last executing test programs: 31.582644551s ago: executing program 4 (id=6761): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendfile(r5, r4, 0x0, 0x17) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) write$FUSE_STATX(r4, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 28.934394792s ago: executing program 4 (id=6764): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$dupfd(r1, 0x406, r0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001880)) io_setup(0x4082, &(0x7f0000000380)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @empty, 0x4}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x25b1, &(0x7f0000001400)={0x0, 0x3ab1, 0x10, 0x0, 0x802cd}, &(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000440)={@remote, @local, 0x0, "ab4a10dea6d88f680c032dd66fee2b7ae807e269061c1616d297cb53005aca18", 0x400, 0x8, 0x3, 0x6}, 0x3c) ioctl$KVM_RUN(r6, 0xae80, 0x0) 23.970343948s ago: executing program 4 (id=6773): pipe(&(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)='\v', 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21.802998067s ago: executing program 4 (id=6776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000180)) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket(0x840000000002, 0x3, 0xff) io_uring_setup(0x0, 0x0) io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r5, &(0x7f0000001c80)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x6, 0x2}, {0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe8, 0x1, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x82, 0x6, "7ff99bf268d2a3e8ff36f3d98819bff0286c14e8b503d492d75f38b95798ed2a0260aaed511ef5ce7cf9d622784738cb02b397322707aac1562fbc1bfeebd223110c24ffb7aca48d990aacfa7f60bd60945a1b23e2504025ce3227952fe605ea37ce1143ca6803e821b6535d6765463ad6c862c6716c419802029089c033"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x1) sendto$inet6(r2, &(0x7f0000000100)="170c02ae9219438d9d9d800c66e1e6cdf47d39312f8d4a5e30ec43dfcf3d97adbfeb35115e0a3365e95ced382c05e77787976aee30f93d04623258c316ebbb0aff4ca73ae32bb382e482d187bf9d6317b0a593e9ba2be74e0d79", 0x5a, 0x4000, 0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x0, 0x2, 0xfa000, 0x6ae0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x558}, 0x1, 0x0, 0x0, 0xa6975b0d20b3dc1e}, 0x40) 19.873100207s ago: executing program 3 (id=6782): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$rds(0x15, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0xffe0}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004280)=""/4093, 0xffd}, {&(0x7f0000001700)=""/4082, 0xff2}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x40000005}, {{0x0, 0x0, 0x0}, 0x2002}], 0x3, 0x40000000, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x29, 0x63, 0x90, 0x10, 0x1a86, 0x752d, 0x2d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x1, 0xe9, 0x11, 0xbd, 0x0, [], [{{0x9, 0x5, 0xc, 0x3, 0x10, 0x3, 0xf, 0x2}}]}}]}}]}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 18.907165476s ago: executing program 0 (id=6786): socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x90, &(0x7f0000000340)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x5) setxattr$incfs_metadata(&(0x7f0000000800)='./file0\x00', 0x0, &(0x7f00000005c0), 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 17.071652089s ago: executing program 0 (id=6789): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) fcntl$dupfd(r2, 0x0, r2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0x8008b705, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x46c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x7}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x440, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9, 0x17}}, @TCA_U32_SEL={0x424, 0x5, {0x6, 0x7, 0x2, 0x3, 0x0, 0xf800, 0x8, 0xf, [{0x5, 0x40, 0x4, 0x8}, {0xff, 0x9, 0x7, 0x5c2}, {0x3, 0x4}, {0x7, 0x0, 0xffffffff, 0x457}, {0x2c6bd106, 0x2, 0x63208, 0x9e}, {0x400, 0xe, 0x0, 0x4}, {0x0, 0x7, 0x80000000, 0x7f}, {0x4, 0xffffffff, 0xd, 0x3}, {0x100, 0x3, 0x4, 0x9}, {0x3, 0x0, 0x4, 0x6}, {0x7, 0x2, 0x1, 0x280000}, {0xb, 0x3, 0x6a, 0x3}, {0x3, 0xd, 0x7}, {0x2, 0x1000, 0x0, 0x1362}, {0x1000, 0x24d, 0xf4, 0x5b}, {0x26, 0x9, 0xbd8, 0x1800000}, {0x56, 0x0, 0xd, 0x8}, {0xfffffffe, 0x3, 0x2c80, 0xe}, {0x5, 0x3, 0x5, 0x9}, {0x0, 0x2, 0x8001, 0x8}, {0x8, 0x3, 0x7ff, 0x4}, {0xffffff8c, 0x8, 0x101, 0x6}, {0xaf88, 0x9, 0x1bdf, 0x4000}, {0x6, 0x9, 0xd38, 0x7}, {0x5, 0x924, 0x0, 0x7fffffff}, {0x8, 0x10, 0x5, 0x9}, {0x1fa000, 0x39, 0x1, 0x3}, {0x5, 0x9, 0x200, 0x5}, {0x80000001, 0x3f910461, 0xfffffffb, 0x5}, {0x24, 0x80000000, 0x7f, 0xfffff000}, {0x1, 0x3, 0xc7a, 0x4bc}, {0x4, 0x1, 0xa, 0x1ff}, {0x1, 0xc, 0x3, 0x6}, {0x8, 0xfffffffb, 0x6, 0x158}, {0x6, 0x80, 0x4d6, 0xffffff81}, {0xd, 0x3, 0x6, 0x8}, {0x7fffffff, 0x1000, 0x2, 0xfffffff7}, {0xfffffbef, 0x6, 0xfe5c, 0x10000}, {0x32a, 0xa, 0x4}, {0x7, 0x4, 0x3, 0xe5}, {0x5, 0x4, 0x9, 0x2}, {0x9, 0x4, 0xb, 0xa}, {0x401, 0xaa9e, 0x4, 0x10000}, {0xffffff43, 0x5, 0x8}, {0x2, 0x9, 0xfffffffc, 0xdb19}, {0x3, 0x3, 0x77, 0xffffff81}, {0x1b, 0x7ff, 0x3, 0xd177}, {0x2, 0x1fa, 0x8, 0x2}, {0x7, 0xfffffff8, 0x7, 0x8}, {0x3043, 0x2f8, 0x3, 0x2c}, {0x9, 0x0, 0x5, 0xb}, {0x5, 0xbd0a, 0x1ff, 0x7}, {0x1, 0x9, 0x2, 0x3ff}, {0xfe1, 0x2, 0x0, 0x7}, {0x7, 0xb67, 0xb, 0xe57}, {0x1, 0x80000000, 0x2}, {0x7, 0x8, 0x8001, 0x9}, {0x3, 0x7, 0x5, 0x6}, {0x9, 0x9, 0x2, 0x2}, {0x9, 0x3, 0x10, 0x7}, {0x8, 0x9, 0x0, 0xb}, {0x8001, 0x7, 0x0, 0xaa40}, {0x5, 0x2, 0x0, 0x3}, {0x8, 0x0, 0x0, 0x3}, {0x1, 0x5, 0x6, 0xee5a}]}}, @TCA_U32_LINK={0x8, 0x3, 0x100}]}}]}, 0x46c}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.514462929s ago: executing program 0 (id=6792): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x40) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x48, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0x9}, {0x8}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 12.700673487s ago: executing program 3 (id=6793): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.606503296s ago: executing program 2 (id=6795): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x2e0e, 0x0, 0x0, 0xffffffffffffffa2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000751000/0x2000)=nil}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r6, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) r7 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) r8 = fsopen(&(0x7f0000000240)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000080)='disBard', &(0x7f0000000200)='\x00', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r9 = syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) mmap$IORING_OFF_SQ_RING(&(0x7f000062a000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r7, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 12.602371919s ago: executing program 0 (id=6796): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.523225948s ago: executing program 3 (id=6798): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) memfd_secret(0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009d"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r6 = syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYRES64, @ANYRESDEC=r6, @ANYRESHEX=r2, @ANYRES16, @ANYRES8=r2]}]}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) write$binfmt_format(r1, &(0x7f0000000100)='-1\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 10.245348332s ago: executing program 0 (id=6800): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x40) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x48, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0x9}, {0x8}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 10.054418211s ago: executing program 2 (id=6801): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x42e7, &(0x7f00000002c0)={0x0, 0x8005943, 0x2, 0x2, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2083) write$FUSE_INIT(r4, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r6, r7, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000000)=0xfffffff8, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 7.686665601s ago: executing program 3 (id=6802): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) io_setup(0x4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xd26, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 6.074176677s ago: executing program 1 (id=6803): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xd26, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 6.002720359s ago: executing program 3 (id=6804): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000020601020000000000000000000000000c0007800800124000060000050001000600", @ANYRESDEC=r0], 0x4c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, 0x0, 0x6) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4) write(0xffffffffffffffff, &(0x7f0000000340)="ad4add7b05aa7618a9a6ca4ca0e606e6d7f26dd535c8e8d3e2c679285c6483da3d265ba2865c3891685846261c2611bd61f009cb159aafcd1f7b7d70cc8300dc6c4bfd3dff0a642b6d5bba1bd995597ac53cbbc238c1fc535c59c259b7e95745959beaa36b15d34ffe2eceb58857924b0d811d0d799b265f6f6ede5317a8d3cbdd771078913476167c094bc2e0c0f6fc35186e165a1e3dea326deffd", 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000400), 0x4) close(0x3) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240500000000000904020002ffffff0009050b"], 0x0) syz_emit_ethernet(0x256, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x0) 5.413567098s ago: executing program 0 (id=6805): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$rds(0x15, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0xffe0}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004280)=""/4093, 0xffd}, {&(0x7f0000001700)=""/4082, 0xff2}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x40000005}, {{0x0, 0x0, 0x0}, 0x2002}], 0x3, 0x40000000, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x29, 0x63, 0x90, 0x10, 0x1a86, 0x752d, 0x2d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x1, 0xe9, 0x11, 0xbd, 0x0, [], [{{0x9, 0x5, 0xc, 0x3, 0x10, 0x3, 0xf, 0x2}}]}}]}}]}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 5.391865874s ago: executing program 2 (id=6806): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3", 0x3e}], 0x1}], 0x1, 0x0) 5.081716407s ago: executing program 1 (id=6807): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.067035175s ago: executing program 2 (id=6808): getsockopt(0xffffffffffffffff, 0x85e, 0x10001, &(0x7f0000000440)=""/160, &(0x7f0000000500)=0xa0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r0}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') unshare(0x38000600) listen(0xffffffffffffffff, 0x4) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:crontab_exec_t:s0\x00', 0x24, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="1e0f0409031c0408f2c0de3a972136eaf3c130aaf636c5b4f671c3404b8153020009798e761038301f469d257a0d10f0220815ad3271a5fe8f3b08976062bfc4c7c245ffe829fd35b632787f841291894a0cdf6945e772062c9f6fac9b71dc4e2d69866cb7766141c5c85f987d16a46bed8f4e0cb9cb12"], 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000ad6c86202f070022bf3f0102030109022b0001000000000904000002b4afd7000000000000000000000705e37e1b82e609050b020000000000"], 0x0) 4.406584772s ago: executing program 1 (id=6809): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x27c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x250, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9, 0x17}}, @TCA_U32_SEL={0x234, 0x5, {0x6, 0x7, 0x2, 0x3, 0x0, 0xf800, 0x8, 0xf, [{0x5, 0x40, 0x4, 0x8}, {0xff, 0x9, 0x7, 0x5c2}, {0x3, 0x4}, {0x7, 0x0, 0xffffffff, 0x457}, {0x2c6bd106, 0x2, 0x63208, 0x9e}, {0x400, 0xe, 0x0, 0x4}, {0x100, 0x3, 0x4, 0x9}, {0xb, 0x3, 0x6a, 0x3}, {0x3, 0xd, 0x7}, {0x26, 0x9, 0xbd8, 0x1800000}, {0x5, 0x3, 0x5, 0x9}, {0x0, 0x2, 0x8001, 0x8}, {0x8, 0x3, 0x7ff, 0x4}, {0xffffff8c, 0x8, 0x101, 0x6}, {0xaf88, 0x9, 0x1bdf, 0x4000}, {0x6, 0x9, 0xd38, 0x7}, {0x1fa000, 0x39, 0x1, 0x3}, {0x5, 0x9, 0x200, 0x5}, {0x80000001, 0x3f910461, 0xfffffffb, 0x5}, {0x24, 0x80000000, 0x7f, 0xfffff000}, {0x1, 0xc, 0x3, 0x6}, {0xd, 0x3, 0x6, 0x8}, {0xfffffbef, 0x6, 0xfe5c, 0x10000}, {0x7, 0x4, 0x3, 0xe5}, {0x401, 0xaa9e, 0x4, 0x10000}, {0x2, 0x9, 0xfffffffc, 0xdb19}, {0x3, 0x3, 0x77, 0xffffff81}, {0x1b, 0x7ff, 0x3, 0xd177}, {0x2, 0x1fa, 0x8, 0x2}, {0x7, 0xfffffff8, 0x7, 0x8}, {0x3043, 0x2f8, 0x3, 0x2c}, {0x7, 0xb67, 0xb, 0xe57}, {0x3, 0x7, 0x5, 0x6}, {0x8, 0x9, 0x0, 0xb}]}}, @TCA_U32_LINK={0x8, 0x3, 0x100}]}}]}, 0x27c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.324889717s ago: executing program 1 (id=6810): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x5f, 0x37, 0x40, 0x471, 0x602, 0xa495, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x42, 0xd8, 0x0, 0xa, [{{0x9, 0x4, 0x0, 0x10, 0x0, 0x32, 0x3a, 0xb4, 0x8}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) acct(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 2.686768415s ago: executing program 1 (id=6812): syz_usb_connect(0x0, 0x48, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x75, 0xb2, 0x1f, 0x40, 0x8086, 0xb63, 0xcaf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x3, 0xcc, 0xc8, 0xac, 0x0, [], [{{0x9, 0x5, 0x4, 0x4, 0x618, 0xd8, 0x3, 0x4, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x83, 0x62, 0x82}}, {{0x9, 0x5, 0x12, 0x0, 0x20, 0x0, 0xa, 0xc, [@generic={0x7, 0x5, "e6ea3588e4"}]}}]}}]}}]}}, 0x0) 2.12654544s ago: executing program 3 (id=6813): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) io_setup(0x4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xd26, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 1.260451258s ago: executing program 2 (id=6814): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') 244.411756ms ago: executing program 1 (id=6815): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$dupfd(r1, 0x406, r0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001880)) io_setup(0x4082, &(0x7f0000000380)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @empty, 0x4}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000440)={@remote, @local, 0x0, "ab4a10dea6d88f680c032dd66fee2b7ae807e269061c1616d297cb53005aca18", 0x400, 0x8, 0x3, 0x6}, 0x3c) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 4 (id=6816): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xd26, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) kernel console output (not intermixed with test programs): dit: type=1326 audit(1752081711.448:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.4.6445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 1891.489231][T19924] usb 2-1: USB disconnect, device number 98 [ 1891.492445][ T30] audit: type=1326 audit(1752081711.448:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.4.6445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 1891.526294][ T30] audit: type=1326 audit(1752081711.448:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.4.6445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 1891.607322][T19923] dvb-usb: bulk message failed: -22 (1/0) [ 1891.613265][T19923] dvb-usb: error while querying for an remote control event. [ 1891.789785][T19924] dvb-usb: bulk message failed: -22 (1/0) [ 1891.797848][T19924] dvb-usb: error while querying for an remote control event. [ 1891.976251][T27933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6456'. [ 1891.985329][T27933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6456'. [ 1891.994436][T27933] netlink: 'syz.2.6456': attribute type 7 has an invalid length. [ 1892.082806][T27933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6456'. [ 1892.092000][T27933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6456'. [ 1892.101530][T27933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6456'. [ 1892.153719][T19924] dvb-usb: bulk message failed: -22 (1/0) [ 1892.191142][T19924] dvb-usb: error while querying for an remote control event. [ 1892.295382][T27936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6455'. [ 1892.361287][T27938] cgroup: Unknown subsys name 'cpuset' [ 1892.377032][T19923] dvb-usb: bulk message failed: -22 (1/0) [ 1892.383655][T19923] dvb-usb: error while querying for an remote control event. [ 1892.415613][ T5867] usb 4-1: USB disconnect, device number 8 [ 1892.440018][ T5867] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1892.448429][T19924] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1892.618456][T19924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1892.628419][T19924] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1892.652086][T19924] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1892.679080][T19924] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1892.688260][T19924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.698651][T19924] usb 5-1: Product: syz [ 1892.702876][T19924] usb 5-1: Manufacturer: syz [ 1892.707742][T19924] usb 5-1: SerialNumber: syz [ 1893.711462][T19924] hub 5-1:1.0: bad descriptor, ignoring hub [ 1893.717441][T19924] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1893.751229][T19924] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1894.008894][T26444] usb 5-1: USB disconnect, device number 84 [ 1894.022283][T26444] usblp0: removed [ 1894.264010][T27969] usb usb8: usbfs: process 27969 (syz.2.6468) did not claim interface 0 before use [ 1894.276907][T27969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6468'. [ 1894.421227][T27971] netlink: 'syz.1.6467': attribute type 4 has an invalid length. [ 1894.433614][T27971] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6467'. [ 1894.443065][T27971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6467'. [ 1894.468790][T26444] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1894.720116][T26444] usb 5-1: config 0 has no interfaces? [ 1894.726039][T26444] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1894.735337][T26444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.762709][T26444] usb 5-1: config 0 descriptor?? [ 1894.820212][T19924] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1895.004857][T19924] usb 4-1: Using ep0 maxpacket: 8 [ 1895.016385][T19923] usb 5-1: USB disconnect, device number 85 [ 1895.025059][T19924] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1895.035555][T19924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.047163][T19924] usb 4-1: Product: syz [ 1895.051393][T19924] usb 4-1: Manufacturer: syz [ 1895.069178][T19924] usb 4-1: SerialNumber: syz [ 1895.189665][T19924] usb 4-1: config 0 descriptor?? [ 1895.309708][T27978] usb usb8: usbfs: process 27978 (syz.2.6470) did not claim interface 0 before use [ 1895.404945][T27979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6470'. [ 1895.762152][T19924] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1896.609933][ T24] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1896.642530][T27999] netlink: 'syz.0.6475': attribute type 7 has an invalid length. [ 1896.860198][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1896.870183][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1896.935737][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.959954][ T24] usb 5-1: Product: syz [ 1896.970158][ T24] usb 5-1: Manufacturer: syz [ 1896.987448][ T24] usb 5-1: SerialNumber: syz [ 1896.995501][ T24] usb 5-1: config 0 descriptor?? [ 1897.214688][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1897.476709][T19924] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1897.495558][T28009] __nla_validate_parse: 6 callbacks suppressed [ 1897.495587][T28009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1897.510920][T28009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1897.519870][T28009] netlink: 'syz.0.6478': attribute type 7 has an invalid length. [ 1897.556318][T28009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1897.565445][T28009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1897.574720][T28009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1897.600875][T19924] usb 4-1: USB disconnect, device number 9 [ 1897.822480][T28010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6476'. [ 1897.889165][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1898.290927][ T24] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1898.305782][T28020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6481'. [ 1898.480924][T19924] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1898.480950][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1898.482468][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1898.509637][ T24] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1898.520780][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1898.532029][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1898.541227][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.549198][ T24] usb 1-1: Product: syz [ 1898.553565][ T24] usb 1-1: Manufacturer: syz [ 1898.558219][ T24] usb 1-1: SerialNumber: syz [ 1898.641104][T19924] usb 2-1: Using ep0 maxpacket: 8 [ 1899.563730][T19924] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1899.571996][T19924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.582435][T19924] usb 2-1: config 0 has no interface number 0 [ 1899.588585][T19924] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1899.601302][T19924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.627954][T19924] usb 2-1: config 0 descriptor?? [ 1899.635273][T19924] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1899.702005][ T24] usb 1-1: 0:2 : does not exist [ 1899.707822][ T5881] usb 5-1: USB disconnect, device number 86 [ 1899.763683][ T24] usb 1-1: USB disconnect, device number 81 [ 1901.226148][T19917] usb 2-1: USB disconnect, device number 99 [ 1901.732392][ T5881] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1901.742533][T19917] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1901.810101][T28076] overlayfs: missing 'lowerdir' [ 1901.826899][T28076] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1901.914141][T19917] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 1901.922521][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 1901.945461][T19917] usb 2-1: config 0 has no interface number 0 [ 1901.946783][ T5881] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1901.960832][T19917] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1901.971922][T19924] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1901.979612][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.990039][T19917] usb 2-1: config 0 interface 230 has no altsetting 0 [ 1901.990124][ T5881] usb 5-1: Product: syz [ 1902.004692][T19917] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1902.004882][ T5881] usb 5-1: Manufacturer: syz [ 1902.014985][T19917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.019464][ T5881] usb 5-1: SerialNumber: syz [ 1902.035734][ T5881] usb 5-1: config 0 descriptor?? [ 1902.050438][T19917] usb 2-1: Product: syz [ 1902.072992][T19917] usb 2-1: Manufacturer: syz [ 1902.077631][T19917] usb 2-1: SerialNumber: syz [ 1902.089726][T19917] usb 2-1: config 0 descriptor?? [ 1902.095723][T28064] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1902.107279][T19917] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 1902.132781][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1902.142212][T19917] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1902.149953][T19924] usb 1-1: Using ep0 maxpacket: 16 [ 1902.160594][T19924] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1902.172435][T19924] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1902.210200][T19924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1902.237442][T19924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1902.245746][ T5881] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1902.246834][T19924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.281147][T19924] usb 1-1: Product: syz [ 1902.294126][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1902.300722][T19924] usb 1-1: Manufacturer: syz [ 1902.301209][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1902.323453][ T24] usb 4-1: config 0 has no interface number 0 [ 1902.341293][ T24] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1902.341561][T19924] usb 1-1: SerialNumber: syz [ 1902.350600][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.364760][ T24] usb 4-1: Product: syz [ 1902.368949][ T24] usb 4-1: Manufacturer: syz [ 1902.386609][ T24] usb 4-1: SerialNumber: syz [ 1902.396671][ T24] usb 4-1: config 0 descriptor?? [ 1902.625830][T19924] usb 1-1: 0:2 : does not exist [ 1902.636807][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1902.641333][T19924] usb 1-1: USB disconnect, device number 82 [ 1903.254680][ T5881] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1903.367354][T28092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6501'. [ 1903.376420][T28092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6501'. [ 1903.385458][T28092] netlink: 'syz.0.6501': attribute type 7 has an invalid length. [ 1903.453171][T28092] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6501'. [ 1903.462175][T28092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6501'. [ 1903.471562][T28092] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6501'. [ 1903.703872][T19924] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1903.865123][T19924] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1903.873758][T19924] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1903.883912][T19924] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 64 [ 1903.893698][T19924] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1903.906842][T19924] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1903.915758][T19924] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1903.924913][T19924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.932947][T19924] usb 3-1: Product: 烷쮷悔♅瞷ꆺ털蹕퇉 [ 1903.939500][T19924] usb 3-1: Manufacturer: ఊ [ 1903.944111][T19924] usb 3-1: SerialNumber: 《 [ 1903.951179][T28089] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1903.958567][T28089] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1903.983518][T19917] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1904.153558][T19917] usb 1-1: Using ep0 maxpacket: 32 [ 1904.160282][T19917] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1904.171450][T19917] usb 1-1: config 1 has no interface number 1 [ 1904.177686][T19917] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1904.192991][T19917] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1904.202452][T19917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.210657][T19917] usb 1-1: Product: syz [ 1904.215027][T19917] usb 1-1: Manufacturer: syz [ 1904.219737][T19917] usb 1-1: SerialNumber: syz [ 1904.546465][ T5881] usb 5-1: USB disconnect, device number 87 [ 1905.029255][ T5867] usb 4-1: USB disconnect, device number 10 [ 1905.070303][ T24] usb 2-1: USB disconnect, device number 100 [ 1905.238090][T28110] netlink: 'syz.4.6504': attribute type 4 has an invalid length. [ 1905.246092][T28110] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6504'. [ 1905.255317][T28110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6504'. [ 1905.698353][T28114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1905.956078][T28120] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6508'. [ 1905.967342][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1906.410710][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1906.485190][T19924] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1906.566959][ T24] usb 4-1: device descriptor read/64, error -32 [ 1906.656438][T19924] usb 3-1: USB disconnect, device number 107 [ 1906.772640][T19917] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1906.814969][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1906.864971][ T5881] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1906.905192][T19917] usb 1-1: USB disconnect, device number 83 [ 1906.987225][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1907.000296][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1907.011789][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1907.026579][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 1907.044596][ T5881] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1907.063704][ T5881] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1907.077938][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1907.087983][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.097136][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1907.108868][ T24] usb 4-1: Product: syz [ 1907.113171][ T24] usb 4-1: Manufacturer: syz [ 1907.119351][ T24] usb 4-1: SerialNumber: syz [ 1907.126018][ T5881] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1907.135967][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.159220][ T5881] usb 2-1: Product: syz [ 1907.167921][ T24] hub 4-1:1.0: bad descriptor, ignoring hub [ 1907.178650][ T5881] usb 2-1: Manufacturer: syz [ 1907.200308][ T24] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1907.230012][ T5881] usb 2-1: SerialNumber: syz [ 1907.384525][ T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1907.459885][ T5881] usb 2-1: 0:2 : does not exist [ 1907.471483][ T5881] usb 2-1: USB disconnect, device number 101 [ 1907.545346][T24900] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1907.565367][T19917] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1907.581522][T28113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.590280][T28113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1907.695346][T24900] usb 5-1: Using ep0 maxpacket: 8 [ 1907.703501][T24900] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1907.712856][T24900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.720893][T24900] usb 5-1: Product: syz [ 1907.725067][T24900] usb 5-1: Manufacturer: syz [ 1907.729713][T24900] usb 5-1: SerialNumber: syz [ 1907.736028][T24900] usb 5-1: config 0 descriptor?? [ 1907.739155][T19917] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1907.752324][T19917] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1907.764337][T19917] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1907.785096][T19917] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1907.794569][T19917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.802959][T19917] usb 3-1: Product: syz [ 1907.807427][T19917] usb 3-1: Manufacturer: syz [ 1907.812057][T19917] usb 3-1: SerialNumber: syz [ 1907.824568][T19917] hub 3-1:1.0: bad descriptor, ignoring hub [ 1907.830772][T19917] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1907.954774][T24900] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1908.046395][T19917] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1908.346096][T19916] usb 3-1: USB disconnect, device number 108 [ 1908.353877][T19916] usblp1: removed [ 1908.476562][ T24] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1908.645848][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1908.681308][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1908.698656][T19917] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1908.759526][ T24] usb 2-1: config 0 has no interface number 0 [ 1908.790758][T28149] vivid-000: ================= START STATUS ================= [ 1908.808106][T28149] vivid-000: Test Pattern: 75% Colorbar [ 1908.829882][T28149] vivid-000: Fill Percentage of Frame: 100 [ 1908.830487][T19916] usb 4-1: USB disconnect, device number 12 [ 1908.952496][T28149] vivid-000: Horizontal Movement: No Movement [ 1908.965599][ T24] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1908.978114][T28149] vivid-000: Vertical Movement: No Movement [ 1908.988947][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.006061][T28149] vivid-000: OSD Text Mode: All [ 1909.011722][T19916] usblp0: removed [ 1909.013033][T19917] usb 3-1: config 0 has no interfaces? [ 1909.016016][ T24] usb 2-1: Product: syz [ 1909.025298][T19917] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1909.040254][T28149] vivid-000: Show Border: false [ 1909.045188][T28149] vivid-000: Show Square: false [ 1909.051137][T24900] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1909.062891][ T24] usb 2-1: Manufacturer: syz [ 1909.067611][ T24] usb 2-1: SerialNumber: syz [ 1909.067707][T19917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.080063][ T24] usb 2-1: config 0 descriptor?? [ 1909.085842][T28149] vivid-000: Sensor Flipped Horizontally: false [ 1909.094641][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1909.103945][T28149] vivid-000: Sensor Flipped Vertically: false [ 1909.106184][T19924] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1909.119845][T28149] vivid-000: Insert SAV Code in Image: false [ 1909.129888][T28149] vivid-000: Insert EAV Code in Image: false [ 1909.142160][T28149] vivid-000: Insert Video Guard Band: false [ 1909.151596][T28149] vivid-000: Reduced Framerate: false [ 1909.163179][T28149] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1909.197602][T28149] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1909.219125][T28149] vivid-000: Enable Capture Cropping: true grabbed [ 1909.237129][T19917] usb 3-1: config 0 descriptor?? [ 1909.249375][T28149] [ 1909.252264][T28149] vivid-000: Enable Capture Composing: true grabbed [ 1909.260571][T28149] vivid-000: Enable Capture Scaler: true grabbed [ 1909.268338][T28149] vivid-000: Timestamp Source: End of Frame [ 1909.274475][T28149] vivid-000: Colorspace: Rec. 709 [ 1909.280974][T28149] vivid-000: Transfer Function: Default [ 1909.286720][T28149] vivid-000: Y'CbCr Encoding: Default [ 1909.292417][T28149] vivid-000: HSV Encoding: Hue 0-179 [ 1909.299281][T28149] vivid-000: Quantization: Default [ 1909.304439][T28149] vivid-000: Apply Alpha To Red Only: false [ 1909.312276][T28149] vivid-000: Standard Aspect Ratio: 4x3 [ 1909.319650][T28149] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1909.326722][T19924] usb 1-1: Using ep0 maxpacket: 32 [ 1909.332149][T28149] vivid-000: DV Timings: 640x480p59 inactive [ 1909.340158][T28149] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1909.340667][T19924] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 1909.358600][T19924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.367246][T28149] [ 1909.370686][T28149] vivid-000: Maximum EDID Blocks: 2 [ 1909.375931][T28149] vivid-000: Limited RGB Range (16-235): [ 1909.376525][T19924] usb 1-1: config 0 descriptor?? [ 1909.387302][T28149] true [ 1909.390557][T28149] vivid-000: Rx RGB Quantization Range: Automatic [ 1909.399189][T28149] vivid-000: Power Present: 0x00000001 [ 1909.405286][T28149] tpg source WxH: 1280x720 (R'G'B) [ 1909.410727][T28149] tpg field: 1 [ 1909.415339][T19924] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1909.425055][T28149] tpg crop: (0,0)/64x64 [ 1909.430627][T19924] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input88 [ 1909.439678][T28149] tpg compose: (0,0)/16x16 [ 1909.444230][T28149] tpg colorspace: 3 [ 1909.449418][T28149] tpg transfer function: 0/1 [ 1909.455882][T28149] tpg quantization: 2/2 [ 1909.461297][T28149] tpg RGB range: 0/1 [ 1909.465275][T28149] vivid-000: ================== END STATUS ================== [ 1909.477727][T19917] usb 3-1: USB disconnect, device number 109 [ 1909.648567][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1909.648586][ T30] audit: type=1326 audit(1752081730.078:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28146 comm="syz.0.