last executing test programs: 11.510896327s ago: executing program 0 (id=6707): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.180116256s ago: executing program 0 (id=6708): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) 8.09142405s ago: executing program 4 (id=6717): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x10000) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 7.995975513s ago: executing program 2 (id=6719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}]}}}]}, 0x64}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 7.715577722s ago: executing program 4 (id=6721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) socket(0x1e, 0x4, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfc, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x43f4, 0x5c18, 0x6, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') r11 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r11, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r11, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r11, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.574081544s ago: executing program 2 (id=6722): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x122) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) 7.083363143s ago: executing program 2 (id=6723): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x402, 0xc1) getdents(r1, &(0x7f00000000c0)=""/31, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xc, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x10015c0, &(0x7f0000000300)={0x0, 0xe3da, 0x1, 0x3, 0x145}, &(0x7f0000000200), &(0x7f00000001c0)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) rename(&(0x7f00000006c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)='./file0\x00') syz_pidfd_open(0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)}], 0x1, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000680)=""/65, 0x41}], 0x2, 0x0, 0x0, 0xf5000000}, 0x2000) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r6, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/45, 0x2d}, {0x0}, {&(0x7f0000000140)=""/69, 0x45}], 0x3) 6.89819911s ago: executing program 3 (id=6724): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$6lowpan_enable(r2, &(0x7f0000000100)='0', 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @loopback, 0x4e24, 0x1, 'none\x00', 0x1, 0x32bd, 0x9}, {@loopback, 0x4e22, 0x2, 0xfffffffe, 0x4, 0x12d5c}}, 0x44) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) 6.565361967s ago: executing program 0 (id=6725): syz_io_uring_setup(0x118d4, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) unshare(0x2000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f72"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007001100000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 6.132119374s ago: executing program 3 (id=6726): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00f6000000000000000000000000bb1c8a06a85f12a4"], 0x20}}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.025573597s ago: executing program 3 (id=6727): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c77fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x41}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.764337149s ago: executing program 1 (id=6728): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xfbff, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 4.590525274s ago: executing program 3 (id=6729): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b50102030109021200"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xc3b, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x0, 0x6200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000181}, 0x40080c0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0xfffffffffffffffd, 0x0) 4.441098791s ago: executing program 2 (id=6730): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) gettid() bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000480)=@bloom_filter={0x1e, 0x100, 0x4, 0xfffffff9, 0x4600, 0xffffffffffffffff, 0x3dc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x3}, 0x50) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x3}) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x5393, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r5 = fanotify_init(0x200, 0x0) r6 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r7 = dup(r6) fanotify_mark(r5, 0x1, 0x48001059, r7, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="04170f06596146a2136b"], 0xa, 0x3) fchown(r7, 0x0, 0x0) 3.580103249s ago: executing program 1 (id=6731): epoll_create1(0x80000) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x24d2, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0xfffffffe, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x2}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x4000011) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) signalfd4(r0, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) 3.521558954s ago: executing program 4 (id=6732): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={0x0, 0xdd}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="e625373d9701c4698e7f75f4e39eaecc29", 0x11, 0x1, 0x0, 0x0) shutdown(r0, 0x1) 3.277045868s ago: executing program 4 (id=6733): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.243821051s ago: executing program 1 (id=6734): ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 3.135859832s ago: executing program 0 (id=6735): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="f001000000000000f8ffffffffffffff06000000000000000200000000000000c600000000000000080000000000000000000000030000000200000000000000ff2900000000000002000000000000000400000000000000000000000000000001000000000000000900000000000000050000000080000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05000000ff0f000000000000050000000000000006000000000000000200000000"], 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f0000001340)=""/139, 0x8b) 2.823589219s ago: executing program 1 (id=6736): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x20, 0x0, 0x0, 0x0) 2.524193703s ago: executing program 2 (id=6737): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0x128}}, {{0x0, 0x0, &(0x7f0000000e00), 0x0, 0x0, 0xf0}}], 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000b40)) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r8}) ioctl$VHOST_NET_SET_BACKEND(r6, 0xaf02, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, 0x0, 0x0) userfaultfd(0x80801) 2.43192284s ago: executing program 0 (id=6738): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x800) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.269868033s ago: executing program 4 (id=6739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x322000, 0x1000, 0xc}, 0x20) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.8288943s ago: executing program 1 (id=6740): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0), 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000440)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 1.387106844s ago: executing program 1 (id=6741): renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) dup(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.297891279s ago: executing program 3 (id=6742): sendmsg$key(0xffffffffffffffff, &(0x7f0000000840)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x5, 0x6, 0x33, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0xa, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x4010) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x119000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x40009, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.084044511s ago: executing program 3 (id=6743): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x8, 0x2, 0x0, @rand_addr, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0xa, 0x4}}}}}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x90}, 0x1, 0x7}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) 645.808348ms ago: executing program 0 (id=6744): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x1, &(0x7f0000000780)="e0"}], 0x1}) 115.688068ms ago: executing program 4 (id=6745): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000940)={0x28, 0x10000, 0x0, 0x0, 0x3337a9, 0xffffffffffffffff, 0x1, 0x136ba3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 2 (id=6746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x5761, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x45, 0x0, 0x7, 0xb}, {0x20, 0x0, 0x0, 0x7fff}, {0x0, 0x0, 0x0, 0xa}, {0x0, 0x2}, {0x6}]}) r8 = open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x18, 0x9, 0xa, 0x300, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_DESC={0x4}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): T5921] cdc_wdm 1-1:1.0: skipping garbage [ 2742.732887][ T5921] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2742.739942][ T5921] cdc_wdm 1-1:1.0: Unknown control protocol [ 2742.766469][T31984] udevd[31984]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2743.403179][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 2743.620387][ T5921] usb 1-1: USB disconnect, device number 89 [ 2744.865436][T32685] sctp: [Deprecated]: syz.2.6064 (pid 32685) Use of int in maxseg socket option. [ 2744.865436][T32685] Use struct sctp_assoc_value instead [ 2745.427894][T32688] netlink: 'syz.4.6065': attribute type 1 has an invalid length. [ 2746.062699][T32688] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2746.136162][T32690] bond7: (slave veth7): Enslaving as an active interface with a down link [ 2746.172556][T32696] binder: 32691:32696 ioctl c018620c 200000000000 returned -1 [ 2746.285013][T32693] bond7: entered allmulticast mode [ 2747.146713][T32708] EXT4-fs: Conflicting test_dummy_encryption options [ 2747.206569][T32708] fuse: Bad value for 'user_id' [ 2747.213401][T32708] fuse: Bad value for 'user_id' [ 2747.468769][T26102] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2747.644035][T26102] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2747.657871][T26102] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2747.677861][T26102] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2747.697880][T26102] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2747.728655][T26102] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2747.752635][T26102] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2747.797930][T26102] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2747.835125][T26102] usb 4-1: Product: syz [ 2747.842765][T26102] usb 4-1: Manufacturer: syz [ 2747.888970][T26102] cdc_wdm 4-1:1.0: skipping garbage [ 2747.895865][T26102] cdc_wdm 4-1:1.0: skipping garbage [ 2747.972134][T26102] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2747.994074][T26102] cdc_wdm 4-1:1.0: Unknown control protocol [ 2748.535048][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 2748.737069][T26102] usb 4-1: USB disconnect, device number 44 [ 2748.957821][T26101] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 2749.177128][T26101] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2749.186700][T26101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2749.449769][T26101] usb 5-1: Product: syz [ 2749.454147][T26101] usb 5-1: Manufacturer: syz [ 2749.459431][T26101] usb 5-1: SerialNumber: syz [ 2749.484498][T26101] usb 5-1: config 0 descriptor?? [ 2749.904668][T26101] airspy 5-1:0.0: Board ID: 00 [ 2749.917151][T26101] airspy 5-1:0.0: Firmware version: [ 2750.300687][T26101] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e [ 2750.357015][T26101] airspy 5-1:0.0: Registered as swradio24 [ 2750.390448][T26101] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2750.460777][T26101] usb 5-1: USB disconnect, device number 33 [ 2752.116629][T32766] binder: 32755:32766 ioctl c018620c 200000000000 returned -1 [ 2755.325490][T26100] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 2755.502087][T26100] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2755.536349][T26100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2755.564456][T26100] usb 2-1: Product: syz [ 2755.568954][T26100] usb 2-1: Manufacturer: syz [ 2755.573587][T26100] usb 2-1: SerialNumber: syz [ 2755.590472][T26100] usb 2-1: config 0 descriptor?? [ 2755.914289][ T30] audit: type=1800 audit(1765185765.116:3614): pid=344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6101" name="bus" dev="tmpfs" ino=6623 res=0 errno=0 [ 2755.943685][T26101] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2756.006057][T26100] airspy 2-1:0.0: Board ID: 00 [ 2756.015480][T26100] airspy 2-1:0.0: Firmware version: [ 2756.097944][T26101] usb 4-1: Using ep0 maxpacket: 8 [ 2756.104644][T26101] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 2756.113884][T26101] usb 4-1: config 0 has no interface number 0 [ 2756.120313][T26101] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2756.131724][T26101] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2756.144678][T26101] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2756.156635][T26101] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2756.170974][T26101] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2756.180572][T26101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2756.199089][T26101] usb 4-1: config 0 descriptor?? [ 2756.220938][T26101] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2756.267884][T26102] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2756.418143][T26102] usb 3-1: Using ep0 maxpacket: 8 [ 2756.424366][T26100] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 2756.435871][T26102] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2756.449873][T26102] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2756.461183][T26100] airspy 2-1:0.0: Registered as swradio24 [ 2756.466975][T26100] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2756.480895][T21857] usb 4-1: USB disconnect, device number 45 [ 2756.488151][T26102] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2756.499627][T26101] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2756.513841][T21857] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 2756.521472][T26102] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2756.534680][T26100] usb 2-1: USB disconnect, device number 124 [ 2756.545573][T26102] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2756.556509][T26102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2756.589922][T26102] hub 3-1:1.0: bad descriptor, ignoring hub [ 2756.603255][T26102] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2756.612534][T26102] cdc_wdm 3-1:1.0: skipping garbage [ 2756.618132][T26102] cdc_wdm 3-1:1.0: skipping garbage [ 2756.626290][T26102] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2756.633796][T26102] cdc_wdm 3-1:1.0: Unknown control protocol [ 2756.657853][T26101] usb 5-1: Using ep0 maxpacket: 16 [ 2756.665658][T26101] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2756.680355][T26101] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2756.690087][T26101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2756.698609][T26101] usb 5-1: Product: syz [ 2756.703115][T26101] usb 5-1: Manufacturer: syz [ 2756.709164][T26101] usb 5-1: SerialNumber: syz [ 2756.716342][T26101] usb 5-1: config 0 descriptor?? [ 2756.726651][T26101] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2756.739592][T26101] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 2757.159311][ T5921] usb 3-1: USB disconnect, device number 59 [ 2757.267947][ T362] binder: 353:362 ioctl c018620c 200000000000 returned -1 [ 2757.331185][T26101] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2757.364828][ T363] syz.1.6104 (363): attempted to duplicate a private mapping with mremap. This is not supported. [ 2757.758308][T26101] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2757.768372][T26101] em28xx 5-1:0.0: board has no eeprom [ 2758.047976][T26101] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2758.056038][T26101] em28xx 5-1:0.0: dvb set to bulk mode. [ 2758.062366][T26100] em28xx 5-1:0.0: Binding DVB extension [ 2758.077380][T26101] usb 5-1: USB disconnect, device number 34 [ 2758.109437][T26101] em28xx 5-1:0.0: Disconnecting em28xx [ 2758.192412][T26100] em28xx 5-1:0.0: Registering input extension [ 2758.213882][T26101] em28xx 5-1:0.0: Closing input extension [ 2758.273719][T26101] em28xx 5-1:0.0: Freeing device [ 2758.708977][ T378] netlink: 'syz.4.6111': attribute type 1 has an invalid length. [ 2758.915994][ T378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6111'. [ 2759.208875][ T384] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2759.272986][ T384] bond8: (slave bond9): making interface the new active one [ 2759.323505][ T384] bond8: (slave bond9): Enslaving as an active interface with an up link [ 2759.416146][ T378] bond8 (unregistering): (slave bond9): Releasing backup interface [ 2759.572425][ T378] bond8 (unregistering): Released all slaves [ 2760.349714][T26101] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 2760.534035][T26101] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2760.561933][T26101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2760.596300][T26101] usb 4-1: Product: syz [ 2760.606278][T26101] usb 4-1: Manufacturer: syz [ 2760.615519][T26101] usb 4-1: SerialNumber: syz [ 2760.878202][T26101] usb 4-1: config 0 descriptor?? [ 2761.373556][T26101] airspy 4-1:0.0: Board ID: 00 [ 2761.378684][T26101] airspy 4-1:0.0: Firmware version: [ 2761.778955][T26101] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 2761.877472][T26101] airspy 4-1:0.0: Registered as swradio24 [ 2761.883866][T26101] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2761.940690][T26101] usb 4-1: USB disconnect, device number 46 [ 2762.038789][ T430] fuse: Bad value for 'fd' [ 2762.075449][ T430] bond0: entered promiscuous mode [ 2762.109522][ T430] bond_slave_0: entered promiscuous mode [ 2762.138510][ T430] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2763.033916][ T447] kvm: MONITOR instruction emulated as NOP! [ 2763.608307][ T30] audit: type=1326 audit(1765185772.786:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=446 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2763.712301][ T30] audit: type=1326 audit(1765185772.786:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=446 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2763.777866][ T30] audit: type=1326 audit(1765185772.786:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=446 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2763.853227][ T30] audit: type=1326 audit(1765185772.836:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=446 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2763.959503][ T30] audit: type=1326 audit(1765185772.836:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=446 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2764.017917][ T30] audit: type=1326 audit(1765185772.836:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=446 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2764.078935][ T455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6128'. [ 2764.092310][ T30] audit: type=1326 audit(1765185772.836:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=446 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2764.156282][ T30] audit: type=1326 audit(1765185772.836:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=446 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2764.224883][ T30] audit: type=1326 audit(1765185772.836:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=446 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2764.291861][ T30] audit: type=1326 audit(1765185772.836:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=446 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2765.918262][ T130] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2766.089863][ T130] usb 2-1: Using ep0 maxpacket: 8 [ 2766.097186][ T130] usb 2-1: config 162 has an invalid interface number: 79 but max is 1 [ 2766.106722][ T130] usb 2-1: config 162 has an invalid interface number: 183 but max is 1 [ 2766.137947][T26101] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 2766.177940][ T130] usb 2-1: config 162 has no interface number 0 [ 2766.191756][ T130] usb 2-1: config 162 has no interface number 1 [ 2766.204999][ T130] usb 2-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2766.225515][ T130] usb 2-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2766.247174][ T130] usb 2-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2766.280370][ T130] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 2766.307844][ T130] usb 2-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2766.319075][ T130] usb 2-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 2766.341664][T26101] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2766.352716][T26101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2766.373008][ T130] usb 2-1: config 162 interface 79 has no altsetting 0 [ 2766.380455][T26101] usb 3-1: Product: syz [ 2766.390563][ T130] usb 2-1: config 162 interface 183 has no altsetting 0 [ 2766.394960][T26101] usb 3-1: Manufacturer: syz [ 2766.411876][T26101] usb 3-1: SerialNumber: syz [ 2766.413745][ T130] usb 2-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 2766.430099][ T130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2766.467779][ T130] usb 2-1: Product: syz [ 2766.471974][T26101] usb 3-1: config 0 descriptor?? [ 2766.477069][ T130] usb 2-1: Manufacturer: syz [ 2766.484253][ T130] usb 2-1: SerialNumber: syz [ 2766.621019][ T487] random: crng reseeded on system resumption [ 2766.874680][ T130] pl2303 2-1:162.79: required endpoints missing [ 2766.929604][T26101] airspy 3-1:0.0: Board ID: 00 [ 2766.939212][T26101] airspy 3-1:0.0: Firmware version: [ 2766.945426][ T130] pl2303 2-1:162.183: pl2303 converter detected [ 2766.961531][ T130] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 2766.991729][ T130] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 2767.013072][ T130] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 2767.037840][ T130] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 2767.066705][ T130] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 2767.094682][ T130] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 2767.125001][ T130] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 2767.152051][ T130] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 2767.175775][ T130] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 2767.199167][ T130] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 2767.214481][ T130] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 2767.243238][ T130] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 2767.281032][ T130] usb 2-1: USB disconnect, device number 125 [ 2767.321030][ T130] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 2767.325207][T26101] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 2767.343375][ T130] pl2303 2-1:162.183: device disconnected [ 2767.344196][T26101] airspy 3-1:0.0: Registered as swradio24 [ 2767.376208][T26101] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2767.433707][T26101] usb 3-1: USB disconnect, device number 60 [ 2769.848305][T26100] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2770.018141][T26100] usb 5-1: Using ep0 maxpacket: 32 [ 2770.038089][T26100] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 2770.063428][T26100] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2770.084856][T26100] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2770.096644][T26100] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2770.112237][T26100] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2770.128831][T26100] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2770.138388][T26100] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2770.147182][T26100] usb 5-1: Product: syz [ 2770.153642][T26100] usb 5-1: Manufacturer: syz [ 2770.158641][T26100] usb 5-1: SerialNumber: syz [ 2770.181135][T26100] usb 5-1: config 0 descriptor?? [ 2770.200779][T26100] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2770.226465][T26100] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2770.412124][ T533] netlink: 'syz.1.6150': attribute type 1 has an invalid length. [ 2770.639969][ T130] usb 5-1: USB disconnect, device number 35 [ 2770.640031][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 2770.655016][ T520] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2770.664150][ T539] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 2770.695774][ T130] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 2770.743792][ T533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2770.930356][ T536] bond4: (slave veth5): Enslaving as an active interface with a down link [ 2771.083503][ T538] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 2771.283323][ T542] vlan1: entered allmulticast mode [ 2771.316439][ T542] batadv_slave_1: entered allmulticast mode [ 2771.333869][ T542] bond4: (slave vlan1): Opening slave failed [ 2771.704615][ T562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6157'. [ 2771.977600][ T571] netlink: zone id is out of range [ 2772.048111][T26100] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2772.162102][ T571] netlink: set zone limit has 4 unknown bytes [ 2772.230555][T26100] usb 2-1: too many configurations: 78, using maximum allowed: 8 [ 2772.271519][T26100] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2772.291300][T26100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2772.315260][T26100] usb 2-1: Product: syz [ 2772.326435][T26100] usb 2-1: Manufacturer: syz [ 2772.339968][T26100] usb 2-1: SerialNumber: syz [ 2772.387139][T26100] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2772.418991][T26101] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2772.845345][ T567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2772.866788][ T567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2772.964093][ T576] dvmrp0: entered allmulticast mode [ 2773.288669][ T130] usb 2-1: USB disconnect, device number 126 [ 2773.532348][T26101] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2773.560548][T26101] ath9k_htc: Failed to initialize the device [ 2773.588580][ T130] usb 2-1: ath9k_htc: USB layer deinitialized [ 2773.637898][T26100] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2773.798143][T26100] usb 5-1: Using ep0 maxpacket: 32 [ 2773.824094][T26100] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2773.840940][T26100] usb 5-1: no configurations [ 2773.872103][T26100] usb 5-1: can't read configurations, error -22 [ 2773.928212][ T5921] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2774.100599][ T5921] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 2774.120154][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2774.181116][ T5921] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2774.210280][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2774.224946][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2774.234261][ T5921] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2774.263825][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2774.281366][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2774.292558][ T5921] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2774.315992][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2774.333037][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2774.344826][ T5921] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2774.400646][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2774.425502][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2774.445647][ T5921] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2774.485710][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2774.496921][ T604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6170'. [ 2774.651479][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2774.661916][ T5921] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2774.674185][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2774.684621][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2774.694261][ T5921] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2774.705825][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2774.713891][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2774.733346][ T5921] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2774.744731][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2774.754655][ T5921] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2774.767176][ T5921] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2774.777836][ T5921] usb 1-1: Product: syz [ 2774.782808][ T5921] usb 1-1: Manufacturer: syz [ 2774.788451][ T5921] usb 1-1: SerialNumber: syz [ 2774.850703][ T5921] usb 1-1: config 0 descriptor?? [ 2774.861968][ T5921] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 2775.069192][ T5921] usb 1-1: USB disconnect, device number 90 [ 2775.087022][ T5921] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 2775.098375][T26100] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2775.258142][T26100] usb 5-1: Using ep0 maxpacket: 32 [ 2775.292759][T26100] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2775.361458][T26100] usb 5-1: config 0 has no interface number 0 [ 2775.367939][T26101] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2775.456694][T26100] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2775.465930][T26100] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2775.486304][T26100] usb 5-1: Product: syz [ 2775.496524][T26100] usb 5-1: Manufacturer: syz [ 2775.505160][T26100] usb 5-1: SerialNumber: syz [ 2775.518956][T26100] usb 5-1: config 0 descriptor?? [ 2775.536066][T26100] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2775.547508][T26100] usb 5-1: selecting invalid altsetting 1 [ 2775.553810][T26101] usb 3-1: Using ep0 maxpacket: 32 [ 2775.570267][T26100] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2775.581021][T26101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2775.591045][T26100] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2775.603238][T26100] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2775.612409][T26101] usb 3-1: config 0 has no interfaces? [ 2775.619283][T26100] usb 5-1: media controller created [ 2775.626750][T26101] usb 3-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 2775.646237][T26101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2775.672167][T26101] usb 3-1: Product: syz [ 2775.707286][T26100] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2775.726782][T26101] usb 3-1: Manufacturer: syz [ 2775.736603][T26101] usb 3-1: SerialNumber: syz [ 2775.752718][T26101] usb 3-1: config 0 descriptor?? [ 2775.789096][T26100] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 2775.803103][T26100] zl10353_read_register: readreg error (reg=127, ret==-32) [ 