last executing test programs: 15.185130062s ago: executing program 0 (id=4099): sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031412e4ff020002004788aa", 0xd, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) 12.247715717s ago: executing program 0 (id=4106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef435000000e3bd6efb440009000e002e0010000000ba80013ffa85f59a0000005a8c3774fa0af3dc59a933c1e6a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f", 0x67}], 0x1}, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 11.849873223s ago: executing program 0 (id=4107): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x40, 0x2, 0x3}, 0x2}}, 0x18) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, 0x0, 0xffdd) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4}) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf, 0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x80c4) 11.027097824s ago: executing program 4 (id=4109): io_uring_setup(0x6965, &(0x7f0000000240)={0x0, 0xd26c, 0x1, 0x2, 0xc4}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x1000040c, 0xffff}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_INTERRUPT(r5, &(0x7f0000000000)={0x10, 0x2f}, 0x10) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r3) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffefffffff86dd6900000000383afefe8000000000000000000000000000aaff0200000000000000000000000000010200907800000500620813310009ff00ff010000000000000000000000000001000000000000000000000000000000016700000000000000"], 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x5, @empty, 0x2d}}, 0x4, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x0) 7.830093638s ago: executing program 4 (id=4116): sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031412e4ff020002004788aa", 0xd, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) 7.589897118s ago: executing program 0 (id=4117): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_io_uring_setup(0x186, &(0x7f0000000280)={0x0, 0x4002, 0x10000, 0xffffffff, 0xb5}, 0x0, &(0x7f0000000240)) ioprio_set$pid(0x3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000001a240)=ANY=[@ANYBLOB="0c0e000000050101"], 0xe0c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) r3 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x1246, 0x80, 0x1, 0xe0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000540)='L', 0x1}], 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000140)={0x2, {0xdfffc568, 0x80000000, 0x5, 0x7}}) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r6 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) pselect6(0x40, &(0x7f0000000400)={0xf, 0x0, 0x0, 0x0, 0x10000000000000}, &(0x7f0000000000)={0x1f, 0x0, 0xffffffffffffffff, 0x4, 0xeeaf, 0x8000000000002}, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000100000000001400128009000100766574689600000000040002800800200001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000002, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r11, 0xc100565c, &(0x7f0000000180)={0x0, 0xfff, 0x4, {0x2, @win={{}, 0x7, 0xfffffe01, 0x0, 0x0, 0x0}}}) io_uring_enter(r6, 0x2dbe, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000002400000827bd7000ffdbdf2508000000060004000000000006000300000000000600030000000000060024000000000006000400000000000600040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x815}, 0x800) 5.792511474s ago: executing program 3 (id=4119): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xef}]}}}]}, 0x44}}, 0x20008040) syz_open_dev$sg(&(0x7f0000000080), 0x200000b, 0x193882) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x191001) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f72740000"], 0x4c}}, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5.252640422s ago: executing program 1 (id=4120): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$dri(&(0x7f00000009c0), 0xf5a6, 0x4040) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x100400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x100047f6, 0x80ffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r8}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r9, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r12, &(0x7f0000000240)=[{&(0x7f0000000400)=""/257, 0x101}], 0x1, 0x8000, 0xc) r13 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg(r13, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) 5.154624109s ago: executing program 0 (id=4121): r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) (async) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) pipe(&(0x7f0000000480)) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0xc) splice(r2, 0x0, r3, 0x0, 0x10d00, 0xf) read$FUSE(r2, 0x0, 0x0) (async) read$FUSE(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00') mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) (async) getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e22, 0xff, @empty, 0x63fc}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e22, 0xff, @empty, 0x63fc}}}, 0xa0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x7400}, 0x24008001) 5.129171742s ago: executing program 3 (id=4122): ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB='\x00\x00\x00\x00\t'], 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x8080) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r7, &(0x7f0000000040)=""/148, 0xffffff96) 4.986049158s ago: executing program 2 (id=4123): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) fcntl$setstatus(r0, 0x4, 0x42400) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r1, 0xffffffffffffffff, 0x0, 0x6) 4.809290325s ago: executing program 2 (id=4124): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x4, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000200)={r3, r4, r5, 0x0, 0x80000000, 0x80000003, 0x81a6, 0x0, 0x2000005, 0xe, 0x6, 0x2001000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc00000002020102000000000000000001000003080009000000000404000380"], 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) madvise(&(0x7f0000635000/0x2000)=nil, 0x2000, 0xe) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r7, 0x40304580, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[{0xfffffffffffffffc}, {&(0x7f0000000640)=""/255, 0xff}, {&(0x7f0000000400)=""/110, 0x6e}, {&(0x7f0000000740)=""/199, 0xc7}, {&(0x7f0000000500)=""/134, 0x86}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f0000000840)=""/224, 0xe0}, {&(0x7f0000000940)=""/234, 0xea}], 0x8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1000000001, 0x12) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r11, &(0x7f00000005c0)="9a63dd068505f50216af27984438564753b570a4858e", 0x16, 0x24000045, &(0x7f0000000080)={0xa, 0x2, 0x35ee, @loopback, 0xe}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f000000cf40)='htcp\x00', 0x5) shutdown(r11, 0x1) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 4.459802762s ago: executing program 0 (id=4125): ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x2, 0x2, 0xfffff001, 0x2, 0x6}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000080)={0xfffffeff, [0x197, 0x0, 0x5], [{0xb, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x30, 0x1, 0x0, 0x1}, {0xfffffff8, 0x301, 0x0, 0x0, 0x1, 0x1}, {0x3, 0xfffffff9}, {0x0, 0x1ff, 0x0, 0x1, 0x1}, {0x2cb, 0xffffd3f0, 0x1, 0x1, 0x0, 0x1}, {0x401, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x2, 0x1, 0x0, 0x0, 