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4038e929 code=0x7ffc0000 [ 1909.679648][ T30] audit: type=1326 audit(1752081730.078:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28146 comm="syz.0.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4038e929 code=0x7ffc0000 [ 1909.703659][ T30] audit: type=1326 audit(1752081730.108:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28146 comm="syz.0.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1f4038e929 code=0x7ffc0000 [ 1909.727268][ T30] audit: type=1326 audit(1752081730.108:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28146 comm="syz.0.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4038e929 code=0x7ffc0000 [ 1909.750788][ T30] audit: type=1326 audit(1752081730.108:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28146 comm="syz.0.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4038e929 code=0x7ffc0000 [ 1909.775415][ T30] audit: type=1326 audit(1752081730.128:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28146 comm="syz.0.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f1f4038e929 code=0x7ffc0000 [ 1910.408623][T24900] usb 5-1: USB disconnect, device number 88 [ 1910.692342][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1911.071471][T24900] usb 2-1: USB disconnect, device number 102 [ 1911.128513][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1911.142539][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1911.161678][ T24] usb 4-1: config 1 has no interface number 1 [ 1911.168687][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1911.196405][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1911.217157][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.240460][ T24] usb 4-1: Product: syz [ 1911.253229][ T24] usb 4-1: Manufacturer: syz [ 1911.263075][ T24] usb 4-1: SerialNumber: syz [ 1911.533083][T28179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6525'. [ 1911.542140][T28179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6525'. [ 1911.551196][T28179] netlink: 'syz.4.6525': attribute type 7 has an invalid length. [ 1911.568561][T28179] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6525'. [ 1911.578079][T28179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6525'. [ 1911.587277][T28179] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6525'. [ 1911.997800][T24900] usb 1-1: USB disconnect, device number 84 [ 1912.904765][T28190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6527'. [ 1913.353808][T28194] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6528'. [ 1914.045339][ T24] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1914.159584][ T24] usb 4-1: USB disconnect, device number 13 [ 1914.987321][ T5867] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 1915.366692][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.394897][T28216] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6535'. [ 1915.448585][ T5867] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1915.558067][ T5867] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1915.606322][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.689213][ T5867] usb 1-1: config 0 descriptor?? [ 1915.704348][T28226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6536'. [ 1915.740104][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.746519][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.890641][ T5867] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1915.897368][ T5867] dvb-usb: bulk message failed: -22 (3/0) [ 1916.049409][T28231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6538'. [ 1916.058619][T28231] netlink: 'syz.2.6538': attribute type 7 has an invalid length. [ 1916.311968][T28207] dvb-usb: bulk message failed: -22 (2/0) [ 1916.420108][ T5867] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1916.470623][ T5867] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1916.479893][ T5867] usb 1-1: media controller created [ 1916.489963][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1916.610871][ T5867] dvb-usb: bulk message failed: -22 (6/0) [ 1916.630775][ T5867] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1916.693909][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input89 [ 1916.839030][ T5867] dvb-usb: schedule remote query interval to 150 msecs. [ 1916.888619][ T5867] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1917.042224][ T5867] dvb-usb: bulk message failed: -22 (1/0) [ 1917.048206][ T5867] dvb-usb: error while querying for an remote control event. [ 1917.164964][ T24] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1917.210427][ T5867] dvb-usb: bulk message failed: -22 (1/0) [ 1917.218711][ T5867] dvb-usb: error while querying for an remote control event. [ 1917.346866][ T24] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1917.382867][ T5867] dvb-usb: bulk message failed: -22 (1/0) [ 1917.388343][ T24] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 64 [ 1917.398482][ T24] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1917.411564][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1917.479556][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1917.523094][T24900] usb 1-1: USB disconnect, device number 85 [ 1917.525829][ T5867] dvb-usb: error while querying for an remote control event. [ 1917.549541][T24900] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1917.595853][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.610664][ T24] usb 3-1: Product: 烷쮷悔♅瞷ꆺ털蹕퇉 [ 1917.620932][ T24] usb 3-1: Manufacturer: ఊ [ 1917.625678][ T24] usb 3-1: SerialNumber: 《 [ 1917.639655][T28234] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1917.649279][T28234] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1917.887817][T28249] __nla_validate_parse: 4 callbacks suppressed [ 1917.887840][T28249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6541'. [ 1917.985057][ T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1918.009391][ T24] usb 3-1: USB disconnect, device number 110 [ 1918.431036][T28254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6544'. [ 1918.440052][T28254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6544'. [ 1918.497456][T28254] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6544'. [ 1918.506579][T28254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6544'. [ 1918.516117][T28254] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6544'. [ 1919.341351][T24900] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1919.438541][T28274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6551'. [ 1919.447777][T28274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6551'. [ 1919.457326][T28274] netlink: 'syz.2.6551': attribute type 7 has an invalid length. [ 1919.531385][T24900] usb 4-1: Using ep0 maxpacket: 16 [ 1919.583531][T24900] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1919.643532][T24900] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1919.651938][T28274] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6551'. [ 1919.663009][T28274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6551'. [ 1919.751426][T24900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1919.763008][T24900] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1919.781599][T24900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.811716][T24900] usb 4-1: Product: syz [ 1919.817890][T24900] usb 4-1: Manufacturer: syz [ 1919.834342][T24900] usb 4-1: SerialNumber: syz [ 1920.160332][T24900] usb 4-1: 0:2 : does not exist [ 1920.210375][T24900] usb 4-1: USB disconnect, device number 14 [ 1921.373235][T28305] syzkaller0: entered promiscuous mode [ 1921.378733][T28305] syzkaller0: entered allmulticast mode [ 1921.552317][ T5867] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1921.933942][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 1921.945062][T28318] fuse: Unknown parameter 'grou00000000000000000000' [ 1922.611419][ T5867] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1922.769676][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.046571][ T5867] usb 2-1: Product: syz [ 1923.071374][ T5867] usb 2-1: Manufacturer: syz [ 1923.088257][ T5867] usb 2-1: SerialNumber: syz [ 1923.365543][ T5867] usb 2-1: config 0 descriptor?? [ 1924.007472][ T5867] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1924.644051][ T5867] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1925.612825][T28338] __nla_validate_parse: 3 callbacks suppressed [ 1925.612858][T28338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6566'. [ 1925.872214][T19916] usb 2-1: USB disconnect, device number 103 [ 1927.138801][T28349] cgroup: Unknown subsys name 'cpuset' [ 1928.224412][T28359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6569'. [ 1929.006814][T28382] fuse: Unknown parameter 'use00000000000000000000' [ 1929.224725][T28369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1929.611631][T19924] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1929.786396][T24900] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1929.791628][T19924] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1930.003557][T24900] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1930.046775][T19924] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1930.065599][T19924] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1930.093791][T19924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1930.235582][T24900] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1930.236558][T19924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.346022][T24900] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1930.435312][T28396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6580'. [ 1930.658077][T19924] usb 4-1: Product: syz [ 1930.662595][T19924] usb 4-1: Manufacturer: syz [ 1930.679065][T19924] usb 4-1: SerialNumber: syz [ 1930.692631][T24900] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1930.710217][T19924] hub 4-1:1.0: bad descriptor, ignoring hub [ 1930.724101][T19924] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1930.906705][T24900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.920549][T24900] usb 5-1: Product: syz [ 1930.947009][T24900] usb 5-1: Manufacturer: syz [ 1930.957247][T24900] usb 5-1: SerialNumber: syz [ 1930.978966][T19924] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1930.993111][T24900] hub 5-1:1.0: bad descriptor, ignoring hub [ 1930.999893][T24900] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1931.192182][ T24] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1931.273376][T24900] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1931.367761][T19916] usb 4-1: USB disconnect, device number 15 [ 1931.374951][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1931.386680][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1931.396127][T19916] usblp0: removed [ 1931.400673][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.438699][ T24] usb 2-1: config 0 descriptor?? [ 1931.554203][T28406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6584'. [ 1931.597673][T24900] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1931.617630][T19916] usb 5-1: USB disconnect, device number 89 [ 1931.625186][T19916] usblp1: removed [ 1931.649207][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1931.655187][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1931.666456][ T24] usb 2-1: USB disconnect, device number 104 [ 1931.718844][T19924] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1931.757389][T24900] usb 3-1: Using ep0 maxpacket: 32 [ 1931.763875][T24900] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1931.772158][T24900] usb 3-1: config 0 has no interface number 0 [ 1931.778318][T24900] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1931.789233][T24900] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1931.801018][T24900] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1931.812481][T24900] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1931.822710][T24900] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1931.834440][T24900] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1931.845207][T24900] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1931.855179][T24900] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1931.866469][T24900] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1931.876603][T24900] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1931.893118][T19924] usb 4-1: config 0 has no interfaces? [ 1931.893239][T24900] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1931.900255][T19924] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1931.920297][T24900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.920309][T19924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.922131][T19924] usb 4-1: config 0 descriptor?? [ 1931.929623][T24900] usb 3-1: Product: syz [ 1931.945892][T24900] usb 3-1: Manufacturer: syz [ 1931.950782][T24900] usb 3-1: SerialNumber: syz [ 1931.956656][T24900] usb 3-1: config 0 descriptor?? [ 1931.962299][T28402] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1931.971330][T19917] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1931.977759][T28402] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1931.987609][T24900] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1931.996112][T24900] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1932.006482][T24900] scsi host1: microtekX6 [ 1932.127605][ T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1932.140862][T19917] usb 5-1: config 0 has no interfaces? [ 1932.146462][T19917] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1932.166002][T19917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.196105][T19917] usb 5-1: config 0 descriptor?? [ 1932.281177][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1932.297731][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.306608][T19917] usb 3-1: USB disconnect, device number 111 [ 1932.309048][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1932.326860][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.337139][ T24] usb 2-1: config 0 descriptor?? [ 1932.358057][T19924] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1932.507837][T19924] usb 1-1: Using ep0 maxpacket: 32 [ 1932.517299][T19924] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1932.525795][T19924] usb 1-1: config 0 has no interface number 0 [ 1932.532129][T19924] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1932.540773][T19924] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1932.550014][T19924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.558879][T19924] usb 1-1: Product: syz [ 1932.563182][T19924] usb 1-1: Manufacturer: syz [ 1932.567852][T19924] usb 1-1: SerialNumber: syz [ 1932.574339][T19924] usb 1-1: config 0 descriptor?? [ 1932.750602][ T24] mcp2221 0003:04D8:00DD.0033: unknown main item tag 0x0 [ 1932.757900][ T24] mcp2221 0003:04D8:00DD.0033: unknown main item tag 0x0 [ 1932.765059][ T24] mcp2221 0003:04D8:00DD.0033: unknown main item tag 0x0 [ 1932.772956][ T24] mcp2221 0003:04D8:00DD.0033: unknown main item tag 0x0 [ 1932.780238][ T24] mcp2221 0003:04D8:00DD.0033: unknown main item tag 0x0 [ 1932.791137][ T24] mcp2221 0003:04D8:00DD.0033: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1932.989665][ C1] usb 2-1: input irq status -75 received [ 1933.200572][T19917] usb 2-1: USB disconnect, device number 105 [ 1933.310295][T24900] usb 4-1: USB disconnect, device number 16 [ 1933.467831][T19923] usb 5-1: USB disconnect, device number 90 [ 1933.697100][T28432] cgroup: Unknown subsys name 'cpuset' [ 1933.778448][T19917] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1933.904871][T28435] vivid-000: ================= START STATUS ================= [ 1933.913043][T28435] vivid-000: Test Pattern: 75% Colorbar [ 1933.926719][T28435] vivid-000: Fill Percentage of Frame: 100 [ 1933.950747][T28435] vivid-000: Horizontal Movement: No Movement [ 1933.956930][T28435] vivid-000: Vertical Movement: No Movement [ 1934.041608][T28441] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6593'. [ 1934.050992][T28441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6593'. [ 1934.060847][T28441] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6593'. [ 1934.258448][T28435] vivid-000: OSD Text Mode: All [ 1934.278335][T28435] vivid-000: Show Border: false [ 1934.310804][T19917] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1934.333804][T28435] vivid-000: Show Square: false [ 1934.343957][T28435] vivid-000: Sensor Flipped Horizontally: false [ 1934.352161][T19917] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1934.374088][T28435] vivid-000: Sensor Flipped Vertically: false [ 1934.382739][T28435] vivid-000: Insert SAV Code in Image: false [ 1934.438981][T28435] vivid-000: Insert EAV Code in Image: false [ 1934.452390][T28435] vivid-000: Insert Video Guard Band: false [ 1934.463295][T28435] vivid-000: Reduced Framerate: false [ 1934.473157][T19917] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1934.488088][T19917] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1934.497172][T19917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.505207][T28435] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1934.505264][T19917] usb 3-1: Product: syz [ 1934.519774][T28435] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1934.534827][T19917] usb 3-1: Manufacturer: syz [ 1934.541793][T19917] usb 3-1: SerialNumber: syz [ 1934.554834][T28435] vivid-000: Enable Capture Cropping: true grabbed [ 1934.577855][T19917] hub 3-1:1.0: bad descriptor, ignoring hub [ 1934.593649][T28435] vivid-000: Enable Capture Composing: true grabbed [ 1934.601346][T28435] vivid-000: Enable Capture Scaler: [ 1934.602277][T19917] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1934.615389][T28435] true grabbed [ 1934.628116][T28435] vivid-000: Timestamp Source: End of Frame [ 1934.634956][T28435] vivid-000: Colorspace: Rec. 709 [ 1934.642223][T28435] vivid-000: Transfer Function: Default [ 1934.648834][T28435] vivid-000: Y'CbCr Encoding: Default [ 1934.661462][T28435] vivid-000: HSV Encoding: Hue 0-179 [ 1934.666872][T28435] vivid-000: Quantization: Default [ 1934.678917][ T24] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1934.697429][T28435] vivid-000: Apply Alpha To Red Only: false [ 1934.738262][T28435] vivid-000: Standard Aspect Ratio: 4x3 [ 1934.760439][T28435] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1934.767517][T28435] vivid-000: DV Timings: 640x480p59 inactive [ 1934.777490][T28435] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1934.788903][T28435] vivid-000: Maximum EDID Blocks: 2 [ 1934.800794][T28435] vivid-000: Limited RGB Range (16-235): true [ 1934.811505][T28435] vivid-000: Rx RGB Quantization Range: Automatic [ 1934.821248][T28435] vivid-000: Power Present: 0x00000001 [ 1934.834776][T28435] tpg source WxH: 1280x720 (R'G'B) [ 1934.844474][T28435] tpg field: 1 [ 1934.848784][T28435] tpg crop: (0,0)/64x64 [ 1934.853291][T28435] tpg compose: (0,0)/16x16 [ 1934.868914][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1934.884075][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1934.895762][T19924] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1934.903421][ T24] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1934.913750][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1934.923305][T19924] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1934.925011][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1934.940023][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.962357][ T24] usb 5-1: Product: syz [ 1934.966683][T28435] tpg colorspace: 3 [ 1934.972237][ T24] usb 5-1: Manufacturer: syz [ 1934.977249][ T24] usb 5-1: SerialNumber: syz [ 1934.984383][T28435] tpg transfer function: 0/1 [ 1934.989569][T28435] tpg quantization: 2/2 [ 1934.995943][T28435] tpg RGB range: 0/1 [ 1935.000073][T28435] vivid-000: ================== END STATUS ================== [ 1935.017613][T19924] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1935.041400][T19917] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 112 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1935.052555][T19924] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1935.075197][T19924] usb 1-1: USB disconnect, device number 86 [ 1935.202589][ T24] usb 5-1: 0:2 : does not exist [ 1935.220857][ T24] usb 5-1: USB disconnect, device number 91 [ 1935.349421][T24900] usb 3-1: USB disconnect, device number 112 [ 1935.356820][T24900] usblp0: removed [ 1935.669360][T19924] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1935.681264][ T24] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1935.853927][T19924] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 1935.909485][ T24] usb 3-1: config 0 has no interfaces? [ 1935.915716][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1935.927209][T19924] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1935.945154][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.960960][T19924] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1935.971313][ T24] usb 3-1: config 0 descriptor?? [ 1935.975013][T19924] usb 1-1: config 0 has no interface number 0 [ 1935.982475][T19924] usb 1-1: config 0 has no interface number 1 [ 1935.988873][T19924] usb 1-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 1936.006163][T28465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6598'. [ 1936.086049][T19924] usb 1-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1936.109545][T19923] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1936.125994][T19924] usb 1-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 1936.147595][T19924] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 1936.166461][T19924] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 1936.198577][ T5867] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1936.244299][T19924] usb 1-1: config 0 interface 66 altsetting 153 has an invalid endpoint descriptor of length 5, skipping [ 1936.264424][T19924] usb 1-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 1936.283650][T19923] usb 5-1: Using ep0 maxpacket: 32 [ 1936.354531][T19924] usb 1-1: config 0 interface 66 has no altsetting 0 [ 1936.362253][T19923] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1936.374524][T19923] usb 5-1: config 0 has no interface number 0 [ 1936.382173][T19923] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1936.396128][T19924] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 1936.405865][T19924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.418594][T19923] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1936.428876][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 1936.441228][T19924] usb 1-1: Product: syz [ 1936.450615][T19924] usb 1-1: Manufacturer: syz [ 1936.476334][T19923] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1936.485955][ T5867] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1936.495438][T19924] usb 1-1: SerialNumber: syz [ 1936.503967][T19923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.512616][ T5867] usb 4-1: config 0 has no interface number 0 [ 1936.521739][T19924] usb 1-1: config 0 descriptor?? [ 1936.529542][T19923] usb 5-1: config 0 descriptor?? [ 1936.538950][T19924] ljca 1-1:0.84: bulk endpoints not found [ 1936.552040][ T5867] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1936.561156][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.569144][ T5867] usb 4-1: Product: syz [ 1936.573323][ T5867] usb 4-1: Manufacturer: syz [ 1936.578004][ T5867] usb 4-1: SerialNumber: syz [ 1936.585091][ T5867] usb 4-1: config 0 descriptor?? [ 1936.595060][ T5867] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1936.758364][T19924] ljca 1-1:0.66: bulk endpoints not found [ 1936.775585][T19924] usb 1-1: USB disconnect, device number 87 [ 1937.077594][T19923] usbhid 5-1:0.1: can't add hid device: -71 [ 1937.085102][T19923] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 1937.095424][T19923] usb 5-1: USB disconnect, device number 92 [ 1937.217657][T28469] usb usb8: usbfs: process 28469 (syz.1.6600) did not claim interface 0 before use [ 1937.239898][T28469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6600'. [ 1937.612438][T19924] usb 3-1: USB disconnect, device number 113 [ 1938.689661][T19924] usb 4-1: USB disconnect, device number 17 [ 1938.803803][T19923] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1939.099230][T28490] usb usb8: usbfs: process 28490 (syz.3.6606) did not claim interface 0 before use [ 1939.139129][T28490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6606'. [ 1939.397677][T19923] usb 5-1: Using ep0 maxpacket: 32 [ 1939.413293][T19923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1939.436482][T19923] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1939.464219][T19923] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 1939.482595][T19923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.502204][T19923] usb 5-1: config 0 descriptor?? [ 1939.736070][ T30] audit: type=1326 audit(1752081760.143:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28483 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 1939.759891][ T30] audit: type=1326 audit(1752081760.143:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28483 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 1939.819098][ T30] audit: type=1326 audit(1752081760.163:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28483 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 1939.843479][ T30] audit: type=1326 audit(1752081760.163:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28483 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 1939.867287][ T30] audit: type=1326 audit(1752081760.163:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28483 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 1940.869503][T28507] vivid-000: ================= START STATUS ================= [ 1940.882455][T28507] vivid-000: Test Pattern: 75% Colorbar [ 1940.888084][T28507] vivid-000: Fill Percentage of Frame: 100 [ 1941.251909][T28507] vivid-000: Horizontal Movement: No Movement [ 1941.259791][T28507] vivid-000: Vertical Movement: No Movement [ 1941.271682][T28507] vivid-000: OSD Text Mode: All [ 1941.280311][T28507] vivid-000: Show Border: false [ 1941.291203][T28507] vivid-000: Show Square: false [ 1941.300986][T28507] vivid-000: Sensor Flipped Horizontally: false [ 1941.314080][T28507] vivid-000: Sensor Flipped Vertically: false [ 1941.325944][T28507] vivid-000: Insert SAV Code in Image: false [ 1941.337866][T28507] vivid-000: Insert EAV Code in Image: false [ 1941.350557][T28507] vivid-000: Insert Video Guard Band: false [ 1941.361137][T28507] vivid-000: Reduced Framerate: false [ 1941.382912][T28507] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1941.401321][T28507] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1941.414373][T28507] vivid-000: Enable Capture Cropping: true grabbed [ 1941.432713][T28507] vivid-000: Enable Capture Composing: true grabbed [ 1941.452122][T28507] vivid-000: Enable Capture Scaler: true grabbed [ 1941.541597][T28507] vivid-000: Timestamp Source: End of Frame [ 1941.548112][T28507] vivid-000: Colorspace: Rec. 709 [ 1941.566880][T28507] vivid-000: Transfer Function: [ 1941.574002][T28514] cgroup: Unknown subsys name 'cpuset' [ 1941.588535][T28507] Default [ 1941.606856][T28507] vivid-000: Y'CbCr Encoding: Default [ 1941.614776][T28507] vivid-000: HSV Encoding: Hue 0-179 [ 1941.624635][T28507] vivid-000: Quantization: Default [ 1941.635654][T28507] vivid-000: Apply Alpha To Red Only: false [ 1941.648949][T28507] vivid-000: Standard Aspect Ratio: 4x3 [ 1941.665363][T28507] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1941.676300][T28507] vivid-000: DV Timings: 640x480p59 inactive [ 1941.697219][T28507] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1941.711400][T28507] vivid-000: Maximum EDID Blocks: 2 [ 1941.738094][T24900] usb 5-1: USB disconnect, device number 93 [ 1941.744788][T28507] vivid-000: Limited RGB Range (16-235): true [ 1941.759846][T28507] vivid-000: Rx RGB Quantization Range: Automatic [ 1941.771808][T28507] vivid-000: Power Present: 0x00000001 [ 1941.779439][T28507] tpg source WxH: 1280x720 (R'G'B) [ 1941.785953][T28507] tpg field: 1 [ 1941.791364][T28507] tpg crop: (0,0)/64x64 [ 1941.796745][T28507] tpg compose: (0,0)/16x16 [ 1941.803270][T28507] tpg colorspace: 3 [ 1941.808675][T28507] tpg transfer function: 0/1 [ 1941.815177][T28507] tpg quantization: 2/2 [ 1941.821758][T28507] tpg RGB range: 0/1 [ 1941.834978][T28507] vivid-000: ================== END STATUS ================== [ 1942.122553][T24900] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1942.260295][T28526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6615'. [ 1943.077953][T24900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1943.087126][T24900] usb 5-1: config 66 interface 0 has no altsetting 0 [ 1943.096504][T24900] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1943.105932][T24900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.116303][T24900] usb 5-1: Product: syz [ 1943.120501][T24900] usb 5-1: Manufacturer: syz [ 1943.125150][T24900] usb 5-1: SerialNumber: syz [ 1943.313193][ T24] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1943.473279][T19923] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1943.503347][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1943.512162][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1943.521396][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.539944][ T24] usb 3-1: Product: syz [ 1943.544777][ T24] usb 3-1: Manufacturer: syz [ 1943.549883][ T24] usb 3-1: SerialNumber: syz [ 1943.559663][ T24] usb 3-1: config 0 descriptor?? [ 1943.725701][T28542] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6619'. [ 1944.026779][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1944.046454][T24900] ati_remote2 5-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1944.067358][T19923] usb 4-1: Using ep0 maxpacket: 16 [ 1944.074070][T24900] usb 5-1: USB disconnect, device number 94 [ 1944.082125][T19923] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1944.098467][T19923] usb 4-1: config 0 has no interface number 0 [ 1944.113034][T19923] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1944.125582][T19923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.143173][T19923] usb 4-1: Product: syz [ 1944.229088][T19923] usb 4-1: Manufacturer: syz [ 1944.238331][T19923] usb 4-1: SerialNumber: syz [ 1944.248579][T19923] usb 4-1: config 0 descriptor?? [ 1944.257156][T19923] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1944.712591][T28552] usb usb8: usbfs: process 28552 (syz.0.6622) did not claim interface 0 before use [ 1944.758908][T28552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6622'. [ 1945.151199][T28556] vivid-000: ================= START STATUS ================= [ 1945.159576][T28556] vivid-000: Test Pattern: 75% Colorbar [ 1945.166545][T28556] vivid-000: Fill Percentage of Frame: 100 [ 1945.183387][T28556] vivid-000: Horizontal Movement: No Movement [ 1945.189543][T28556] vivid-000: Vertical Movement: No Movement [ 1945.195543][T28556] vivid-000: OSD Text Mode: All [ 1945.200422][T28556] vivid-000: Show Border: false [ 1945.206175][T28556] vivid-000: Show Square: false [ 1945.211235][T28556] vivid-000: Sensor Flipped Horizontally: false [ 1945.218618][T28556] vivid-000: Sensor Flipped Vertically: false [ 1945.222171][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1945.244359][T28556] vivid-000: Insert SAV Code in Image: false [ 1945.256083][T28556] vivid-000: Insert EAV Code in Image: false [ 1945.264212][T28556] vivid-000: Insert Video Guard Band: false [ 1945.270399][T28556] vivid-000: Reduced Framerate: false [ 1945.279024][T28556] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1945.287278][T28556] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1945.296750][T28556] vivid-000: Enable Capture Cropping: true grabbed [ 1945.303491][T28556] vivid-000: Enable Capture Composing: true grabbed [ 1945.362869][T28556] vivid-000: Enable Capture Scaler: true grabbed [ 1945.371493][T28556] vivid-000: Timestamp Source: End of Frame [ 1945.390898][T28556] vivid-000: Colorspace: Rec. 709 [ 1945.404242][T28556] vivid-000: Transfer Function: Default [ 1945.412711][T28556] vivid-000: Y'CbCr Encoding: Default [ 1945.419345][T28556] vivid-000: HSV Encoding: Hue 0-179 [ 1945.425084][T28556] vivid-000: Quantization: Default [ 1945.430467][T28556] vivid-000: Apply Alpha To Red Only: false [ 1945.437713][T28556] vivid-000: Standard Aspect Ratio: 4x3 [ 1945.443472][T28556] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1945.450950][T28556] vivid-000: DV Timings: 640x480p59 inactive [ 1945.471634][T28556] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1945.487981][T28556] vivid-000: Maximum EDID Blocks: 2 [ 1945.500981][T28556] vivid-000: Limited RGB Range (16-235): true [ 1945.803920][T28556] vivid-000: Rx RGB Quantization Range: Automatic [ 1945.811074][T28556] vivid-000: Power Present: 0x00000001 [ 1945.820637][T28556] tpg source WxH: 1280x720 (R'G'B) [ 1945.829713][T28556] tpg field: 1 [ 1945.834075][T28556] tpg crop: (0,0)/64x64 [ 1945.839020][T28556] tpg compose: (0,0)/16x16 [ 1945.845640][T28556] tpg colorspace: 3 [ 1945.851069][T28556] tpg transfer function: 0/1 [ 1945.856906][T28556] tpg quantization: 2/2 [ 1945.862530][T28556] tpg RGB range: 0/1 [ 1945.869156][T28556] vivid-000: ================== END STATUS ================== [ 1946.199760][ T5867] usb 4-1: USB disconnect, device number 18 [ 1946.275512][T24900] usb 3-1: USB disconnect, device number 114 [ 1946.530944][T28573] fuse: Unknown parameter 'grou00000000000000000000' [ 1946.624845][T24900] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1948.506479][T28582] vivid-000: ================= START STATUS ================= [ 1948.537876][T28582] vivid-000: Test Pattern: 75% Colorbar [ 1948.549752][T28582] vivid-000: Fill Percentage of Frame: 100 [ 1948.564956][T28582] vivid-000: Horizontal Movement: No Movement [ 1948.580218][T28582] vivid-000: Vertical Movement: No Movement [ 1948.636047][T24900] usb 3-1: Using ep0 maxpacket: 8 [ 1948.688519][T28590] syzkaller0: entered promiscuous mode [ 1948.694081][T28590] syzkaller0: entered allmulticast mode [ 1948.750198][T28582] vivid-000: OSD Text Mode: All [ 1948.769802][T24900] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1948.781481][T28582] vivid-000: Show Border: false [ 1948.786755][T24900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1948.797467][T28582] vivid-000: Show Square: false [ 1948.804197][T24900] usb 3-1: config 0 has no interface number 0 [ 1948.815264][T28582] vivid-000: Sensor Flipped Horizontally: false [ 1948.821786][T28582] vivid-000: Sensor Flipped Vertically: false [ 1948.828370][T24900] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1948.845530][T28582] vivid-000: Insert SAV Code in Image: false [ 1948.851738][T28582] vivid-000: Insert EAV Code in Image: false [ 1948.858016][T24900] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1948.867089][T24900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.875143][T28582] vivid-000: Insert Video Guard Band: false [ 1948.881143][T28582] vivid-000: Reduced Framerate: false [ 1948.891697][T28582] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1948.915998][T28582] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1948.927692][T24900] usb 3-1: config 0 descriptor?? [ 1948.933610][T28582] vivid-000: Enable Capture Cropping: true grabbed [ 1948.951481][T28582] vivid-000: Enable Capture Composing: [ 1948.953172][T24900] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1948.965839][T28582] true grabbed [ 1948.976446][T28582] vivid-000: Enable Capture Scaler: true grabbed [ 1948.993844][T28582] vivid-000: Timestamp Source: End of Frame [ 1949.001606][T28582] vivid-000: Colorspace: Rec. 709 [ 1949.008335][T28582] vivid-000: Transfer Function: Default [ 1949.016081][T28582] vivid-000: Y'CbCr Encoding: Default [ 1949.021851][T28582] vivid-000: HSV Encoding: Hue 0-179 [ 1949.028440][T28582] vivid-000: Quantization: Default [ 1949.041371][T28582] vivid-000: Apply Alpha To Red Only: false [ 1949.049944][T28582] vivid-000: Standard Aspect Ratio: 4x3 [ 1949.059653][T28582] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1949.068751][T28582] vivid-000: DV Timings: 640x480p59 inactive [ 1949.082915][T28582] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1949.091901][T19916] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1949.100853][T28582] vivid-000: Maximum EDID Blocks: 2 [ 1949.115454][T28582] vivid-000: Limited RGB Range (16-235): true [ 1949.129804][T28582] vivid-000: Rx RGB Quantization Range: Automatic [ 1949.138600][T28582] vivid-000: Power Present: 0x00000001 [ 1949.147889][T28582] tpg source WxH: 1280x720 (R'G'B) [ 1949.155317][T28582] tpg field: 1 [ 1949.186531][T28582] tpg crop: (0,0)/64x64 [ 1949.192053][T28582] tpg compose: (0,0)/16x16 [ 1949.198633][T28582] tpg colorspace: 3 [ 1949.203015][T28582] tpg transfer function: 0/1 [ 1949.209574][T28582] tpg quantization: 2/2 [ 1949.214885][T28582] tpg RGB range: 0/1 [ 1949.220463][T28582] vivid-000: ================== END STATUS ================== [ 1949.257543][T19916] usb 2-1: Using ep0 maxpacket: 16 [ 1949.266272][T19916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1949.274449][T19916] usb 2-1: config 0 has no interface number 0 [ 1949.284621][T19916] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1949.293741][T19916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.303810][T19916] usb 2-1: Product: syz [ 1949.318657][T19916] usb 2-1: Manufacturer: syz [ 1949.323590][T19916] usb 2-1: SerialNumber: syz [ 1949.330680][T19916] usb 2-1: config 0 descriptor?? [ 1949.339910][T19916] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1949.920141][T28608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1949.929321][T28608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1949.938681][T28608] netlink: 'syz.0.6635': attribute type 7 has an invalid length. [ 1950.018885][T28608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1950.028012][T28608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1950.038822][T28608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1950.394015][T19923] usb 3-1: USB disconnect, device number 115 [ 1950.647041][T19916] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1950.732391][T24900] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1950.797158][T19916] usb 5-1: Using ep0 maxpacket: 16 [ 1950.826301][T19916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1950.845798][T19916] usb 5-1: config 0 has no interface number 0 [ 1950.875267][T19916] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1950.885334][T19916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.904765][T19916] usb 5-1: Product: syz [ 1951.036870][T28625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1951.048586][T24900] usb 1-1: Using ep0 maxpacket: 8 [ 1951.097359][T19916] usb 5-1: Manufacturer: syz [ 1951.105504][T24900] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1951.123294][T19916] usb 5-1: SerialNumber: syz [ 1951.128095][T24900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.157730][T19916] usb 5-1: config 0 descriptor?? [ 1951.168031][T24900] usb 1-1: Product: syz [ 1951.179124][T24900] usb 1-1: Manufacturer: syz [ 1951.189629][T19916] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1951.201091][T24900] usb 1-1: SerialNumber: syz [ 1951.220582][T24900] usb 1-1: config 0 descriptor?? [ 1951.628918][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1951.638759][T24900] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1952.041279][ T24] usb 4-1: config 0 has no interfaces? [ 1952.054170][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1952.073735][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.116630][ T24] usb 4-1: config 0 descriptor?? [ 1952.292965][ T24] usb 2-1: USB disconnect, device number 106 [ 1952.717196][T24900] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1953.146608][ T5867] usb 5-1: USB disconnect, device number 95 [ 1953.422634][T28636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6641'. [ 1953.749872][ T24] usb 1-1: USB disconnect, device number 88 [ 1954.221013][ T24] usb 4-1: USB disconnect, device number 19 [ 1955.961069][T28662] usb usb8: usbfs: process 28662 (syz.1.6647) did not claim interface 0 before use [ 1956.004103][T28662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6647'. [ 1956.667034][T28666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6648'. [ 1957.008355][T28670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1957.017354][T28670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1957.026306][T28670] netlink: 'syz.2.6650': attribute type 7 has an invalid length. [ 1957.042961][T28670] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1957.052097][T28670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1957.061092][T28670] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1957.489357][T28685] usb usb8: usbfs: process 28685 (syz.3.6651) did not claim interface 0 before use [ 1957.673132][T28686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6651'. [ 1958.624577][T28704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6656'. [ 1958.981206][ T5867] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1959.250326][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 1959.369526][T28717] usb usb8: usbfs: process 28717 (syz.4.6659) did not claim interface 0 before use [ 1959.412124][T28717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6659'. [ 1959.849212][ T5867] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1959.889443][ T5867] usb 1-1: config 0 has no interface number 0 [ 1960.025496][ T5867] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1960.034861][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.067375][ T5867] usb 1-1: Product: syz [ 1960.078354][ T5867] usb 1-1: Manufacturer: syz [ 1960.087355][ T5867] usb 1-1: SerialNumber: syz [ 1960.251606][T28728] netlink: 'syz.4.6663': attribute type 7 has an invalid length. [ 1960.436458][ T5867] usb 1-1: config 0 descriptor?? [ 1960.445224][ T5867] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1960.511785][T19923] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1960.676625][T19923] usb 4-1: Using ep0 maxpacket: 32 [ 1960.692130][T19923] usb 4-1: config 4 has no interfaces? [ 1960.866637][T19923] usb 4-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=60.a1 [ 1960.895533][T19923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.912642][T19923] usb 4-1: Product: syz [ 1960.922441][T19923] usb 4-1: Manufacturer: syz [ 1960.939699][T28734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1960.954575][T19923] usb 4-1: SerialNumber: syz [ 1961.019477][T28734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1961.327000][T19923] usb 4-1: USB disconnect, device number 20 [ 1961.732773][ T24] usb 1-1: USB disconnect, device number 89 [ 1962.132678][T26444] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1962.561253][T28756] __nla_validate_parse: 5 callbacks suppressed [ 1962.561290][T28756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6670'. [ 1962.588826][T26444] usb 2-1: Using ep0 maxpacket: 32 [ 1962.790094][T26444] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1962.805999][T26444] usb 2-1: config 0 has no interface number 0 [ 1962.820538][T26444] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1962.842855][T26444] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1962.860060][T26444] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1962.876116][T26444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.902003][T26444] usb 2-1: config 0 descriptor?? [ 1964.429197][T28775] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.6676'. [ 1964.499846][T28777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6677'. [ 1964.639551][T28781] usb usb8: usbfs: process 28781 (syz.0.6674) did not claim interface 0 before use [ 1964.687506][T28781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6674'. [ 1964.700396][T24900] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1964.958795][T19923] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1966.915253][T19923] usb 3-1: Using ep0 maxpacket: 8 [ 1966.920343][T26444] usbhid 2-1:0.1: can't add hid device: -71 [ 1966.920433][T26444] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1967.023601][T19923] usb 3-1: config 32 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1967.038935][T19923] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1967.049231][T19923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.100292][T24900] usb 4-1: Using ep0 maxpacket: 32 [ 1967.115424][T24900] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1967.133813][T26444] usb 2-1: USB disconnect, device number 107 [ 1967.165242][T24900] usb 4-1: config 0 has no interface number 0 [ 1967.186928][T24900] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1967.210920][T24900] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1967.222135][T24900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.247959][T24900] usb 4-1: Product: syz [ 1967.255376][T24900] usb 4-1: Manufacturer: syz [ 1967.261258][T24900] usb 4-1: SerialNumber: syz [ 1967.275812][T24900] usb 4-1: config 0 descriptor?? [ 1967.293475][T28771] binder: 28770:28771 ioctl c0306201 0 returned -14 [ 1967.303637][T19923] usb 3-1: string descriptor 0 read error: -71 [ 1967.332646][T19923] hub 3-1:32.0: bad descriptor, ignoring hub [ 1967.345744][T19923] hub 3-1:32.0: probe with driver hub failed with error -5 [ 1967.359947][T24900] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1967.385284][ T5867] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1967.393762][T24900] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1967.414012][T24900] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1967.423997][T24900] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1967.437261][T19923] usb 3-1: USB disconnect, device number 116 [ 1967.440523][T24900] usb 4-1: USB disconnect, device number 21 [ 1967.635294][ T5901] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1967.825501][T24900] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1967.989341][T24900] usb 4-1: Using ep0 maxpacket: 8 [ 1968.000196][T24900] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1968.009505][T24900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1968.036900][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 1968.073214][T24900] usb 4-1: config 0 has no interface number 0 [ 1968.079400][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 1968.129020][T24900] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1968.194209][T24900] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1968.255668][T24900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.433840][T24900] usb 4-1: config 0 descriptor?? [ 1968.465117][ T5867] usb 1-1: config 4 has no interfaces? [ 1968.467275][T24900] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1968.472983][ T5867] usb 1-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=60.a1 [ 1968.499023][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1968.516111][ T5901] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1968.525166][ T5901] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 1968.534285][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.542616][ T5867] usb 1-1: Product: syz [ 1968.548468][ T5867] usb 1-1: Manufacturer: syz [ 1968.553090][ T5867] usb 1-1: SerialNumber: syz [ 1968.558154][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.636002][T28803] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6685'. [ 1968.645035][T28803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6685'. [ 1968.654845][T28803] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6685'. [ 1968.687931][ T5901] usb 2-1: config 0 descriptor?? [ 1968.892616][ T5867] usb 1-1: USB disconnect, device number 90 [ 1969.021014][ T5901] usb 4-1: USB disconnect, device number 22 [ 1969.085397][ T30] audit: type=1326 audit(1752081789.479:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28790 comm="syz.1.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f098e929 code=0x7ffc0000 [ 1969.122917][ T30] audit: type=1326 audit(1752081789.479:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28790 comm="syz.1.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f098e929 code=0x7ffc0000 [ 1969.234427][T28813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6686'. [ 1969.358885][ T30] audit: type=1326 audit(1752081789.479:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28790 comm="syz.1.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f00f098e929 code=0x7ffc0000 [ 1969.397329][ T30] audit: type=1326 audit(1752081789.479:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28790 comm="syz.1.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f098e929 code=0x7ffc0000 [ 1969.422965][ T30] audit: type=1326 audit(1752081789.479:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28790 comm="syz.1.