last executing test programs: 8.267880449s ago: executing program 2 (id=1345): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000002, 0xfffffffffffffffa, 0xc8, 0xb6da, 0x80000a5, 0xb7, 0xb6, 0x8000000000000002, 0x4000000008, 0x7, 0xfff, 0x6, 0xfb, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1be, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2000000002, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x4, 0x6, 0xfffffffffffffffd, 0x7, 0xf1, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xdffffffffffffd, 0xd, 0x81, 0x8, 0x7fff, 0x6, 0xe, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x2, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0xf, 0x6, 0xb, 0x1, 0x10003, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x7, 0x0, 0xfc0, 0x7, 0xaad, 0x8000000000007, 0x2, 0x8, 0x200e2, 0x6, 0x6, 0x8, 0xa, 0x0, 0x9, 0x5, 0x40, 0x8000, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000240), &(0x7f0000000380)={0x0, 0xfb, 0x15, 0x2, 0x9, "2313b2a6abcc96a27d1a3c42c83c97bb"}, 0x15, 0x2) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r4, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) 6.739263706s ago: executing program 4 (id=1349): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x6, 0xa8000) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_ep_write(r0, 0x81, 0x15, &(0x7f00000002c0)="28d36689fb2134111f63db24e27edc54c2d14345c6") 6.335580961s ago: executing program 3 (id=1352): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x101000) socket$l2tp6(0xa, 0x2, 0x73) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/81, 0x51}], 0x1) syz_open_dev$usbfs(0x0, 0x205, 0x8401) 6.297886032s ago: executing program 1 (id=1353): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.884426885s ago: executing program 0 (id=1355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) 5.848863915s ago: executing program 1 (id=1356): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000640)=[{&(0x7f00000007c0)}], 0x1) 5.728244843s ago: executing program 0 (id=1357): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@private=0xa010100}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xf}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x20, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.583240828s ago: executing program 0 (id=1358): setreuid(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x300}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x8000000001cb, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0x0, 0x0, 0xa600, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @sint={0x7, 0x1ff}}]}) r7 = eventfd2(0x8, 0x1) write$eventfd(r7, &(0x7f0000000080)=0x430f, 0x8) 5.520529731s ago: executing program 2 (id=1359): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) fcntl$getownex(r0, 0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') syz_usb_disconnect(r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x6, 0x8, 0x7, 0xffffffff}, {0x2000, 0x43, 0x1, 0x80000000}, {0x1, 0x6, 0x9, 0x8}]}) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r2, &(0x7f0000000dc0)='syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x102, 0x0) fchown(r5, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r6, r6, 0x0, 0x8000002) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') 5.397413942s ago: executing program 3 (id=1360): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 5.367290493s ago: executing program 3 (id=1361): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0102, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$hidraw(r2, 0x0, 0x0) 5.087503578s ago: executing program 3 (id=1362): getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) syz_open_dev$video(0x0, 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 3.916991402s ago: executing program 1 (id=1363): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)}, 0x7}], 0x3, 0x2000, 0x0) 3.75684125s ago: executing program 1 (id=1364): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_clone(0x88106000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x9) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x100, 0x890000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r4, @ANYRES64=0x0], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x200448c0) close(r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) pipe2$watch_queue(0x0, 0x80) shutdown(r4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10000b0e00000000000100000e000000"], 0x10}, 0xfc40) r7 = fsmount(r5, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) 3.662668349s ago: executing program 4 (id=1365): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)) userfaultfd(0x801) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x63cd, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.000808736s ago: executing program 4 (id=1366): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) userfaultfd(0x801) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x63cd, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.689192103s ago: executing program 0 (id=1367): futex_waitv(&(0x7f0000001740), 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x88b, &(0x7f0000000240)={0x0, 0xa5e6, 0x800, 0x2003, 0x276}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x4, 0x0, 0x0, 0xfffffffffffffea4) 2.42570488s ago: executing program 4 (id=1368): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@private=0xa010100}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xf}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x20, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.089797807s ago: executing program 4 (id=1369): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.055648217s ago: executing program 1 (id=1370): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x101000) socket$l2tp6(0xa, 0x2, 0x73) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/81, 0x51}], 0x1) syz_open_dev$usbfs(0x0, 0x205, 0x8401) 1.884631546s ago: executing program 3 (id=1371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.812655877s ago: executing program 2 (id=1372): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0102, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$hidraw(r1, 0x0, 0x0) 1.725188621s ago: executing program 3 (id=1373): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000640)=[{&(0x7f00000007c0)="bd", 0x1}], 0x1) 1.708173445s ago: executing program 0 (id=1374): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x14e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r2) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.682357114s ago: executing program 4 (id=1375): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) syz_open_dev$hiddev(0x0, 0x6, 0xa8000) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_ep_write(r0, 0x81, 0x15, &(0x7f00000002c0)="28d36689fb2134111f63db24e27edc54c2d14345c6") 1.533197799s ago: executing program 2 (id=1376): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r1, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000100)=0x7) write$dsp(r1, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 1.040714035s ago: executing program 1 (id=1377): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r3, 0x1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getdents64(r3, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x4044001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="4166deb08f5490e60cbd5dc80404c8a1d8b1dcefa938cbb0a2ca79523b6cc1574a6c7282edd54fa942633e7cf2fddaf1b19a9bd2aded624ffe3ed905bd5bc2ef28c3c689bdc609239748afb03e5201f0edcb4e0edfc9f07805d021a76bd013330c33937875ea24a4e7b7c9150afbfb67c43037a0f32d72c4b8b6a70cd359878738", 0x81}], 0x1}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000400)={0x0, 0x1397, 0x100, 0xfffffffe, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x4000000000000000, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000140)={0x0, 0xc8}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x561000) r9 = socket(0x1d, 0x2, 0x6) bind$inet(r9, &(0x7f00000000c0)={0x1d, 0x4e20, @remote}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) 602.797984ms ago: executing program 2 (id=1378): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) userfaultfd(0x801) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x63cd, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 553.632953ms ago: executing program 0 (id=1379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 0s ago: executing program 2 (id=1380): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xf) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x18) r4 = syz_open_dev$video(&(0x7f0000000440), 0x37ad5285, 0x12b043) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x1, @win={{0x566, 0x23, 0xc, 0x1}, 0x2, 0x7, &(0x7f0000000300)={{0x4, 0x3, 0x7, 0x401}, &(0x7f0000000240)={{0x1, 0x4, 0xb, 0xb}, &(0x7f0000000080)={{0x0, 0x4, 0x200, 0x99}}}}, 0x7, &(0x7f0000000480)="74b8947f6997ae373b504c0c4dbab36796a34dcdd8458ab390b444bf9ae77a5307a9d87d5d548b97d3587261cd56a2fe46aa85eea69c12977f4f5962a44d397be2484633db2183c0e2b3216f516a4d1711b0cc3446de4f0aaf0164", 0x4}}) kernel console output (not intermixed with test programs): descriptor?? [ 401.170354][ T5952] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 401.180019][ T5952] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 401.203155][ T5983] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 401.606491][ T5983] gp8psk: usb out operation failed. [ 401.623768][ T5983] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 401.716431][ T5983] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 401.757743][ T5983] usb 4-1: USB disconnect, device number 10 [ 402.023304][ T6579] kvm: vcpu 0: requested 2688 ns lapic timer period limited to 200000 ns [ 403.068549][ T5953] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 403.225792][ T5953] usb 1-1: device descriptor read/64, error -71 [ 403.549374][ T5953] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 403.687543][ T5953] usb 1-1: device descriptor read/64, error -71 [ 403.797945][ T5953] usb usb1-port1: attempt power cycle [ 404.142662][ T5953] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 404.168420][ T5953] usb 1-1: device descriptor read/8, error -71 [ 404.340605][ T6623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.233'. [ 404.407633][ T5953] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 404.466359][ T5953] usb 1-1: device descriptor read/8, error -71 [ 404.648051][ T5953] usb usb1-port1: unable to enumerate USB device [ 406.174768][ T6661] usb usb8: usbfs: process 6661 (syz.0.252) did not claim interface 0 before use [ 406.460803][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. [ 407.067643][ T5983] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 407.207520][ T5983] usb 2-1: device descriptor read/64, error -71 [ 407.450354][ T5983] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 407.587559][ T5983] usb 2-1: device descriptor read/64, error -71 [ 407.698508][ T5983] usb usb2-port1: attempt power cycle [ 408.058527][ T5983] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 408.098292][ T5983] usb 2-1: device descriptor read/8, error -71 [ 408.326532][ T5953] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 408.345062][ T5983] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 408.398350][ T5983] usb 2-1: device descriptor read/8, error -71 [ 408.518403][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 408.527263][ T5983] usb usb2-port1: unable to enumerate USB device [ 408.567687][ T5953] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 408.596703][ T5953] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 408.639684][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 408.664269][ T5953] usb 1-1: Product: syz [ 408.677715][ T5953] usb 1-1: Manufacturer: syz [ 408.689264][ T5953] usb 1-1: SerialNumber: syz [ 408.708757][ T5953] usb 1-1: config 0 descriptor?? [ 408.727104][ T6697] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 408.962280][ T9] usb 1-1: USB disconnect, device number 6 [ 409.491718][ T6723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.645913][ T6738] netlink: 'syz.1.282': attribute type 10 has an invalid length. [ 410.663403][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 410.676979][ T6738] team0: Device vxcan1 is of different type [ 410.972008][ T6744] netlink: 2796 bytes leftover after parsing attributes in process `syz.3.283'. [ 411.095686][ T6744] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 411.257561][ T5937] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 411.420391][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 411.439452][ T5937] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 411.449715][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.477350][ T5937] usb 2-1: config 0 has no interface number 0 [ 411.495848][ T5937] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 411.505395][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.525766][ T5937] usb 2-1: Product: syz [ 411.543813][ T5937] usb 2-1: Manufacturer: syz [ 411.557487][ T5937] usb 2-1: SerialNumber: syz [ 411.584864][ T5937] usb 2-1: config 0 descriptor?? [ 411.605710][ T5937] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 411.623129][ T5937] uvcvideo 2-1:0.105: No valid video chain found. [ 411.855871][ T5937] usb 2-1: USB disconnect, device number 7 [ 412.301206][ T6755] binder_alloc: 6754: pid 6754 spamming oneway? 1 buffers allocated for a total size of 4096 [ 412.370225][ T6758] binder_alloc: 6754: pid 6754 spamming oneway? 