0x1}, {0xe10d, 0x1, 0x0, 0x0, 0x1, 0x1}, {0xfff, 0x1342234, 0x1, 0x1}, {0x20000, 0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x0, 0xfffffff7, 0x0, 0x1, 0x1}], 0x6}) r1 = gettid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001300)={'\x00', 0x2, 0xc, 0x1, 0x22368c02, 0x2, 0x0}) syz_clone3(&(0x7f00000013c0)={0x200000000, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x2d}, &(0x7f0000000240)=""/184, 0xb8, &(0x7f0000000300)=""/4096, &(0x7f0000001380)=[0xffffffffffffffff, r1, r2], 0x3, {r0}}, 0x58) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001440), 0x181100, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001480)={'netdevsim0\x00', 0x0}) r6 = gettid() syz_clone3(&(0x7f0000001640)={0x4000000, &(0x7f00000014c0)=0xffffffffffffffff, &(0x7f0000001500), &(0x7f0000001540), {0x36}, &(0x7f0000001580)=""/55, 0x37, &(0x7f00000015c0)=""/37, &(0x7f0000001600)=[0xffffffffffffffff, r2, r6, r1, r1], 0x5}, 0x58) fallocate(0xffffffffffffffff, 0x8, 0x401, 0x9) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001880)={&(0x7f0000001700)=@mpls_newroute={0x144, 0x18, 0x100, 0x70bd25, 0x25dfdbfb, {0x1c, 0x14, 0x20, 0x3, 0xfe, 0x2, 0xff, 0x9, 0x800}, [@RTA_NEWDST={0x84, 0x13, [{0x9}, {0xa}, {0x2, 0x0, 0x1}, {0xde79, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x6}, {0x7}, {0x100, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xac1, 0x0, 0x1}, {0x401}, {0x6}, {0x90, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x10}, {0xffff}, {}, {0x949}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {}, {0x9, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0x8000, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r5}, @RTA_DST={0x8, 0x1, {0x55}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfe}, @RTA_NEWDST={0x84, 0x13, [{0x8001}, {0x3, 0x0, 0x1}, {0x8000}, {0x3, 0x0, 0x1}, {0x6}, {0x7}, {0x1000}, {0x3d, 0x0, 0x1}, {0x35, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x5}, {0x1}, {0x7ff}, {0xffff}, {0xfffc7, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xa0b, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8}, {0x6, 0x0, 0x1}, {0x6bff, 0x0, 0x1}, {0x6}, {}, {0xda}, {}, {0x8, 0x0, 0x1}, {0x2}, {0x5}, {0x2713, 0x0, 0x1}, {0x8}]}, @RTA_DST={0x8, 0x1, {0x3, 0x0, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000001900), &(0x7f0000001940)=0x8) r9 = syz_pidfd_open(r3, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000001980)={0x2, 0x1, 0x2}) r10 = socket$netlink(0x10, 0x3, 0x6) r11 = syz_open_dev$vcsa(&(0x7f00000019c0), 0x9, 0x28480) ioctl$SG_BLKTRACETEARDOWN(r11, 0x1276, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001a00)={0x0, @in6={{0xa, 0x4e20, 0x5, @empty}}, 0x4, 0xfffe, 0x0, 0x6, 0x10, 0x400, 0xff}, &(0x7f0000001ac0)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000001b00)={r12, 0x3, 0x8, [0x1000, 0x4, 0xffff, 0x4396, 0x100, 0x4, 0x2, 0x5]}, 0x18) landlock_create_ruleset(&(0x7f0000001b40)={0x168a}, 0x18, 0x3) ioctl$TUNSETOWNER(r11, 0x400454cc, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001bc0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r10, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r13, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000811}, 0x40) timerfd_gettime(r4, &(0x7f0000001cc0)) socket(0x3, 0x5, 0x7ff) socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_FILES_UPDATE(r11, 0x6, &(0x7f0000001d80)={0xe, 0x0, &(0x7f0000001d40)=[r9, r8, 0xffffffffffffffff]}, 0x3) 3.574397073s ago: executing program 1 (id=4126): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x49, 0xffffffd4, 0x0, 0x0, 0x10}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 3.570693866s ago: executing program 3 (id=4127): syz_open_dev$video4linux(0x0, 0x6d6b, 0x480) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x29, 0x0, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x2, @in=@private=0xa010102, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x40894) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10) r3 = io_uring_setup(0x3e60, &(0x7f0000000240)={0x0, 0x1ffd, 0x400, 0x0, 0x2b8}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f00000000c0)={0x8, 0xffffffffffffffff, 0x1b, {0xfca4, 0xc}, 0x5}, 0x1) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x4e3, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r8, 0x0) syz_emit_vhci(&(0x7f0000002040)=ANY=[@ANYBLOB], 0xd) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r10 = accept4(r8, 0x0, 0x0, 0x0) recvfrom$inet(r10, &(0x7f0000000540)=""/234, 0xea, 0x40000182, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3.570282884s ago: executing program 4 (id=4128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0xf5ff, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) 3.442228285s ago: executing program 2 (id=4129): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x49}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0xb8, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x4, @remote, 'syz_tun\x00'}}, 0x0, 0x0, 0x1}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000340)=0x7fc00000) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x401, r9, 0x0, 0x100000000000000}, 0x38) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x2, 0x3, 0x1}}, 0x2e) bind$inet6(r7, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "6bfe4d", 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x4e1d, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "297a4c61bfb49dd72c1d8aeef36edb0fee960ee22d3a2fea1bf82241c4945f25", "3ba7e061777a46f1f83addfcf7d9b0503747af0116f8c0fb80281f831645aa57f49c252497cfc72c46da272e702ec1e3", "30e34f3bda2a44bc5b1b1a3828df01bbad0bf589e37b30f1ef25bc65", {"108e638aab3f817c0119c604eacae47a", "e3ef124f10640df7d9b39e0d6023c987"}}}}}}}}, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x8a9, 0x300, 0x9}}) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_SYNC(r10, 0x5001, 0x0) ioctl$SOUND_PCM_READ_BITS(r10, 0x80045005, 0x0) 3.349648666s ago: executing program 1 (id=4130): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x1}}}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000000c0)=[{0x0, 0x1, {0x1, 0xff, 0x3}, {0x0, 0x0, 0x3}, 0xfd, 0x1}, {0x3, 0x0, {0x4, 0x1, 0x1c05bd60db381077}, {0x2, 0x1, 0x2}, 0x2, 0xfe}], 0x40) r5 = landlock_create_ruleset(&(0x7f00000003c0)={0xe00, 0x1, 0x3}, 0x18, 0x2) landlock_restrict_self(r5, 0x4) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = io_uring_setup(0x45a6, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x0, 0x228}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) 3.298836598s ago: executing program 4 (id=4131): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202080, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0x0, 0xf, {0xf, 0xa, "0176460df2ec7b853f1ba242d9"}}, &(0x7f0000000200)={0x0, 0x3, 0x74, @string={0x74, 0x3, "21706eb2ff6ba83e4601ad6bf06e15bdc80dd28b83de11717d7acc30b9679d6cacab7590bd3475b4baded8fe4d7d19b1fc4b0484e2d32fa68d2fb7dfaf4fb84aacb5cb9ba915e8f9177cde4ee1799c13b03943dbdd22d17c78cfd5de10d918d0ea27f9fcd763b0b4bae7aa55bdd2e0e32ebe"}}, &(0x7f0000000340)={0x0, 0xf, 0x88, {0x5, 0xf, 0x88, 0x6, [@generic={0x29, 0x10, 0xb, "0aa1d5eefdcc95d733810086c35f18491eb20fff1e0f127d4243e36d24e3cde373fee6c3493a"}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x7f, 0xf00f, 0x46c6, [0x3f00]}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x9, 0xf000, 0xfff8, [0xff0007, 