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f00f098e929 code=0x7ffc0000 [ 1969.786471][ T5901] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1970.066610][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 1970.158587][ T5901] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1970.170638][ T5901] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1970.179965][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.188103][ T5901] usb 3-1: Product: syz [ 1970.192357][ T5901] usb 3-1: Manufacturer: syz [ 1970.197020][ T5901] usb 3-1: SerialNumber: syz [ 1970.269550][T28825] usb usb8: usbfs: process 28825 (syz.4.6690) did not claim interface 0 before use [ 1970.313451][T28825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6690'. [ 1970.456814][T24900] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1970.612567][ T5901] usb 3-1: config 0 descriptor?? [ 1970.653618][T26444] usb 2-1: USB disconnect, device number 108 [ 1970.762090][T28830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6692'. [ 1970.771200][T28830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6692'. [ 1970.780428][T28830] netlink: 'syz.1.6692': attribute type 7 has an invalid length. [ 1970.852708][T24900] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1970.976118][T24900] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 64 [ 1971.017349][T28830] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6692'. [ 1971.018234][T24900] usb 1-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1971.039743][T28830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6692'. [ 1971.042416][T24900] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1971.056689][T28830] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6692'. [ 1971.097377][T24900] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1971.131623][T24900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.194122][T24900] usb 1-1: Product: 烷쮷悔♅瞷ꆺ털蹕퇉 [ 1971.225935][T24900] usb 1-1: Manufacturer: ఊ [ 1971.232175][T24900] usb 1-1: SerialNumber: 《 [ 1971.251360][T28822] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1971.267260][T28822] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1972.004556][T24900] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1972.026450][T24900] usb 1-1: USB disconnect, device number 91 [ 1972.777104][ T5867] usb 3-1: USB disconnect, device number 117 [ 1973.078120][ T5901] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1973.238388][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 1973.249845][ T5901] usb 4-1: config 4 has no interfaces? [ 1973.257498][ T5901] usb 4-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=60.a1 [ 1973.278136][ T5867] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1973.285837][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.368288][ T5901] usb 4-1: Product: syz [ 1973.375386][ T5901] usb 4-1: Manufacturer: syz [ 1973.445101][ T5901] usb 4-1: SerialNumber: syz [ 1973.552115][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1973.563667][ T5867] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1973.573672][ T5867] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1973.638719][ T5867] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1973.669942][ T5901] usb 4-1: USB disconnect, device number 23 [ 1973.686629][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.710923][ T5867] usb 1-1: Product: syz [ 1973.721646][ T5867] usb 1-1: Manufacturer: syz [ 1973.730756][ T5867] usb 1-1: SerialNumber: syz [ 1973.746426][ T5867] hub 1-1:1.0: bad descriptor, ignoring hub [ 1973.762122][ T5867] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1973.947427][ T5867] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1974.211345][T28875] usb usb8: usbfs: process 28875 (syz.2.6704) did not claim interface 0 before use [ 1974.254375][T28875] __nla_validate_parse: 4 callbacks suppressed [ 1974.254409][T28875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6704'. [ 1974.680805][T26444] usb 1-1: USB disconnect, device number 92 [ 1974.688699][T26444] usblp0: removed [ 1974.765524][T28883] netlink: 'syz.3.6706': attribute type 4 has an invalid length. [ 1974.773675][T28883] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6706'. [ 1974.782811][T28883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6706'. [ 1974.968958][ T5867] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 1975.089125][T26444] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1975.245306][T28889] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6708'. [ 1975.666252][T28890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6709'. [ 1975.666592][T26444] usb 1-1: config 0 has no interfaces? [ 1975.677287][T28890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6709'. [ 1975.690775][T28890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6709'. [ 1975.906819][T26444] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1975.999124][T26444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.041015][ T5867] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 1976.049244][ T5867] usb 2-1: config 0 has no interface number 0 [ 1976.145306][T26444] usb 1-1: config 0 descriptor?? [ 1976.173330][ T5867] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1976.266913][T28896] usb usb8: usbfs: process 28896 (syz.4.6710) did not claim interface 0 before use [ 1976.476854][T28898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6710'. [ 1976.550045][ T24] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1976.585574][ T5867] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1976.596628][ T5867] usb 2-1: config 0 interface 230 has no altsetting 0 [ 1976.605651][ T5867] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1976.629585][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.679950][ T5867] usb 2-1: Product: syz [ 1976.697918][ T5867] usb 2-1: Manufacturer: syz [ 1976.705357][T26444] usb 1-1: can't set config #0, error -71 [ 1976.710287][ T5867] usb 2-1: SerialNumber: syz [ 1976.724843][ T5867] usb 2-1: config 0 descriptor?? [ 1976.740275][T26444] usb 1-1: USB disconnect, device number 93 [ 1976.747006][T28882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1976.755918][T28882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1976.779877][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1976.786770][ T5867] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 1976.788571][ T24] usb 3-1: config 4 has no interfaces? [ 1976.805799][ T24] usb 3-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=60.a1 [ 1976.816533][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.816996][ T5867] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1976.833601][ T24] usb 3-1: Product: syz [ 1976.837875][ T24] usb 3-1: Manufacturer: syz [ 1976.842648][ T24] usb 3-1: SerialNumber: syz [ 1977.198824][T28905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1977.212338][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1977.212401][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.558554][T28910] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6713'. [ 1977.861565][ T24] usb 3-1: USB disconnect, device number 118 [ 1978.011769][T28905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1978.336623][T28919] usb usb8: usbfs: process 28919 (syz.4.6715) did not claim interface 0 before use [ 1978.377310][T26444] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1978.461888][T28920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6715'. [ 1978.557331][T26444] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 1978.582135][T26444] usb 4-1: config 0 has no interface number 0 [ 1978.686770][T26444] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1978.726798][T26444] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1978.754191][T26444] usb 4-1: config 0 interface 230 has no altsetting 0 [ 1978.768709][T26444] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1978.779135][T26444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.790488][T26444] usb 4-1: Product: syz [ 1978.796948][T26444] usb 4-1: Manufacturer: syz [ 1978.806703][T26444] usb 4-1: SerialNumber: syz [ 1978.813853][T26444] usb 4-1: config 0 descriptor?? [ 1978.819388][T28914] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1978.826906][T28914] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1978.837622][T26444] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 1978.846533][T26444] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1979.448282][ T5867] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 1979.492583][ T5867] usb 2-1: USB disconnect, device number 109 [ 1979.833624][T28938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6718'. [ 1980.161557][ T5901] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1980.311889][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 1980.318558][ T5901] usb 5-1: config 4 has no interfaces? [ 1980.328948][ T5901] usb 5-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=60.a1 [ 1980.341491][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.436332][T28944] usb usb8: usbfs: process 28944 (syz.0.6719) did not claim interface 0 before use [ 1980.479366][T28944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6719'. [ 1980.824649][ T5901] usb 5-1: Product: syz [ 1980.828888][ T5901] usb 5-1: Manufacturer: syz [ 1980.834722][ T5901] usb 5-1: SerialNumber: syz [ 1981.135668][T28955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6720'. [ 1981.155671][ T5901] usb 5-1: USB disconnect, device number 96 [ 1981.184403][T28954] syzkaller0: entered promiscuous mode [ 1981.190323][T28954] syzkaller0: entered allmulticast mode [ 1981.462602][T26444] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 1981.582275][ T5867] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1981.840107][ T5867] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1981.849556][ T5867] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1981.860282][ T5867] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1981.875863][ T5867] usb 1-1: config 220 has no interface number 2 [ 1981.997995][ T5867] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1982.202675][ T5867] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1982.214536][ T5867] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1982.831564][ T5867] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1982.990321][ T5867] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1983.006239][T19924] usb 4-1: USB disconnect, device number 24 [ 1983.027696][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.056805][ T5867] usb 1-1: Product: syz [ 1983.069856][ T5867] usb 1-1: Manufacturer: syz [ 1983.083463][ T5867] usb 1-1: SerialNumber: syz [ 1983.438912][ T5867] usb 1-1: selecting invalid altsetting 0 [ 1983.451837][ T5867] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1983.482616][ T5867] usb 1-1: No valid video chain found. [ 1983.501935][ T5867] usb 1-1: selecting invalid altsetting 0 [ 1983.510339][ T5867] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1983.522391][ T5867] usb 1-1: USB disconnect, device number 94 [ 1983.743750][T28976] usb usb8: usbfs: process 28976 (syz.4.6727) did not claim interface 0 before use [ 1983.947695][T28979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6727'. [ 1984.243631][T19924] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1984.412063][T19924] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 1984.423165][T19924] usb 2-1: config 0 has no interface number 0 [ 1984.441657][T19924] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1984.492421][T19924] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1984.511074][T19924] usb 2-1: config 0 interface 230 has no altsetting 0 [ 1984.524372][T19924] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1984.533500][T19924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.543151][T19924] usb 2-1: Product: syz [ 1984.549341][T19924] usb 2-1: Manufacturer: syz [ 1984.558304][T19924] usb 2-1: SerialNumber: syz [ 1984.602275][T19924] usb 2-1: config 0 descriptor?? [ 1984.611189][T28972] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1984.621651][T28972] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1984.631045][T19924] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 1984.697643][T19924] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1987.020518][T19924] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 1987.047543][T19924] usb 2-1: USB disconnect, device number 110 [ 1987.599395][T29008] usb usb8: usbfs: process 29008 (syz.0.6734) did not claim interface 0 before use [ 1987.643201][T29008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6734'. [ 1988.056625][T29009] fuse: Bad value for 'fd' [ 1988.316305][T19924] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1988.653053][T19924] usb 4-1: Using ep0 maxpacket: 32 [ 1989.463252][T19924] usb 4-1: config 4 has no interfaces? [ 1990.038706][T19924] usb 4-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=60.a1 [ 1990.153827][T29021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6736'. [ 1990.166034][T19924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.186656][T19924] usb 4-1: Product: syz [ 1990.190916][T19924] usb 4-1: Manufacturer: syz [ 1990.199512][T19924] usb 4-1: SerialNumber: syz [ 1990.407102][T19924] usb 4-1: USB disconnect, device number 25 [ 1990.580077][T19923] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1993.160459][T29047] usb usb8: usbfs: process 29047 (syz.3.6742) did not claim interface 0 before use [ 1993.632522][T29049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6742'. [ 1994.052186][T29048] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6740'. [ 1994.643671][T29069] usb usb8: usbfs: process 29069 (syz.1.6747) did not claim interface 0 before use [ 1994.686280][T29069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6747'. [ 1995.147300][ T5867] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1995.399380][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 1995.424654][ T5867] usb 4-1: config 4 has no interfaces? [ 1995.432604][ T5867] usb 4-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=60.a1 [ 1995.443527][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.451897][ T5867] usb 4-1: Product: syz [ 1995.456188][ T5867] usb 4-1: Manufacturer: syz [ 1995.556597][T29080] syzkaller0: entered promiscuous mode [ 1995.562276][T29080] syzkaller0: entered allmulticast mode [ 1996.008299][ T5867] usb 4-1: SerialNumber: syz [ 1996.039634][T26444] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1996.199599][T26444] usb 2-1: Using ep0 maxpacket: 16 [ 1996.216934][T26444] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1996.227334][T26444] usb 2-1: config 0 has no interface number 0 [ 1996.276724][ T5867] usb 4-1: USB disconnect, device number 26 [ 1996.379781][T26444] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1996.441946][T26444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.476235][T26444] usb 2-1: Product: syz [ 1996.497643][T26444] usb 2-1: Manufacturer: syz [ 1996.550382][T26444] usb 2-1: SerialNumber: syz [ 1996.602000][T26444] usb 2-1: config 0 descriptor?? [ 1996.659136][T26444] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1998.383379][T29098] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6755'. [ 1999.053148][T19924] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1999.796613][ T24] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1999.861425][T19924] usb 5-1: Using ep0 maxpacket: 32 [ 1999.889360][T19924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1999.933717][T19924] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2000.009025][ T5867] usb 2-1: USB disconnect, device number 112 [ 2000.051500][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 2000.055843][T19924] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2000.134227][ T24] usb 3-1: device descriptor read/all, error -71 [ 2000.151895][T19924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.172963][T19924] usb 5-1: config 0 descriptor?? [ 2000.388321][ T30] audit: type=1326 audit(1752081820.763:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29097 comm="syz.4.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 2000.517740][T29115] usb usb8: usbfs: process 29115 (syz.2.6758) did not claim interface 0 before use [ 2000.613554][T29115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6758'. [ 2000.888848][ T30] audit: type=1326 audit(1752081820.763:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29097 comm="syz.4.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 2001.340976][ T30] audit: type=1326 audit(1752081820.763:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29097 comm="syz.4.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 2001.406777][ T30] audit: type=1326 audit(1752081820.763:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29097 comm="syz.4.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 2001.458680][T26444] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2001.466915][ T30] audit: type=1326 audit(1752081820.763:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29097 comm="syz.4.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 2001.501274][ T30] audit: type=1326 audit(1752081820.763:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29097 comm="syz.4.