2775.981911][T26100] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2776.016954][ T622] syzkaller0: entered promiscuous mode [ 2776.022847][ T622] syzkaller0: entered allmulticast mode [ 2776.152248][T26101] usb 3-1: USB disconnect, device number 61 [ 2776.243383][T26100] usb 5-1: USB disconnect, device number 38 [ 2776.783192][ T628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6175'. [ 2776.978166][ T628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6175'. [ 2777.331011][ T636] syzkaller0: entered promiscuous mode [ 2777.362093][ T636] syzkaller0: entered allmulticast mode [ 2777.673552][ T640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6180'. [ 2777.751006][ T640] netlink: 'syz.1.6180': attribute type 7 has an invalid length. [ 2777.810433][ T640] netlink: 'syz.1.6180': attribute type 8 has an invalid length. [ 2777.923162][ T640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6180'. [ 2777.959582][ T640] team0: entered promiscuous mode [ 2777.977076][ T640] team_slave_0: entered promiscuous mode [ 2777.987398][ T640] team_slave_1: entered promiscuous mode [ 2777.998766][ T640] batadv0: entered promiscuous mode [ 2778.028743][ T640] batadv1: entered promiscuous mode [ 2778.038129][ T640] batadv2: entered promiscuous mode [ 2778.058398][ T640] batadv4: entered promiscuous mode [ 2778.078222][ T640] team0: left promiscuous mode [ 2778.086664][ T640] team_slave_0: left promiscuous mode [ 2778.110129][ T640] team_slave_1: left promiscuous mode [ 2778.128090][ T640] batadv0: left promiscuous mode [ 2778.139945][ T640] batadv1: left promiscuous mode [ 2778.159635][ T640] batadv2: left promiscuous mode [ 2778.190528][ T640] batadv4: left promiscuous mode [ 2778.419671][ T645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6182'. [ 2778.442533][ T645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6182'. [ 2778.546312][ T645] syzkaller0: entered promiscuous mode [ 2778.592065][ T645] syzkaller0: entered allmulticast mode [ 2779.132854][ T656] binder: 653:656 ioctl c018620c 200000000000 returned -1 [ 2779.919268][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6192'. [ 2780.028585][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2780.034946][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2782.607864][T21857] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 2782.774196][T21857] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 2782.785547][T21857] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 2782.797422][T21857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2782.806975][T21857] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2782.821994][T21857] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2782.831281][T21857] usb 4-1: Product: syz [ 2782.842504][T21857] usb 4-1: Manufacturer: syz [ 2782.851494][T21857] usb 4-1: SerialNumber: syz [ 2782.869271][T21857] usb 4-1: config 0 descriptor?? [ 2782.901578][T21857] usb 4-1: selecting invalid altsetting 0 [ 2783.197076][T21857] usb 4-1: USB disconnect, device number 47 [ 2783.758582][ T717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6202'. [ 2785.291799][ T717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2785.526606][ T717] bond_slave_0: left promiscuous mode [ 2785.558976][ T717] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2785.616637][ T717] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 2785.733521][ T717] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 2785.752688][ T717] bond0 (unregistering): Released all slaves [ 2785.996821][ T736] binder: 732:736 ioctl c018620c 200000000000 returned -1 [ 2788.238586][ T5921] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2788.467140][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2788.519125][ T5921] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 2788.667799][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2788.728470][ T5921] usb 5-1: config 0 descriptor?? [ 2788.939601][ T753] binder: 748:753 ioctl c0306201 0 returned -14 [ 2789.273209][ T5921] logitech-djreceiver 0003:046D:C71F.0041: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 2789.407057][ T763] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6209'. [ 2789.417136][ T763] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6209'. [ 2790.609675][ T5921] usb 5-1: reset high-speed USB device number 39 using dummy_hcd [ 2792.575205][ T788] tipc: Enabled bearer , priority 0 [ 2792.636309][ T788] tipc: Resetting bearer [ 2792.970351][ T130] usb 5-1: USB disconnect, device number 39 [ 2793.443085][ T801] tipc: Enabling of bearer rejected, already enabled [ 2793.736087][ T801] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 2794.154288][ T130] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2794.437829][ T130] usb 3-1: Using ep0 maxpacket: 16 [ 2794.445162][ T130] usb 3-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 2794.473503][ T130] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2794.497829][ T5921] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 2794.578012][ T130] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2794.617887][ T130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2794.666395][ T130] usb 3-1: config 0 descriptor?? [ 2794.714948][ T5921] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2794.728224][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2794.736305][ T5921] usb 5-1: Product: syz [ 2794.767861][ T5921] usb 5-1: Manufacturer: syz [ 2794.772567][ T5921] usb 5-1: SerialNumber: syz [ 2794.819088][ T5921] usb 5-1: config 0 descriptor?? [ 2794.900265][ T805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2794.912320][ T805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2794.942325][ T805] openvswitch: netlink: Duplicate or invalid key (type 0). [ 2794.949790][ T805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2794.961566][ T130] usb 3-1: string descriptor 0 read error: -71 [ 2795.011813][ T130] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2795.042074][ T130] usb 3-1: USB disconnect, device number 62 [ 2795.275408][ T5921] airspy 5-1:0.0: Board ID: 00 [ 2795.285762][ T5921] airspy 5-1:0.0: Firmware version: [ 2796.097207][ T824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6225'. [ 2796.728398][ T5921] airspy 5-1:0.0: usb_control_msg() failed -110 request 12 [ 2796.737267][ T5921] airspy 5-1:0.0: Registered as swradio24 [ 2796.753685][ T5921] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2796.969662][ T833] binder: BINDER_SET_CONTEXT_MGR already set [ 2796.976584][ T833] binder: 829:833 ioctl 4018620d 2000000000c0 returned -16 [ 2797.572546][ T5921] usb 5-1: USB disconnect, device number 40 [ 2797.940333][ T846] fuse: Bad value for 'user_id' [ 2797.955543][ T846] fuse: Bad value for 'user_id' [ 2797.987410][ T846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6231'. [ 2798.432456][ T848] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6230'. [ 2798.480047][ T847] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6230'. [ 2799.945525][ T863] vlan2: entered promiscuous mode [ 2799.955691][ T863] batadv0: entered promiscuous mode [ 2800.668403][ T5921] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2800.830182][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2800.856991][ T5921] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2800.866962][ T130] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2800.898347][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2800.938409][ T5921] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 2801.013953][ T5921] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 2801.053441][ T5921] usb 1-1: Manufacturer: syz [ 2801.097548][ T5921] usb 1-1: config 0 descriptor?? [ 2801.152657][ T130] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2801.168649][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2801.183890][ T130] usb 5-1: Product: syz [ 2801.196688][ T5921] smsusb:smsusb_probe: board id=9, interface number 0 [ 2801.203821][ T130] usb 5-1: Manufacturer: syz [ 2801.211388][ T130] usb 5-1: SerialNumber: syz [ 2801.216956][ T5921] smsusb:smsusb_probe: Device initialized with return code -19 [ 2801.230060][ T130] usb 5-1: config 0 descriptor?? [ 2801.285693][ T130] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2801.871172][ T130] gspca_sunplus: reg_r err -110 [ 2801.876176][ T130] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 2802.058633][T21857] usb 5-1: USB disconnect, device number 41 [ 2802.238145][T26100] usb 1-1: USB disconnect, device number 91 [ 2802.898408][ T901] batman_adv: batadv0: Interface deactivated: dummy0 [ 2802.910894][ T901] batman_adv: batadv0: Removing interface: dummy0 [ 2803.138400][ T130] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2803.288196][ T5921] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 2803.308191][ T130] usb 5-1: Using ep0 maxpacket: 16 [ 2803.315844][ T130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2803.328267][ T130] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2803.337368][ T130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2803.388201][ T130] usb 5-1: config 0 descriptor?? [ 2803.412477][ T901] bond0: (slave bond_slave_0): Releasing backup interface [ 2803.513125][ T5921] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2803.528696][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2803.541333][ T5921] usb 2-1: Product: syz [ 2803.545569][ T5921] usb 2-1: Manufacturer: syz [ 2803.553154][ T5921] usb 2-1: SerialNumber: syz [ 2803.570118][ T5921] usb 2-1: config 0 descriptor?? [ 2803.624231][ T901] team0: Port device team_slave_0 removed [ 2803.656193][ T901] team0: Port device team_slave_1 removed [ 2803.671195][ T901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2803.679096][T26103] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2803.717174][ T901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2803.809633][ T901] bond0: (slave netdevsim0): Releasing backup interface [ 2803.842998][ T130] mcp2221 0003:04D8:00DD.0042: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 2803.855336][T26103] usb 3-1: too many configurations: 78, using maximum allowed: 8 [ 2803.896578][ T901] team0: Port device batadv2 removed [ 2803.920189][T26103] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2803.936361][T26103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2803.967272][T26103] usb 3-1: Product: syz [ 2803.998903][ T901] team0: Port device batadv3 removed [ 2804.017210][T26103] usb 3-1: Manufacturer: syz [ 2804.030673][ T5921] airspy 2-1:0.0: Board ID: 00 [ 2804.039052][T26103] usb 3-1: SerialNumber: syz [ 2804.057313][ T901] bond2: (slave gre1): Releasing backup interface [ 2804.061582][ T5921] airspy 2-1:0.0: Firmware version: [ 2804.103276][T26103] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2804.136030][ T901] team0: Port device batadv4 removed [ 2804.151095][ T130] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2804.244519][ T901] team0: Port device batadv5 removed [ 2804.294676][ T901] bond0: (slave vlan1): Releasing backup interface [ 2804.375320][T28366] tipc: Resetting bearer [ 2804.627231][ T910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2804.699310][ T910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2804.788058][T21857] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2804.947976][T21857] usb 4-1: Using ep0 maxpacket: 8 [ 2804.978021][T21857] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2804.994722][T21857] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2805.063645][T21857] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2805.099670][T21857] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2805.143320][ T927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6246'. [ 2805.194223][T21857] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2805.214781][T26100] usb 3-1: USB disconnect, device number 63 [ 2805.252764][T21857] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2805.261010][T21857] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2805.282517][T21857] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2805.298768][ T130] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2805.319527][T21857] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2805.331799][ T130] ath9k_htc: Failed to initialize the device [ 2805.354105][T21857] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2805.384312][T26100] usb 3-1: ath9k_htc: USB layer deinitialized [ 2805.401800][T21857] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2805.415470][T21857] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2805.444074][T21857] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2805.459190][ T5921] airspy 2-1:0.0: usb_control_msg() failed -110 request 12 [ 2805.494496][T21857] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2805.518799][ T5921] airspy 2-1:0.0: Registered as swradio24 [ 2805.531709][T21857] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2805.531757][ T5921] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2805.848172][T21857] usb 4-1: string descriptor 0 read error: -22 [ 2805.908173][T21857] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2805.942906][T26100] usb 5-1: USB disconnect, device number 42 [ 2805.960130][T21857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2806.023182][T21857] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2806.229240][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 2806.229261][ T30] audit: type=1326 audit(1765185815.396:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=936 comm="syz.2.6248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f074a78f749 code=0x0 [ 2806.459906][T14405] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 2807.154957][ T130] usb 2-1: USB disconnect, device number 127 [ 2807.453991][ T958] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2807.750616][ T964] binder: 960:964 ioctl c018620c 200000000000 returned -1 [ 2809.106515][ T974] netlink: 'syz.2.6253': attribute type 2 has an invalid length. [ 2810.855523][ T130] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 2810.903872][ T130] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2810.959347][ T130] usb 4-1: USB disconnect, device number 48 [ 2811.948294][T21857] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2812.098641][T21857] usb 3-1: too many configurations: 78, using maximum allowed: 8 [ 2812.131926][T21857] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2812.302722][T21857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2812.520758][T21857] usb 3-1: Product: syz [ 2812.525005][T21857] usb 3-1: Manufacturer: syz [ 2812.538176][T21857] usb 3-1: SerialNumber: syz [ 2812.634357][T21857] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2812.683091][T26100] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2812.794542][T26101] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2812.937994][T26101] usb 5-1: device descriptor read/64, error -71 [ 2813.150646][ T998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2813.166796][ T998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2813.317105][T26101] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2813.457963][T26101] usb 5-1: device descriptor read/64, error -71 [ 2813.568312][T26101] usb usb5-port1: attempt power cycle [ 2813.767952][T26100] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2813.791323][ T130] usb 3-1: USB disconnect, device