0xc0cf]}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x6, 0xf1e, 0x5, [0xc0c0, 0xff00, 0xbef0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x81, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "74a53a55dfed83a6c012a7f3c88ac423"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x6, 0xd, "8b354f8e", "e9cc91f7"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x1, 0xdf, 0x8, 0x4, 0x5}}}, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x20, 0x15, 0x3f, "1de219ee870a564625e5b63c98e9cebfca7228a0d34f9acedcce34dfc207fe957e7494c11d3584381590d77e5159daf21f15d1e4eb5dfda3e059d0a40a8cb6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5a}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000500)=ANY=[@ANYBLOB="20110400001423038000"], &(0x7f0000000540)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7f}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "ed4b"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xda8}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "371a"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x68}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xd}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x7}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x4000, 0x1000, &(0x7f0000003000/0x1000)=nil}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.339030895s ago: executing program 3 (id=4132): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xef}]}}}]}, 0x44}}, 0x20008040) syz_open_dev$sg(&(0x7f0000000080), 0x200000b, 0x193882) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x191001) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f72740000"], 0x4c}}, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.827198438s ago: executing program 4 (id=4133): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x8, 0x100) r0 = socket$inet6(0xa, 0x5, 0x2) r1 = dup(r0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_usb_connect(0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 1.776054195s ago: executing program 1 (id=4134): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) fcntl$setstatus(r0, 0x4, 0x42400) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r1, 0xffffffffffffffff, 0x0, 0x6) 1.775211814s ago: executing program 3 (id=4135): socket(0x200000000000011, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00') pipe(&(0x7f0000000440)) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c140000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 1.477929174s ago: executing program 1 (id=4136): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000540)={0x5, &(0x7f0000000180)=""/198, &(0x7f00000004c0)=[{0x6, 0xaf, 0x83c0, &(0x7f0000000080)=""/175}, {0x7f, 0x7e, 0xf, &(0x7f0000000280)=""/126}, {0x3, 0x50, 0xe69, &(0x7f0000000300)=""/80}, {0x80000001, 0xd7, 0x7ff, &(0x7f0000000380)=""/215}, {0xe846, 0x5, 0x7, &(0x7f0000000480)=""/5}]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) poll(&(0x7f0000000340)=[{r1, 0xc400}], 0x1, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x8, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.163444217s ago: executing program 2 (id=4137): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x1c1000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}, 0x1, 0x0, 0x700}, 0x0) 937.54294ms ago: executing program 2 (id=4138): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r2}, 0x8) 810.796006ms ago: executing program 1 (id=4139): sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031412e4ff020002004788aa", 0xd, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) 753.897047ms ago: executing program 4 (id=4140): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) pipe2$watch_queue(0x0, 0x80) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000a50000/0x4000)=nil, 0x4000, 0x300000c) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000026a843b6fe5e17172992a2b733f0c1650001001218c0a1ef9ad581"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 363.871109ms ago: executing program 3 (id=4141): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r5}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x80000001}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000142c00fe800000000000000000000000000008000000000000000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000c1e94a0be7"], 0x0) 0s ago: executing program 2 (id=4142): ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)="a5ce", 0xfed0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) syz_open_dev$usbfs(0x0, 0x76, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r3, 0x11a, 0x1, &(0x7f0000000100)=0x304, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file1\x00') link(0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) write$ppp(0xffffffffffffffff, &(0x7f0000000300)='Z', 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x101040, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) kernel console output (not intermixed with test programs): [ 1254.723774][T20331] syz.2.3825: attempt to access beyond end of device [ 1254.723774][T20331] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1254.973095][ T30] audit: type=1326 audit(1752924623.987:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20317 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d22f8e9a9 code=0x7ffc0000 [ 1255.139795][ T30] audit: type=1326 audit(1752924623.987:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20317 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d22f8e9a9 code=0x7ffc0000 [ 1255.164644][T20329] bridge0: entered promiscuous mode [ 1255.176312][T20329] bond0: entered promiscuous mode [ 1255.181639][T20329] bond_slave_0: entered promiscuous mode [ 1255.197885][T20329] bond_slave_1: entered promiscuous mode [ 1255.260633][T20329] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1255.313196][T20329] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 1255.327068][ T9962] usb 1-1: USB disconnect, device number 20 [ 1255.346197][ T30] audit: type=1326 audit(1752924623.987:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20317 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7d22f8e9a9 code=0x7ffc0000 [ 1255.368588][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.392314][T20329] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1255.402913][ T9962] option 1-1:0.21: device disconnected [ 1255.411334][T20334] binder: 20333:20334 ioctl c00c6211 0 returned -14 [ 1255.442852][T20329] hsr1: entered allmulticast mode [ 1255.869372][T16099] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1256.035727][T16099] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1256.048329][T16099] usb 5-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 1256.098660][T16099] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1256.169243][T16099] usb 5-1: config 1 has no interface number 1 [ 1256.276919][T16099] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1256.329144][T16099] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1256.385107][T16099] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1256.409274][T16099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.437762][T16099] usb 5-1: Product: syz [ 1256.446502][T16099] usb 5-1: Manufacturer: syz [ 1256.457305][T16099] usb 5-1: SerialNumber: syz [ 1256.495118][T20343] netlink: 'syz.0.3829': attribute type 13 has an invalid length. [ 1256.512985][ T9962] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1256.635784][T20343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.643172][T20343] bridge0: port 2(bridge_slave_1) entered listening state [ 1256.650740][T20343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.658034][T20343] bridge0: port 1(bridge_slave_0) entered listening state [ 1256.685782][ T9962] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1256.765764][T20334] fuse: Bad value for 'fd' [ 1256.773603][ T9962] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1256.795424][ T9962] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1256.807729][T16099] usb 5-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1256.815484][T16099] usb 5-1: MIDIStreaming interface descriptor not found [ 1256.827532][ T9962] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1256.882453][ T9962] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1256.891888][ T9962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.908604][ T9962] usb 4-1: Product: syz [ 1256.929187][ T9962] usb 4-1: Manufacturer: syz [ 1256.938592][T20343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1257.018636][ T9962] usb 4-1: SerialNumber: syz [ 1257.022716][T16099] usb 5-1: USB disconnect, device number 6 [ 1257.400234][ T9962] usb 4-1: 0:2 : does not exist [ 1257.440970][ T9962] usb 4-1: USB disconnect, device number 26 [ 1257.526541][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1258.123928][T20368] FAULT_INJECTION: forcing a failure. [ 1258.123928][T20368] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.136941][T20368] CPU: 1 UID: 0 PID: 20368 Comm: syz.3.3837 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1258.136973][T20368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1258.136988][T20368] Call Trace: [ 1258.136998][T20368] [ 1258.137009][T20368] dump_stack_lvl+0x189/0x250 [ 1258.137043][T20368] ? __pfx____ratelimit+0x10/0x10 [ 1258.137068][T20368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1258.137096][T20368] ? __pfx__printk+0x10/0x10 [ 1258.137131][T20368] ? __mutex_trylock_common+0x153/0x260 [ 1258.137170][T20368] should_fail_ex+0x414/0x560 [ 1258.137200][T20368] should_failslab+0xa8/0x100 [ 1258.137237][T20368] __kmalloc_cache_noprof+0x70/0x3d0 [ 1258.137269][T20368] ? __hw_addr_add_ex+0x1f4/0x770 [ 1258.137310][T20368] __hw_addr_add_ex+0x1f4/0x770 [ 1258.137354][T20368] dev_addr_init+0x14f/0x230 [ 1258.137393][T20368] ? __pfx_dev_addr_init+0x10/0x10 [ 1258.137443][T20368] alloc_netdev_mqs+0x2f3/0x11e0 [ 1258.137466][T20368] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 1258.137501][T20368] ip6_tnl_locate+0x658/0x810 [ 1258.137544][T20368] ? __pfx_ip6_tnl_locate+0x10/0x10 [ 1258.137576][T20368] ? ip6_tnl_siocdevprivate+0x60c/0xad0 [ 1258.137611][T20368] ip6_tnl_siocdevprivate+0x630/0xad0 [ 1258.137648][T20368] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 1258.137675][T20368] ? rcu_is_watching+0x15/0xb0 [ 1258.137723][T20368] ? full_name_hash+0x92/0xe0 [ 1258.137750][T20368] ? netdev_name_node_lookup+0xdf/0x120 [ 1258.137780][T20368] dev_ifsioc+0xb54/0xf00 [ 1258.137828][T20368] dev_ioctl+0x84c/0x1150 [ 1258.137861][T20368] sock_ioctl+0x719/0x790 [ 1258.137894][T20368] ? __pfx_sock_ioctl+0x10/0x10 [ 1258.137921][T20368] ? __fget_files+0x3a0/0x420 [ 1258.137940][T20368] ? __fget_files+0x2a/0x420 [ 1258.137965][T20368] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1258.137993][T20368] ? __pfx_sock_ioctl+0x10/0x10 [ 1258.138018][T20368] __se_sys_ioctl+0xf9/0x170 [ 1258.138050][T20368] do_syscall_64+0xfa/0x3b0 [ 1258.138076][T20368] ? lockdep_hardirqs_on+0x9c/0x150 [ 1258.138099][T20368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.138122][T20368] ? clear_bhb_loop+0x60/0xb0 [ 1258.138150][T20368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.138172][T20368] RIP: 0033:0x7f7d22f8e9a9 [ 1258.138193][T20368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1258.138214][T20368] RSP: 002b:00007f7d23e3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1258.138238][T20368] RAX: ffffffffffffffda RBX: 00007f7d231b5fa0 RCX: 00007f7d22f8e9a9 [ 1258.138255][T20368] RDX: 00002000000002c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 1258.138270][T20368] RBP: 00007f7d23e3c090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.138284][T20368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.138297][T20368] R13: 0000000000000000 R14: 00007f7d231b5fa0 R15: 00007f7d232dfa28 [ 1258.138331][T20368] [ 1258.425667][ C1] vkms_vblank_simulate: vblank timer overrun [ 1259.551154][ T9962] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1259.653640][T16099] IPVS: starting estimator thread 0... [ 1259.771407][T20389] IPVS: using max 37 ests per chain, 88800 per kthread [ 1259.811160][ T9962] usb 5-1: Using ep0 maxpacket: 32 [ 1259.824330][ T9962] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1259.837781][ T9962] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 1259.861195][ T9962] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1259.870204][ T9962] usb 5-1: config 0 has no interface number 0 [ 1259.898043][ T9962] usb 5-1: config 0 has no interface number 1 [ 1259.913359][ T9962] usb 5-1: config 0 interface 21 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1259.941259][ T9962] usb 5-1: config 0 interface 5 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1259.977213][ T9962] usb 5-1: config 0 interface 21 has no altsetting 0 [ 1259.993593][ T9962] usb 5-1: config 0 interface 5 has no altsetting 0 [ 1260.012374][ T9962] usb 5-1: New USB device found, idVendor=19d2, idProduct=0086, bcdDevice=ec.26 [ 1260.035107][ T9962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.052852][ T9962] usb 5-1: Product: syz [ 1260.057073][ T9962] usb 5-1: Manufacturer: syz [ 1260.073924][ T9962] usb 5-1: SerialNumber: syz [ 1260.088499][ T9962] usb 5-1: config 0 descriptor?? [ 1260.442166][ T9962] option 5-1:0.21: GSM modem (1-port) converter detected [ 1261.155087][ T5911] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1261.175501][ T9962] smsusb:smsusb_probe: board id=14, interface number 5 [ 1261.461338][ T9962] smsusb:smsusb_probe: Device initialized with return code -19 [ 1261.524717][T20393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1261.596492][ T9962] usb 5-1: USB disconnect, device number 7 [ 1261.603924][ T9962] option 5-1:0.21: device disconnected [ 1261.721488][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 1261.781572][ T7605] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1261.962426][ T7605] usb 1-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 1261.976331][ T7605] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1262.185632][ T7605] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1262.214164][ T7605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.319577][ T7605] usb 1-1: Product: syz [ 1262.333081][ T7605] usb 1-1: Manufacturer: syz [ 1262.344543][ T7605] usb 1-1: SerialNumber: syz [ 1263.209770][ T7605] usb 1-1: can't set config #1, error -71 [ 1263.256313][ T7605] usb 1-1: USB disconnect, device number 21 [ 1263.270361][T20407] binder: 20406:20407 ioctl c00c6211 0 returned -14 [ 1263.541460][ T9962] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1263.713068][ T9962] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1263.735280][ T9962] usb 4-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 