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f593578e929 code=0x7ffc0000 [ 2001.662578][T26444] usb 1-1: Using ep0 maxpacket: 16 [ 2001.670881][T26444] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2001.679412][T26444] usb 1-1: config 0 has no interface number 0 [ 2001.688918][T26444] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 2001.698398][T26444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.714119][T26444] usb 1-1: Product: syz [ 2001.725835][T26444] usb 1-1: Manufacturer: syz [ 2001.737095][T26444] usb 1-1: SerialNumber: syz [ 2001.744345][T26444] usb 1-1: config 0 descriptor?? [ 2001.752935][T26444] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2001.922887][T26444] usb 5-1: USB disconnect, device number 97 [ 2002.373495][T29130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2002.440799][T29130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2002.529659][T19924] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2002.728792][T19924] usb 4-1: Using ep0 maxpacket: 32 [ 2002.748122][T19924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.772925][T19924] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2002.857719][T19924] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 2002.867095][T19924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.876944][T19924] usb 4-1: Product: syz [ 2002.898187][T19924] usb 4-1: Manufacturer: syz [ 2002.902930][T19924] usb 4-1: SerialNumber: syz [ 2002.924717][T19924] usb 4-1: config 0 descriptor?? [ 2002.939854][T19924] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2004.479246][T29119] syzkaller0: entered promiscuous mode [ 2004.485000][T29119] syzkaller0: entered allmulticast mode [ 2004.573362][T26444] usb 4-1: USB disconnect, device number 27 [ 2004.585772][T19923] usb 1-1: USB disconnect, device number 95 [ 2004.734025][T19924] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2004.823964][ T5867] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2004.887322][T19924] usb 3-1: Using ep0 maxpacket: 32 [ 2004.905513][T19924] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2004.913577][T19924] usb 3-1: config 0 has no interface number 0 [ 2005.498471][T26444] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2005.501731][T19924] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2005.517254][T19924] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2005.533193][T19924] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2005.542433][T19924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.552558][ T5867] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 2005.560788][ T5867] usb 2-1: config 0 has no interface number 0 [ 2005.570948][ T5867] usb 2-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 2005.603784][T19924] usb 3-1: config 0 descriptor?? [ 2005.614671][ T5867] usb 2-1: config 0 interface 84 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 2005.624775][ T5867] usb 2-1: config 0 interface 84 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 2005.646823][ T5867] usb 2-1: config 0 interface 84 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2005.684665][ T5867] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 2005.693834][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.701979][ T5867] usb 2-1: Product: syz [ 2005.712138][ T5867] usb 2-1: Manufacturer: syz [ 2005.713045][T26444] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2005.716808][ T5867] usb 2-1: SerialNumber: syz [ 2005.719179][ T5867] usb 2-1: config 0 descriptor?? [ 2005.735538][T29137] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2005.743581][T29137] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2005.763996][T26444] usb 4-1: config 66 interface 0 has no altsetting 0 [ 2005.774956][T26444] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 2005.785834][T26444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.793843][T26444] usb 4-1: Product: syz [ 2005.806170][ T5867] ljca 2-1:0.84: bulk endpoints not found [ 2005.806240][T26444] usb 4-1: Manufacturer: syz [ 2005.826215][T26444] usb 4-1: SerialNumber: syz [ 2006.053469][ T5867] usb 2-1: USB disconnect, device number 113 [ 2006.236006][T26444] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 2006.248160][T26444] usb 4-1: USB disconnect, device number 28 [ 2006.272707][T19924] usbhid 3-1:0.1: can't add hid device: -71 [ 2006.288047][T19924] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 2006.326402][T19924] usb 3-1: USB disconnect, device number 121 [ 2006.887760][T29150] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6766'. [ 2006.897046][T29150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6766'. [ 2006.906897][T29150] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6766'. [ 2009.376307][T29159] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6767'. [ 2009.837635][T29172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6772'. [ 2009.847294][T29172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6772'. [ 2009.856681][T29172] netlink: 'syz.2.6772': attribute type 7 has an invalid length. [ 2009.949367][T29170] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6772'. [ 2009.958510][T29170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6772'. [ 2009.967582][T29170] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6772'. [ 2010.176947][T29180] netlink: 'syz.0.6771': attribute type 4 has an invalid length. [ 2010.189822][T29180] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6771'. [ 2011.943512][T29193] __nla_validate_parse: 1 callbacks suppressed [ 2011.943547][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6776'. [ 2011.958878][T29193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6776'. [ 2011.967972][T29193] netlink: 'syz.4.6776': attribute type 7 has an invalid length. [ 2012.028719][T29193] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6776'. [ 2012.037814][T29193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6776'. [ 2012.047079][T29193] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6776'. [ 2012.320987][T29195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6775'. [ 2012.330235][T29195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6775'. [ 2012.339609][T29195] netlink: 'syz.2.6775': attribute type 7 has an invalid length. [ 2012.422597][T29195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6775'. [ 2012.431761][T29195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6775'. [ 2012.441142][T29195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6775'. [ 2012.982477][T29201] netlink: 'syz.0.6777': attribute type 4 has an invalid length. [ 2013.759409][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2013.778478][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2013.788428][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2013.796607][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2013.804139][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2014.206963][T22621] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2014.431168][T22621] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2014.592788][T22621] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2014.688939][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2014.722581][T29232] netlink: 'syz.2.6785': attribute type 7 has an invalid length. [ 2015.069899][T29236] vivid-000: ================= START STATUS ================= [ 2015.086538][T29236] vivid-000: Test Pattern: 75% Colorbar [ 2015.099183][T29236] vivid-000: Fill Percentage of Frame: 100 [ 2015.105112][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 2015.115922][T22621] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.137826][T29236] vivid-000: Horizontal Movement: No Movement [ 2015.147507][T29236] vivid-000: Vertical Movement: No Movement [ 2015.169073][T29236] vivid-000: OSD Text Mode: All [ 2015.175364][T29236] vivid-000: Show Border: false [ 2015.189135][T29236] vivid-000: Show Square: false [ 2015.194049][T29236] vivid-000: Sensor Flipped Horizontally: false [ 2015.209273][T29236] vivid-000: Sensor Flipped Vertically: false [ 2015.298133][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2015.300670][T29223] syzkaller0: entered promiscuous mode [ 2015.314771][ T24] usb 4-1: config 0 has no interface number 0 [ 2015.321097][T29223] syzkaller0: entered allmulticast mode [ 2015.331443][T29236] vivid-000: Insert SAV Code in Image: false [ 2015.338240][T29236] vivid-000: Insert EAV Code in Image: false [ 2015.360742][ T24] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 2015.375657][T29242] netlink: 'syz.1.6787': attribute type 4 has an invalid length. [ 2015.380300][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.392802][T29236] vivid-000: Insert Video Guard Band: false [ 2015.399304][T29236] vivid-000: Reduced Framerate: false [ 2015.401503][ T24] usb 4-1: Product: syz [ 2015.410354][T29236] vivid-000: HDMI 000-0 Is Connected To: [ 2015.410603][ T24] usb 4-1: Manufacturer: syz [ 2015.421687][T29236] Test Pattern Generator [ 2015.434131][T29236] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 2015.451272][T29236] vivid-000: Enable Capture Cropping: true [ 2015.462618][T29236] vivid-000: Enable Capture Composing: true [ 2015.468469][ T24] usb 4-1: SerialNumber: syz [ 2015.480437][T29236] vivid-000: Enable Capture Scaler: true [ 2015.502322][T29214] chnl_net:caif_netlink_parms(): no params data found [ 2015.514156][T29236] vivid-000: Timestamp Source: End of Frame [ 2015.526099][T29236] vivid-000: Colorspace: Rec. 709 [ 2015.540638][T29236] vivid-000: Transfer Function: Default [ 2015.551102][T29236] vivid-000: Y'CbCr Encoding: Default [ 2015.563104][T29236] vivid-000: HSV Encoding: Hue 0-179 [ 2015.573879][T29236] vivid-000: Quantization: Default [ 2015.585366][T29236] vivid-000: Apply Alpha To Red Only: false [ 2015.600227][T29236] vivid-000: Standard Aspect Ratio: 4x3 [ 2015.614875][T29236] vivid-000: DV Timings Signal Mode: Current DV Timings [ 2015.624937][ T24] usb 4-1: config 0 descriptor?? [ 2015.630051][T29236] vivid-000: DV Timings: [ 2015.632938][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2015.639252][T29236] 640x480p59 inactive [ 2015.648966][T29236] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2015.674154][T29236] vivid-000: Maximum EDID Blocks: 2 [ 2015.694551][T29236] vivid-000: Limited RGB Range (16-235): true [ 2015.710312][T29236] vivid-000: Rx RGB Quantization Range: Automatic [ 2015.723655][T29236] vivid-000: Power Present: 0x00000001 [ 2015.745357][T29236] tpg source WxH: 1280x720 (R'G'B) [ 2015.751932][T29236] tpg field: 1 [ 2015.764888][T29236] tpg crop: (0,0)/64x64 [ 2015.771789][T29236] tpg compose: (0,0)/16x16 [ 2015.778273][T29236] tpg colorspace: 3 [ 2015.786149][T29236] tpg transfer function: 0/1 [ 2015.792737][T29236] tpg quantization: 2/2 [ 2015.798168][T29236] tpg RGB range: 0/1 [ 2015.804732][T29236] vivid-000: ================== END STATUS ================== [ 2015.816571][T22621] bridge_slave_1: left allmulticast mode [ 2015.860459][T26179] Bluetooth: hci4: command tx timeout [ 2015.913113][T22621] bridge_slave_1: left promiscuous mode [ 2015.945192][T22621] bridge0: port 2(bridge_slave_1) entered disabled state [ 2015.994644][T22621] bridge_slave_0: left allmulticast mode [ 2016.003823][T22621] bridge_slave_0: left promiscuous mode [ 2016.028343][T22621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2016.614451][T22621] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 2016.683411][T22621] bond3 (unregistering): (slave bridge4): Removing an active aggregator [ 2016.696619][T22621] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 2016.707249][T22621] bridge4 (unregistering): left promiscuous mode [ 2016.715408][T22621] bridge4 (unregistering): left allmulticast mode [ 2017.422785][T19924] usb 4-1: USB disconnect, device number 29 [ 2017.521003][T22621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2017.533515][T22621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2017.543487][T22621] bond0 (unregistering): Released all slaves [ 2017.701532][T22621] bond1 (unregistering): Released all slaves [ 2017.713294][T22621] bond2 (unregistering): Released all slaves [ 2017.851132][T22621] bond3 (unregistering): Released all slaves [ 2017.875830][T29258] __nla_validate_parse: 12 callbacks suppressed [ 2017.875850][T29258] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6790'. [ 2017.946585][T26179] Bluetooth: hci4: command tx timeout [ 2018.159013][T29263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6791'. [ 2018.168406][T29263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6791'. [ 2018.178023][T29263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6791'. [ 2020.018212][T26179] Bluetooth: hci4: command tx timeout [ 2020.767012][T29214] bridge0: port 1(bridge_slave_0) entered blocking state [ 2020.774310][T29214] bridge0: port 1(bridge_slave_0) entered disabled state [ 2020.781555][T29214] bridge_slave_0: entered allmulticast mode [ 2020.788840][T29214] bridge_slave_0: entered promiscuous mode [ 2020.827159][T29214] bridge0: port 2(bridge_slave_1) entered blocking state [ 2020.862035][T29214] bridge0: port 2(bridge_slave_1) entered disabled state [ 2020.888334][T29214] bridge_slave_1: entered allmulticast mode [ 2020.909904][T29214] bridge_slave_1: entered promiscuous mode [ 2021.254321][T29214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2021.274975][T29214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2021.538930][T29290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6797'. [ 2021.946728][T29214] team0: Port device team_slave_0 added [ 2022.093765][T26179] Bluetooth: hci4: command tx timeout [ 2022.332069][T29302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6799'. [ 2022.341184][T29302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6799'. [ 2022.350331][T29302] netlink: 'syz.1.6799': attribute type 7 has an invalid length. [ 2022.424751][T29303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6799'. [ 2022.433876][T29303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6799'. [ 2022.443272][T29303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6799'. [ 2022.914361][T22621] hsr_slave_0: left promiscuous mode [ 2022.921977][T22621] hsr_slave_1: left promiscuous mode [ 2022.956326][T22621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2022.963967][T19924] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2022.993047][T22621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2023.058856][T22621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2023.089581][T22621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2023.133051][T22621] veth1_macvtap: left promiscuous mode [ 2023.138779][T22621] veth0_macvtap: left promiscuous mode [ 2023.159150][T22621] veth1_vlan: left promiscuous mode [ 2023.165206][T19924] usb 4-1: no configurations [ 2023.167476][T22621] veth0_vlan: left promiscuous mode [ 2023.169813][T19924] usb 4-1: can't read configurations, error -22 [ 2023.323811][T19924] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2023.490091][T19924] usb 4-1: no configurations [ 2023.512730][T19924] usb 4-1: can't read configurations, error -22 [ 2023.522275][T19924] usb usb4-port1: attempt power cycle [ 2023.712029][T29315] fuse: Invalid rootmode [ 2026.076579][T29325] usb usb8: usbfs: process 29325 (syz.3.6802) did not claim interface 0 before use [ 2026.119806][T29325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6802'. [ 2026.902628][T22621] team0 (unregistering): Port device team_slave_1 removed [ 2026.950900][T22621] team0 (unregistering): Port device team_slave_0 removed [ 2027.435042][T29214] team0: Port device team_slave_1 added [ 2027.681254][T29214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2027.705396][T29214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2027.958061][T29332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6803'. [ 2028.144989][T29335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6804'. [ 2028.158308][T29214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2028.186775][T29214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2028.194908][T29214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2028.236254][T29214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2028.334583][T29340] syzkaller0: entered promiscuous mode [ 2028.347927][T29340] syzkaller0: entered allmulticast mode [ 2028.544327][T29214] hsr_slave_0: entered promiscuous mode [ 2028.559020][T29214] hsr_slave_1: entered promiscuous mode [ 2028.565057][T29214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2028.572835][T29214] Cannot create hsr debugfs directory [ 2028.585804][T26444] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2028.736399][T26444] usb 1-1: Using ep0 maxpacket: 16 [ 2028.752509][T26444] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2028.770871][T26444] usb 1-1: config 0 has no interface number 0 [ 2028.780584][T26444] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 2028.792462][T26444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.801646][T26444] usb 1-1: Product: syz [ 2028.809668][T26444] usb 1-1: Manufacturer: syz [ 2028.814515][T26444] usb 1-1: SerialNumber: syz [ 2028.822928][T26444] usb 1-1: config 0 descriptor?? [ 