number 64 [ 2813.800852][T26100] ath9k_htc: Failed to initialize the device [ 2813.838640][ T130] usb 3-1: ath9k_htc: USB layer deinitialized [ 2813.907804][T26101] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2813.929359][T26101] usb 5-1: device descriptor read/8, error -71 [ 2814.168019][T26101] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2814.258295][T26101] usb 5-1: device descriptor read/8, error -71 [ 2814.368108][T26101] usb usb5-port1: unable to enumerate USB device [ 2814.408713][ T130] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2814.599596][ T130] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 2814.657903][ T130] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2814.670984][ T130] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2814.690747][ T130] usb 1-1: config 220 has no interface number 2 [ 2814.711429][ T130] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2814.760649][ T130] usb 1-1: config 220 interface 0 has no altsetting 0 [ 2814.767493][ T130] usb 1-1: config 220 interface 76 has no altsetting 0 [ 2814.783391][ T130] usb 1-1: config 220 interface 1 has no altsetting 0 [ 2814.837574][ T130] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2814.851909][ T130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2814.865932][ T130] usb 1-1: Product: syz [ 2814.901681][ T130] usb 1-1: Manufacturer: syz [ 2814.907043][ T130] usb 1-1: SerialNumber: syz [ 2815.888004][ T5921] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2816.937799][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 2816.947874][ T5921] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 2816.967878][ T5921] usb 3-1: config 0 has no interface number 0 [ 2816.997968][ T5921] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 2817.007164][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2817.017326][ T5921] usb 3-1: Product: syz [ 2817.024112][ T5921] usb 3-1: Manufacturer: syz [ 2817.034270][ T5921] usb 3-1: SerialNumber: syz [ 2817.076119][ T5921] usb 3-1: config 0 descriptor?? [ 2817.170312][ T130] usb 1-1: selecting invalid altsetting 0 [ 2817.180211][ T130] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2817.248642][ T130] uvcvideo 1-1:220.0: No valid video chain found. [ 2817.255785][ T5921] ftdi_sio 3-1:0.217: FTDI USB Serial Device converter detected [ 2817.383425][ T5921] usb 3-1: Detected SIO [ 2817.395088][ T5921] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2817.407331][ T130] usb 1-1: selecting invalid altsetting 0 [ 2817.430939][ T130] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 2817.488318][ T130] usb 1-1: USB disconnect, device number 92 [ 2818.197853][T26101] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2818.220815][ T1057] batadv_slave_0: entered promiscuous mode [ 2818.360425][T26101] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2818.381835][T26101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2818.497653][T26101] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2818.518249][T26101] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2818.545450][T26101] usb 2-1: Manufacturer: syz [ 2818.584548][T26101] usb 2-1: config 0 descriptor?? [ 2818.829304][T26101] rc_core: IR keymap rc-hauppauge not found [ 2818.844133][T26101] Registered IR keymap rc-empty [ 2818.877579][T26101] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2818.958278][T26101] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input106 [ 2819.083340][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 2819.217588][ T130] usb 3-1: USB disconnect, device number 65 [ 2819.231896][ T130] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2819.347078][ T130] ftdi_sio 3-1:0.217: device disconnected [ 2820.765697][ T130] usb 2-1: USB disconnect, device number 2 [ 2824.077973][ T1110] trusted_key: encrypted_key: key user:syz not found [ 2824.159124][ T130] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2824.368213][ T130] usb 2-1: Using ep0 maxpacket: 32 [ 2824.382905][ T130] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2824.417953][ T130] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2824.448201][ T130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2824.506133][ T130] usb 2-1: config 0 descriptor?? [ 2824.530492][ T130] hub 2-1:0.0: bad descriptor, ignoring hub [ 2824.544731][ T130] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2827.438566][T26101] usb 2-1: USB disconnect, device number 3 [ 2827.817881][ T130] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 2827.999535][ T130] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2828.020013][ T130] usb 5-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2828.241196][ T130] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2828.257979][ T130] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice=4d.00 [ 2828.417036][ T130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2828.550550][ T130] usb 5-1: config 0 descriptor?? [ 2828.711942][ T130] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2830.398237][ T130] usb 5-1: USB disconnect, device number 47 [ 2832.817052][ T1191] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2832.883051][ T1191] create_pit_timer: 9 callbacks suppressed [ 2832.883070][ T1191] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2832.948814][ T1191] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6291'. [ 2836.357948][ T130] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2836.507818][ T130] usb 5-1: Using ep0 maxpacket: 16 [ 2836.522965][ T130] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2836.537292][ T130] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2836.640541][ T130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2836.720170][ T130] usb 5-1: config 0 descriptor?? [ 2837.070723][ T130] usb 5-1: USB disconnect, device number 48 [ 2840.799139][ T1269] bond0: Removing last ns target with arp_interval on [ 2841.452965][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2841.459390][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2844.237895][ T130] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2844.363672][ T1305] program syz.0.6313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2844.375887][ T1305] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2844.408246][ T130] usb 3-1: Using ep0 maxpacket: 16 [ 2844.426013][ T1307] random: crng reseeded on system resumption [ 2844.510355][ T1307] fuse: Bad value for 'fd' [ 2844.548665][ T130] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2844.560601][ T130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2844.572806][ T130] usb 3-1: Product: syz [ 2844.580441][ T130] usb 3-1: Manufacturer: syz [ 2844.599579][ T130] usb 3-1: SerialNumber: syz [ 2844.620481][ T130] usb 3-1: config 0 descriptor?? [ 2844.860913][ T5921] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2845.048311][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 2845.056127][ T5921] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2845.068811][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2845.091734][ T130] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2845.103096][ T130] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2845.114638][ T130] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2845.123745][ T5921] usb 5-1: config 0 descriptor?? [ 2845.130785][ T130] usb 3-1: media controller created [ 2845.196005][ T130] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2845.278776][ T130] zl10353_read_register: readreg error (reg=127, ret==0) [ 2845.282754][ T1296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2845.287019][ T130] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2845.308861][ T130] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2845.328577][ T1296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2845.354284][ T5921] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 2845.364752][ T1307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2845.389751][ T1307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2845.406540][ T5921] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2845.439874][ T5921] dib0700: firmware download failed at 7 with -22 [ 2845.501958][T26100] usb 5-1: USB disconnect, device number 49 [ 2845.555466][ T1296] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6312'. [ 2845.572668][T26101] usb 3-1: USB disconnect, device number 66 [ 2845.762482][T26101] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2847.611816][ T1337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6320'. [ 2848.343576][ T30] audit: type=1326 audit(1765185857.476:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1338 comm="syz.1.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2848.371347][ T30] audit: type=1326 audit(1765185857.476:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1338 comm="syz.1.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2848.475616][ T30] audit: type=1326 audit(1765185857.476:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1338 comm="syz.1.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1f9af8de97 code=0x7ffc0000 [ 2848.579552][ T30] audit: type=1326 audit(1765185857.486:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1338 comm="syz.1.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2848.669846][ T30] audit: type=1326 audit(1765185857.486:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1338 comm="syz.1.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2848.838485][ T30] audit: type=1326 audit(1765185857.486:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1338 comm="syz.1.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2848.922280][ T30] audit: type=1326 audit(1765185857.486:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1338 comm="syz.1.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2849.027842][ T30] audit: type=1326 audit(1765185857.486:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1338 comm="syz.1.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2849.239990][ T1346] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6322'. [ 2849.267892][ T30] audit: type=1326 audit(1765185857.486:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1338 comm="syz.1.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2849.346530][ T30] audit: type=1326 audit(1765185857.486:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1338 comm="syz.1.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9af8f749 code=0x7ffc0000 [ 2850.948272][ T5921] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2851.108266][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 2851.118440][ T5921] usb 4-1: config 0 has no interfaces? [ 2851.130099][ T5921] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2851.139700][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2851.167504][ T5921] usb 4-1: Product: syz [ 2851.179976][ T5921] usb 4-1: Manufacturer: syz [ 2851.226144][ T5921] usb 4-1: SerialNumber: syz [ 2851.245735][ T5921] usb 4-1: config 0 descriptor?? [ 2853.314426][ T1377] binder: 1371:1377 ioctl c018620c 200000000000 returned -1 [ 2853.824970][T26101] usb 4-1: USB disconnect, device number 49 [ 2854.867963][T26100] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2855.058134][T26100] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2855.068345][T26100] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2855.082228][T26100] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2855.092104][T26100] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2855.151090][T26100] usb 2-1: Manufacturer: syz [ 2855.252475][T26100] usb 2-1: config 0 descriptor?? [ 2855.437799][T26100] rc_core: IR keymap rc-hauppauge not found [ 2855.457422][T26100] Registered IR keymap rc-empty [ 2855.472263][T26100] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2855.569725][T26100] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input107 [ 2856.868118][ T1401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6332'. [ 2856.878707][ T1401] netlink: 'syz.1.6332': attribute type 13 has an invalid length. [ 2856.895546][ T1401] netlink: 'syz.1.6332': attribute type 27 has an invalid length. [ 2859.553126][T26100] usb 2-1: USB disconnect, device number 4 [ 2859.733159][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2859.733179][ T30] audit: type=1326 audit(1765185868.936:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1416 comm="syz.4.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58698f749 code=0x7ffc0000 [ 2859.964423][ T30] audit: type=1326 audit(1765185868.976:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1416 comm="syz.4.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58698f749 code=0x7ffc0000 [ 2860.052353][ T30] audit: type=1326 audit(1765185868.996:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1416 comm="syz.4.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb58698f749 code=0x7ffc0000 [ 2860.116584][ T30] audit: type=1326 audit(1765185868.996:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1416 comm="syz.4.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58698f749 code=0x7ffc0000 [ 2860.253792][ T30] audit: type=1326 audit(1765185868.996:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1416 comm="syz.4.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58698f749 code=0x7ffc0000 [ 2860.414201][ T30] audit: type=1326 audit(1765185868.996:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1416 comm="syz.4.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb58698f749 code=0x7ffc0000 [ 2860.440707][ T30] audit: type=1326 audit(1765185868.996:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1416 comm="syz.4.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58698f749 code=0x7ffc0000 [ 2860.568376][ T30] audit: type=1326 audit(1765185868.996:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1416 comm="syz.4.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58698f749 code=0x7ffc0000 [ 2860.768221][ T30] audit: type=1326 audit(1765185868.996:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1416 comm="syz.4.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb58698f749 code=0x7ffc0000 [ 2861.754185][ T30] audit: type=1326 audit(1765185868.996:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1416 comm="syz.4.