10 [ 309.633213][ T8948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.633238][ T8948] ? __pfx__printk+0x10/0x10 [ 309.633264][ T8948] ? __pfx___might_resched+0x10/0x10 [ 309.633296][ T8948] ? fs_reclaim_acquire+0x7d/0x100 [ 309.633330][ T8948] should_fail_ex+0x414/0x560 [ 309.633370][ T8948] should_failslab+0xa8/0x100 [ 309.633401][ T8948] kmem_cache_alloc_noprof+0x74/0x6e0 [ 309.633425][ T8948] ? __percpu_counter_compare+0xae/0x2e0 [ 309.633457][ T8948] ? ep_insert+0x272/0x19e0 [ 309.633491][ T8948] ep_insert+0x272/0x19e0 [ 309.633536][ T8948] ? __pfx_ep_insert+0x10/0x10 [ 309.633563][ T8948] ? __pfx___mutex_lock+0x10/0x10 [ 309.633588][ T8948] ? rcu_is_watching+0x15/0xb0 [ 309.633642][ T8948] do_epoll_ctl+0x7f4/0xe80 [ 309.633680][ T8948] __ia32_sys_epoll_ctl+0x15d/0x1a0 [ 309.633708][ T8948] ? exc_page_fault+0x82/0x100 [ 309.633731][ T8948] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 309.633765][ T8948] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 309.633791][ T8948] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.633817][ T8948] __do_fast_syscall_32+0xb6/0x2b0 [ 309.633843][ T8948] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.633871][ T8948] do_fast_syscall_32+0x34/0x80 [ 309.633896][ T8948] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.633922][ T8948] RIP: 0023:0xf705d539 [ 309.633940][ T8948] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 309.633959][ T8948] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 309.633982][ T8948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 309.633996][ T8948] RDX: 0000000000000004 RSI: 0000000080000100 RDI: 0000000000000000 [ 309.634009][ T8948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.634023][ T8948] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 309.634036][ T8948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.634074][ T8948] [ 309.636866][ T980] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 309.921858][ T980] usb 6-1: config 0 has no interface number 0 [ 309.930542][ T980] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 309.940044][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.948729][ T980] usb 6-1: Product: syz [ 309.953173][ T980] usb 6-1: Manufacturer: syz [ 309.957825][ T980] usb 6-1: SerialNumber: syz [ 309.965659][ T980] usb 6-1: config 0 descriptor?? [ 309.973252][ T980] hub 6-1:0.217: bad descriptor, ignoring hub [ 309.979553][ T980] hub 6-1:0.217: probe with driver hub failed with error -5 [ 310.160728][ T24] usb 2-1: USB disconnect, device number 37 [ 310.193979][ T980] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 310.240033][ T980] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 310.386110][ T980] dib0700: firmware download failed at 7 with -22 [ 310.394286][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 310.427656][ T980] usb 6-1: USB disconnect, device number 11 [ 311.091984][ T5964] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 311.274745][ T5964] usb 4-1: Using ep0 maxpacket: 16 [ 311.302279][ T5964] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 311.321663][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.340767][ T5964] usb 4-1: Product: syz [ 311.350279][ T5964] usb 4-1: Manufacturer: syz [ 311.365253][ T5964] usb 4-1: SerialNumber: syz [ 311.400532][ T5964] r8152-cfgselector 4-1: Unknown version 0x0000 [ 311.407362][ T5964] r8152-cfgselector 4-1: config 0 descriptor?? [ 311.647180][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.767'. [ 311.861681][ T8959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.881744][ T8959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.233347][ T24] r8152-cfgselector 4-1: USB disconnect, device number 23 [ 312.312002][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 312.478952][ T10] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 312.510087][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.773'. [ 312.532197][ T10] usb 1-1: config 0 has no interface number 0 [ 312.543808][ T10] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 312.565354][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.594965][ T10] usb 1-1: Product: syz [ 312.599357][ T10] usb 1-1: Manufacturer: syz [ 312.605088][ T10] usb 1-1: SerialNumber: syz [ 312.620535][ T10] usb 1-1: config 0 descriptor?? [ 312.633707][ T10] hub 1-1:0.217: bad descriptor, ignoring hub [ 312.639851][ T10] hub 1-1:0.217: probe with driver hub failed with error -5 [ 312.791963][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 312.834936][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 312.836838][ T9007] FAULT_INJECTION: forcing a failure. [ 312.836838][ T9007] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 312.885121][ T9007] CPU: 1 UID: 0 PID: 9007 Comm: syz.1.775 Not tainted syzkaller #0 PREEMPT(full) [ 312.885151][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.885165][ T9007] Call Trace: [ 312.885174][ T9007] [ 312.885184][ T9007] dump_stack_lvl+0x189/0x250 [ 312.885213][ T9007] ? __pfx____ratelimit+0x10/0x10 [ 312.885247][ T9007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.885270][ T9007] ? __pfx__printk+0x10/0x10 [ 312.885294][ T9007] ? fs_reclaim_acquire+0x7d/0x100 [ 312.885331][ T9007] should_fail_ex+0x414/0x560 [ 312.885370][ T9007] prepare_alloc_pages+0x213/0x610 [ 312.885404][ T9007] __alloc_frozen_pages_noprof+0x123/0x370 [ 312.885438][ T9007] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 312.885466][ T9007] ? call_rcu+0x6ff/0x9c0 [ 312.885507][ T9007] ? policy_nodemask+0x27c/0x720 [ 312.885541][ T9007] alloc_pages_mpol+0x232/0x4a0 [ 312.885575][ T9007] vma_alloc_folio_noprof+0xe4/0x200 [ 312.885606][ T9007] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 312.885635][ T9007] ? __thp_vma_allowable_orders+0x8ee/0x960 [ 312.885672][ T9007] folio_prealloc+0x30/0x180 [ 312.885698][ T9007] __handle_mm_fault+0x16fd/0x5400 [ 312.885743][ T9007] ? __pfx___handle_mm_fault+0x10/0x10 [ 312.885787][ T9007] ? __pfx___might_resched+0x10/0x10 [ 312.885833][ T9007] handle_mm_fault+0x40a/0x8e0 [ 312.885867][ T9007] __get_user_pages+0x165c/0x2a00 [ 312.885937][ T9007] populate_vma_page_range+0x29f/0x3a0 [ 312.885975][ T9007] ? __pfx_populate_vma_page_range+0x10/0x10 [ 312.886006][ T9007] ? apply_vma_lock_flags+0x31b/0x390 [ 312.886044][ T9007] ? down_read+0x1ad/0x2e0 [ 312.886072][ T9007] __mm_populate+0x24c/0x380 [ 312.886110][ T9007] ? __pfx___mm_populate+0x10/0x10 [ 312.886146][ T9007] ? up_write+0x1c4/0x420 [ 312.886172][ T9007] do_mlock+0x612/0x720 [ 312.886213][ T9007] ? __pfx_do_mlock+0x10/0x10 [ 312.886245][ T9007] ? fput+0xa0/0xd0 [ 312.886276][ T9007] ? ksys_write+0x22a/0x250 [ 312.886298][ T9007] ? exc_page_fault+0x82/0x100 [ 312.886319][ T9007] ? __pfx_ksys_write+0x10/0x10 [ 312.886352][ T9007] __ia32_sys_mlock2+0xab/0xd0 [ 312.886384][ T9007] __do_fast_syscall_32+0xb6/0x2b0 [ 312.886409][ T9007] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.886434][ T9007] do_fast_syscall_32+0x34/0x80 [ 312.886458][ T9007] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.886485][ T9007] RIP: 0023:0xf708d539 [ 312.886503][ T9007] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 312.886522][ T9007] RSP: 002b:00000000f545c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000178 [ 312.886545][ T9007] RAX: ffffffffffffffda RBX: 0000000080003000 RCX: 0000000000004000 [ 312.886560][ T9007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.886572][ T9007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.886584][ T9007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 312.886597][ T9007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.886631][ T9007] [ 313.188426][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.243877][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 313.262559][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 313.270605][ T24] usb 6-1: config 0 has no interface number 0 [ 313.279268][ T9009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.288060][ T9009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.303780][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 313.312952][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.320985][ T24] usb 6-1: Product: syz [ 313.325435][ T24] usb 6-1: Manufacturer: syz [ 313.330066][ T24] usb 6-1: SerialNumber: syz [ 313.420321][ T24] usb 6-1: config 0 descriptor?? [ 313.433977][ T24] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 313.442805][ T24] usb 6-1: selecting invalid