2 buffers allocated for a total size of 5120 [ 413.098747][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 413.227796][ T5811] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 413.388540][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 413.401719][ T5811] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.478622][ T5811] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 413.494580][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.513163][ T5811] usb 4-1: Product: syz [ 413.519890][ T5811] usb 4-1: Manufacturer: syz [ 413.537507][ T5811] usb 4-1: SerialNumber: syz [ 413.918436][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 413.987603][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.293'. [ 414.043634][ T5811] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 414.078573][ T5811] usb 4-1: USB disconnect, device number 11 [ 414.849121][ T6789] tc_dump_action: action bad kind [ 415.305677][ T6798] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 415.667335][ T6805] netlink: 'syz.2.303': attribute type 10 has an invalid length. [ 415.688247][ T6805] batadv0: left allmulticast mode [ 415.693365][ T6805] batadv0: left promiscuous mode [ 415.755000][ T6805] bridge0: port 3(batadv0) entered disabled state [ 415.859847][ T6805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.889215][ T6807] loop5: detected capacity change from 0 to 7 [ 415.931701][ T6805] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 416.218400][ T6807] Dev loop5: unable to read RDB block 7 [ 416.234543][ T6807] loop5: AHDI p1 [ 416.249089][ T6808] netlink: 'syz.2.303': attribute type 10 has an invalid length. [ 416.257234][ T6807] loop5: partition table partially beyond EOD, truncated [ 416.267015][ T6808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.303'. [ 416.414261][ T6808] batadv0: entered promiscuous mode [ 416.473741][ T6808] batadv0: entered allmulticast mode [ 416.586186][ T6808] bond0: (slave batadv0): Releasing backup interface [ 416.700862][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.307'. [ 416.733242][ T6808] bridge0: port 3(batadv0) entered blocking state [ 416.792902][ T6808] bridge0: port 3(batadv0) entered disabled state [ 417.662970][ T5952] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 417.672414][ T5952] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 419.457572][ T5811] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 419.629940][ T5811] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 419.657497][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.682068][ T5811] usb 4-1: Product: syz [ 419.710697][ T5811] usb 4-1: Manufacturer: syz [ 419.722467][ T5811] usb 4-1: SerialNumber: syz [ 419.756845][ T5811] usb 4-1: config 0 descriptor?? [ 419.779668][ T5811] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 419.802209][ T5811] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 419.852574][ T5811] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 419.982508][ T5811] usb 4-1: USB disconnect, device number 12 [ 420.297159][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'. [ 424.084971][ T6906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.340'. [ 425.034976][ T6921] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 425.889884][ T6934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.352'. [ 426.453116][ T6943] xt_hashlimit: size too large, truncated to 1048576 [ 428.011117][ T6960] kvm: pic: non byte write [ 428.568175][ T6967] warning: `syz.0.362' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 428.790556][ T6971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.364'. [ 429.024721][ T6976] xt_hashlimit: size too large, truncated to 1048576 [ 433.100754][ T7019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.376'. [ 433.298304][ T7021] xt_hashlimit: size too large, truncated to 1048576 [ 433.621547][ T7033] syz_tun: entered allmulticast mode [ 435.487758][ T7054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.390'. [ 435.792886][ T7058] netlink: 'syz.0.393': attribute type 4 has an invalid length. [ 436.136523][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 436.429574][ T7070] xt_hashlimit: size too large, truncated to 1048576 [ 437.197512][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 437.357770][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 437.377206][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.407779][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.429796][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 437.451891][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.475979][ T9] usb 2-1: config 0 descriptor?? [ 437.933517][ T7096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.402'. [ 437.986555][ T9] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 438.221733][ T5953] usb 2-1: USB disconnect, device number 8 [ 439.400815][ T7124] netlink: 48 bytes leftover after parsing attributes in process `syz.3.412'. [ 439.431060][ T7124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.412'. [ 439.823167][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.413'. [ 440.202573][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.209512][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.312360][ T5937] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 441.407632][ T5953] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 441.467994][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 441.476416][ T5937] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 441.491418][ T5937] usb 3-1: config 0 has no interface number 0 [ 441.501591][ T5937] usb 3-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 441.523202][ T5937] usb 3-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 441.555423][ T5937] usb 3-1: config 0 interface 49 has no altsetting 0 [ 441.597563][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 441.597583][ T5937] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 441.635447][ T5953] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 441.656309][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.667617][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.685120][ T5953] usb 4-1: Product: syz [ 441.713169][ T5953] usb 4-1: Manufacturer: syz [ 441.723257][ T5953] usb 4-1: SerialNumber: syz [ 441.734843][ T5937] usb 3-1: Product: syz [ 441.755589][ T5953] usb 4-1: config 0 descriptor?? [ 441.760714][ T5937] usb 3-1: Manufacturer: syz [ 441.792706][ T5937] usb 3-1: SerialNumber: syz [ 441.834628][ T5937] usb 3-1: config 0 descriptor?? [ 442.076815][ T5937] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 442.205013][ T5953] airspy 4-1:0.0: usb_control_msg() failed -32 request 0a [ 442.217238][ T5953] airspy 4-1:0.0: Could not detect board [ 442.227290][ T5953] airspy 4-1:0.0: probe with driver airspy failed with error -32 [ 442.469380][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.425'. [ 442.482423][ T5937] gspca_sonixj: reg_r err -32 [ 442.490549][ T5937] sonixj 3-1:0.49: probe with driver sonixj failed with error -32 [ 442.526556][ T5937] usb 3-1: USB disconnect, device number 5 [ 443.497523][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 443.697739][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 443.716538][ T24] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 443.731487][ T24] usb 2-1: config 0 has no interface number 0 [ 443.746070][ T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.773035][ T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 443.811637][ T24] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 443.838876][ T24] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 443.860620][ T24] usb 2-1: Product: syz [ 443.870833][ T24] usb 2-1: SerialNumber: syz [ 443.896868][ T24] usb 2-1: config 0 descriptor?? [ 443.914654][ T24] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 443.935771][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input8 [ 444.365550][ T5983] usb 4-1: USB disconnect, device number 13 [ 445.006576][ T29] audit: type=1800 audit(1773856962.530:2): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.432" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 445.434248][ T7188] "syz.3.431" (7188) uses obsolete ecb(arc4) skcipher [ 446.428292][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 446.784682][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 446.791357][ T5937] usb 2-1: USB disconnect, device number 9 [ 446.792543][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 446.891022][ T5937] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 447.052959][ T7221] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 447.967499][ T5937] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 448.147493][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 448.189572][ T5937] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 448.213703][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.244010][ T5937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 448.289753][ T5937] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 448.301165][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.309877][ T5937] usb 2-1: Product: syz [ 448.314210][ T5937] usb 2-1: Manufacturer: syz [ 448.389037][ T7236] fuse: Bad value for 'fd' [ 448.418745][ T5937] usb 2-1: SerialNumber: syz [ 448.451454][ T5937] usb 2-1: config 0 descriptor?? [ 448.687724][ T7228] netlink: zone id is out of range [ 448.693240][ T7228] netlink: zone id is out of range [ 448.698593][ T7228] netlink: zone id is out of range [ 448.705012][ T7228] netlink: zone id is out of range [ 448.710700][ T7228] netlink: zone id is out of range [ 448.716653][ T7228] netlink: zone id is out of range [ 448.722416][ T7228] netlink: zone id is out of range [ 448.727798][ T7228] netlink: zone id is out of range [ 448.733328][ T7228] netlink: zone id is out of range [ 449.104200][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 449.647527][ T5944] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 449.841197][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 449.881146][ T5944] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 449.923420][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 449.970518][ T5944] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 450.045124][ T5944] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 450.082376][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.231215][ T5944] usb 4-1: config 0 descriptor?? [ 450.460826][ T5944] hdpvr 4-1:0.0: firmware version 0x0 dated [ 450.468958][ T5944] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 450.534211][ T9] usb 2-1: USB disconnect, device number 10 [ 450.667253][ T7262] netlink: 'syz.1.458': attribute type 10 has an invalid length. [ 450.761406][ T7262] syz_tun: entered promiscuous mode [ 450.801245][ T7262] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 450.953201][ T7265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.061996][ T5944] hdpvr 4-1:0.0: Could not setup controls [ 451.088477][ T5944] hdpvr 4-1:0.0: registering videodev failed [ 451.455396][ T5944] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 451.468125][ T5983] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 451.494225][ T5944] usb 4-1: USB disconnect, device number 14 [ 451.643745][ T5983] usb 2-1: unable to get BOS descriptor or descriptor too short [ 451.660714][ T5983] usb 2-1: not running at top speed; connect to a high speed hub [ 451.728699][ T7282] netlink: 40 bytes leftover after parsing attributes in process `syz.3.463'. [ 451.737649][ T5983] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.737676][ T5983] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.749346][ T5983] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.766502][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.782408][ T5983] usb 2-1: Product: syz [ 451.786643][ T5983] usb 2-1: Manufacturer: syz [ 451.791622][ T5983] usb 2-1: SerialNumber: syz [ 452.063483][ T5983] usb 2-1: 0:2 : does not exist [ 452.136459][ T5983] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 452.179748][ T5983] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 452.259814][ T5983] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 452.332150][ T5983] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 452.375858][ T5983] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 452.408733][ T5983] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 452.418073][ T7290] syz_tun: entered allmulticast mode [ 452.441761][ T5983] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 452.527705][ T5983] usb 2-1: 5:0: failed to get current value for ch 3 (-22) [ 452.610843][ T5983] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 452.811306][ T7298] netlink: 'syz.1.472': attribute type 4 has an invalid length. [ 452.844284][ T5983] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 452.862234][ T7302] vcan0: tx drop: invalid da for name 0x000000000000eb00 [ 452.865742][ T7304] netlink: 'syz.1.472': attribute type 4 has an invalid length. [ 452.878856][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 452.951399][ T5983] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 452.989561][ T29] audit: type=1326 audit(1773856970.510:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d679c799 code=0x7ffc0000 [ 453.066219][ T5983] usb 2-1: USB disconnect, device number 11 [ 453.083650][ T29] audit: type=1326 audit(1773856970.520:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f88d679c799 code=0x7ffc0000 [ 453.125430][ T7307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.475'. [ 453.171669][ T29] audit: type=1326 audit(1773856970.520:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d679c799 code=0x7ffc0000 [ 453.253759][ T29] audit: type=1326 audit(1773856970.520:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f88d679c799 code=0x7ffc0000 [ 453.289767][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.390588][ T29] audit: type=1326 audit(1773856970.520:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d679c799 code=0x7ffc0000 [ 453.601860][ T29] audit: type=1326 audit(1773856970.520:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d679c799 code=0x7ffc0000 [ 454.282571][ T7327] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 454.663411][ T7337] net_ratelimit: 45 callbacks suppressed [ 454.663490][ T7337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.822848][ T5953] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 455.015365][ T7340] netlink: 40 bytes leftover after parsing attributes in process `syz.3.483'. [ 455.066157][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.089199][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 455.109144][ T7342] vcan0: tx drop: invalid da for name 0x000000000000eb00 [ 455.122326][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 455.150500][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 455.180184][ T5953] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 455.194434][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 455.898507][ T5953] usb 3-1: Product: syz [ 456.015158][ T7348] hsr0: entered promiscuous mode [ 456.035314][ T5953] usb 3-1: Manufacturer: syz [ 456.044216][ T5953] usb 3-1: SerialNumber: syz [ 456.046217][ T7347] hsr0: left promiscuous mode [ 456.066403][ T5953] usb 3-1: config 0 descriptor?? [ 456.347518][ T5953] rc_core: IR keymap rc-imon-rsc not found [ 456.357569][ T5953] Registered IR keymap rc-empty [ 456.416510][ T5953] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 456.449792][ T5953] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 456.486648][ T5953] imon_raw 3-1:0.0: probe with driver imon_raw failed with error -90 [ 456.647521][ T5953] usb 3-1: USB disconnect, device number 6 [ 456.697605][ T5937] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 456.874883][ T5937] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 456.903034][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 456.929734][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 457.003862][ T5937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 457.037727][ T5937] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.049408][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.072030][ T5937] usb 1-1: config 0 descriptor?? [ 457.581909][ T7369] vcan0: tx drop: invalid da for name 0x000000000000eb00 [ 457.589024][ T5937] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 458.117609][ T5937] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 458.220122][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.239795][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.445972][ T5937] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 458.464544][ T5937] usb 3-1: config 0 has no interface number 0 [ 458.471434][ T5937] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 458.499654][ T5937] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 458.597321][ T5937] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 458.631502][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.662215][ T5937] usb 3-1: Product: syz [ 458.684934][ T5937] usb 3-1: Manufacturer: syz [ 458.698762][ T5937] usb 3-1: SerialNumber: syz [ 458.834803][ T5937] usb 3-1: config 0 descriptor?? [ 458.891961][ T5937] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 458.965000][ T7323] syz.4.478 (7323): drop_caches: 2 [ 459.114208][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.158101][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.231966][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.245453][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.309656][ T7396] mmap: syz.3.507 (7396) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 459.330319][ T5937] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 459.365483][ T5937] usb 3-1: USB disconnect, device number 7 [ 459.379362][ T5937] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 459.389107][ T5953] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 459.417929][ T5937] cypress_m8 3-1:0.35: device disconnected [ 459.451494][ T7400] vcan0: tx drop: invalid da for name 0x000000000000eb00 [ 459.797591][ T5937] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 459.977961][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 460.006151][ T5937] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 460.023234][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.046735][ T5937] usb 5-1: Product: syz [ 460.055106][ T5937] usb 5-1: Manufacturer: syz [ 460.066030][ T5937] usb 5-1: SerialNumber: syz [ 460.088031][ T5937] usb 5-1: config 0 descriptor?? [ 460.160057][ T5937] as10x_usb: device has been detected [ 460.187984][ T5937] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 460.245371][ T5937] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 460.516040][ T5937] as10x_usb: error during firmware upload part1 [ 461.001203][ T5937] Registered device Sky IT Digital Key (green led) [ 461.003255][ T5937] usb 5-1: USB disconnect, device number 2 [ 461.066820][ T7432] vcan0: tx drop: invalid da for name 0x000000000000eb00 [ 461.175360][ T5937] Unregistered device Sky IT Digital Key (green led) [ 461.182597][ T5937] as10x_usb: device has been disconnected [ 461.246308][ T5811] usb 1-1: USB disconnect, device number 7 [ 462.057502][ T5937] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 462.077925][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 462.249975][ T5937] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 462.267657][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 462.272874][ T5937] usb 1-1: config 0 has no interface number 0 [ 462.280075][ T5937] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 462.356109][ T5937] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 462.371462][ T9] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 462.395904][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.411727][ T5937] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 462.411759][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.411779][ T5937] usb 1-1: Product: syz [ 462.411794][ T5937] usb 1-1: Manufacturer: syz [ 462.411809][ T5937] usb 1-1: SerialNumber: syz [ 462.415763][ T5937] usb 1-1: config 0 descriptor?? [ 462.457114][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 462.463237][ T5937] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 462.467511][ T5811] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 462.467566][ T9] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 462.467591][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.467611][ T9] usb 4-1: Product: syz [ 462.467625][ T9] usb 4-1: Manufacturer: syz [ 462.467640][ T9] usb 4-1: SerialNumber: syz [ 462.479755][ T9] usb 4-1: config 0 descriptor?? [ 462.639845][ T5937] usb 1-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 462.684630][ T5937] usb 1-1: USB disconnect, device number 8 [ 462.700418][ T5937] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 462.701038][ T5937] cypress_m8 1-1:0.35: device disconnected [ 462.829416][ T7448] netlink: zone id is out of range [ 462.829452][ T7448] netlink: zone id is out of range [ 462.829508][ T7448] netlink: zone id is out of range [ 462.829589][ T7448] netlink: zone id is out of range [ 462.829628][ T7448] netlink: zone id is out of range [ 462.831200][ T7448] netlink: zone id is out of range [ 462.831583][ T7448] netlink: zone id is out of range [ 462.831689][ T7448] netlink: zone id is out of range [ 462.832168][ T7448] netlink: zone id is out of range [ 462.832422][ T7448] netlink: zone id is out of range [ 463.373679][ T7464] vcan0: tx drop: invalid da for name 0x000000000000eb00 [ 463.654627][ T7471] binder: 7466:7471 ioctl c0306201 0 returned -14 [ 464.510375][ T7471] syz.0.533 (7471): drop_caches: 2 [ 465.248740][ T5811] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 465.341833][ T9] usb 4-1: USB disconnect, device number 15 [ 465.447494][ T5811] usb 1-1: Using ep0 maxpacket: 32 [ 465.458679][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.479878][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.507594][ T5811] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 465.527244][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.553077][ T5811] usb 1-1: config 0 descriptor?? [ 465.570900][ T5811] hub 1-1:0.0: USB hub found [ 465.645193][ T7496] vcan0: tx drop: invalid da for name 0x000000000000eb00 [ 465.784434][ T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 465.784604][ T5811] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 466.096745][ T9] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 466.126882][ T9] usb 4-1: config 0 has no interface number 0 [ 466.147888][ T9] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 466.167179][ T9] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 466.424703][ T5811] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 466.441073][ T9] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 466.474724][ T5811] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 466.487753][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.567580][ T9] usb 4-1: Product: syz [ 466.577476][ T9] usb 4-1: Manufacturer: syz [ 466.597500][ T9] usb 4-1: SerialNumber: syz [ 466.613097][ T9] usb 4-1: config 0 descriptor?? [ 466.757053][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.788927][ T9] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 466.798100][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.024899][ T9] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 467.050186][ T5937] usb 1-1: USB disconnect, device number 9 [ 467.084916][ T9] usb 4-1: USB disconnect, device number 16 [ 467.190211][ T9] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 467.227255][ T9] cypress_m8 4-1:0.35: device disconnected [ 467.397494][ T5924] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 467.549954][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 467.577242][ T5924] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 467.602209][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.637155][ T5924] usb 2-1: Product: syz [ 467.656279][ T5924] usb 2-1: Manufacturer: syz [ 467.670724][ T5924] usb 2-1: SerialNumber: syz [ 467.708433][ T5924] usb 2-1: config 0 descriptor?? [ 467.742094][ T5924] gspca_main: spca508-2.14.0 probing 041e:4018 [ 467.976530][ T5924] gspca_spca508: reg_read err -32 [ 467.997217][ T5924] gspca_spca508: reg_read err -32 [ 468.012725][ T5924] gspca_spca508: reg_read err -32 [ 468.024795][ T7520] misc userio: The device must be registered before sending interrupts [ 468.042758][ T5924] gspca_spca508: reg_read err -32 [ 468.680309][ T5924] gspca_spca508: reg_read err -110 [ 468.689295][ T5924] gspca_spca508: reg write: error -32 [ 468.694823][ T5924] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 468.757552][ T5811] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 468.917812][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 468.928667][ T5811] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 468.941315][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.974762][ T5811] usb 3-1: config 0 has no interface number 0 [ 469.004864][ T5811] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 469.016123][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.037105][ T5811] usb 3-1: Product: syz [ 469.047327][ T5811] usb 3-1: Manufacturer: syz [ 469.075200][ T5811] usb 3-1: SerialNumber: syz [ 469.096012][ T5811] usb 3-1: config 0 descriptor?? [ 469.356374][ T5811] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 469.370955][ T5811] uvcvideo 3-1:0.105: No valid video chain found. [ 469.592942][ T5811] usb 3-1: USB disconnect, device number 9 [ 469.955113][ T7540] vcan0: tx drop: invalid da for name 0x000000000000eb00 [ 470.410202][ T5937] usb 2-1: USB disconnect, device number 12 [ 471.151551][ T7556] net_ratelimit: 44 callbacks suppressed [ 471.151580][ T7556] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 472.208826][ T7577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 472.587602][ T5953] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 472.867998][ T7581] vcan0: tx drop: invalid da for name 0x000000000000eb00 [ 472.949297][ T5953] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.978437][ T5953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.081692][ T5953] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 473.091204][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 473.104803][ T5953] usb 2-1: SerialNumber: syz [ 473.328109][ T5953] usb 2-1: cannot find UAC_HEADER [ 473.506084][ T5953] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 473.539439][ T5953] usb 2-1: USB disconnect, device number 13 [ 473.616752][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.774450][ T7602] tipc: Started in network mode [ 473.780538][ T7602] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 473.801228][ T7602] tipc: Enabled bearer , priority 10 [ 474.279117][ T5953] hid-generic 000A:0004:0009.0005: unknown main item tag 0x0 [ 474.352430][ T5953] hid-generic 000A:0004:0009.0005: unknown main item tag 0x0 [ 474.360843][ T5953] hid-generic 000A:0004:0009.0005: unknown main item tag 0x0 [ 474.369083][ T5953] hid-generic 000A:0004:0009.0005: unknown main item tag 0x0 [ 474.391024][ T5953] hid-generic 000A:0004:0009.0005: unknown main item tag 0x0 [ 474.463378][ T5953] hid-generic 000A:0004:0009.0005: unknown main item tag 0x0 [ 474.472816][ T5953] hid-generic 000A:0004:0009.0005: unknown main item tag 0x0 [ 474.525952][ T5953] hid-generic 000A:0004:0009.0005: unknown main item tag 0x0 [ 474.557075][ T5953] hid-generic 000A:0004:0009.0005: unknown main item tag 0x0 [ 474.586380][ T5953] hid-generic 000A:0004:0009.0005: unknown main item tag 0x0 [ 474.654894][ T5953] hid-generic 000A:0004:0009.0005: hidraw0: HID v0.04 Device [syz1] on syz0 [ 474.867913][ T5953] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 474.875028][ T7627] fido_id[7627]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 474.928142][ T5937] tipc: Node number set to 12429994 [ 475.042046][ T5953] usb 4-1: config 0 has no interfaces? [ 475.050087][ T5953] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 475.062144][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.075925][ T5953] usb 4-1: config 0 descriptor?? [ 475.207561][ T5937] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 475.304580][ T9] usb 4-1: USB disconnect, device number 17 [ 475.388207][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 475.399928][ T5937] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 475.416962][ T5937] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 475.426053][ T5937] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 475.435993][ T5937] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 475.460169][ T5937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 475.482159][ T5937] usb 3-1: config 0 has no interface number 0 [ 475.505678][ T5937] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 475.538035][ T5937] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 475.582700][ T5937] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 475.611137][ T5937] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.651074][ T7642] vcan0: tx drop: invalid da for name 0x000000000000eb00 [ 475.658695][ T5937] usb 3-1: config 0 interface 125 has no altsetting 0 [ 475.714671][ T5937] usb 3-1: config 0 interface 125 has no altsetting 2 [ 475.737536][ T5953] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 475.751392][ T5937] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 475.768340][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.810723][ T5937] usb 3-1: Product: syz [ 475.830772][ T5937] usb 3-1: Manufacturer: syz [ 475.836795][ T5937] usb 3-1: SerialNumber: syz [ 475.853141][ T5937] usb 3-1: config 0 descriptor?? [ 475.875046][ T5937] usb 3-1: selecting invalid altsetting 2 [ 475.900771][ T5953] usb 4-1: unable to get BOS descriptor or descriptor too short [ 475.922422][ T5953] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 475.954335][ T5953] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 475.983956][ T5953] usb 4-1: string descriptor 0 read error: -22 [ 475.999975][ T5953] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 476.044914][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.282526][ T5953] usb 4-1: Can't get UAC3 power state for id 10 [ 476.896289][ T5811] usb 3-1: USB disconnect, device number 10 [ 476.911082][ T5953] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 477.745875][ T5953] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 478.138518][ T5953] usb 4-1: USB disconnect, device number 18 [ 478.418305][ T7673] vcan0: tx drop: invalid da for name 0x000000000000eb00 [ 478.617531][ T5937] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 479.349005][ T5937] usb 1-1: no configurations [ 479.359091][ T5937] usb 1-1: can't read configurations, error -22 [ 479.498916][ T5937] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 479.574445][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 479.675068][ T5937] usb 1-1: no configurations [ 479.680354][ T5937] usb 1-1: can't read configurations, error -22 [ 479.725202][ T5937] usb usb1-port1: attempt power cycle [ 479.797701][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 479.815523][ T9] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 479.824222][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.841657][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 479.876316][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 479.889946][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.898373][ T9] usb 2-1: Product: syz [ 479.902763][ T9] usb 2-1: Manufacturer: syz [ 479.908242][ T9] usb 2-1: SerialNumber: syz [ 479.932267][ T9] usb 2-1: config 0 descriptor?? [ 480.181689][ T5937] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 480.249282][ T7699] fuse: Invalid uid '00000000000000000006' [ 480.257339][ T7699] mmap: syz.3.612 (7699): VmData 46166016 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 480.299612][ T5937] usb 1-1: no configurations [ 480.304344][ T5937] usb 1-1: can't read configurations, error -22 [ 480.467868][ T5937] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 480.499675][ T5937] usb 1-1: no configurations [ 480.504758][ T5937] usb 1-1: can't read configurations, error -22 [ 480.521045][ T5937] usb usb1-port1: unable to enumerate USB device [ 481.917884][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 482.071622][ T7724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.620'. [ 482.089652][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 482.095576][ T7723] geneve2: entered promiscuous mode [ 482.113040][ T24] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 482.173660][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.194131][ T24] usb 3-1: Product: syz [ 482.202935][ T24] usb 3-1: Manufacturer: syz [ 482.224959][ T24] usb 3-1: SerialNumber: syz [ 482.250048][ T24] usb 3-1: config 0 descriptor?? [ 482.266929][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 