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58698f749 code=0x7ffc0000 [ 2861.983444][ T1447] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6342'. [ 2863.408145][ T1455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6344'. [ 2866.218695][ T130] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2866.438046][ T130] usb 1-1: Using ep0 maxpacket: 32 [ 2866.461325][ T130] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 2866.489707][ T130] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2866.532057][ T130] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2866.587866][ T130] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2866.656341][ T130] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2866.718419][ T130] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2866.743560][ T130] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2866.763876][ T130] usb 1-1: Product: syz [ 2866.785942][ T130] usb 1-1: Manufacturer: syz [ 2866.799622][ T130] usb 1-1: SerialNumber: syz [ 2866.826678][ T130] usb 1-1: config 0 descriptor?? [ 2866.848244][ T130] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2866.881143][ T130] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2867.363062][T26100] usb 1-1: USB disconnect, device number 93 [ 2867.369295][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 2867.575811][T26100] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 2868.184767][ T1493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2868.373446][ T1493] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2869.515596][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 2869.516782][ T30] audit: type=1326 audit(1765185878.486:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1497 comm="syz.2.6352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f074a78f749 code=0x0 [ 2870.498049][T26101] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2870.717880][T26101] usb 2-1: Using ep0 maxpacket: 32 [ 2870.726233][T26101] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2870.740410][T26101] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2870.750713][T26101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2870.759189][T26101] usb 2-1: Product: syz [ 2870.763893][T26101] usb 2-1: Manufacturer: syz [ 2870.773667][T26101] usb 2-1: SerialNumber: syz [ 2870.786047][T26101] usb 2-1: config 0 descriptor?? [ 2871.061297][ T1524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6356'. [ 2872.505944][T26101] gs_usb 2-1:0.0: Couldn't get device config: (err=-110) [ 2872.514984][T26100] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 2872.534562][T26101] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 2872.564684][T26100] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2874.562677][T26100] usb 2-1: USB disconnect, device number 5 [ 2875.235343][ T1555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6362'. [ 2876.020109][ T1563] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2876.587941][ T130] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 2876.760796][ T130] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 2876.777752][ T130] usb 5-1: config 8 has no interface number 0 [ 2876.801088][ T130] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2876.865859][ T130] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid maxpacket 51260, setting to 64 [ 2876.915207][ T130] usb 5-1: config 8 interface 177 has no altsetting 0 [ 2876.959075][ T130] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2877.006250][ T130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2877.148927][ T1563] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2877.874866][ T1574] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2877.898846][ T1574] team0: Port device batadv2 added [ 2878.045604][ T1577] hub 9-0:1.0: USB hub found [ 2878.052822][ T1577] hub 9-0:1.0: 1 port detected [ 2879.167931][T26100] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2879.358487][T26100] usb 3-1: Using ep0 maxpacket: 16 [ 2879.401636][T26100] usb 3-1: config 0 has no interfaces? [ 2879.442068][T26100] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2879.552823][T26100] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2879.594932][T26100] usb 3-1: Manufacturer: syz [ 2879.616225][T26100] usb 3-1: config 0 descriptor?? [ 2880.923838][ T130] usb 5-1: string descriptor 0 read error: -71 [ 2881.007627][ T130] ir_toy 5-1:8.177: required endpoints not found [ 2881.106156][ T1595] bond0: (slave bond_slave_0): Releasing backup interface [ 2881.190656][ T1595] bond_slave_0: left promiscuous mode [ 2881.197267][ T130] usb 5-1: USB disconnect, device number 50 [ 2881.245864][ T1595] bond0: (slave bond_slave_1): Releasing backup interface [ 2881.347045][ T1595] bond_slave_1: left promiscuous mode [ 2881.381690][ T1595] team0: Port device team_slave_0 removed [ 2881.469870][ T1595] team0: Port device team_slave_1 removed [ 2881.839905][ T1595] bond1: (slave gretap2): Releasing active interface [ 2881.956883][ T5921] usb 3-1: USB disconnect, device number 67 [ 2881.971951][ T1595] team0: Port device batadv0 removed [ 2881.996874][ T1595] team0: Port device batadv1 removed [ 2882.023399][ T1595] team0: Port device batadv2 removed [ 2883.700977][ T30] audit: type=1326 audit(1765185892.686:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2883.769499][ T30] audit: type=1326 audit(1765185892.686:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2883.793217][ T30] audit: type=1326 audit(1765185892.686:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2883.816354][ T30] audit: type=1326 audit(1765185892.686:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2883.839105][ T130] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 2883.923485][ T30] audit: type=1326 audit(1765185892.686:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2884.034631][ T30] audit: type=1326 audit(1765185892.696:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2884.319668][ T130] usb 3-1: Invalid ep0 maxpacket: 64 [ 2884.368699][ T1643] netlink: 'syz.1.6378': attribute type 10 has an invalid length. [ 2884.517821][ T130] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 2884.607787][ T30] audit: type=1326 audit(1765185892.696:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2884.707782][ T130] usb 3-1: Invalid ep0 maxpacket: 64 [ 2884.731973][ T130] usb usb3-port1: attempt power cycle [ 2884.758080][ T30] audit: type=1326 audit(1765185892.696:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2884.825635][ T30] audit: type=1326 audit(1765185892.696:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2885.002152][ T30] audit: type=1326 audit(1765185892.696:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2885.088214][ T130] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 2885.252776][ T130] usb 3-1: Invalid ep0 maxpacket: 64 [ 2885.419809][ T130] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 2885.647387][ T130] usb 3-1: Invalid ep0 maxpacket: 64 [ 2885.658263][ T130] usb usb3-port1: unable to enumerate USB device [ 2885.839664][ T1649] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2886.508964][ T1660] IPVS: stopping backup sync thread 29425 ... [ 2887.764389][ T1666] bond0: (slave netdevsim0): Releasing backup interface [ 2887.843838][ T1666] bond5: (slave gre2): Releasing backup interface [ 2887.886397][ T1666] gre2: left promiscuous mode [ 2887.953471][ T1666] team0: Port device batadv5 removed [ 2888.896296][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2888.903834][ T30] audit: type=1326 audit(1765185897.916:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.0.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2888.978598][ T1674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6385'. [ 2888.992623][ T1674] netlink: 'syz.0.6385': attribute type 7 has an invalid length. [ 2888.997831][ T30] audit: type=1326 audit(1765185897.956:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.0.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2889.025614][ T1674] netlink: 'syz.0.6385': attribute type 8 has an invalid length. [ 2889.124773][ T30] audit: type=1326 audit(1765185897.986:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.0.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03b718df90 code=0x7ffc0000 [ 2889.198696][ T1674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6385'. [ 2889.223869][ T30] audit: type=1326 audit(1765185897.986:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.0.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2889.519034][ T30] audit: type=1326 audit(1765185898.076:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.0.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2889.542230][ T30] audit: type=1326 audit(1765185898.076:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.0.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2889.578059][ T30] audit: type=1326 audit(1765185898.076:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.0.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2889.741892][ T1683] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 2889.758903][ T1683] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 2889.779992][ T30] audit: type=1326 audit(1765185898.166:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.0.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2889.851053][ T30] audit: type=1326 audit(1765185898.166:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.0.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2889.861207][ T1683] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 2889.972134][ T30] audit: type=1326 audit(1765185898.166:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.0.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f03b718f749 code=0x7ffc0000 [ 2891.596541][ T130] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 2891.799542][ T130] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 2891.837951][ T130] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2891.867825][ T130] usb 1-1: config 8 has no interface number 0 [ 2891.897804][ T130] usb 1-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2891.944034][ T130] usb 1-1: config 8 interface 177 has no altsetting 0 [ 2891.968115][ T130] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2892.015129][ T130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2892.284970][ T130] ir_toy 1-1:8.177: required endpoints not found [ 2892.397831][ T5921] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2892.587997][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 2892.663874][ T5921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2892.678351][ T5921] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2892.730213][ T1714] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 2892.744157][ T1714] team0: Port device batadv6 added [ 2892.847911][ T5921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2892.857152][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2892.869739][ T5921] usb 2-1: Product: syz [ 2892.875131][ T5921] usb 2-1: Manufacturer: syz [ 2892.898990][ T1715] hub 9-0:1.0: USB hub found [ 2892.906971][ T1715] hub 9-0:1.0: 1 port detected [ 2892.985803][ T5921] usb 2-1: SerialNumber: syz [ 2893.041696][ T5921] usb 2-1: bad CDC descriptors [ 2893.051132][ T5921] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 2893.059012][ T5921] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 2893.892841][ T1723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2893.952578][ T5921] usb 1-1: USB disconnect, device number 94 [ 2894.081641][ T1724] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 2894.517825][T26101] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2894.693849][T26101] usb 1-1: too many configurations: 78, using maximum allowed: 8 [ 2894.822692][T26101] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2894.843217][T26101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2894.878687][T26101] usb 1-1: Product: syz [ 2894.891775][T26101] usb 1-1: Manufacturer: syz [ 2894.896430][T26101] usb 1-1: SerialNumber: syz [ 2895.310350][ T1738] cgroup: fork rejected by pids controller in /syz2 [ 2895.340153][T26101] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2895.376922][T26100] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2896.487904][T26100] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2896.521271][T26100] ath9k_htc: Failed to initialize the device [ 2896.522516][ T1728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2896.651738][T26100] usb 1-1: ath9k_htc: USB layer deinitialized [ 2896.699797][ T1728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2896.981381][ T5921] usb 2-1: USB disconnect, device number 6 [ 2897.041266][ T130] usb 1-1: USB disconnect, device number 95 [ 2897.768766][T26100] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2898.065681][T26100] usb 3-1: config 0 has no interfaces? [ 2898.089485][T26100] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2898.101436][T26100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2898.109895][T26100] usb 3-1: Product: syz [ 2898.114074][T26100] usb 3-1: Manufacturer: syz [ 2898.184528][ T2490] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6403'. [ 2898.279705][T26100] usb 3-1: SerialNumber: syz [ 2898.299375][T26100] usb 3-1: config 0 descriptor?? [ 2900.651064][ T2529] vivid-000: disconnect [ 2901.649163][T26101] usb 3-1: USB disconnect, device number 72 [ 2901.656876][ T2538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6408'. [ 2902.213158][ T2546] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 2902.899870][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2902.906427][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2903.117971][T26100] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 2903.243614][ T2559] tipc: Enabling of bearer rejected, already enabled [ 2903.299173][ T2530] vivid-000: reconnect [ 2903.308023][T26100] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 2903.351581][T26100] usb 4-1: config 0 has no interface number 0 [ 2903.380227][T26100] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 2903.455716][T26100] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2903.491892][T26100] usb 4-1: config 0 interface 113 has no altsetting 0 [ 2903.517917][T26101] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 2903.570161][T26100] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2903.579587][T26100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2903.597418][T26100] usb 4-1: Product: syz [ 2903.609830][T26100] usb 4-1: Manufacturer: syz [ 2903.629357][T26100] usb 4-1: SerialNumber: syz [ 2903.649403][T26100] usb 4-1: config 0 descriptor?? [ 2903.660915][ C1] usb 4-1: NFC: Urb failure (status -71) [ 2903.666773][T26100] usb 4-1: NFC: Unable to get FW version [ 2903.673160][T26100] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 2903.693776][T26101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2903.714360][T26101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 128, setting to 64 [ 2903.746237][T26101] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2903.867826][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2903.867847][ T30] audit: type=1326 audit(1765185913.046:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2562 comm="syz.1.6413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f9af8f749 code=0x0 [ 2903.998618][T26101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2904.023776][T26101] usb 3-1: config 0 descriptor?? [ 2905.133936][T26101] ath6kl: Failed to submit usb control message: -110 [ 2905.142012][T26101] ath6kl: unable to send the bmi data to the device: -110 [ 2905.150758][T26101] ath6kl: Unable to send get target info: -110 [ 2905.171027][T26101] ath6kl: Failed to init ath6kl core: -110 [ 2905.197536][T26101] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2905.393417][ T2579] input: syz1 as /devices/virtual/input/input109 [ 2905.810116][ T130] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 2906.009572][ T5921] usb 4-1: USB disconnect, device number 50 [ 2906.029782][ T130] usb 5-1: not running at top speed; connect to a high speed hub [ 2906.144113][ T130] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2906.164119][ T130] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2906.243165][ T130] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2906.253053][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2906.262236][ T130] usb 5-1: Product: ࠒ [ 2906.266543][ T130] usb 5-1: Manufacturer: ᠌ [ 2906.271673][ T130] usb 5-1: SerialNumber: ฯﷷ隲䦩醽皗馴쒑Χ㵽༶跠ɸ헓젂릋锌쭍ꐝ彷邘臲䆰푞룖緩拓滯䌣쁓隽熏뇚팓ʂ㽷裫璉㕂粕⹈뛘瞅몧痏䚯龜蒊㹡ꂆ≴뜎⇞꼆ꘁ따ꃕꘑ섍⠕踁雟ᩔ唜횐ᣳẐܺỮ墷괿ꀇ홑頝熛枊啃흕㺙Ᵹ᪟ꜳ휊፨⥎⡜愗༔䯓ᒍ涟䮢Ꮼ喴㌁曣돔Ẻ벥ꖢ꾣⪯扚 [ 2906.586645][ T5921] usb 3-1: USB disconnect, device number 73 [ 2906.809691][ T2595] netlink: 'syz.0.6418': attribute type 1 has an invalid length. [ 2906.861874][ T2580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2907.017720][ T2580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2907.286172][ T2595] bond3: entered promiscuous mode [ 2907.294824][ T2595] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2907.738083][T26101] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 2907.963100][T26101] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2907.972516][T26101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2907.986111][T26101] usb 3-1: Product: syz [ 2907.998180][T26101] usb 3-1: Manufacturer: syz [ 2908.019509][T26101] usb 3-1: SerialNumber: syz [ 2908.039680][T26101] usb 3-1: config 0 descriptor?? [ 2908.460917][T26101] airspy 3-1:0.0: Board ID: 00 [ 2908.465863][T26101] airspy 3-1:0.0: Firmware version: [ 2908.522623][ T130] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2908.564768][ T130] usb 5-1: USB disconnect, device number 51 [ 2908.654828][ T2608] netlink: 'syz.4.6420': attribute type 3 has an invalid length. [ 2908.663661][ T2608] netlink: 46 bytes leftover after parsing attributes in process `syz.4.6420'. [ 2909.930485][T26101] airspy 3-1:0.0: usb_control_msg() failed -110 request 12 [ 2909.942953][T26101] airspy 3-1:0.0: Registered as swradio24 [ 2909.953381][T26101] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2911.050370][ T2633] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 2911.138123][ T2633] team0: Port device batadv6 added [ 2911.571961][T26101] usb 3-1: USB disconnect, device number 74 [ 2912.032937][ T2647] fuse: Bad value for 'fd' [ 2912.065729][ T2648] netlink: 'syz.4.6425': attribute type 10 has an invalid length. [ 2912.217095][ T2647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6427'. [ 2912.237765][T26100] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2912.515531][T26100] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 2912.528053][T26100] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 2912.541671][T26100] usb 4-1: config 171 has no interface number 0 [ 2912.554460][T26100] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 2912.566286][T26100] usb 4-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2912.578036][T26100] usb 4-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 2912.637850][ T130] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2912.878548][T26100] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 2912.901770][T26100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2912.901855][ T130] usb 5-1: Using ep0 maxpacket: 32 [ 2912.926559][T26100] usb 4-1: Product: syz [ 2912.934194][T26100] usb 4-1: Manufacturer: syz [ 2912.950942][T26100] usb 4-1: SerialNumber: syz [ 2912.972535][ T130] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 2912.999563][ T130] usb 5-1: config 0 has no interface number 0 [ 2913.024777][ T130] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 2913.034295][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2913.190186][ T2643] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2913.217393][ T130] usb 5-1: Product: syz [ 2913.300353][ T130] usb 5-1: Manufacturer: syz [ 2913.305006][ T130] usb 5-1: SerialNumber: syz [ 2913.545049][ T130] usb 5-1: config 0 descriptor?? [ 2913.791770][ T130] ftdi_sio 5-1:0.217: FTDI USB Serial Device converter detected [ 2913.809638][ T2661] netlink: 'syz.3.6426': attribute type 21 has an invalid length. [ 2913.817841][ T2661] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6426'. [ 2913.829497][ T2661] netlink: 'syz.3.6426': attribute type 21 has an invalid length. [ 2913.837539][ T2661] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6426'. [ 2913.869463][ T130] usb 5-1: Detected SIO [ 2913.871260][ T130] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2914.331283][T26100] ath6kl: Failed to submit usb control message: -110 [ 2914.375247][T26100] ath6kl: unable to send the bmi data to the device: -110 [ 2914.393069][T26100] ath6kl: Unable to send get target info: -110 [ 2914.418133][T26100] ath6kl: Failed to init ath6kl core: -110 [ 2914.450414][T26100] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 2914.687993][ T2671] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2915.701780][T26103] usb 5-1: USB disconnect, device number 52 [ 2915.710526][T26103] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2915.762720][ T130] usb 4-1: USB disconnect, device number 51 [ 2915.779751][T26103] ftdi_sio 5-1:0.217: device disconnected [ 2916.159960][ T2689] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6433'. [ 2916.349405][ T2692] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6435'. [ 2916.361724][ T2692] netlink: 'syz.2.6435': attribute type 4 has an invalid length. [ 2917.847877][ T130] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 2918.302659][ T2719] netlink: 'syz.3.6438': attribute type 4 has an invalid length. [ 2918.330871][ T130] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2918.361041][ T130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2918.410684][ T130] usb 2-1: Product: syz [ 2918.511962][ T130] usb 2-1: Manufacturer: syz [ 2918.529520][ T130] usb 2-1: SerialNumber: syz [ 2918.621368][ T130] usb 2-1: config 0 descriptor?? [ 2918.987961][T26103] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2919.076008][ T130] airspy 2-1:0.0: Board ID: 00 [ 2919.081352][ T130] airspy 2-1:0.0: Firmware version: [ 2919.167816][T26103] usb 4-1: Using ep0 maxpacket: 16 [ 2919.242008][T26103] usb 4-1: config 0 has no interfaces? [ 2919.399320][T26103] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2919.408902][T26103] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2919.447885][T23022] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2919.478058][T26103] usb 4-1: Manufacturer: syz [ 2919.575131][T26103] usb 4-1: config 0 descriptor?? [ 2919.597868][T23022] usb 3-1: Using ep0 maxpacket: 32 [ 2919.620960][T23022] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 2919.688763][T23022] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2919.748820][T23022] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2919.786861][T23022] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2919.902805][T23022] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2919.942458][T23022] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2919.969948][T23022] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2919.999387][T23022] usb 3-1: Product: syz [ 2920.022211][T23022] usb 3-1: Manufacturer: syz [ 2920.046803][T23022] usb 3-1: SerialNumber: syz [ 2920.276357][ T2741] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6443'. [ 2920.298587][T23022] usb 3-1: config 0 descriptor?? [ 2920.309170][T23022] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2920.322509][T23022] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2920.568644][ T130] airspy 2-1:0.0: usb_control_msg() failed -110 request 12 [ 2920.579093][ T130] airspy 2-1:0.0: Registered as swradio24 [ 2920.682996][ T130] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2920.890952][ T2742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6440'. [ 2921.619053][T26100] usb 2-1: USB disconnect, device number 7 [ 2922.321329][T21857] usb 4-1: USB disconnect, device number 52 [ 2923.300993][T26100] usb 3-1: USB disconnect, device number 75 [ 2923.314270][T26100] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 2923.857792][ T2777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6450'. [ 2924.371355][ T2782] fuse: Bad value for 'fd' [ 2926.408097][T26101] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 2926.675814][T26101] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2926.688266][T26101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2926.718981][T26101] usb 3-1: Product: syz [ 2926.733086][T26101] usb 3-1: Manufacturer: syz [ 2926.769236][T26101] usb 3-1: SerialNumber: syz [ 2926.838903][T26101] usb 3-1: config 0 descriptor?? [ 2927.241295][ T2802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6455'. [ 2927.251190][ T2802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6455'. [ 2927.325832][T26101] airspy 3-1:0.0: Board ID: 00 [ 2927.358678][T26101] airspy 3-1:0.0: Firmware version: [ 2928.888564][T26101] airspy 3-1:0.0: usb_control_msg() failed -110 request 12 [ 2928.918823][T26101] airspy 3-1:0.0: Registered as swradio24 [ 2929.333874][T26101] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2929.808053][ T130] usb 3-1: USB disconnect, device number 76 [ 2932.370041][ T2876] program syz.4.6467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2932.380197][ T2876] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2934.048081][T23022] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 2934.344643][T23022] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2934.364082][T23022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2934.423227][T23022] usb 3-1: Product: syz [ 2934.437741][T23022] usb 3-1: Manufacturer: syz [ 2934.452542][T23022] usb 3-1: SerialNumber: syz [ 2934.476248][T23022] usb 3-1: config 0 descriptor?? [ 2934.648122][T26101] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 2934.698298][ T2911] snd_dummy snd_dummy.0: control 0:0:0:syz0:65534 is already present [ 2935.077884][T23022] airspy 3-1:0.0: Board ID: 00 [ 2935.082733][T23022] airspy 3-1:0.0: Firmware version: [ 2935.272130][T26101] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2935.282247][T26101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2935.305400][T26101] usb 2-1: Product: syz [ 2935.314083][T26101] usb 2-1: Manufacturer: syz [ 2935.319958][T26101] usb 2-1: SerialNumber: syz [ 2935.332155][T26101] usb 2-1: config 0 descriptor?? [ 2935.880630][T26101] airspy 2-1:0.0: Board ID: 00 [ 2935.885615][T26101] airspy 2-1:0.0: Firmware version: [ 2936.569012][T23022] airspy 3-1:0.0: usb_control_msg() failed -110 request 12 [ 2936.586768][T23022] airspy 3-1:0.0: Registered as swradio24 [ 2936.611083][T23022] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2936.868428][T26100] usb 3-1: USB disconnect, device number 77 [ 2937.412097][ T2929] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 2937.463675][T26101] airspy 2-1:0.0: usb_control_msg() failed -110 request 12 [ 2937.482102][T26101] airspy 2-1:0.0: Registered as swradio24 [ 2937.495578][T26101] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2938.013563][T26101] usb 2-1: USB disconnect, device number 8 [ 2939.856875][ T2939] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6482'. [ 2940.701493][ T2954] team0: Port device batadv6 removed [ 2941.282731][T26101] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 2941.473965][T26101] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2941.488422][T26101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2941.552637][T26101] usb 2-1: Product: syz [ 2941.570627][T26101] usb 2-1: Manufacturer: syz [ 2941.755404][T26101] usb 2-1: SerialNumber: syz [ 2941.770909][T26101] usb 2-1: config 0 descriptor?? [ 2942.197955][T26100] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 2942.221140][T26101] airspy 2-1:0.0: Board ID: 00 [ 2942.226353][T26101] airspy 2-1:0.0: Firmware version: [ 2942.433952][T26100] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2942.480544][T26100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2942.521989][T26100] usb 3-1: Product: syz [ 2942.526215][T26100] usb 3-1: Manufacturer: syz [ 2942.554463][T26100] usb 3-1: SerialNumber: syz [ 2942.598749][T26100] usb 3-1: config 0 descriptor?? [ 2943.029281][T26100] airspy 3-1:0.0: Board ID: 00 [ 2943.034471][T26100] airspy 3-1:0.0: Firmware version: [ 2943.750067][T26101] airspy 2-1:0.0: usb_control_msg() failed -110 request 12 [ 2943.772913][T26101] airspy 2-1:0.0: Registered as swradio24 [ 2943.780108][T26101] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2944.488431][T26100] airspy 3-1:0.0: usb_control_msg() failed -110 request 12 [ 2944.510735][T26100] videodev: could not get a free minor [ 2944.533557][T26100] airspy 3-1:0.0: Failed to register as video device (-23) [ 2944.555455][T26100] airspy 3-1:0.0: probe with driver airspy failed with error -23 [ 2944.729421][T26100] usb 2-1: USB disconnect, device number 9 [ 2945.221253][ T3023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6507'. [ 2945.626443][T26101] usb 3-1: USB disconnect, device number 78 [ 2946.413634][ T3034] bond5: option tlb_dynamic_lb: invalid value (5) [ 2946.453755][ T3034] bond5 (unregistering): Released all slaves [ 2947.201802][ T3056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6519'. [ 2947.487922][T26101] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 2947.655737][T26101] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2947.665086][T26101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2947.678132][T26101] usb 2-1: Product: syz [ 2947.697697][T26101] usb 2-1: Manufacturer: syz [ 2947.704385][T26101] usb 2-1: SerialNumber: syz [ 2947.709793][T26100] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 2948.069326][T26100] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2948.077370][T26100] usb 4-1: config 0 has no interface number 0 [ 2948.089513][T26101] usb 2-1: config 0 descriptor?? [ 2948.099013][T26100] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2948.108586][T26100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2948.119555][T26100] usb 4-1: config 0 descriptor?? [ 2948.191084][T26100] usb 4-1: selecting invalid altsetting 1 [ 2948.209826][T26100] dvb_ttusb_budget: ttusb_init_controller: error [ 2948.218783][T26100] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2948.448217][ T130] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 2948.518216][T26101] airspy 2-1:0.0: Board ID: 00 [ 2948.523279][T26101] airspy 2-1:0.0: Firmware version: [ 2948.676800][ T130] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2948.690984][ T130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2948.691242][T26100] DVB: Unable to find symbol cx22700_attach() [ 2948.699955][ T130] usb 1-1: Product: syz [ 2948.725618][ T130] usb 1-1: Manufacturer: syz [ 2948.736013][ T130] usb 1-1: SerialNumber: syz [ 2948.773947][ T130] usb 1-1: config 0 descriptor?? [ 2948.788167][T21857] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2948.872826][T26100] DVB: Unable to find symbol tda10046_attach() [ 2948.885558][T26100] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2948.942865][T26100] usb 4-1: USB disconnect, device number 53 [ 2948.957796][T21857] usb 5-1: Using ep0 maxpacket: 32 [ 2948.979553][T21857] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 2949.016978][T21857] usb 5-1: config 0 has no interface number 0 [ 2949.062866][T21857] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2949.072581][T21857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2949.100361][T21857] usb 5-1: Product: syz [ 2949.124739][T21857] usb 5-1: Manufacturer: syz [ 2949.143879][T21857] usb 5-1: SerialNumber: syz [ 2949.172810][T21857] usb 5-1: config 0 descriptor?? [ 2949.221974][T21857] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2949.234259][ T130] airspy 1-1:0.0: Board ID: 00 [ 2949.250754][ T130] airspy 1-1:0.0: Firmware version: [ 2949.420701][T21857] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2949.430426][T26100] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2949.537076][T21857] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2949.595951][T26100] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2949.610957][T26100] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2949.654203][T26100] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2949.696299][T26100] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2949.883180][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2949.883963][T23022] usb 5-1: USB disconnect, device number 53 [ 2949.930650][T26101] airspy 2-1:0.0: usb_control_msg() failed -110 request 12 [ 2949.947117][T26101] airspy 2-1:0.0: Registered as swradio24 [ 2949.947483][T23022] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2949.991376][T26101] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2950.011125][T26100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2950.072252][T26100] usb 4-1: config 0 descriptor?? [ 2950.083487][T23022] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2950.148772][T23022] quatech2 5-1:0.51: device disconnected [ 2950.522169][T26100] usbhid 4-1:0.0: can't add hid device: -71 [ 2950.534623][T26100] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2950.611626][T26100] usb 4-1: USB disconnect, device number 54 [ 2950.648074][ T130] airspy 1-1:0.0: usb_control_msg() failed -110 request 12 [ 2950.677469][ T130] videodev: could not get a free minor [ 2950.699446][ T130] airspy 1-1:0.0: Failed to register as video device (-23) [ 2950.730834][ T130] airspy 1-1:0.0: probe with driver airspy failed with error -23 [ 2950.824801][ T130] usb 2-1: USB disconnect, device number 10 [ 2951.118482][T26101] usb 1-1: USB disconnect, device number 96 [ 2951.557733][T26100] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2951.768233][T26100] usb 4-1: Using ep0 maxpacket: 16 [ 2951.829313][T26100] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2951.878556][T26100] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2951.971959][T26100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2952.018494][T26100] usb 4-1: config 0 descriptor?? [ 2952.668327][T26100] mcp2221 0003:04D8:00DD.0045: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 2953.068531][T26100] usb 4-1: USB disconnect, device number 55 [ 2953.377762][ T130] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 2953.849817][ T130] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18432, setting to 64 [ 2953.868293][ T130] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2953.901880][ T3130] random: crng reseeded on system resumption [ 2953.960966][ T130] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2953.975545][ T130] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2953.985985][ T130] usb 3-1: Product: syz [ 2954.009367][ T130] usb 3-1: Manufacturer: syz [ 2954.009393][ T130] usb 3-1: SerialNumber: syz [ 2954.029872][ T130] usb 3-1: config 0 descriptor?? [ 2954.038886][ T130] usb 3-1: selecting invalid altsetting 0 [ 2954.324379][ T3116] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 2954.391696][ T3116] syzkaller1: entered promiscuous mode [ 2954.398213][ T3116] syzkaller1: entered allmulticast mode [ 2957.196070][T26101] usb 3-1: USB disconnect, device number 79 [ 2957.359171][ T3174] trusted_key: encrypted_key: insufficient parameters specified [ 2957.369750][ T3174] binder: 3170:3174 ioctl c018620c 200000000000 returned -1 [ 2958.978642][T26100] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2959.026978][ T3203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6561'. [ 2959.088367][ T3204] random: crng reseeded on system resumption [ 2959.137849][T26100] usb 3-1: Using ep0 maxpacket: 8 [ 2959.157302][T26100] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 2959.165850][T26100] usb 3-1: config 0 has no interface number 0 [ 2959.176797][T26100] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2959.188081][T26100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2959.196604][T26100] usb 3-1: Product: syz [ 2959.202118][T26100] usb 3-1: Manufacturer: syz [ 2959.211910][T26100] usb 3-1: SerialNumber: syz [ 2959.229968][T26100] usb 3-1: config 0 descriptor?? [ 2959.240611][T26100] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2959.249252][T26100] pctv452e: pctv452e_power_ctrl: 1 [ 2959.249252][T26100] [ 2959.261745][T26100] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2959.261745][T26100] [ 2959.285813][T26100] dvb-usb: bulk message failed: -22 (5/0) [ 2959.312250][T26100] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2959.323492][T26100] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2959.332971][T26100] usb 3-1: media controller created [ 2959.341099][T26100] dvb-usb: bulk message failed: -22 (8/0) [ 2959.348763][T26100] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 2959.357042][T26100] dvb-usb: MAC address reading failed. [ 2959.381063][T26100] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2959.572015][T26100] DVB: Unable to find symbol stb0899_attach() [ 2959.582562][T26100] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2959.743633][T26100] rc_core: IR keymap rc-tt-1500 not found [ 2959.749738][T26100] Registered IR keymap rc-empty [ 2959.777369][T26100] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2959.969618][T26100] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input110 [ 2960.052367][T26100] dvb-usb: schedule remote query interval to 100 msecs. [ 2960.076416][T26100] pctv452e: pctv452e_power_ctrl: 0 [ 2960.076416][T26100] [ 2960.107739][T26100] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2960.360518][T26101] dvb-usb: bulk message failed: -22 (4/0) [ 2960.578153][T26101] dvb-usb: error -22 while querying for an remote control event. [ 2960.874379][T26100] usb 3-1: USB disconnect, device number 80 [ 2961.109496][T26100] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2962.002123][ T3240] trusted_key: encrypted_key: insufficient parameters specified [ 2962.017341][ T3240] binder: 3232:3240 ioctl c018620c 200000000000 returned -1 [ 2963.708512][ T30] audit: type=1326 audit(1765185972.916:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3238 comm="syz.3.6572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dfed8f749 code=0x0 [ 2963.854539][ T3245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6575'. [ 2964.331867][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2964.338468][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2965.728022][ T3274] random: crng reseeded on system resumption [ 2968.376810][ T3330] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6604'. [ 2968.587458][ T3331] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6603'. [ 2968.697807][T26100] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2968.918347][T26100] usb 3-1: too many configurations: 78, using maximum allowed: 8 [ 2968.950761][T26100] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2968.960421][T26100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2968.972843][T26100] usb 3-1: Product: syz [ 2968.977330][T26100] usb 3-1: Manufacturer: syz [ 2968.983897][T26100] usb 3-1: SerialNumber: syz [ 2969.017975][T26100] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2969.086290][T26101] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2969.504681][ T3324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2969.514926][ T3324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2969.892878][ T130] usb 3-1: USB disconnect, device number 81 [ 2970.178421][ T3364] binder: 3355:3364 ioctl c018620c 200000000000 returned -1 [ 2970.246751][T26101] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2970.262799][T26101] ath9k_htc: Failed to initialize the device [ 2970.339494][ T130] usb 3-1: ath9k_htc: USB layer deinitialized [ 2971.656107][T23022] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2971.885704][T23022] usb 1-1: Using ep0 maxpacket: 8 [ 2971.950425][T23022] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2971.960357][T23022] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2972.013378][T23022] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2972.029337][T23022] pvrusb2: ********** [ 2972.038275][T23022] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2972.055832][T23022] pvrusb2: Important functionality might not be entirely working. [ 2972.064791][T23022] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2972.076811][T23022] pvrusb2: ********** [ 2972.255705][ T2345] pvrusb2: Invalid write control endpoint [ 2972.509348][T23022] usb 1-1: USB disconnect, device number 97 [ 2972.559875][ T2345] pvrusb2: Invalid write control endpoint [ 2972.568734][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2972.605696][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2972.885175][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2972.889037][ T3391] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6622'. [ 2972.905103][ T2345] pvrusb2: Device being rendered inoperable [ 2972.911321][ T2345] cx25840 4-0044: Unable to detect h/w, assuming cx23887 [ 2973.166778][ T2345] cx25840 4-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2973.238581][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2973.244114][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2973.287787][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2974.000597][ T30] audit: type=1326 audit(1765185983.206:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3412 comm="syz.0.6627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03b718f749 code=0x0 [ 2974.918428][ T3434] syzkaller1: entered promiscuous mode [ 2974.940538][ T3434] syzkaller1: entered allmulticast mode [ 2975.344600][ T3447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6639'. [ 2975.386551][ T3445] syzkaller1: entered promiscuous mode [ 2975.422848][ T3445] syzkaller1: entered allmulticast mode [ 2976.090465][ T3474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6650'. [ 2976.131157][ T3474] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2976.148530][ T3478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6650'. [ 2976.162824][ T3478] bond8: Unable to set up delay as MII monitoring is disabled [ 2976.583206][T23022] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 2977.133462][T23022] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2977.162101][T23022] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2977.315125][T23022] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2977.386819][T23022] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2977.464974][ T3495] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6656'. [ 2977.495761][T23022] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2977.531491][T23022] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2977.539490][T23022] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2977.757451][T23022] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2977.796282][T23022] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2977.853313][T23022] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2977.894072][T23022] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2977.916646][T23022] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2977.968999][T23022] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2978.013481][T23022] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2978.055916][T23022] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2978.107140][T23022] usb 1-1: string descriptor 0 read error: -22 [ 2978.125933][T23022] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2978.154646][T23022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2978.218995][T23022] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2979.642737][T26101] usb 1-1: USB disconnect, device number 98 [ 2979.738144][T26100] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 2979.920356][T26100] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2979.946003][T26100] usb 2-1: not running at top speed; connect to a high speed hub [ 2979.967604][T26100] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2979.990913][T26100] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2980.031155][T26100] usb 2-1: string descriptor 0 read error: -22 [ 2980.049918][T26100] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2980.082357][T26100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2980.160641][T26100] usb 2-1: 0:2 : does not exist [ 2980.956963][T26100] usb 2-1: 5:0: bogus dB values (-9931/-9623), disabling dB reporting [ 2980.972971][T26100] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2980.986495][T26100] usb 2-1: Warning! Unlikely big volume range (=790), cval->res is probably wrong. [ 2980.996475][T26100] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = -25425/-24635/1 [ 2981.086281][T26100] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2981.101945][T26100] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 2981.216565][T26100] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2981.272559][T26100] usb 2-1: USB disconnect, device number 11 [ 2981.281066][T21857] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 2981.499854][T21857] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2981.518071][T21857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2981.539957][T21857] usb 3-1: Product: syz [ 2981.544188][T21857] usb 3-1: Manufacturer: syz [ 2981.557838][T21857] usb 3-1: SerialNumber: syz [ 2981.585705][T21857] usb 3-1: config 0 descriptor?? [ 2982.019459][T21857] airspy 3-1:0.0: Board ID: 00 [ 2982.024321][T21857] airspy 3-1:0.0: Firmware version: [ 2982.377887][T26100] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2982.590231][T26100] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2982.601938][T26100] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2982.612835][T26100] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2982.628118][T26100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2982.661718][ T3572] macsec2: entered promiscuous mode [ 2982.668527][ T3572] macsec2: entered allmulticast mode [ 2982.674787][ T3572] syzkaller0: port 1(macsec2) entered blocking state [ 2982.726758][ T3572] syzkaller0: port 1(macsec2) entered disabled state [ 2982.736664][ T3565] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2982.753197][T26100] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2983.207151][T26100] usb 4-1: USB disconnect, device number 56 [ 2983.688380][T21857] airspy 3-1:0.0: usb_control_msg() failed -110 request 12 [ 2983.700437][T21857] airspy 3-1:0.0: Registered as swradio24 [ 2983.713193][T21857] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2984.636056][T21857] usb 3-1: USB disconnect, device number 82 [ 2986.177888][T26100] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 2986.330194][T26100] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2986.340569][T26100] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2986.373867][T26100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2986.397783][T26100] usb 2-1: Product: syz [ 2986.409412][T26100] usb 2-1: Manufacturer: syz [ 2986.424514][T26100] usb 2-1: SerialNumber: syz [ 2986.871975][T26100] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2986.928331][T23022] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2987.110118][T23022] usb 