2028.836152][T26444] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2029.172233][T29214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2029.184639][T29214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2029.202447][T29214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2029.223444][T29214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2029.276132][T19924] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2029.339710][T29214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2029.362406][T29214] 8021q: adding VLAN 0 to HW filter on device team0 [ 2029.375178][T22621] bridge0: port 1(bridge_slave_0) entered blocking state [ 2029.382297][T22621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2029.418171][T12656] bridge0: port 2(bridge_slave_1) entered blocking state [ 2029.425454][T12656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2029.448763][T19924] usb 3-1: Using ep0 maxpacket: 32 [ 2029.462039][T19924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2029.483395][T19924] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2029.513316][T19924] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 2029.537170][ T5901] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2029.548318][T19924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.564528][T19924] usb 3-1: Product: syz [ 2029.573252][T19924] usb 3-1: Manufacturer: syz [ 2029.583274][T19924] usb 3-1: SerialNumber: syz [ 2029.596241][T19924] usb 3-1: config 0 descriptor?? [ 2029.608123][T19924] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2029.674937][T29214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2029.728342][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2029.738063][ T5901] usb 2-1: config 66 interface 0 has no altsetting 0 [ 2029.754548][ T5901] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 2029.773421][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.791143][ T5901] usb 2-1: Product: syz [ 2029.800290][ T5901] usb 2-1: Manufacturer: syz [ 2029.810568][ T5901] usb 2-1: SerialNumber: syz [ 2029.859216][ T5867] usb 3-1: USB disconnect, device number 122 [ 2030.024654][T29214] veth0_vlan: entered promiscuous mode [ 2030.046098][T29214] veth1_vlan: entered promiscuous mode [ 2030.080650][T29214] veth0_macvtap: entered promiscuous mode [ 2030.098626][T29214] veth1_macvtap: entered promiscuous mode [ 2030.137587][T29214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2030.196775][ T5901] ati_remote2 2-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 2030.201995][T29214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2030.221144][ T5901] usb 2-1: USB disconnect, device number 114 [ 2030.222316][T29214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.238406][T29214] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.247942][T29214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.257315][T29214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.352529][T12656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2030.363111][T12656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2030.384406][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2030.395098][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2030.727033][ T5901] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2030.974579][T29385] usb usb8: usbfs: process 29385 (syz.2.6811) did not claim interface 0 before use [ 2031.070884][T29385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6811'. [ 2031.217515][T26444] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2031.381750][T24900] usb 1-1: USB disconnect, device number 96 [ 2031.397224][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 2031.407948][ T5901] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 2031.420783][ T5901] usb 5-1: config 0 has no interface number 0 [ 2031.428770][ T5901] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2031.445317][ T5901] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2031.460157][ T5901] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2031.471714][ T5901] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2031.487723][ T5901] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2031.496966][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.546795][ T5901] usb 5-1: config 0 descriptor?? [ 2031.560256][ T5901] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2032.171422][T29389] usb usb8: usbfs: process 29389 (syz.3.6813) did not claim interface 0 before use [ 2032.214727][T29389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6813'. [ 2032.283346][T26444] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 2032.304420][T26444] usb 2-1: config 0 has an invalid interface descriptor of length 2, skipping [ 2032.321085][T26444] usb 2-1: config 0 has no interface number 0 [ 2032.353233][T26444] usb 2-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 2032.383429][T26444] usb 2-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2032.400180][T26444] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 2032.422839][T26444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.438482][T26444] usb 2-1: Product: syz [ 2032.442732][T26444] usb 2-1: Manufacturer: syz [ 2032.448571][T26444] usb 2-1: SerialNumber: syz [ 2032.464223][T26444] usb 2-1: config 0 descriptor?? [ 2032.479426][T26444] ljca 2-1:0.84: bulk endpoints not found [ 2032.621757][T19924] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2032.733831][T26444] usb 2-1: USB disconnect, device number 115 [ 2032.783088][T19924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2032.801559][T19924] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2032.810733][T19924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.841578][T19924] usb 3-1: config 0 descriptor?? [ 2033.079723][T19924] usbhid 3-1:0.0: can't add hid device: -71 [ 2033.090933][T19924] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2033.111924][T19924] usb 3-1: USB disconnect, device number 123 [ 2033.523418][ T24] usb 5-1: USB disconnect, device number 98 [ 2033.542749][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 2033.564563][T19924] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2033.768462][T19924] usb 3-1: Using ep0 maxpacket: 16 [ 2033.798996][T19924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2033.817671][T19924] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2034.023277][T29403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6816'. [ 2034.270531][T19924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.299491][T19924] usb 3-1: config 0 descriptor?? [ 2034.749352][T19924] mcp2221 0003:04D8:00DD.0034: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2035.119225][ C0] ================================================================== [ 2035.127369][ C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0xf94/0x1030 [ 2035.135284][ C0] Read of size 1 at addr ffff888058b4bfff by task kworker/u8:10/6377 [ 2035.143363][ C0] [ 2035.145681][ C0] CPU: 0 UID: 0 PID: 6377 Comm: kworker/u8:10 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 2035.145705][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2035.145719][ C0] Workqueue: bat_events batadv_nc_worker [ 2035.145750][ C0] Call Trace: [ 2035.145757][ C0] [ 2035.145764][ C0] dump_stack_lvl+0x116/0x1f0 [ 2035.145794][ C0] print_report+0xcd/0x680 [ 2035.145820][ C0] ? __virt_addr_valid+0x81/0x610 [ 2035.145840][ C0] ? __phys_addr+0xe8/0x180 [ 2035.145860][ C0] ? mcp2221_raw_event+0xf94/0x1030 [ 2035.145884][ C0] kasan_report+0xe0/0x110 [ 2035.145908][ C0] ? mcp2221_raw_event+0xf94/0x1030 [ 2035.145938][ C0] mcp2221_raw_event+0xf94/0x1030 [ 2035.145965][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2035.145988][ C0] __hid_input_report.constprop.0+0x311/0x450 [ 2035.146009][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 2035.146034][ C0] hid_irq_in+0x35e/0x870 [ 2035.146059][ C0] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 2035.146087][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 2035.146110][ C0] dummy_timer+0x180e/0x3a20 [ 2035.146142][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 2035.146167][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2035.146194][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2035.146217][ C0] ? mark_held_locks+0x49/0x80 [ 2035.146242][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2035.146265][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2035.146289][ C0] __hrtimer_run_queues+0x202/0xad0 [ 2035.146310][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2035.146328][ C0] ? read_tsc+0x9/0x20 [ 2035.146349][ C0] hrtimer_run_softirq+0x17d/0x350 [ 2035.146374][ C0] handle_softirqs+0x216/0x8e0 [ 2035.146395][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2035.146414][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 2035.146439][ C0] ? batadv_nc_purge_paths+0x1d4/0x3a0 [ 2035.146459][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 2035.146482][ C0] do_softirq+0xb2/0xf0 [ 2035.146500][ C0] [ 2035.146506][ C0] [ 2035.146513][ C0] __local_bh_enable_ip+0x100/0x120 [ 2035.146535][ C0] batadv_nc_purge_paths+0x1d4/0x3a0 [ 2035.146561][ C0] batadv_nc_worker+0x921/0x1030 [ 2035.146582][ C0] ? try_to_wake_up+0x157/0x1680 [ 2035.146601][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 2035.146624][ C0] ? rcu_is_watching+0x12/0xc0 [ 2035.146645][ C0] process_one_work+0x9cc/0x1b70 [ 2035.146664][ C0] ? __pfx_macvlan_process_broadcast+0x10/0x10 [ 2035.146692][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2035.146710][ C0] ? assign_work+0x1a0/0x250 [ 2035.146739][ C0] worker_thread+0x6c8/0xf10 [ 2035.146758][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2035.146774][ C0] kthread+0x3c2/0x780 [ 2035.146790][ C0] ? __pfx_kthread+0x10/0x10 [ 2035.146805][ C0] ? rcu_is_watching+0x12/0xc0 [ 2035.146824][ C0] ? __pfx_kthread+0x10/0x10 [ 2035.146838][ C0] ret_from_fork+0x5d4/0x6f0 [ 2035.146860][ C0] ? __pfx_kthread+0x10/0x10 [ 2035.146874][ C0] ret_from_fork_asm+0x1a/0x30 [ 2035.146896][ C0] [ 2035.146902][ C0] [ 2035.441766][ C0] The buggy address belongs to the object at ffff888058b4ba80 [ 2035.441766][ C0] which belongs to the cache skbuff_small_head of size 704 [ 2035.456341][ C0] The buggy address is located 703 bytes to the right of [ 2035.456341][ C0] allocated 704-byte region [ffff888058b4ba80, ffff888058b4bd40) [ 2035.470994][ C0] [ 2035.473302][ C0] The buggy address belongs to the physical page: [ 2035.479692][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58b48 [ 2035.488435][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2035.496916][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2035.504481][ C0] page_type: f5(slab) [ 2035.508497][ C0] raw: 00fff00000000040 ffff888140a948c0 dead000000000122 0000000000000000 [ 2035.517082][ C0] raw: 0000000000000000 0000000080130013 00000000f5000000 0000000000000000 [ 2035.525652][ C0] head: 00fff00000000040 ffff888140a948c0 dead000000000122 0000000000000000 [ 2035.534312][ C0] head: 0000000000000000 0000000080130013 00000000f5000000 0000000000000000 [ 2035.542972][ C0] head: 00fff00000000002 ffffea000162d201 00000000ffffffff 00000000ffffffff [ 2035.551631][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 2035.560286][ C0] page dumped because: kasan: bad access detected [ 2035.566685][ C0] page_owner tracks the page as allocated [ 2035.572379][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xf2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_MEMALLOC|__GFP_COMP|__GFP_NOMEMALLOC), pid 0, tgid 0 (swapper/0), ts 2034501440281, free_ts 2028541196414 [ 2035.593993][ C0] post_alloc_hook+0x1c0/0x230 [ 2035.598762][ C0] get_page_from_freelist+0x1321/0x3890 [ 2035.604299][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 2035.610185][ C0] alloc_pages_mpol+0x1fb/0x550 [ 2035.615028][ C0] new_slab+0x23b/0x330 [ 2035.619172][ C0] ___slab_alloc+0xd9c/0x1940 [ 2035.623843][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 2035.629207][ C0] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 2035.635013][ C0] kmalloc_reserve+0x18b/0x2c0 [ 2035.639764][ C0] __alloc_skb+0x166/0x380 [ 2035.644170][ C0] __netdev_alloc_skb+0x213/0x920 [ 2035.649183][ C0] __ieee80211_beacon_get+0xb8a/0x1750 [ 2035.654636][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 2035.660080][ C0] mac80211_hwsim_beacon_tx+0x4d9/0xa40 [ 2035.665614][ C0] __iterate_interfaces+0x2e2/0x650 [ 2035.670805][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 2035.677824][ C0] page last free pid 22621 tgid 22621 stack trace: [ 2035.684306][ C0] __free_pages_ok+0x765/0x10e0 [ 2035.689148][ C0] __folio_put+0x329/0x450 [ 2035.693553][ C0] batadv_hash_destroy+0x31/0x70 [ 2035.698483][ C0] batadv_originator_free+0x2df/0x380 [ 2035.703849][ C0] batadv_mesh_free+0xa9/0x170 [ 2035.708634][ C0] batadv_meshif_free+0x15/0x20 [ 2035.713478][ C0] netdev_run_todo+0x78f/0x1320 [ 2035.718322][ C0] default_device_exit_batch+0x858/0xaf0 [ 2035.723949][ C0] ops_undo_list+0x363/0xab0 [ 2035.728531][ C0] cleanup_net+0x408/0x890 [ 2035.732931][ C0] process_one_work+0x9cc/0x1b70 [ 2035.737857][ C0] worker_thread+0x6c8/0xf10 [ 2035.742434][ C0] kthread+0x3c2/0x780 [ 2035.746486][ C0] ret_from_fork+0x5d4/0x6f0 [ 2035.751070][ C0] ret_from_fork_asm+0x1a/0x30 [ 2035.755822][ C0] [ 2035.758130][ C0] Memory state around the buggy address: [ 2035.763744][ C0] ffff888058b4be80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2035.771791][ C0] ffff888058b4bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2035.779836][ C0] >ffff888058b4bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2035.787878][ C0] ^ [ 2035.795841][ C0] ffff888058b4c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2035.803891][ C0] ffff888058b4c080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2035.811937][ C0] ================================================================== [ 2035.819981][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2035.827162][ C0] CPU: 0 UID: 0 PID: 6377 Comm: kworker/u8:10 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 2035.839391][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2035.849443][ C0] Workqueue: bat_events batadv_nc_worker [ 2035.855079][ C0] Call Trace: [ 2035.858345][ C0] [ 2035.861176][ C0] dump_stack_lvl+0x3d/0x1f0 [ 2035.865761][ C0] panic+0x71c/0x800 [ 2035.869651][ C0] ? __pfx_panic+0x10/0x10 [ 2035.874068][ C0] ? __pfx__printk+0x10/0x10 [ 2035.878645][ C0] ? end_report+0x4c/0x170 [ 2035.883066][ C0] ? mcp2221_raw_event+0xf94/0x1030 [ 2035.888262][ C0] check_panic_on_warn+0xab/0xb0 [ 2035.893201][ C0] end_report+0x107/0x170 [ 2035.897525][ C0] kasan_report+0xee/0x110 [ 2035.901932][ C0] ? mcp2221_raw_event+0xf94/0x1030 [ 2035.907126][ C0] mcp2221_raw_event+0xf94/0x1030 [ 2035.912145][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2035.917944][ C0] __hid_input_report.constprop.0+0x311/0x450 [ 2035.924001][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 2035.929457][ C0] hid_irq_in+0x35e/0x870 [ 2035.933784][ C0] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 2035.939152][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 2035.944348][ C0] dummy_timer+0x180e/0x3a20 [ 2035.948941][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 2035.954150][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2035.959084][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2035.964016][ C0] ? mark_held_locks+0x49/0x80 [ 2035.968778][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2035.974577][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2035.979513][ C0] __hrtimer_run_queues+0x202/0xad0 [ 2035.984707][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2035.990416][ C0] ? read_tsc+0x9/0x20 [ 2035.994492][ C0] hrtimer_run_softirq+0x17d/0x350 [ 2035.999594][ C0] handle_softirqs+0x216/0x8e0 [ 2036.004362][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2036.009639][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 2036.014933][ C0] ? batadv_nc_purge_paths+0x1d4/0x3a0 [ 2036.020386][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 2036.027227][ C0] do_softirq+0xb2/0xf0 [ 2036.031372][ C0] [ 2036.034310][ C0] [ 2036.037229][ C0] __local_bh_enable_ip+0x100/0x120 [ 2036.042420][ C0] batadv_nc_purge_paths+0x1d4/0x3a0 [ 2036.047702][ C0] batadv_nc_worker+0x921/0x1030 [ 2036.052633][ C0] ? try_to_wake_up+0x157/0x1680 [ 2036.057562][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 2036.062930][ C0] ? rcu_is_watching+0x12/0xc0 [ 2036.067688][ C0] process_one_work+0x9cc/0x1b70 [ 2036.072620][ C0] ? __pfx_macvlan_process_broadcast+0x10/0x10 [ 2036.078799][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2036.084165][ C0] ? assign_work+0x1a0/0x250 [ 2036.088752][ C0] worker_thread+0x6c8/0xf10 [ 2036.093333][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2036.098430][ C0] kthread+0x3c2/0x780 [ 2036.102487][ C0] ? __pfx_kthread+0x10/0x10 [ 2036.107068][ C0] ? rcu_is_watching+0x12/0xc0 [ 2036.111822][ C0] ? __pfx_kthread+0x10/0x10 [ 2036.116397][ C0] ret_from_fork+0x5d4/0x6f0 [ 2036.120982][ C0] ? __pfx_kthread+0x10/0x10 [ 2036.125557][ C0] ret_from_fork_asm+0x1a/0x30 [ 2036.130315][ C0] [ 2036.133545][ C0] Kernel Offset: disabled [ 2036.137849][ C0] Rebooting in 86400 seconds..