482.282489][ T5953] usb 2-1: USB disconnect, device number 14 [ 482.587556][ T5983] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 482.737716][ T5983] usb 5-1: Using ep0 maxpacket: 32 [ 482.756997][ T5983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.768883][ T5983] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 482.798487][ T5983] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 482.851701][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.870469][ T24] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 482.935184][ T5983] usb 5-1: config 0 descriptor?? [ 483.083693][ T5983] usb 3-1: USB disconnect, device number 11 [ 483.244626][ T7708] Bluetooth: hci0: command 0x0406 tx timeout [ 483.250828][ T7708] Bluetooth: hci3: command 0x0406 tx timeout [ 483.255986][ T5875] Bluetooth: hci1: command 0x0406 tx timeout [ 483.258682][ T7708] Bluetooth: hci4: command 0x0406 tx timeout [ 483.264567][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 483.537302][ T5937] usb 5-1: USB disconnect, device number 3 [ 486.007590][ T5953] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 486.317507][ T5953] usb 1-1: Using ep0 maxpacket: 8 [ 486.440333][ T5953] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 486.448599][ T5953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.467098][ T5953] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 486.619319][ T5953] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 486.628565][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.636598][ T5953] usb 1-1: Product: syz [ 486.641132][ T5953] usb 1-1: Manufacturer: syz [ 486.647638][ T5953] usb 1-1: SerialNumber: syz [ 486.655582][ T5953] usb 1-1: config 0 descriptor?? [ 488.692973][ T9] usb 1-1: USB disconnect, device number 14 [ 488.943898][ T7814] fuse: Unknown parameter 'group_id00000000000000000000' [ 489.722466][ T7826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.791159][ T7828] usb usb8: usbfs: process 7828 (syz.4.657) did not claim interface 0 before use [ 490.047507][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 490.218120][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 490.231541][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 490.247646][ T9] usb 5-1: can't read configurations, error -71 [ 491.381780][ T7845] process 'syz.2.662' launched './file1' with NULL argv: empty string added [ 491.497844][ T7848] netlink: 'syz.4.666': attribute type 10 has an invalid length. [ 491.515411][ T7848] team0: Device vxcan1 is of different type [ 491.884568][ T7862] fuse: Unknown parameter 'fd0x0000000000000004' [ 493.927478][ T5944] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 494.003349][ T7885] netlink: 'syz.0.680': attribute type 10 has an invalid length. [ 494.097557][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 494.107143][ T5944] usb 5-1: no configurations [ 494.116939][ T5944] usb 5-1: can't read configurations, error -22 [ 494.257513][ T5944] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 494.428292][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 494.434586][ T5944] usb 5-1: no configurations [ 494.440909][ T5944] usb 5-1: can't read configurations, error -22 [ 494.450564][ T5944] usb usb5-port1: attempt power cycle [ 494.695369][ T7885] team0: Device vxcan1 is of different type [ 494.817564][ T5944] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 494.859633][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 494.879944][ T5944] usb 5-1: no configurations [ 494.884667][ T5944] usb 5-1: can't read configurations, error -22 [ 495.027636][ T7894] loop5: detected capacity change from 0 to 7 [ 495.035518][ T7894] Dev loop5: unable to read RDB block 7 [ 495.041805][ T7894] loop5: AHDI p1 p2 [ 495.046182][ T7894] loop5: partition table partially beyond EOD, truncated [ 495.053482][ T5944] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 495.061920][ T7894] loop5: p1 start 50331648 is beyond EOD, truncated [ 495.088263][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 495.108281][ T5944] usb 5-1: no configurations [ 495.112961][ T5944] usb 5-1: can't read configurations, error -22 [ 495.131591][ T5944] usb usb5-port1: unable to enumerate USB device [ 495.217621][ T5983] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 495.367546][ T5983] usb 4-1: Using ep0 maxpacket: 8 [ 495.374482][ T5983] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 495.382921][ T5983] usb 4-1: config 179 has no interface number 0 [ 495.389442][ T5953] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 495.398419][ T5983] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 495.412130][ T5983] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 495.424196][ T5983] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 495.435628][ T5983] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 495.446274][ T5983] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 495.460035][ T5983] usb 4-1: config 179 interface 65 has no altsetting 0 [ 495.466982][ T5983] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 495.476286][ T5983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.487511][ T5944] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 495.509057][ T5983] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input12 [ 495.569920][ T5953] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 495.587885][ T5953] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 495.598485][ T5953] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 495.610542][ T5953] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.622680][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 495.634071][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.647617][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 495.655411][ T5953] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 495.663738][ T5944] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 495.666289][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 495.679758][ T5944] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 495.683887][ T5953] usb 1-1: Product: syz [ 495.690633][ T5944] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 495.704066][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 495.714922][ T5944] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 495.724851][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 495.735008][ T5944] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 495.737729][ T5953] usb 1-1: Manufacturer: syz [ 495.745679][ T5944] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 495.764976][ T5944] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 495.774429][ T7898] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 495.783448][ T5937] usb 4-1: USB disconnect, device number 19 [ 495.783686][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 495.808570][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.826029][ T5953] cdc_wdm 1-1:1.0: skipping garbage [ 495.839761][ T5953] cdc_wdm 1-1:1.0: skipping garbage [ 495.849843][ T5944] usb 3-1: config 0 descriptor?? [ 495.861708][ T5953] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 495.879660][ T5953] cdc_wdm 1-1:1.0: Unknown control protocol [ 496.048178][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 496.055138][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 496.062762][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 496.069423][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 496.077488][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 496.084147][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 496.090835][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 496.097488][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 496.104285][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 496.110937][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 496.118450][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 496.125104][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 496.132462][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 496.139129][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 496.145675][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 496.152343][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 496.159041][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 496.165728][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 496.172294][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 496.178942][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 496.193439][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.200210][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 496.210727][ T5983] usb 1-1: USB disconnect, device number 15 [ 496.231578][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.277910][ T5944] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 496.307355][ T5944] usb 3-1: USB disconnect, device number 12 [ 496.361308][ T5944] usblp0: removed [ 496.450376][ T7914] syz_tun: entered allmulticast mode [ 496.810363][ T1519] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.822724][ T1519] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.906871][ T1519] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.990526][ T1519] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.037785][ T5944] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 497.212694][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 497.265812][ T5944] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 497.283925][ T5944] usb 3-1: config 0 has no interface number 0 [ 497.297951][ T5944] usb 3-1: too many endpoints for config 0 interface 46 altsetting 0: 223, using maximum allowed: 30 [ 497.317731][ T5944] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 497.328084][ T5944] usb 3-1: config 0 interface 46 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 497.339131][ T5944] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 497.349940][ T5944] usb 3-1: config 0 interface 46 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 497.363062][ T5944] usb 3-1: config 0 interface 46 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 223 [ 497.394867][ T5944] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 497.404560][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.417867][ T5944] usb 3-1: Product: syz [ 497.422098][ T5944] usb 3-1: Manufacturer: syz [ 497.442394][ T5944] usb 3-1: SerialNumber: syz [ 497.463134][ T5944] usb 3-1: config 0 descriptor?? [ 497.484044][ T5944] ums-karma 3-1:0.46: USB Mass Storage device detected [ 497.599256][ T5944] ums-karma 3-1:0.46: probe with driver ums-karma failed with error -5 [ 497.683823][ T5944] usb 3-1: USB disconnect, device number 13 [ 498.597537][ T5944] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 498.733792][ T7959] input: syz1 as /devices/virtual/input/input13 [ 498.769923][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 498.795777][ T5944] usb 5-1: no configurations [ 498.814274][ T5944] usb 5-1: can't read configurations, error -22 [ 498.912022][ T7959] sctp: [Deprecated]: syz.3.711 (pid 7959) Use of int in max_burst socket option deprecated. [ 498.912022][ T7959] Use struct sctp_assoc_value instead [ 498.967524][ T5944] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 499.018531][ T7959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.035776][ T7959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.137500][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 499.147954][ T5944] usb 5-1: no configurations [ 499.152627][ T5944] usb 5-1: can't read configurations, error -22 [ 499.198326][ T5944] usb usb5-port1: attempt power cycle [ 499.467810][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 499.558390][ T5944] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 499.611737][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 499.628755][ T5944] usb 5-1: no configurations [ 499.633427][ T5944] usb 5-1: can't read configurations, error -22 [ 499.657479][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 499.665646][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.686983][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.707669][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 499.737520][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.776376][ T9] usb 3-1: config 0 descriptor?? [ 499.787665][ T5944] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 499.824352][ T9] hub 3-1:0.0: USB hub found [ 499.830668][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 499.836667][ T5944] usb 5-1: no configurations [ 499.847950][ T5944] usb 5-1: can't read configurations, error -22 [ 499.867969][ T5944] usb usb5-port1: unable to enumerate USB device [ 500.024597][ T9] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 500.387573][ T29] audit: type=1804 audit(1773857017.910:9): pid=7993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.723" name="/newroot/141/file1" dev="fuse" ino=1 res=1 errno=0 [ 500.467905][ T9] hid_parser_main: 7 callbacks suppressed [ 500.468020][ T9] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x0 [ 500.493162][ T9] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 500.721904][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.733045][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.820050][ T5953] usb 3-1: USB disconnect, device number 14 [ 501.426168][ T8015] ip6gre1: entered promiscuous mode [ 501.448171][ T8015] ip6gre1: entered allmulticast mode [ 501.698162][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.698258][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.788797][ T8030] binder: 8024:8030 ioctl c0306201 0 returned -14 [ 501.895021][ T8033] @: renamed from vlan0 (while UP) [ 501.921587][ T29] audit: type=1804 audit(1773857019.450:10): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.735" name="/newroot/149/file1" dev="fuse" ino=1 res=1 errno=0 [ 502.538602][ T8030] syz.2.734 (8030): drop_caches: 2 [ 503.357527][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 503.540135][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 503.557324][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.569529][ T5924] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 503.582809][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.597036][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 503.606754][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.626922][ T9] usb 5-1: config 0 descriptor?? [ 503.662549][ T9] hub 5-1:0.0: USB hub found [ 503.727654][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 503.742330][ T5924] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.755313][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.768012][ T5924] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 503.777824][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.786024][ T5924] usb 2-1: Product: syz [ 503.790950][ T5924] usb 2-1: Manufacturer: syz [ 503.795651][ T5924] usb 2-1: SerialNumber: syz [ 503.848078][ T9] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 504.029767][ T5924] usb 2-1: 0:2 : does not exist [ 504.037286][ T5924] usb 2-1: unit 6 not found! [ 504.143313][ T5924] usb 2-1: USB disconnect, device number 15 [ 504.242761][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.265191][ T9] hid-generic 0003:046D:C31C.0007: unknown main item tag 0x0 [ 504.312971][ T9] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 504.526876][ T8067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.562075][ T8067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.649787][ T5924] usb 5-1: USB disconnect, device number 14 [ 505.627916][ T5953] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 505.827501][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 505.870486][ T5953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.931885][ T5953] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 505.979507][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.009996][ T5953] usb 2-1: config 0 descriptor?? [ 506.056860][ T5953] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 508.911102][ T5953] usb 2-1: USB disconnect, device number 16 [ 509.607247][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.778'. [ 510.217470][ T5953] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 510.378261][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 510.395736][ T5953] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 510.404207][ T5953] usb 3-1: config 0 has no interface number 0 [ 510.414373][ T5953] usb 3-1: config 0 interface 12 has no altsetting 0 [ 510.461803][ T5953] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 510.471967][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.492610][ T5953] usb 3-1: Product: syz [ 510.496845][ T5953] usb 3-1: Manufacturer: syz [ 510.531502][ T5953] usb 3-1: SerialNumber: syz [ 510.549746][ T5953] usb 3-1: config 0 descriptor?? [ 511.806765][ T5953] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 511.817012][ T5953] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 511.825587][ T5953] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 511.833922][ T5953] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 511.900738][ T5953] usb 3-1: USB disconnect, device number 15 [ 511.964736][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 512.251733][ T8199] gtp0: entered promiscuous mode [ 512.256763][ T8199] gtp0: entered allmulticast mode [ 513.030951][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.804'. [ 513.444551][ T29] audit: type=1326 audit(1773857030.970:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.1.807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f820f196517 code=0x0 [ 515.134758][ T8255] bond0: (slave bond_slave_1): Releasing backup interface [ 517.548087][ T5924] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 517.779380][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 517.799566][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.836403][ T5924] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 517.862297][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.910962][ T5924] usb 3-1: config 0 descriptor?? [ 518.216992][ T5144] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 518.413420][ T5924] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 518.456659][ T5924] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 518.474340][ T5924] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 518.495913][ T5924] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 518.521540][ T5924] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 518.530757][ T5924] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 518.542021][ T5924] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 518.558456][ T5924] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 518.820811][ T5924] usb 3-1: USB disconnect, device number 16 [ 519.687554][ T5924] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 519.890844][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 519.900741][ T5924] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 519.936322][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.956486][ T5924] usb 4-1: Product: syz [ 519.967873][ T5924] usb 4-1: Manufacturer: syz [ 519.980068][ T5924] usb 4-1: SerialNumber: syz [ 520.004274][ T5924] usb 4-1: config 0 descriptor?? [ 520.026462][ T5924] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 520.057798][ T5924] dvb-usb: bulk message failed: -22 (4/0) [ 520.072683][ T5924] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 520.107241][ T5924] dvb-usb: bulk message failed: -22 (5/0) [ 520.132564][ T5924] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 520.153873][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 520.167702][ T5924] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 520.177175][ T5924] usb 4-1: media controller created [ 520.200962][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.222093][ T8372] dvb-usb: bulk message failed: -22 (7/0) [ 520.229606][ T8372] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 520.271713][ T5924] usb 4-1: selecting invalid altsetting 3 [ 520.282353][ T5924] ttusb2: set interface to alts=3 failed [ 520.297962][ T8372] ttusb2: i2c transfer failed. [ 520.380965][ T5924] DVB: Unable to find symbol tda10086_attach() [ 520.392057][ T5924] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 520.404199][ T5924] dvb-usb: bulk message failed: -22 (4/0) [ 520.419861][ T5924] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 520.448982][ T5924] dvb-usb: bulk message failed: -22 (5/0) [ 520.462308][ T5924] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 520.506886][ T5924] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 520.577996][ T5924] usb 4-1: USB disconnect, device number 20 [ 520.736213][ T5924] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 521.354291][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 522.299172][ T8442] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 522.311171][ T8442] Cannot find add_set index 0 as target [ 522.578841][ T8448] netlink: 64 bytes leftover after parsing attributes in process `syz.0.878'. [ 524.257352][ T29] audit: type=1804 audit(1773857041.780:12): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.895" name="/newroot/189/file1" dev="fuse" ino=1 res=1 errno=0 [ 524.935592][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 524.986394][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.899'. [ 527.977981][ T29] audit: type=1804 audit(1773857045.470:13): pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.910" name="/newroot/180/file1" dev="fuse" ino=1 res=1 errno=0 [ 528.967474][ T5937] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 529.212348][ T5937] usb 3-1: not running at top speed; connect to a high speed hub [ 529.228760][ T5937] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 529.254278][ T5937] usb 3-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 529.265076][ T5937] usb 3-1: config 11 has no interface number 0 [ 529.271686][ T5937] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 529.284058][ T5937] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.295107][ T5937] usb 3-1: config 11 interface 95 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 529.308737][ T5937] usb 3-1: config 11 interface 95 has no altsetting 0 [ 529.324427][ T5937] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 529.342636][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 529.551265][ T5937] usb 3-1: Manufacturer: syz [ 529.854365][ T5937] usb 3-1: USB disconnect, device number 17 [ 532.910002][ T8579] bridge0: port 3(syz_tun) entered blocking state [ 532.930276][ T8579] bridge0: port 3(syz_tun) entered disabled state [ 532.956374][ T8579] syz_tun: entered allmulticast mode [ 532.983640][ T8579] syz_tun: entered promiscuous mode [ 533.005477][ T8579] bridge0: port 3(syz_tun) entered blocking state [ 533.012390][ T8579] bridge0: port 3(syz_tun) entered forwarding state [ 533.799315][ T29] audit: type=1804 audit(1773857051.330:14): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.939" name="/newroot/199/file1" dev="fuse" ino=1 res=1 errno=0 [ 534.072802][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.942'. [ 534.141060][ T8608] bridge0: port 3(syz_tun) entered disabled state [ 534.289926][ T8608] syz_tun (unregistering): left allmulticast mode [ 534.416738][ T8608] syz_tun (unregistering): left promiscuous mode [ 534.452886][ T8608] bridge0: port 3(syz_tun) entered disabled state [ 536.012401][ T8636] netlink: 44 bytes leftover after parsing attributes in process `syz.4.950'. [ 536.563765][ T29] audit: type=1804 audit(1773857054.090:15): pid=8644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.952" name="/newroot/186/file1" dev="fuse" ino=1 res=1 errno=0 [ 538.296760][ T8667] tc action pedit 'at' offset 6 out of bounds [ 538.328027][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.960'. [ 538.399096][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.961'. [ 538.473442][ T8669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.487679][ T8676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.962'. [ 538.543611][ T8678] netlink: 'syz.3.963': attribute type 10 has an invalid length. [ 538.571475][ T8673] ipip0: entered promiscuous mode [ 538.576671][ T8673] ipip0: entered allmulticast mode [ 538.590609][ T8673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.616337][ T8673] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 538.638915][ T8673] bond1: (slave ipip0): Error -95 calling set_mac_address [ 538.666440][ T8678] syz_tun: entered promiscuous mode [ 538.681049][ T8678] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 538.859276][ T29] audit: type=1804 audit(1773857056.380:16): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.966" name="/newroot/215/file1" dev="fuse" ino=1 res=1 errno=0 [ 539.703106][ T8709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.974'. [ 539.968310][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.976'. [ 540.107510][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 540.299535][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.322821][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.332981][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 540.342382][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.399774][ T9] usb 5-1: config 0 descriptor?? [ 541.008572][ T9] hid-steam 0003:28DE:1142.0009: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 541.077537][ T9] hid-steam 0003:28DE:1142.0009: Steam wireless receiver connected [ 541.199143][ T9] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 541.325966][ T9] usb 5-1: USB disconnect, device number 15 [ 541.346679][ T9] hid-steam 0003:28DE:1142.0009: Steam wireless receiver disconnected [ 541.582016][ T8722] fido_id[8722]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 543.117435][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.986'. [ 550.328899][ T5953] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 550.487456][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 550.497213][ T5953] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 550.506719][ T5953] usb 3-1: config 0 has no interface number 0 [ 550.516158][ T5953] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 550.525658][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.846884][ T5953] usb 3-1: Product: syz [ 550.871715][ T5953] usb 3-1: Manufacturer: syz [ 550.888321][ T5953] usb 3-1: SerialNumber: syz [ 550.906988][ T5953] usb 3-1: config 0 descriptor?? [ 550.926869][ T5953] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 550.947449][ T5953] usb 3-1: selecting invalid altsetting 1 [ 550.961421][ T5953] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 550.988989][ T5953] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 551.018897][ T5953] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 551.047510][ T5953] usb 3-1: media controller created [ 551.130986][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.229384][ T5953] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 551.263111][ T5953] zl10353_read_register: readreg error (reg=127, ret==-71) [ 551.282195][ T5953] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 551.449057][ T5953] usb 3-1: USB disconnect, device number 18 [ 551.631060][ T8850] trusted_key: encrypted_key: insufficient parameters specified [ 551.670981][ T5144] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 552.378319][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 553.929593][ T8893] block device autoloading is deprecated and will be removed. [ 554.137491][ T5944] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 554.366859][ T5944] usb 2-1: config 0 has no interfaces? [ 554.406169][ T5944] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 554.417428][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 554.439675][ T5944] usb 2-1: Product: syz [ 554.444544][ T5944] usb 2-1: Manufacturer: syz [ 554.478480][ T5944] usb 2-1: SerialNumber: syz [ 554.509816][ T5944] usb 2-1: config 0 descriptor?? [ 554.739859][ T5953] usb 2-1: USB disconnect, device number 17 [ 554.823649][ T8906] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 556.137522][ T5983] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 556.300213][ T5983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 556.312518][ T5983] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 556.370175][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.379882][ T5983] usb 5-1: Product: syz [ 556.384302][ T5983] usb 5-1: Manufacturer: syz [ 556.389571][ T5983] usb 5-1: SerialNumber: syz [ 556.613857][ T5983] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 556.714669][ T5983] usb 5-1: USB disconnect, device number 16 [ 556.887634][ T5811] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 556.892574][ T5924] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 556.931959][ T8935] udevd[8935]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.083645][ T5811] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 557.114246][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.122774][ T5811] usb 4-1: Product: syz [ 557.131400][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 557.137781][ T5811] usb 4-1: Manufacturer: syz [ 557.142405][ T5811] usb 4-1: SerialNumber: syz [ 557.168199][ T5924] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 557.178841][ T5811] usb 4-1: config 0 descriptor?? [ 557.189669][ T5811] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 557.214125][ T5924] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 557.230452][ T5924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 557.313197][ T5924] usb 1-1: config 1 has no interface number 0 [ 557.327095][ T5924] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 557.355476][ T5924] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 557.375629][ T5924] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 557.393647][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.395005][ T5811] gspca_stk1135: reg_w 0x2 err -71 [ 557.417195][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 557.433518][ T5811] gspca_stk1135: Sensor write failed [ 557.440043][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 557.446901][ T5811] gspca_stk1135: Sensor write failed [ 557.465872][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 557.474388][ T5811] gspca_stk1135: Sensor read failed [ 557.474454][ T5924] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 557.480709][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 557.492793][ T5983] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 557.503041][ T5811] gspca_stk1135: Sensor read failed [ 557.662106][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 557.670547][ T5811] gspca_stk1135: Detected sensor type unknown (0x0) [ 557.683276][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 557.690440][ T5924] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 557.691036][ T5811] gspca_stk1135: Sensor read failed [ 557.703389][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 557.710111][ T5811] gspca_stk1135: Sensor read failed [ 557.715619][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 557.722448][ T5811] gspca_stk1135: Sensor write failed [ 557.737462][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 557.747482][ T5983] usb 3-1: Using ep0 maxpacket: 16 [ 557.754850][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.771575][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.784836][ T5811] gspca_stk1135: Sensor write failed [ 557.797546][ T5811] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 557.811043][ T5983] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 557.836524][ T5811] usb 4-1: USB disconnect, device number 21 [ 557.842691][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.851025][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 557.863562][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 557.885366][ T24] usb 5-1: config 0 has no interface number 0 [ 557.893984][ T5983] usb 3-1: config 0 descriptor?? [ 557.923987][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 557.971570][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 557.981110][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.999693][ T24] usb 5-1: Product: syz [ 558.003977][ T24] usb 5-1: Manufacturer: syz [ 558.030594][ T24] usb 5-1: SerialNumber: syz [ 558.049220][ T24] usb 5-1: config 0 descriptor?? [ 558.141894][ T5924] usb 1-1: USB disconnect, device number 16 [ 558.152337][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.168848][ T5924] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 558.181376][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.229627][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.268869][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.319029][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.344638][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.380611][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.405262][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.437525][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.447180][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.700442][ T5983] usbhid 3-1:0.0: can't add hid device: -71 [ 558.700577][ T5983] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 558.703781][ T5983] usb 3-1: USB disconnect, device number 19 [ 558.875070][ T8954] syz_tun (unregistering): left allmulticast mode [ 558.894648][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.910665][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.925293][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.984984][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.445684][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.456004][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.672145][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 559.735461][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 559.756490][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 559.836273][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 559.872524][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 559.907917][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 559.937030][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 559.980153][ T24] usb 5-1: USB disconnect, device number 17 [ 560.137488][ T5924] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 560.330647][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 560.339186][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.350678][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.368072][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 560.442221][ T5924] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 560.472709][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.533374][ T5924] usb 4-1: config 0 descriptor?? [ 560.778083][ T8984] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1050'. [ 560.853432][ T8986] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 560.995130][ T5924] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 561.016213][ T5924] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 561.043038][ T5924] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 561.091042][ T5924] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 561.099904][ T5924] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 561.181961][ T5924] input: HID 0955:7214 Haptics as /devices/virtual/input/input15 [ 561.513279][ T5924] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 561.522036][ T5924] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 561.567539][ T8993] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 561.574659][ T8993] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 561.599910][ T8993] vhci_hcd vhci_hcd.0: Device attached [ 561.632958][ T5937] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 561.648446][ T5924] usb 4-1: USB disconnect, device number 22 [ 561.671654][ T8993] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 561.678202][ T8993] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 561.700138][ T8993] vhci_hcd vhci_hcd.0: Device attached [ 561.706494][ T5937] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 561.774894][ T9000] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(10) [ 561.781594][ T9000] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 561.787912][ T5937] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 561.856659][ T5937] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 561.867843][ T24] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 561.876100][ T9007] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 561.882756][ T9007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 561.892560][ T9007] vhci_hcd vhci_hcd.0: Device attached [ 561.902354][ T9000] vhci_hcd vhci_hcd.0: Device attached [ 561.934202][ T9001] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 561.940889][ T9001] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 562.018106][ T8993] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 562.068058][ T9001] vhci_hcd vhci_hcd.0: Device attached [ 562.126384][ T8993] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(12) [ 562.133028][ T8993] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 562.187599][ T8993] vhci_hcd vhci_hcd.0: Device attached [ 562.318639][ T9008] vhci_hcd: connection closed [ 562.321704][ T9017] vhci_hcd: connection closed [ 562.323722][ T8997] vhci_hcd: connection closed [ 562.326691][ T8795] vhci_hcd vhci_hcd.2: stop threads [ 562.332624][ T9004] vhci_hcd: connection closed [ 562.341919][ T9002] vhci_hcd: connection closed [ 562.347996][ T8994] vhci_hcd: connection reset by peer [ 562.380205][ T8795] vhci_hcd vhci_hcd.2: release socket [ 562.401611][ T8795] vhci_hcd vhci_hcd.2: disconnect device [ 562.428433][ T8795] vhci_hcd vhci_hcd.2: stop threads [ 562.445472][ T8795] vhci_hcd vhci_hcd.2: release socket [ 562.457528][ T8795] vhci_hcd vhci_hcd.2: disconnect device [ 562.477483][ T8795] vhci_hcd vhci_hcd.2: stop threads [ 562.485961][ T8795] vhci_hcd vhci_hcd.2: release socket [ 562.511363][ T8795] vhci_hcd vhci_hcd.2: disconnect device [ 562.539721][ T8795] vhci_hcd vhci_hcd.2: stop threads [ 562.544974][ T8795] vhci_hcd vhci_hcd.2: release socket [ 562.602010][ T8795] vhci_hcd vhci_hcd.2: disconnect device [ 562.622464][ T8795] vhci_hcd vhci_hcd.2: stop threads [ 562.641010][ T8795] vhci_hcd vhci_hcd.2: release socket [ 562.653825][ T8795] vhci_hcd vhci_hcd.2: disconnect device [ 562.683486][ T8795] vhci_hcd vhci_hcd.2: stop threads [ 562.700176][ T8795] vhci_hcd vhci_hcd.2: release socket [ 562.727231][ T8795] vhci_hcd vhci_hcd.2: disconnect device [ 562.803931][ T5983] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 562.969422][ T5983] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 562.998660][ T5983] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 563.014112][ T5983] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 563.035955][ T5983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 563.044951][ T5983] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 563.054425][ T5983] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 563.066159][ T5983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 563.080182][ T5983] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 563.091218][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.101096][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.114378][ T5983] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 563.125723][ T5983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 563.134008][ T5983] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 563.143764][ T5983] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 563.161890][ T5983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 563.170477][ T5983] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 563.208071][ T5983] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 563.219625][ T5983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 563.228273][ T5983] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 563.237929][ T5983] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 563.276203][ T5983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 563.289483][ T5983] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 563.302874][ T5983] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 563.317699][ T5983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 563.374836][ T5983] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 563.384282][ T5983] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 563.421777][ T5983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 563.435559][ T5983] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 563.444856][ T5983] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 563.454613][ T5983] usb 5-1: Product: syz [ 563.459179][ T5983] usb 5-1: Manufacturer: syz [ 563.463907][ T5983] usb 5-1: SerialNumber: syz [ 563.483169][ T5983] usb 5-1: config 0 descriptor?? [ 563.500626][ T5983] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 563.995466][ T9052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.065547][ T9052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.380378][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 564.384101][ T5924] usb 5-1: USB disconnect, device number 18 [ 564.394369][ T9050] yurex 5-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 564.413589][ T5924] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 566.064965][ T9085] netlink: 'syz.4.1084': attribute type 11 has an invalid length. [ 566.075840][ T9085] usb usb8: usbfs: process 9085 (syz.4.1084) did not claim interface 0 before use [ 566.092178][ T9085] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 566.100806][ T9085] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 566.109370][ T9085] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 566.896578][ T5983] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 566.953077][ T5983] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 567.018106][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 567.121482][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 567.747034][ T9114] fuse: Bad value for 'fd' [ 568.220992][ T9124] netlink: 'syz.1.1098': attribute type 10 has an invalid length. [ 568.232523][ T9124] team0: Device vxcan1 is of different type [ 568.358544][ T5811] usb usb38-port7: attempt power cycle [ 568.621727][ T9131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1100'. [ 568.633758][ T9131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1100'. [ 569.128927][ T1985] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 569.234963][ T5811] usb usb38-port7: unable to enumerate USB device [ 569.315651][ T9142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.427482][ T1985] usb 4-1: Using ep0 maxpacket: 16 [ 569.473692][ T1985] usb 4-1: config 0 has no interfaces? [ 569.487577][ T1985] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 569.518069][ T1985] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 569.552780][ T1985] usb 4-1: Manufacturer: syz [ 569.603512][ T1985] usb 4-1: config 0 descriptor?? [ 570.784346][ T9169] netlink: zone id is out of range [ 570.823914][ T9169] netlink: zone id is out of range [ 570.834820][ T9169] netlink: zone id is out of range [ 570.847180][ T9169] netlink: zone id is out of range [ 570.854982][ T9169] netlink: zone id is out of range [ 570.862783][ T9169] netlink: zone id is out of range [ 570.873194][ T9169] netlink: zone id is out of range [ 571.311235][ T9169] netlink: zone id is out of range [ 571.380350][ T9169] netlink: zone id is out of range [ 571.387277][ T9169] netlink: zone id is out of range [ 572.718452][ T1985] usb 4-1: USB disconnect, device number 23 [ 573.452624][ T9200] fuse: Unknown parameter 'user00000000000000000000' [ 573.746191][ T9207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.652569][ T5937] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 574.725915][ T5937] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 575.705113][ T9233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.237650][ T5937] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 576.454997][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 576.488482][ T5937] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 576.713726][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.825502][ T5937] usb 2-1: Product: syz [ 576.839106][ T5937] usb 2-1: Manufacturer: syz [ 576.866422][ T5937] usb 2-1: SerialNumber: syz [ 577.041248][ T5937] usb 2-1: config 0 descriptor?? [ 577.054711][ T9247] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 577.593530][ T5937] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 577.609495][ T5937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 577.638057][ T5937] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 577.660875][ T5937] usb 2-1: media controller created [ 577.703371][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.806643][ T5937] zl10353_read_register: readreg error (reg=127, ret==0) [ 577.819687][ T5937] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 577.829757][ T5937] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 577.879713][ T5937] usb 2-1: USB disconnect, device number 18 [ 577.932413][ T5937] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 578.295067][ T29] audit: type=1804 audit(1773857095.820:17): pid=9262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1143" name="/newroot/241/file1" dev="fuse" ino=1 res=1 errno=0 [ 580.106567][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 580.516773][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 580.548214][ T9] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 580.562581][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.586505][ T9] usb 1-1: Product: syz [ 580.600771][ T9] usb 1-1: Manufacturer: syz [ 580.611615][ T9] usb 1-1: SerialNumber: syz [ 580.634502][ T9] usb 1-1: config 0 descriptor?? [ 581.251338][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 581.267617][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 581.331720][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 581.367634][ T9] usb 1-1: media controller created [ 581.743127][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.965989][ T29] audit: type=1804 audit(1773857099.460:18): pid=9310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1161" name="/newroot/202/file1" dev="fuse" ino=1 