1-1: Using ep0 maxpacket: 8 [ 2987.125042][T23022] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2987.148253][T23022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2987.169772][T23022] usb 1-1: Product: syz [ 2987.178739][T23022] usb 1-1: Manufacturer: syz [ 2987.189359][T23022] usb 1-1: SerialNumber: syz [ 2987.206405][T23022] usb 1-1: config 0 descriptor?? [ 2987.229376][T23022] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2987.907728][T26100] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 2988.334410][T26100] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2988.359239][T26100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2988.367325][T26100] usb 4-1: Product: syz [ 2988.393858][T26100] usb 4-1: Manufacturer: syz [ 2988.426901][T26100] usb 4-1: SerialNumber: syz [ 2988.463857][T26100] usb 4-1: config 0 descriptor?? [ 2988.820230][ T130] usb 2-1: USB disconnect, device number 12 [ 2988.837045][ T130] usblp0: removed [ 2988.908018][T26100] airspy 4-1:0.0: Board ID: 00 [ 2988.913189][T26100] airspy 4-1:0.0: Firmware version: [ 2989.151144][T23022] gspca_sonixj: reg_r err -71 [ 2989.177370][ T3644] input: syz0 as /devices/virtual/input/input111 [ 2989.207872][T23022] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 2989.310091][T23022] usb 1-1: USB disconnect, device number 99 [ 2990.334097][T26100] airspy 4-1:0.0: usb_control_msg() failed -110 request 12 [ 2990.344852][ T3657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6709'. [ 2990.380088][T26100] airspy 4-1:0.0: Registered as swradio24 [ 2990.392902][T26100] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2990.577794][T26100] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2990.714499][T21857] usb 4-1: USB disconnect, device number 57 [ 2990.782006][T26100] usb 1-1: Using ep0 maxpacket: 32 [ 2990.918511][T26100] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2990.961402][T26100] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2990.983558][T23022] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2990.992735][T26100] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2991.044885][T26100] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2991.080277][T26100] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2991.097786][T26100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2991.177788][T23022] usb 2-1: Using ep0 maxpacket: 32 [ 2991.185177][T26100] usb 1-1: Product: syz [ 2991.195864][T23022] usb 2-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 2991.204542][T26100] usb 1-1: Manufacturer: syz [ 2991.247960][ T3667] binder: 3663:3667 ioctl c018620c 200000000000 returned -1 [ 2991.271464][T26100] usb 1-1: SerialNumber: syz [ 2991.295504][T23022] usb 2-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 2991.318102][T23022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2991.360378][T23022] usb 2-1: Product: syz [ 2991.379197][T23022] usb 2-1: Manufacturer: syz [ 2991.398305][T23022] usb 2-1: SerialNumber: syz [ 2991.472885][T23022] pwc: Askey VC010 type 1 USB webcam detected. [ 2991.475019][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2991.576868][T26100] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input112 [ 2991.746913][T23022] pwc: send_video_command error -71 [ 2991.766715][T23022] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2991.777762][T26100] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2991.815058][T26100] (id 0x00) [ 2991.815196][T23022] Philips webcam 2-1:76.0: probe with driver Philips webcam failed with error -71 [ 2991.899294][T23022] usb 2-1: USB disconnect, device number 13 [ 2992.137884][T26100] rc_core: IR keymap rc-imon-pad not found [ 2992.148238][T26100] Registered IR keymap rc-empty [ 2992.153538][T26100] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2992.177769][T26100] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2992.224157][T26100] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 2992.261768][T26100] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input113 [ 2992.312768][T26100] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:100> initialized [ 2993.535724][ T3696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6718'. [ 2993.648787][T23022] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2993.769682][ T3695] imon:send_packet: packet tx failed (-71) [ 2993.771139][ T130] usb 1-1: USB disconnect, device number 100 [ 2993.788076][ T3695] imon:vfd_write: send packet #4 failed [ 2993.817849][T23022] usb 2-1: Using ep0 maxpacket: 16 [ 2993.835336][T23022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2993.994702][T23022] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2994.043689][T23022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2994.072576][T23022] usb 2-1: Product: syz [ 2994.096983][T23022] usb 2-1: Manufacturer: syz [ 2994.135137][T23022] usb 2-1: SerialNumber: syz [ 2994.166134][T23022] usb 2-1: config 0 descriptor?? [ 2994.207554][T23022] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2994.245828][T23022] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 2995.060968][T23022] em28xx 2-1:0.0: chip ID is em2765 [ 2995.609025][T23022] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2995.618014][T23022] em28xx 2-1:0.0: board has no eeprom [ 2995.961936][T23022] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2995.980766][T23022] em28xx 2-1:0.0: dvb set to bulk mode. [ 2996.009705][ T130] em28xx 2-1:0.0: Binding DVB extension [ 2996.036149][T23022] usb 2-1: USB disconnect, device number 14 [ 2996.076075][T23022] em28xx 2-1:0.0: Disconnecting em28xx [ 2996.282706][ T130] em28xx 2-1:0.0: Registering input extension [ 2996.308488][T23022] em28xx 2-1:0.0: Closing input extension [ 2996.379883][T23022] em28xx 2-1:0.0: Freeing device [ 2997.037888][T26100] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2997.199119][T26100] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2997.380287][T26100] usb 4-1: config 0 has no interfaces? [ 2997.422835][ T3737] binder: 3732:3737 ioctl c018620c 200000000000 returned -1 [ 2997.542468][T26100] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 2997.579849][T26100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2997.588685][T26100] usb 4-1: Product: syz [ 2997.592995][T26100] usb 4-1: Manufacturer: syz [ 2997.598133][T26100] usb 4-1: SerialNumber: syz [ 2997.610458][T26100] usb 4-1: config 0 descriptor?? [ 2997.857433][ T3731] ip6erspan1: entered allmulticast mode [ 2999.755227][ T3770] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2999.799342][ T3770] bond0: (slave lo): Error: Device can not be enslaved while up [ 2999.896194][T23022] usb 4-1: USB disconnect, device number 58 [ 3000.251904][ T3774] page: refcount:6 mapcount:0 mapping:ffff888025c84d80 index:0xa90 pfn:0x8e090 [ 3000.278168][ T3774] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3000.288108][ T3774] memcg:ffff8880562b0d40 [ 3000.297023][ T3774] aops:def_blk_aops ino:fa00000 [ 3000.324150][ T3774] flags: 0xfff7000000007d(locked|referenced|uptodate|dirty|lru|head|node=0|zone=1|lastcpupid=0x7ff) [ 3000.337922][ T3774] raw: 00fff7000000007d ffffea0002382508 ffffea0002382008 ffff888025c84d80 [ 3000.367098][ T3774] raw: 0000000000000a90 0000000000000000 00000006ffffffff ffff8880562b0d40 [ 3000.377232][ T3774] head: 00fff7000000007d ffffea0002382508 ffffea0002382008 ffff888025c84d80 [ 3000.401145][ T3774] head: 0000000000000a90 0000000000000000 00000006ffffffff ffff8880562b0d40 [ 3000.428928][ T3774] head: 00fff00000000202 ffffea0002382401 00000000ffffffff 00000000ffffffff [ 3000.439011][ T3774] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 3000.450511][ T3774] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 3000.460555][ T3774] page_owner tracks the page as allocated [ 3000.468335][ T3774] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 3774, tgid 3772 (syz.1.6741), ts 3000152216834, free_ts 2996189286072 [ 3000.499183][ T3774] post_alloc_hook+0x234/0x290 [ 3000.504728][ T3774] get_page_from_freelist+0x2365/0x2440 [ 3000.531011][ T3774] __alloc_frozen_pages_noprof+0x181/0x370 [ 3000.618088][ T3774] alloc_pages_mpol+0x232/0x4a0 [ 3000.629574][ T3774] alloc_pages_noprof+0xa9/0x190 [ 3000.649890][ T3774] folio_alloc_noprof+0x1e/0x30 [ 3000.664810][ T3774] filemap_alloc_folio_noprof+0x112/0x490 [ 3000.704619][ T3774] page_cache_ra_order+0x546/0xe50 [ 3000.740630][ T3774] do_sync_mmap_readahead+0x394/0x870 [ 3000.747337][ T3774] filemap_fault+0x6ac/0x1290 [ 3000.827745][ T3774] __do_fault+0x138/0x390 [ 3000.833344][ T3774] do_pte_missing+0x2206/0x3330 [ 3000.880422][ T3774] handle_mm_fault+0x1b26/0x32b0 [ 3000.951320][ T3774] __get_user_pages+0x1650/0x29f0 [ 3000.956577][ T5199] loop6: [POWERTEC] p1 p2 p3 [ 3000.971196][ T5199] loop6: p1 start 1684957538 is beyond EOD, truncated [ 3000.997196][ T5199] loop6: p2 size 2097152 extends beyond EOD, truncated [ 3001.034340][ T3774] populate_vma_page_range+0x29f/0x3a0 [ 3001.039919][ T5199] loop6: p3 start 1734541312 is beyond EOD, truncated [ 3001.077231][ T3774] __mm_populate+0x24c/0x380 [ 3001.101252][ T3774] page last free pid 65 tgid 65 stack trace: [ 3001.137836][ T3774] free_unref_folios+0xdb3/0x14f0 [ 3001.157879][ T3774] folios_put_refs+0x584/0x670 [ 3001.173016][ T3774] release_pages+0x4b4/0x520 [ 3001.187796][ T3774] io_free_region+0xb3/0x240 [ 3001.202650][ T3774] io_ring_ctx_free+0x2de/0x530 [ 3001.219317][ T3774] io_ring_exit_work+0x863/0x8d0 [ 3001.232027][ T3774] process_scheduled_works+0xad1/0x1770 [ 3001.247736][ T3774] worker_thread+0x8a0/0xda0 [ 3001.262986][ T3774] kthread+0x711/0x8a0 [ 3001.276108][ T3774] ret_from_fork+0x599/0xb30 [ 3001.292686][ T3774] ret_from_fork_asm+0x1a/0x30 [ 3001.351347][ T3774] ------------[ cut here ]------------ [ 3001.356929][ T3774] kernel BUG at mm/filemap.c:3579! [ 3001.387723][T26100] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 3001.445096][ T3774] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 3001.451508][ T3774] CPU: 0 UID: 0 PID: 3774 Comm: syz.1.6741 Tainted: G L syzkaller #0 PREEMPT(full) [ 3001.462395][ T3774] Tainted: [L]=SOFTLOCKUP [ 3001.466739][ T3774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3001.476809][ T3774] RIP: 0010:filemap_fault+0x1215/0x1290 [ 3001.482452][ T3774] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 b5 f2 2c 00 e9 81 fc ff ff e8 1b a1 c6 ff 48 89 df 48 c7 c6 80 a9 74 8b e8 dc f7 2c ff 90 <0f> 0b e8 04 a1 c6 ff 48 8b 3c 24 48 c7 c6 00 b0 74 8b e8 c4 f7 2c [ 3001.502074][ T3774] RSP: 0018:ffffc900033f75e0 EFLAGS: 00010246 [ 3001.508160][ T3774] RAX: c958e8162a866000 RBX: ffffea0002382400 RCX: 0000000000000000 [ 3001.516153][ T3774] RDX: 0000000000000000 RSI: ffffffff8d7867c7 RDI: 00000000ffffffff [ 3001.524145][ T3774] RBP: ffffc900033f7718 R08: ffffffff8f817677 R09: 1ffffffff1f02ece [ 3001.532133][ T3774] R10: dffffc0000000000 R11: fffffbfff1f02ecf R12: dffffc0000000000 [ 3001.540124][ T3774] R13: 1ffffd4000470481 R14: ffffea0002382418 R15: ffffea0002382408 [ 3001.548114][ T3774] FS: 00007f1f9bda66c0(0000) GS:ffff888125e44000(0000) knlGS:0000000000000000 [ 3001.557059][ T3774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3001.563657][ T3774] CR2: 00007f074a851762 CR3: 000000001ef04000 CR4: 00000000003526f0 [ 3001.571739][ T3774] Call Trace: [ 3001.575034][ T3774] [ 3001.578035][ T3774] ? __pfx_filemap_fault+0x10/0x10 [ 3001.583344][ T3774] __do_fault+0x138/0x390 [ 3001.587698][ T3774] do_pte_missing+0x2206/0x3330 [ 3001.592666][ T3774] ? handle_mm_fault+0xdb/0x32b0 [ 3001.597714][ T3774] handle_mm_fault+0x1b26/0x32b0 [ 3001.602759][ T3774] ? __pte_offset_map_lock+0x13e/0x210 [ 3001.608332][ T3774] ? handle_mm_fault+0xdb/0x32b0 [ 3001.613302][ T3774] ? __pfx_handle_mm_fault+0x10/0x10 [ 3001.618626][ T3774] ? follow_page_pte+0x7ef/0x13e0 [ 3001.623700][ T3774] ? __pfx_follow_page_pte+0x10/0x10 [ 3001.629016][ T3774] ? vma_is_secretmem+0xd/0x50 [ 3001.634075][ T3774] __get_user_pages+0x1650/0x29f0 [ 3001.639141][ T3774] populate_vma_page_range+0x29f/0x3a0 [ 3001.644625][ T3774] ? __pfx_populate_vma_page_range+0x10/0x10 [ 3001.650639][ T3774] ? down_read+0x274/0x2e0 [ 3001.655162][ T3774] ? __mm_populate+0x160/0x380 [ 3001.659972][ T3774] __mm_populate+0x24c/0x380 [ 3001.664580][ T3774] ? __pfx___mm_populate+0x10/0x10 [ 3001.669720][ T3774] vm_mmap_pgoff+0x387/0x4d0 [ 3001.674328][ T3774] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3001.679460][ T3774] ? __fget_files+0x2a/0x420 [ 3001.684070][ T3774] ? __fget_files+0x2a/0x420 [ 3001.688672][ T3774] ? __fget_files+0x2a/0x420 [ 3001.693299][ T3774] ksys_mmap_pgoff+0x51f/0x760 [ 3001.698083][ T3774] do_syscall_64+0xfa/0xf80 [ 3001.702608][ T3774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3001.708689][ T3774] ? clear_bhb_loop+0x60/0xb0 [ 3001.713380][ T3774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3001.719281][ T3774] RIP: 0033:0x7f1f9af8f749 [ 3001.723732][ T3774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3001.743446][ T3774] RSP: 002b:00007f1f9bda6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3001.752061][ T3774] RAX: ffffffffffffffda RBX: 00007f1f9b1e5fa0 RCX: 00007f1f9af8f749 [ 3001.760138][ T3774] RDX: 0000000003000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 3001.768128][ T3774] RBP: 00007f1f9b013f91 R08: 0000000000000004 R09: 0000000000000000 [ 3001.776200][ T3774] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 3001.784186][ T3774] R13: 00007f1f9b1e6038 R14: 00007f1f9b1e5fa0 R15: 00007f1f9b30fa28 [ 3001.792266][ T3774] [ 3001.795303][ T3774] Modules linked in: [ 3001.802732][ T3774] ---[ end trace 0000000000000000 ]--- [ 3001.851968][ T3774] RIP: 0010:filemap_fault+0x1215/0x1290 [ 3001.857556][ T3774] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 b5 f2 2c 00 e9 81 fc ff ff e8 1b a1 c6 ff 48 89 df 48 c7 c6 80 a9 74 8b e8 dc f7 2c ff 90 <0f> 0b e8 04 a1 c6 ff 48 8b 3c 24 48 c7 c6 00 b0 74 8b e8 c4 f7 2c [ 3001.879991][ T3774] RSP: 0018:ffffc900033f75e0 EFLAGS: 00010246 [ 3001.897860][T26100] usb 1-1: Using ep0 maxpacket: 16 [ 3001.904799][T26100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3001.926040][T26100] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3001.973274][T26100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3002.005449][T26100] usb 1-1: Product: syz [ 3002.010380][T26100] usb 1-1: Manufacturer: syz [ 3002.015199][T26100] usb 1-1: SerialNumber: syz [ 3002.020070][ T3774] RAX: c958e8162a866000 RBX: ffffea0002382400 RCX: 0000000000000000 [ 3002.027158][T26100] usb 1-1: config 0 descriptor?? [ 3002.081218][T26100] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3002.090678][T26100] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 3002.145993][ T3774] RDX: 0000000000000000 RSI: ffffffff8d7867c7 RDI: 00000000ffffffff [ 3002.309053][ T3774] RBP: ffffc900033f7718 R08: ffffffff8f817677 R09: 1ffffffff1f02ece [ 3002.339957][ T3774] R10: dffffc0000000000 R11: fffffbfff1f02ecf R12: dffffc0000000000 [ 3002.349490][ T3774] R13: 1ffffd4000470481 R14: ffffea0002382418 R15: ffffea0002382408 [ 3002.378623][ T3774] FS: 00007f1f9bda66c0(0000) GS:ffff888125f44000(0000) knlGS:0000000000000000 [ 3002.388899][ T3774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3002.395976][ T3774] CR2: 00007fb586bb9358 CR3: 000000001ef04000 CR4: 00000000003526f0 [ 3002.404735][ T3774] Kernel panic - not syncing: Fatal exception [ 3002.411085][ T3774] Kernel Offset: disabled [ 3002.415417][ T3774] Rebooting in 86400 seconds..