altsetting 1 [ 313.448543][ T24] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 313.458439][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 313.468876][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 313.477307][ T24] usb 6-1: media controller created [ 313.496114][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.517687][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 313.654494][ T8999] ------------[ cut here ]------------ [ 313.660029][ T8999] usb 1-1: BOGUS control dir, pipe 80003280 doesn't match bRequestType c0 [ 313.678975][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 313.699910][ T8999] WARNING: CPU: 1 PID: 8999 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 313.709653][ T8999] Modules linked in: [ 313.714265][ T8999] CPU: 1 UID: 0 PID: 8999 Comm: syz.5.773 Not tainted syzkaller #0 PREEMPT(full) [ 313.723567][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.733871][ T8999] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 313.739582][ T8999] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 313.742098][ T10] usb 1-1: media controller created [ 313.759611][ T8999] RSP: 0018:ffffc900030a7660 EFLAGS: 00010246 [ 313.771125][ T8999] RAX: c49b554ade9cfe00 RBX: ffff888146f10900 RCX: 0000000000080000 [ 313.779221][ T8999] RDX: ffffc9001dca6000 RSI: 0000000000003c73 RDI: 0000000000003c74 [ 313.788050][ T8999] RBP: 1ffff1100ab8f75c R08: 0000000000000003 R09: 0000000000000004 [ 313.796491][ T8999] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff88802582c100 [ 313.804884][ T8999] R13: ffff888055c7bae0 R14: 0000000080003280 R15: ffff888020af9c40 [ 313.813054][ T8999] FS: 0000000000000000(0000) GS:ffff888125e0c000(0063) knlGS:00000000f5444b40 [ 313.822043][ T8999] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 313.828668][ T8999] CR2: 00000000f7f855c0 CR3: 0000000079662000 CR4: 00000000003526f0 [ 313.836823][ T8999] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 313.845043][ T8999] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 313.853082][ T8999] Call Trace: [ 313.856385][ T8999] [ 313.859348][ T8999] usb_start_wait_urb+0x114/0x4c0 [ 313.864444][ T8999] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 313.870143][ T8999] usb_control_msg+0x232/0x3e0 [ 313.875051][ T8999] dib0700_i2c_xfer+0xba7/0xf70 [ 313.879963][ T8999] __i2c_transfer+0x874/0x2170 [ 313.884780][ T8999] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.890147][ T8999] ? __pfx___i2c_transfer+0x10/0x10 [ 313.895414][ T8999] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 313.900833][ T8999] ? i2c_transfer+0x120/0x3a0 [ 313.905573][ T8999] i2c_transfer+0x25b/0x3a0 [ 313.910103][ T8999] ? __pfx_i2c_transfer+0x10/0x10 [ 313.915206][ T8999] ? _copy_from_user+0x94/0xb0 [ 313.920001][ T8999] i2cdev_ioctl_rdwr+0x460/0x740 [ 313.924987][ T8999] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 313.930147][ T8999] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 313.935881][ T8999] ? __fget_files+0x3a0/0x420 [ 313.940586][ T8999] ? __fget_files+0x2a/0x420 [ 313.945342][ T8999] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 313.950929][ T8999] __ia32_compat_sys_ioctl+0x543/0x840 [ 313.956441][ T8999] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 313.962526][ T8999] ? handle_softirqs+0x717/0x870 [ 313.967503][ T8999] ? __irq_exit_rcu+0xca/0x1f0 [ 313.972319][ T8999] ? __pfx_handle_softirqs+0x10/0x10 [ 313.977634][ T8999] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 313.984354][ T8999] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.989710][ T8999] __do_fast_syscall_32+0xb6/0x2b0 [ 313.994892][ T8999] do_fast_syscall_32+0x34/0x80 [ 313.999774][ T8999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.006179][ T8999] RIP: 0023:0xf7f97539 [ 314.010266][ T8999] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 314.029940][ T8999] RSP: 002b:00000000f544455c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 314.038402][ T8999] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000707 [ 314.046473][ T8999] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.054509][ T8999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.062522][ T8999] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.070523][ T8999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.078540][ T8999] [ 314.081585][ T8999] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 314.088865][ T8999] CPU: 1 UID: 0 PID: 8999 Comm: syz.5.773 Not tainted syzkaller #0 PREEMPT(full) [ 314.098069][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 314.108125][ T8999] Call Trace: [ 314.111410][ T8999] [ 314.114352][ T8999] dump_stack_lvl+0x99/0x250 [ 314.118950][ T8999] ? __asan_memcpy+0x40/0x70 [ 314.123549][ T8999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.128767][ T8999] ? __pfx__printk+0x10/0x10 [ 314.133719][ T8999] vpanic+0x237/0x6d0 [ 314.137718][ T8999] ? __pfx_vpanic+0x10/0x10 [ 314.142242][ T8999] panic+0xb9/0xc0 [ 314.145974][ T8999] ? __pfx_panic+0x10/0x10 [ 314.150418][ T8999] __warn+0x31b/0x4b0 [ 314.154410][ T8999] ? usb_submit_urb+0x114d/0x18b0 [ 314.159447][ T8999] ? usb_submit_urb+0x114d/0x18b0 [ 314.164480][ T8999] report_bug+0x2be/0x4f0 [ 314.168813][ T8999] ? usb_submit_urb+0x114d/0x18b0 [ 314.173843][ T8999] ? usb_submit_urb+0x114d/0x18b0 [ 314.178878][ T8999] ? usb_submit_urb+0x114f/0x18b0 [ 314.183908][ T8999] handle_bug+0x84/0x160 [ 314.188160][ T8999] exc_invalid_op+0x1a/0x50 [ 314.192666][ T8999] asm_exc_invalid_op+0x1a/0x20 [ 314.197518][ T8999] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 314.203157][ T8999] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 314.223560][ T8999] RSP: 0018:ffffc900030a7660 EFLAGS: 00010246 [ 314.229637][ T8999] RAX: c49b554ade9cfe00 RBX: ffff888146f10900 RCX: 0000000000080000 [ 314.237609][ T8999] RDX: ffffc9001dca6000 RSI: 0000000000003c73 RDI: 0000000000003c74 [ 314.245580][ T8999] RBP: 1ffff1100ab8f75c R08: 0000000000000003 R09: 0000000000000004 [ 314.253550][ T8999] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff88802582c100 [ 314.261519][ T8999] R13: ffff888055c7bae0 R14: 0000000080003280 R15: ffff888020af9c40 [ 314.269526][ T8999] usb_start_wait_urb+0x114/0x4c0 [ 314.274567][ T8999] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 314.280137][ T8999] usb_control_msg+0x232/0x3e0 [ 314.284914][ T8999] dib0700_i2c_xfer+0xba7/0xf70 [ 314.289788][ T8999] __i2c_transfer+0x874/0x2170 [ 314.294559][ T8999] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.299771][ T8999] ? __pfx___i2c_transfer+0x10/0x10 [ 314.305039][ T8999] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 314.310416][ T8999] ? i2c_transfer+0x120/0x3a0 [ 314.315116][ T8999] i2c_transfer+0x25b/0x3a0 [ 314.319625][ T8999] ? __pfx_i2c_transfer+0x10/0x10 [ 314.324657][ T8999] ? _copy_from_user+0x94/0xb0 [ 314.329433][ T8999] i2cdev_ioctl_rdwr+0x460/0x740 [ 314.334386][ T8999] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 314.339505][ T8999] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 314.345142][ T8999] ? __fget_files+0x3a0/0x420 [ 314.349825][ T8999] ? __fget_files+0x2a/0x420 [ 314.354509][ T8999] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 314.360067][ T8999] __ia32_compat_sys_ioctl+0x543/0x840 [ 314.365528][ T8999] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 314.371616][ T8999] ? handle_softirqs+0x717/0x870 [ 314.376565][ T8999] ? __irq_exit_rcu+0xca/0x1f0 [ 314.381338][ T8999] ? __pfx_handle_softirqs+0x10/0x10 [ 314.386634][ T8999] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 314.393339][ T8999] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.398543][ T8999] __do_fast_syscall_32+0xb6/0x2b0 [ 314.403792][ T8999] do_fast_syscall_32+0x34/0x80 [ 314.408855][ T8999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.415186][ T8999] RIP: 0023:0xf7f97539 [ 314.419276][ T8999] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 314.438882][ T8999] RSP: 002b:00000000f544455c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 314.447298][ T8999] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000707 [ 314.455267][ T8999] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.463234][ T8999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.471206][ T8999] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.479178][ T8999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.487164][ T8999] [ 314.490581][ T8999] Kernel Offset: disabled [ 314.494917][ T8999] Rebooting in 86400 seconds..