res=1 errno=0 [ 582.037964][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 582.054970][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 582.300870][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 582.402455][ T9] usb 1-1: USB disconnect, device number 17 [ 582.524883][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 583.066915][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 583.323455][ T9327] syz_tun (unregistering): left allmulticast mode [ 583.352078][ T9327] bond0: (slave syz_tun): Releasing backup interface [ 583.400611][ T9327] syz_tun (unregistering): left promiscuous mode [ 584.023619][ T9337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.366742][ T9344] netlink: 'syz.3.1171': attribute type 10 has an invalid length. [ 585.492401][ T9344] team0: Device vxcan1 is of different type [ 586.760445][ T9354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1174'. [ 587.242502][ T29] audit: type=1804 audit(1773857104.770:19): pid=9365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1177" name="/newroot/249/file1" dev="fuse" ino=1 res=1 errno=0 [ 587.666441][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 587.976224][ T29] audit: type=1804 audit(1773857105.500:20): pid=9381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1183" name="/newroot/230/file1" dev="fuse" ino=1 res=1 errno=0 [ 588.498773][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1188'. [ 589.006479][ T29] audit: type=1804 audit(1773857106.530:21): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1192" name="/newroot/209/file1" dev="fuse" ino=1 res=1 errno=0 [ 589.052301][ T9406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 589.512701][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 590.659822][ T9425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1201'. [ 591.607522][ T29] audit: type=1804 audit(1773857109.120:22): pid=9440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1206" name="/newroot/213/file1" dev="fuse" ino=1 res=1 errno=0 [ 591.729484][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 592.087572][ T29] audit: type=1804 audit(1773857109.610:23): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1210" name="/newroot/214/file1" dev="fuse" ino=1 res=1 errno=0 [ 592.597124][ T9461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 592.906239][ T9466] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1214'. [ 593.656282][ T9477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.592438][ T9488] net_ratelimit: 44 callbacks suppressed [ 594.592462][ T9488] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 597.037576][ T9515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1226'. [ 598.462048][ T9541] fuse: Bad value for 'user_id' [ 598.483404][ T9541] fuse: Bad value for 'user_id' [ 598.860231][ T9549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1238'. [ 600.590200][ T9564] fuse: Bad value for 'fd' [ 601.558676][ T9576] fuse: Bad value for 'user_id' [ 601.584545][ T9576] fuse: Bad value for 'user_id' [ 603.327918][ T5937] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 603.427989][ T9606] fuse: Bad value for 'fd' [ 603.498830][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 603.595155][ T5937] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 603.622577][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.658336][ T5937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 603.749047][ T5937] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 603.770275][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.779160][ T5937] usb 2-1: Product: syz [ 603.783468][ T5937] usb 2-1: Manufacturer: syz [ 603.785039][ T9613] fuse: Bad value for 'user_id' [ 603.788870][ T5937] usb 2-1: SerialNumber: syz [ 603.827866][ T5937] usb 2-1: config 0 descriptor?? [ 603.877023][ T9613] fuse: Bad value for 'user_id' [ 604.072748][ T9604] netlink: zone id is out of range [ 604.078487][ T9604] netlink: zone id is out of range [ 604.084061][ T9604] netlink: zone id is out of range [ 604.089815][ T9604] netlink: zone id is out of range [ 604.096109][ T9604] netlink: zone id is out of range [ 604.101831][ T9604] netlink: zone id is out of range [ 604.107297][ T9604] netlink: zone id is out of range [ 604.112855][ T9604] netlink: zone id is out of range [ 604.118301][ T9604] netlink: zone id is out of range [ 604.127239][ T9604] netlink: zone id is out of range [ 604.513229][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'. [ 604.771731][ T9626] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1264'. [ 604.800761][ T9629] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1266'. [ 604.877767][ T9631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1266'. [ 605.007079][ T9635] fuse: Unknown parameter '0x0000000000000003' [ 605.651766][ T9644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 605.768652][ T9646] fuse: Bad value for 'fd' [ 607.717536][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 607.746394][ T5811] usb 2-1: USB disconnect, device number 19 [ 608.728519][ T5937] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 608.797079][ T9677] fuse: Unknown parameter '0x0000000000000003' [ 608.906188][ T5937] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 609.157394][ T5937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.192451][ T5937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 609.221863][ T5937] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.255170][ T5937] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 609.284946][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 609.318985][ T5937] usb 1-1: Product: syz [ 609.337286][ T5937] usb 1-1: Manufacturer: syz [ 609.385308][ T5937] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 609.450973][ T9681] fuse: Bad value for 'fd' [ 609.610664][ T5937] usb 1-1: USB disconnect, device number 18 [ 610.107527][ T5937] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 610.198084][ T5811] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 610.247467][ T5937] usb 1-1: device descriptor read/64, error -71 [ 610.409269][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.420826][ T5811] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 610.738674][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.782544][ T5811] usb 2-1: config 0 descriptor?? [ 610.847493][ T5937] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 610.997698][ T5937] usb 1-1: device descriptor read/64, error -71 [ 611.062132][ T5811] usbhid 2-1:0.0: can't add hid device: -71 [ 611.084599][ T5811] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 611.130691][ T5811] usb 2-1: USB disconnect, device number 20 [ 611.156550][ T5937] usb usb1-port1: attempt power cycle [ 611.517428][ T5937] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 611.587475][ T5811] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 611.737620][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 611.745033][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.756832][ T5811] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 611.847529][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.896763][ T5811] usb 2-1: config 0 descriptor?? [ 611.919826][ T5811] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 611.958078][ T5811] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 612.026644][ T5937] usb 1-1: device descriptor read/8, error -71 [ 612.145292][ T9714] fuse: Bad value for 'fd' [ 612.396778][ T9721] fuse: Unknown parameter 'use00000000000000000000' [ 612.446692][ T5811] usb 2-1: USB disconnect, device number 21 [ 612.458306][ T5811] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 615.620673][ T9756] fuse: Bad value for 'fd' [ 615.747665][ T5811] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 616.031343][ T5811] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 616.041166][ T5811] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.053470][ T5811] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 616.105997][ T5811] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 616.172381][ T5811] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 616.192827][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 616.276109][ T5811] usb 1-1: Product: syz [ 616.301981][ T5811] usb 1-1: Manufacturer: syz [ 616.422727][ T9765] fuse: Unknown parameter 'user_i00000000000000000000' [ 616.428201][ T1985] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 616.543491][ T5811] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 616.639664][ T1985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.701749][ T1985] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 616.727738][ T1985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.763573][ T5944] usb 1-1: USB disconnect, device number 23 [ 616.853961][ T1985] usb 4-1: config 0 descriptor?? [ 617.152177][ T1985] usbhid 4-1:0.0: can't add hid device: -71 [ 617.201106][ T1985] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 617.371322][ T1985] usb 4-1: USB disconnect, device number 24 [ 617.557524][ T5953] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 617.568691][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 617.708173][ T5953] usb 1-1: device descriptor read/64, error -71 [ 617.727155][ T24] usb 5-1: device descriptor read/64, error -71 [ 617.762585][ T1985] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 617.917515][ T1985] usb 4-1: Using ep0 maxpacket: 32 [ 617.928436][ T1985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.941607][ T1985] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 617.951882][ T1985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.967724][ T5953] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 617.987493][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 618.000246][ T1985] usb 4-1: config 0 descriptor?? [ 618.144863][ T1985] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 618.253297][ T1985] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 618.267497][ T5953] usb 1-1: device descriptor read/64, error -71 [ 618.297471][ T24] usb 5-1: device descriptor read/64, error -71 [ 618.377689][ T5953] usb usb1-port1: attempt power cycle [ 618.510663][ T24] usb usb5-port1: attempt power cycle [ 618.540670][ T1985] usb 4-1: USB disconnect, device number 25 [ 618.565584][ T1985] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 618.824329][ T9785] fuse: Bad value for 'fd' [ 618.857567][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 618.898353][ T24] usb 5-1: device descriptor read/8, error -71 [ 619.168256][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 619.188102][ T24] usb 5-1: device descriptor read/8, error -71 [ 619.311199][ T24] usb usb5-port1: unable to enumerate USB device [ 620.050969][ T9812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1325'. [ 621.267507][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 621.432641][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 621.443979][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.482072][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 621.508245][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 621.553929][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 621.564887][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 621.590361][ T9] usb 5-1: Product: syz [ 621.603639][ T9] usb 5-1: Manufacturer: syz [ 621.632690][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 621.817988][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 621.883651][ T5944] usb 5-1: USB disconnect, device number 23 [ 621.984201][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.023579][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 622.039500][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.114056][ T9] usb 1-1: config 0 descriptor?? [ 622.330720][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 622.408798][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 622.465116][ T5944] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 622.524000][ T9] usb 1-1: USB disconnect, device number 27 [ 622.617495][ T5944] usb 5-1: device descriptor read/64, error -71 [ 622.892223][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 622.987801][ T5944] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 623.079187][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 623.137623][ T5944] usb 5-1: device descriptor read/64, error -71 [ 623.144964][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.172338][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 623.220575][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.267730][ T5944] usb usb5-port1: attempt power cycle [ 623.321966][ T9] usb 1-1: config 0 descriptor?? [ 623.344261][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 623.407128][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 624.247523][ T5944] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 624.334885][ T24] usb 1-1: USB disconnect, device number 28 [ 624.356368][ T24] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 624.437105][ T9846] net_ratelimit: 44 callbacks suppressed [ 624.437127][ T9846] netlink: zone id is out of range [ 624.489010][ T9846] netlink: zone id is out of range [ 624.520097][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.528486][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.554417][ T9846] netlink: zone id is out of range [ 624.576176][ T9846] netlink: zone id is out of range [ 624.589817][ T9846] netlink: zone id is out of range [ 624.662863][ T9846] netlink: zone id is out of range [ 624.668763][ T9846] netlink: zone id is out of range [ 624.677184][ T9846] netlink: zone id is out of range [ 624.717595][ T9846] netlink: zone id is out of range [ 624.725949][ T9846] netlink: zone id is out of range [ 624.804714][ T5944] usb 5-1: device descriptor read/8, error -71 [ 624.939396][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 624.977944][ T5937] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 625.228202][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 625.307571][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 625.363279][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.395075][ T9] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 625.422035][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.432579][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.442778][ T5937] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 625.469844][ T9] usb 2-1: Product: syz [ 625.474075][ T9] usb 2-1: Manufacturer: syz [ 625.497467][ T9] usb 2-1: SerialNumber: syz [ 625.551549][ T5937] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 625.567099][ T9] usb 2-1: config 0 descriptor?? [ 625.582183][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.612764][ T5937] usb 3-1: config 0 descriptor?? [ 625.618831][ T5944] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 625.661122][ T29] audit: type=1804 audit(1773857143.190:24): pid=9863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1342" name="/newroot/253/file1" dev="fuse" ino=1 res=1 errno=0 [ 625.662450][ T5944] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 625.712102][ T5944] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 625.752872][ T5944] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 625.763122][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.812737][ T9861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 625.996900][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 626.018598][ T5944] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.041543][ T5937] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 626.054142][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 626.079231][ T5937] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 626.108423][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 626.116505][ T9] usb 2-1: media controller created [ 626.296617][ T5937] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 626.307862][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 626.317460][ T5937] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 626.324496][ T5937] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 626.412068][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 626.448871][ T5937] input: HID 0955:7214 Haptics as /devices/virtual/input/input16 [ 626.510990][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 626.560267][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 626.560985][ T5944] usb 5-1: USB disconnect, device number 27 [ 626.703521][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 626.719099][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 626.755088][ T9861] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 626.794575][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 626.838302][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.851808][ T5937] shield 0003:0955:7214.000E: Registered Thunderstrike controller [ 626.874890][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 626.896924][ T5937] shield 0003:0955:7214.000E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 626.922816][ T9] usb 2-1: USB disconnect, device number 22 [ 627.005218][ T5937] usb 3-1: USB disconnect, device number 20 [ 627.058344][ T9869] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 627.067521][ T10] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 627.099796][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 627.106614][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 627.117288][ T10] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 627.173081][ T10] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 627.239022][ T10] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 628.089063][ T24] usb 4-1: USB disconnect, device number 26 [ 628.917648][ T5953] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 629.069225][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.088256][ T5953] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 629.097531][ T29] audit: type=1804 audit(1773857146.620:25): pid=9902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1354" name="/newroot/255/file1" dev="fuse" ino=1 res=1 errno=0 [ 629.131835][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.152379][ T29] audit: type=1804 audit(1773857146.680:26): pid=9900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1353" name="/newroot/309/file1" dev="fuse" ino=1 res=1 errno=0 [ 629.188725][ T5953] usb 5-1: config 0 descriptor?? [ 629.452832][ T5953] usbhid 5-1:0.0: can't add hid device: -71 [ 629.462779][ T5953] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 629.509972][ T5953] usb 5-1: USB disconnect, device number 28 [ 629.649452][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 629.814853][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 629.962108][ T9922] fuse: Unknown parameter 'fd0x0000000000000003' [ 629.972293][ T10] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 629.982521][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.987671][ T5953] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 629.993314][ T10] usb 2-1: Product: syz [ 630.002882][ T10] usb 2-1: Manufacturer: syz [ 630.008440][ T10] usb 2-1: SerialNumber: syz [ 630.021487][ T10] usb 2-1: config 0 descriptor?? [ 630.147977][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 630.155412][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.168806][ T5953] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 630.207673][ T5937] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 630.227508][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.284083][ T5953] usb 5-1: config 0 descriptor?? [ 630.301264][ T5953] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 630.334171][ T5953] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 630.381157][ T5937] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 630.440378][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 630.452544][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 630.475858][ T5937] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 630.628341][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 630.639936][ T5937] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 630.664981][ T10] usb 2-1: media controller created [ 630.680615][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.711334][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 630.737995][ T9921] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 630.776024][ T5937] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.812284][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 630.827068][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 630.855101][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 630.928711][ T10] usb 2-1: USB disconnect, device number 23 [ 630.934340][ T5983] usb 5-1: USB disconnect, device number 29 [ 631.038745][ T5983] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 631.054716][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 631.106425][ T5937] usb 3-1: USB disconnect, device number 21 [ 631.849284][ T29] audit: type=1804 audit(1773857149.370:27): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1365" name="/newroot/280/file1" dev="fuse" ino=1 res=1 errno=0 [ 634.045817][ T5937] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 634.137662][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 634.247584][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 634.280394][ T5937] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 634.295175][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.304735][ T5937] usb 4-1: Product: syz [ 634.311293][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.325971][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 634.337155][ T5937] usb 4-1: Manufacturer: syz [ 634.341904][ T5937] usb 4-1: SerialNumber: syz [ 634.347497][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.477569][ T5937] usb 4-1: config 0 descriptor?? [ 634.502950][ T9] usb 5-1: config 0 descriptor?? [ 634.748092][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 634.754366][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 634.799988][ T9] usb 5-1: USB disconnect, device number 30 [ 634.887491][ T29] audit: type=1804 audit(1773857152.400:28): pid=9976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1378" name="/newroot/254/file1" dev="fuse" ino=1 res=1 errno=0 [ 634.932768][ T5937] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 634.946976][ T5937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 634.991545][ T5937] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 635.000308][ T5937] usb 4-1: media controller created [ 635.061925][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 635.257693][ T9981] net_ratelimit: 44 callbacks suppressed [ 635.257732][ T9981] netlink: zone id is out of range [ 635.307493][ T9981] netlink: zone id is out of range [ 635.325130][ T9981] netlink: zone id is out of range [ 635.335269][ T9981] netlink: zone id is out of range [ 636.127186][ T5937] zl10353_read_register: readreg error (reg=127, ret==0) [ 636.134602][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 636.142838][ T5937] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 636.152768][ T9981] netlink: zone id is out of range [ 636.168083][ T9958] ------------[ cut here ]------------ [ 636.173627][ T9958] usb 4-1: BOGUS control dir, pipe 80001b80 doesn't match bRequestType c0 [ 636.182277][ T9958] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.3.1373/9958 [ 636.192813][ T9958] Modules linked in: [ 636.197091][ T9958] CPU: 1 UID: 0 PID: 9958 Comm: syz.3.1373 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.209472][ T9958] Tainted: [L]=SOFTLOCKUP [ 636.213949][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.225166][ T9958] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 636.231068][ T9958] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 636.251215][ T9958] RSP: 0018:ffffc9001b09f6e8 EFLAGS: 00010246 [ 636.257539][ T9958] RAX: 0000000000000000 RBX: ffff88802521d100 RCX: 0000000080001b80 [ 636.265535][ T9958] RDX: ffff88805c54a840 RSI: ffffffff8c7f1620 RDI: ffffffff901ed840 [ 636.273880][ T9958] RBP: 1ffff11004252e98 R08: 00000000000000c0 R09: 0000000000000000 [ 636.281963][ T9958] R10: ffffc9001b09f7e0 R11: fffff52003613f08 R12: ffff8880515b3100 [ 636.290167][ T9958] R13: ffff8880212974c0 R14: 0000000080001b80 R15: ffff88805c54a840 [ 636.298262][ T9958] FS: 00007f88d76296c0(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 636.308903][ T9958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.315697][ T9958] CR2: 000000110c31394d CR3: 000000005d66c000 CR4: 00000000003526f0 [ 636.324626][ T9958] Call Trace: [ 636.328164][ T9958] [ 636.331189][ T9958] ? __init_swait_queue_head+0xa9/0x150 [ 636.336804][ T9958] usb_start_wait_urb+0x13f/0x5b0 [ 636.341930][ T9958] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 636.347685][ T9958] usb_control_msg+0x234/0x3e0 [ 636.352513][ T9958] dtv5100_i2c_msg+0x231/0x2f0 [ 636.357531][ T9958] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 636.362444][ T9958] __i2c_transfer+0x79a/0x2020 [ 636.367444][ T9958] ? i2c_transfer+0xc8/0x2d0 [ 636.372112][ T9958] i2c_transfer+0x1cc/0x2d0 [ 636.376654][ T9958] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 636.382503][ T9958] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 636.388751][ T9958] ? _copy_from_user+0x94/0xb0 [ 636.393713][ T9958] i2cdev_write+0x113/0x1e0 [ 636.398424][ T9958] vfs_writev+0x4bd/0x990 [ 636.402781][ T9958] ? __pfx_i2cdev_write+0x10/0x10 [ 636.408975][ T9958] ? __pfx_vfs_writev+0x10/0x10 [ 636.413889][ T9958] ? __fget_files+0x2a/0x420 [ 636.419643][ T9958] ? __fget_files+0x3a0/0x420 [ 636.425555][ T9958] ? __fget_files+0x2a/0x420 [ 636.430383][ T9958] do_writev+0x154/0x2e0 [ 636.434651][ T9958] ? __pfx_do_writev+0x10/0x10 [ 636.439595][ T9958] do_syscall_64+0x14d/0xf80 [ 636.444207][ T9958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.450360][ T9958] ? clear_bhb_loop+0x40/0x90 [ 636.455074][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.461057][ T9958] RIP: 0033:0x7f88d679c799 [ 636.465592][ T9958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.486053][ T9958] RSP: 002b:00007f88d7629028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 636.494589][ T9958] RAX: ffffffffffffffda RBX: 00007f88d6a15fa0 RCX: 00007f88d679c799 [ 636.502687][ T9958] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000004 [ 636.511989][ T9958] RBP: 00007f88d6832c99 R08: 0000000000000000 R09: 0000000000000000 [ 636.520859][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.528959][ T9958] R13: 00007f88d6a16038 R14: 00007f88d6a15fa0 R15: 00007f88d6b3fa48 [ 636.537052][ T9958] [ 636.540217][ T9958] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 636.547734][ T9958] CPU: 1 UID: 0 PID: 9958 Comm: syz.3.1373 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.558627][ T9958] Tainted: [L]=SOFTLOCKUP [ 636.562973][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.573039][ T9958] Call Trace: [ 636.576502][ T9958] [ 636.579465][ T9958] vpanic+0x56c/0xa60 [ 636.583484][ T9958] ? __pfx__printk+0x10/0x10 [ 636.588100][ T9958] ? __pfx_vpanic+0x10/0x10 [ 636.592624][ T9958] ? is_bpf_text_address+0x292/0x2b0 [ 636.598202][ T9958] ? is_bpf_text_address+0x26/0x2b0 [ 636.603443][ T9958] panic+0xc5/0xd0 [ 636.607196][ T9958] ? __pfx_panic+0x10/0x10 [ 636.611663][ T9958] __warn+0x315/0x4f0 [ 636.615673][ T9958] ? usb_submit_urb+0x1052/0x18b0 [ 636.620744][ T9958] ? usb_submit_urb+0x1052/0x18b0 [ 636.625790][ T9958] __report_bug+0x29a/0x540 [ 636.630324][ T9958] ? unwind_get_return_address+0x4d/0x90 [ 636.636096][ T9958] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 636.642295][ T9958] ? usb_submit_urb+0x1052/0x18b0 [ 636.647419][ T9958] ? __pfx___report_bug+0x10/0x10 [ 636.652547][ T9958] ? __pfx_stack_trace_save+0x10/0x10 [ 636.658000][ T9958] ? stack_depot_save_flags+0x33/0x810 [ 636.663571][ T9958] report_bug_entry+0x19a/0x290 [ 636.668620][ T9958] ? usb_submit_urb+0x1114/0x18b0 [ 636.673847][ T9958] ? usb_submit_urb+0x1119/0x18b0 [ 636.679004][ T9958] handle_bug+0xce/0x200 [ 636.683354][ T9958] exc_invalid_op+0x1a/0x50 [ 636.687965][ T9958] asm_exc_invalid_op+0x1a/0x20 [ 636.692824][ T9958] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 636.698482][ T9958] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 636.718129][ T9958] RSP: 0018:ffffc9001b09f6e8 EFLAGS: 00010246 [ 636.724222][ T9958] RAX: 0000000000000000 RBX: ffff88802521d100 RCX: 0000000080001b80 [ 636.732202][ T9958] RDX: ffff88805c54a840 RSI: ffffffff8c7f1620 RDI: ffffffff901ed840 [ 636.740197][ T9958] RBP: 1ffff11004252e98 R08: 00000000000000c0 R09: 0000000000000000 [ 636.748215][ T9958] R10: ffffc9001b09f7e0 R11: fffff52003613f08 R12: ffff8880515b3100 [ 636.756580][ T9958] R13: ffff8880212974c0 R14: 0000000080001b80 R15: ffff88805c54a840 [ 636.764762][ T9958] ? usb_submit_urb+0x10a3/0x18b0 [ 636.769815][ T9958] ? __init_swait_queue_head+0xa9/0x150 [ 636.775386][ T9958] usb_start_wait_urb+0x13f/0x5b0 [ 636.780426][ T9958] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 636.786081][ T9958] usb_control_msg+0x234/0x3e0 [ 636.790870][ T9958] dtv5100_i2c_msg+0x231/0x2f0 [ 636.795674][ T9958] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 636.800577][ T9958] __i2c_transfer+0x79a/0x2020 [ 636.805403][ T9958] ? i2c_transfer+0xc8/0x2d0 [ 636.810039][ T9958] i2c_transfer+0x1cc/0x2d0 [ 636.814660][ T9958] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 636.820528][ T9958] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 636.826805][ T9958] ? _copy_from_user+0x94/0xb0 [ 636.831608][ T9958] i2cdev_write+0x113/0x1e0 [ 636.836308][ T9958] vfs_writev+0x4bd/0x990 [ 636.840649][ T9958] ? __pfx_i2cdev_write+0x10/0x10 [ 636.845694][ T9958] ? __pfx_vfs_writev+0x10/0x10 [ 636.850566][ T9958] ? __fget_files+0x2a/0x420 [ 636.855226][ T9958] ? __fget_files+0x3a0/0x420 [ 636.859953][ T9958] ? __fget_files+0x2a/0x420 [ 636.864583][ T9958] do_writev+0x154/0x2e0 [ 636.868941][ T9958] ? __pfx_do_writev+0x10/0x10 [ 636.873852][ T9958] do_syscall_64+0x14d/0xf80 [ 636.878458][ T9958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.884555][ T9958] ? clear_bhb_loop+0x40/0x90 [ 636.889338][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.895249][ T9958] RIP: 0033:0x7f88d679c799 [ 636.899672][ T9958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.919574][ T9958] RSP: 002b:00007f88d7629028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 636.928018][ T9958] RAX: ffffffffffffffda RBX: 00007f88d6a15fa0 RCX: 00007f88d679c799 [ 636.936120][ T9958] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000004 [ 636.944121][ T9958] RBP: 00007f88d6832c99 R08: 0000000000000000 R09: 0000000000000000 [ 636.952111][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.960316][ T9958] R13: 00007f88d6a16038 R14: 00007f88d6a15fa0 R15: 00007f88d6b3fa48 [ 636.968320][ T9958] [ 636.971982][ T9958] Kernel Offset: disabled [ 636.976348][ T9958] Rebooting in 86400 seconds..