1263.761272][ T7605] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1263.781170][ T9962] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1263.861092][ T9962] usb 4-1: config 1 has no interface number 1 [ 1263.867320][ T9962] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1263.922746][ T7605] usb 1-1: too many configurations: 103, using maximum allowed: 8 [ 1263.961316][ T9962] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1263.963226][ T7605] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1264.016089][ T7605] usb 1-1: can't read configurations, error -61 [ 1264.057401][ T9962] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1264.066819][ T9962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.081116][ T9962] usb 4-1: Product: syz [ 1264.085360][ T9962] usb 4-1: Manufacturer: syz [ 1264.111295][ T9962] usb 4-1: SerialNumber: syz [ 1264.150361][ T5911] usb 2-1: device descriptor read/all, error -71 [ 1264.251130][ T7605] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1264.377184][T20407] fuse: Bad value for 'fd' [ 1264.460534][ T9962] usb 4-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1264.472136][ T7605] usb 1-1: too many configurations: 103, using maximum allowed: 8 [ 1264.477804][ T9962] usb 4-1: MIDIStreaming interface descriptor not found [ 1264.492901][ T7605] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1264.507716][ T7605] usb 1-1: can't read configurations, error -61 [ 1264.556890][ T7605] usb usb1-port1: attempt power cycle [ 1264.670975][ T9962] usb 4-1: USB disconnect, device number 27 [ 1264.972288][ T7605] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1265.079497][ T7605] usb 1-1: too many configurations: 103, using maximum allowed: 8 [ 1265.156712][ T7605] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1265.175432][ T7605] usb 1-1: can't read configurations, error -61 [ 1265.351239][ T5911] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1265.381666][ T7605] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1265.432619][ T7605] usb 1-1: too many configurations: 103, using maximum allowed: 8 [ 1265.502963][ T7605] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1265.513799][ T7605] usb 1-1: can't read configurations, error -61 [ 1265.517287][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.531185][ T7605] usb usb1-port1: unable to enumerate USB device [ 1265.537537][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1265.543754][ T5911] usb 2-1: New USB device found, idVendor=0c94, idProduct=16c5, bcdDevice=19.39 [ 1265.628016][ T5911] usb 2-1: New USB device strings: Mfr=124, Product=102, SerialNumber=3 [ 1265.740000][ T5911] usb 2-1: Product: syz [ 1265.754886][ T5911] usb 2-1: Manufacturer: syz [ 1265.769805][ T5911] usb 2-1: SerialNumber: syz [ 1266.097194][ T5911] usb 2-1: config 0 descriptor?? [ 1266.183925][T20432] batadv_slave_0: entered promiscuous mode [ 1266.189979][T20432] batadv_slave_0: left allmulticast mode [ 1266.473111][ T5911] usb 2-1: USB disconnect, device number 24 [ 1266.787595][T20437] vivid-000: ================= START STATUS ================= [ 1266.799440][T20437] vivid-000: Test Pattern: 75% Colorbar [ 1266.825037][T20437] vivid-000: Fill Percentage of Frame: 100 [ 1266.855669][T20437] vivid-000: Horizontal Movement: No Movement [ 1266.880523][T20437] vivid-000: Vertical Movement: No Movement [ 1266.888736][T20437] vivid-000: OSD Text Mode: Counters Only [ 1266.894963][T20437] vivid-000: Show Border: false [ 1266.899959][T20437] vivid-000: Show Square: false [ 1266.905663][T20437] vivid-000: Sensor Flipped Horizontally: false [ 1266.913762][T20437] vivid-000: Sensor Flipped Vertically: false [ 1266.926693][T20437] vivid-000: Insert SAV Code in Image: false [ 1266.933953][T20437] vivid-000: Insert EAV Code in Image: false [ 1266.937014][T20440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3852'. [ 1267.020007][T20437] vivid-000: Insert Video Guard Band: false [ 1267.081432][T20437] vivid-000: Reduced Framerate: false [ 1267.111239][T20437] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1267.144532][T20437] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1267.244157][T20437] vivid-000: Enable Capture Cropping: true grabbed [ 1267.266525][T20437] vivid-000: Enable Capture Composing: true grabbed [ 1267.277631][T20437] vivid-000: Enable Capture Scaler: true grabbed [ 1267.317694][T20437] vivid-000: Timestamp Source: End of Frame [ 1267.342484][T20437] vivid-000: Colorspace: Rec. 709 [ 1267.364012][T20437] vivid-000: Transfer Function: Default [ 1267.378538][T20437] vivid-000: Y'CbCr Encoding: Default [ 1267.388974][T20437] vivid-000: HSV Encoding: Hue 0-179 [ 1267.400215][T20437] vivid-000: Quantization: Default [ 1267.422477][T20437] vivid-000: Apply Alpha To Red Only: false [ 1267.443701][T20437] vivid-000: Standard Aspect Ratio: 4x3 [ 1267.463588][T20437] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1267.482294][T20437] vivid-000: DV Timings: 640x480p59 inactive [ 1267.508949][T20437] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1267.532554][T20437] vivid-000: Maximum EDID Blocks: 2 [ 1267.547168][T20437] vivid-000: Limited RGB Range (16-235): true [ 1267.613442][T20437] vivid-000: Rx RGB Quantization Range: Automatic [ 1267.627831][T20437] vivid-000: Power Present: 0x00000001 [ 1267.661056][T20437] tpg source WxH: 1280x720 (Y'CbCr) [ 1267.676366][T20437] tpg field: 1 [ 1267.694021][T20437] tpg crop: (0,0)/64x64 [ 1267.709184][T20437] tpg compose: (0,0)/16x16 [ 1267.716988][T20437] tpg colorspace: 12 [ 1267.723149][T20437] tpg transfer function: 0/6 [ 1267.731082][T20437] tpg Y'CbCr encoding: 3/3 [ 1267.735809][T20437] tpg quantization: 2/2 [ 1267.741457][T20437] tpg RGB range: 0/1 [ 1267.748184][T20437] vivid-000: ================== END STATUS ================== [ 1267.901144][ T5911] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1268.040385][T20452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3856'. [ 1268.059764][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 1268.077374][ T5911] usb 2-1: config index 0 descriptor too short (expected 17170, got 18) [ 1268.106432][ T5911] usb 2-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 1268.136860][ T5911] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 1268.170741][ T5911] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 1268.219410][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.256036][ T5911] usb 2-1: Product: syz [ 1268.276036][ T5911] usb 2-1: Manufacturer: syz [ 1268.307306][ T5911] usb 2-1: SerialNumber: syz [ 1268.335935][ T5911] usb 2-1: config 0 descriptor?? [ 1268.425869][ T5911] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 1269.416997][T20471] binder: 20470:20471 ioctl c00c6211 0 returned -14 [ 1269.681198][ T5911] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1269.834299][ T5911] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1269.843917][ T5911] usb 5-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 1269.854591][ T5911] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1269.863878][ T5911] usb 5-1: config 1 has no interface number 1 [ 1269.870217][ T5911] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1269.885328][ T5911] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1269.906194][ T5911] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1269.919592][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.927901][ T5911] usb 5-1: Product: syz [ 1269.934770][ T5911] usb 5-1: Manufacturer: syz [ 1269.966710][ T5911] usb 5-1: SerialNumber: syz [ 1270.224851][T20471] fuse: Bad value for 'fd' [ 1270.247786][ T5911] usb 5-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1270.272311][ T5911] usb 5-1: MIDIStreaming interface descriptor not found [ 1270.358513][ T5911] usb 5-1: USB disconnect, device number 8 [ 1270.473289][ T7605] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1270.587181][ T9962] usb 2-1: USB disconnect, device number 25 [ 1270.643603][ T7605] usb 1-1: config index 0 descriptor too short (expected 8192, got 18) [ 1270.653254][ T7605] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.668306][ T7605] usb 1-1: config 0 has no interfaces? [ 1270.684854][ T7605] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1270.721231][ T7605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.749708][ T7605] usb 1-1: Product: syz [ 1270.780123][ T7605] usb 1-1: Manufacturer: syz [ 1270.794831][ T7605] usb 1-1: SerialNumber: syz [ 1270.817018][ T7605] usb 1-1: config 0 descriptor?? [ 1271.873135][T16099] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1271.968820][T20478] bond0: (slave netdevsim0): Releasing backup interface [ 1272.019572][T20478] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.074985][T16099] usb 5-1: config 5 has an invalid interface number: 1 but max is 0 [ 1272.091071][T16099] usb 5-1: config 5 has no interface number 0 [ 1272.097299][T16099] usb 5-1: config 5 interface 1 has no altsetting 0 [ 1272.206620][T16099] usb 5-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice=d5.66 [ 1272.241570][T16099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.280724][T16099] usb 5-1: Product: syz [ 1272.288387][T16099] usb 5-1: Manufacturer: ㍮皵줏懈ꮧ콿ֻ滋⺈忥ﲷ쪬㹂：굌ﴟ쏞ᇥ鿾鐖歠৽톨⯰闏แ㤟䏣빤鼘벥眡쀓쪠壦썂侘坼ꘜ⼦琽౛洟ᇚ쟬ꨮ㪋ﭵ借例퓹㺀攸ڌ꬛ﴝ䏘㭘ﻵ裲羼⁓穿頤र脎깬柙僴ឦ뷅⧖徆ᡏ뮐ꊯ쮋酶๣ẉ췊햒앨벧굲ꬱ㡍遐伿磻Ṏ떣䈽몧☁ᦢ霍풵ꕯ铑粗吙 [ 1272.447764][T16099] usb 5-1: SerialNumber: syz [ 1272.731105][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1272.747016][T16099] ftdi_sio 5-1:5.1: FTDI USB Serial Device converter detected [ 1272.768562][T16099] ftdi_sio ttyUSB0: unknown device type: 0xd566 [ 1272.802426][T16099] usb 5-1: USB disconnect, device number 9 [ 1272.827845][T16099] ftdi_sio 5-1:5.1: device disconnected [ 1273.012236][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1273.039297][ T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1273.048632][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.063190][ T10] usb 3-1: config 220 has no interface number 2 [ 1273.069857][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1273.090697][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1273.098084][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1273.105223][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1273.116508][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1273.150367][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.198907][ T10] usb 3-1: Product: syz [ 1273.212304][ T10] usb 3-1: Manufacturer: syz [ 1273.224289][ T10] usb 3-1: SerialNumber: syz [ 1273.791425][ T9962] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1273.991819][ T7605] usb 1-1: USB disconnect, device number 26 [ 1273.992508][ T9962] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1274.046254][ T9962] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.080880][ T9962] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1274.108380][ T9962] usb 2-1: config 1 has no interface number 1 [ 1274.141507][ T9962] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1274.198227][ T9962] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1274.213578][ T9962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.230561][ T9962] usb 2-1: Product: syz [ 1274.240975][ T9962] usb 2-1: Manufacturer: syz [ 1274.260437][ T9962] usb 2-1: SerialNumber: syz [ 1274.463828][T16099] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1274.653956][T16099] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1274.666291][T16099] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.734652][T16099] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1274.790970][T16099] usb 4-1: config 1 has no interface number 1 [ 1274.833829][T16099] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1274.939980][T16099] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1274.951502][T16099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.001851][T16099] usb 4-1: Product: syz [ 1275.049184][T16099] usb 4-1: Manufacturer: syz [ 1275.054509][T16099] usb 4-1: SerialNumber: syz [ 1275.205763][T20516] ptrace attach of "./syz-executor exec"[16061] was attempted by "./syz-executor exec"[20516] [ 1275.220414][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1275.220431][ T30] audit: type=1326 audit(1752924645.177:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.4.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f64f8e9a9 code=0x7ffc0000 [ 1275.261371][ T30] audit: type=1326 audit(1752924645.177:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.4.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f3f64f8e9a9 code=0x7ffc0000 [ 1275.471935][ T30] audit: type=1326 audit(1752924645.177:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.4.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f64f8e9a9 code=0x7ffc0000 [ 1275.504617][ T10] usb 3-1: selecting invalid altsetting 0 [ 1275.540252][ T10] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1275.586864][ T10] usb 3-1: No valid video chain found. [ 1275.732386][ T10] usb 3-1: selecting invalid altsetting 0 [ 1275.738206][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1275.757047][ T30] audit: type=1326 audit(1752924645.177:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.4.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f64f8e9a9 code=0x7ffc0000 [ 1276.010483][ T10] usb 3-1: USB disconnect, device number 25 [ 1276.602511][T20534] binder: 20532:20534 ioctl c00c6211 0 returned -14 [ 1276.895198][ T5926] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1277.067872][ T5926] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1277.133339][ T5926] usb 5-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 1277.151510][ T9962] usb 2-1: USB disconnect, device number 26 [ 1277.206388][ T5926] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1277.271318][ T5926] usb 5-1: config 1 has no interface number 1 [ 1277.271381][ T5926] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1277.271421][ T5926] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1277.284029][ T5926] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1277.284064][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.284086][ T5926] usb 5-1: Product: syz [ 1277.284103][ T5926] usb 5-1: Manufacturer: syz [ 1277.284120][ T5926] usb 5-1: SerialNumber: syz [ 1277.522546][T20534] fuse: Bad value for 'fd' [ 1277.617820][ T5926] usb 5-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1277.617880][ T5926] usb 5-1: MIDIStreaming interface descriptor not found [ 1277.628619][T16099] usb 4-1: USB disconnect, device number 28 [ 1277.838534][ T5926] usb 5-1: USB disconnect, device number 10 [ 1277.870261][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1278.081412][ T6148] udevd[6148]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1278.981146][ T1211] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1279.147218][ T1211] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1279.159049][ T1211] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1279.178581][ T1211] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1279.384755][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.628485][ T1211] usb 3-1: GET_CAPABILITIES returned 0 [ 1279.635363][ T1211] usbtmc 3-1:16.0: can't read capabilities [ 1280.001181][ T7605] usb 3-1: USB disconnect, device number 26 [ 1280.372703][T16099] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1280.591906][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1280.643713][T16099] usb 4-1: config 0 has no interfaces? [ 1280.750723][T16099] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1280.766128][T16099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.778700][T16099] usb 4-1: Product: syz [ 1280.783726][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1280.811723][T16099] usb 4-1: Manufacturer: syz [ 1280.823650][T16099] usb 4-1: SerialNumber: syz [ 1280.828434][ T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1280.861631][T16099] usb 4-1: config 0 descriptor?? [ 1280.881135][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.926076][ T10] usb 5-1: config 220 has no interface number 2 [ 1280.941392][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1281.015599][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1281.045928][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1281.073377][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1281.098930][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1281.147567][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.221441][ T10] usb 5-1: Product: syz [ 1281.255079][ T10] usb 5-1: Manufacturer: syz [ 1281.302556][ T10] usb 5-1: SerialNumber: syz [ 1281.631346][T16099] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1281.772040][ T7605] usb 4-1: USB disconnect, device number 29 [ 1281.946112][T16099] usb 1-1: device descriptor read/64, error -71 [ 1282.041244][ T9] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1282.215648][T16099] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1282.236473][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1282.305114][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.320527][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1282.329798][ T9] usb 2-1: config 1 has no interface number 1 [ 1282.336171][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1282.355206][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1282.364649][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.373510][ T9] usb 2-1: Product: syz [ 1282.378086][ T9] usb 2-1: Manufacturer: syz [ 1282.382835][ T9] usb 2-1: SerialNumber: syz [ 1282.401263][T16099] usb 1-1: device descriptor read/64, error -71 [ 1282.524336][T16099] usb usb1-port1: attempt power cycle [ 1283.161412][T16099] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1283.215421][T16099] usb 1-1: device descriptor read/8, error -71 [ 1283.471163][T16099] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1283.524067][T16099] usb 1-1: device descriptor read/8, error -71 [ 1283.591970][ T10] usb 5-1: selecting invalid altsetting 0 [ 1283.619843][ T10] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1283.660491][T20609] binder: 20608:20609 ioctl c00c6211 0 returned -14 [ 1283.662267][T16099] usb usb1-port1: unable to enumerate USB device [ 1283.676460][ T10] usb 5-1: No valid video chain found. [ 1283.738976][ T10] usb 5-1: selecting invalid altsetting 0 [ 1283.749568][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1283.769761][ T9] usb 2-1: USB disconnect, device number 27 [ 1283.810431][ T10] usb 5-1: USB disconnect, device number 11 [ 1284.251115][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1284.413420][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1284.413452][ T10] usb 5-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 1284.413476][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1284.413500][ T10] usb 5-1: config 1 has no interface number 1 [ 1284.413637][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1284.413679][ T10] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1284.416773][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1284.417859][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.418967][ T10] usb 5-1: Product: syz [ 1284.420072][ T10] usb 5-1: Manufacturer: syz [ 1284.428225][ T10] usb 5-1: SerialNumber: syz [ 1284.761759][T20609] fuse: Bad value for 'fd' [ 1284.783075][ T10] usb 5-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1284.868890][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 1284.901236][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1285.059289][ T9] usb 1-1: config 0 has no interfaces? [ 1285.115859][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1285.183645][T20622] netlink: 'syz.3.3892': attribute type 13 has an invalid length. [ 1285.295763][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.320798][ T10] usb 5-1: USB disconnect, device number 12 [ 1285.360014][ T9] usb 1-1: Product: syz [ 1285.391641][ T9] usb 1-1: Manufacturer: syz [ 1285.396312][ T9] usb 1-1: SerialNumber: syz [ 1285.599034][ T9] usb 1-1: config 0 descriptor?? [ 1286.231268][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1286.293071][T20622] mac80211_hwsim hwsim21 wlan0: left promiscuous mode [ 1286.316939][T20622] team0: left promiscuous mode [ 1286.325239][T20622] team_slave_0: left promiscuous mode [ 1286.371101][T20622] team_slave_1: left promiscuous mode [ 1286.403681][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1286.415863][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1286.440090][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1286.470155][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.504119][T20629] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1286.588626][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1286.982047][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1286.990918][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1287.274809][T20629] fuse: Unknown parameter 'Շ [ 1287.274809][T20629] 4vwsμ|Ͱ:r7zv0xffffffffffffffff' [ 1287.310653][T20629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.323509][T20629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.579788][ T10] usb 5-1: USB disconnect, device number 13 [ 1288.280658][ T1211] usb 1-1: USB disconnect, device number 31 [ 1288.791191][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1288.933360][T20663] binder: 20662:20663 ioctl c00c6211 0 returned -14 [ 1288.982709][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1289.012593][T20665] syz.2.3901: attempt to access beyond end of device [ 1289.012593][T20665] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1289.077472][ T10] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1289.131347][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.141990][ T10] usb 1-1: config 220 has no interface number 2 [ 1289.148567][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1289.161870][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1289.168675][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1289.175681][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1289.185386][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1289.194599][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.202799][ T10] usb 1-1: Product: syz [ 1289.206966][ T10] usb 1-1: Manufacturer: syz [ 1289.221213][ T10] usb 1-1: SerialNumber: syz [ 1289.304555][ T1211] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1289.379432][T20668] binder: 20667:20668 ioctl c00c6211 0 returned -14 [ 1289.503918][ T1211] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1289.513209][ T1211] usb 4-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 1289.673417][ T9962] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1289.694595][ T1211] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1289.709623][ T1211] usb 4-1: config 1 has no interface number 1 [ 1289.718051][ T1211] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1289.826459][ T1211] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1289.845876][ T9962] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1289.856277][ T9962] usb 2-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 1289.878277][ T9962] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1289.903587][ T1211] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1289.916680][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.933684][ T1211] usb 4-1: Product: syz [ 1289.939222][ T9962] usb 2-1: config 1 has no interface number 1 [ 1289.951236][ T1211] usb 4-1: Manufacturer: syz [ 1289.960567][ T9962] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1289.975489][ T1211] usb 4-1: SerialNumber: syz [ 1290.043096][ T9962] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1290.061711][ T9962] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1290.071794][ T9962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.080124][ T9962] usb 2-1: Product: syz [ 1290.084972][ T9962] usb 2-1: Manufacturer: syz [ 1290.106868][ T9962] usb 2-1: SerialNumber: syz [ 1290.205631][T20663] fuse: Bad value for 'fd' [ 1290.241714][ T1211] usb 4-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1290.251287][ T1211] usb 4-1: MIDIStreaming interface descriptor not found [ 1290.372814][T20668] fuse: Bad value for 'fd' [ 1290.397192][ T9962] usb 2-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1290.418327][ T1211] usb 4-1: USB disconnect, device number 30 [ 1290.429605][ T9962] usb 2-1: MIDIStreaming interface descriptor not found [ 1290.533332][ T9962] usb 2-1: USB disconnect, device number 28 [ 1290.629746][T20398] udevd[20398]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1290.786367][T20398] udevd[20398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1291.251364][ T9962] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1291.401180][ T9962] usb 2-1: Using ep0 maxpacket: 8 [ 1291.410690][ T9962] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 1291.420496][ T9962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.428723][ T1211] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1291.440847][ T9962] usb 2-1: Product: syz [ 1291.445709][ T9962] usb 2-1: Manufacturer: syz [ 1291.494958][ T9962] usb 2-1: SerialNumber: syz [ 1291.531561][ T9962] usb 2-1: config 0 descriptor?? [ 1291.546829][ T9962] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 1291.552800][ T10] usb 1-1: selecting invalid altsetting 0 [ 1291.562324][ T5911] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1291.582975][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.608088][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.614915][ T10] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1291.627086][ T10] usb 1-1: No valid video chain found. [ 1291.635073][ T9962] dvb-usb: bulk message failed: -22 (2/0) [ 1291.645783][ T10] usb 1-1: selecting invalid altsetting 0 [ 1291.657289][ T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1291.706413][ T9962] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1291.717606][ T1211] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1291.959130][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 1291.961348][ T10] usb 1-1: USB disconnect, device number 32 [ 1291.970524][ T9962] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 1292.024305][ T1211] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1292.068542][ T9962] usb 2-1: media controller created [ 1292.074616][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.086162][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.097780][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.161454][ T5911] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1292.170579][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.192449][ T9962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1292.214256][ T1211] usb 5-1: config 0 descriptor?? [ 1292.275270][ T5911] usb 4-1: config 0 descriptor?? [ 1292.296528][ T5911] hub 4-1:0.0: USB hub found [ 1292.322499][ T9962] dvb-usb: bulk message failed: -22 (1/0) [ 1292.328345][ T9962] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 1292.534915][ T5911] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1292.575389][ T9962] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 1292.650562][ T1211] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1292.687719][ T9962] dvb-usb: schedule remote query interval to 50 msecs. [ 1292.691111][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1292.704924][ T1211] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1292.715808][ T9962] dvb-usb: bulk message failed: -22 (2/0) [ 1292.747931][ T1211] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1292.761769][ T9962] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 1292.772720][ T7625] dvb-usb: bulk message failed: -22 (1/0) [ 1292.784709][ T7625] dvb-usb: error while querying for an remote control event. [ 1292.834945][ T5911] hid-generic 0003:046D:C31C.0038: item fetching failed at offset 0/1 [ 1292.858782][ T1211] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1292.871423][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1292.885396][ T9962] usb 2-1: USB disconnect, device number 29 [ 1292.886757][ T10] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1292.900825][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.911999][ T5911] hid-generic 0003:046D:C31C.0038: probe with driver hid-generic failed with error -22 [ 1292.925837][ T1211] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1292.938206][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 1292.944165][ T5926] dvb-usb: error while querying for an remote control event. [ 1292.954098][ T1211] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1292.969832][ T10] usb 3-1: config 0 has no interface number 0 [ 1293.009804][ T1211] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1293.014584][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1293.029376][T20683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3910'. [ 1293.088201][ T1211] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1293.089230][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.136512][ T10] usb 3-1: Product: syz [ 1293.151482][ T9] usb 4-1: USB disconnect, device number 31 [ 1293.178496][ T10] usb 3-1: Manufacturer: syz [ 1293.207197][ T1211] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1293.215532][ T10] usb 3-1: SerialNumber: syz [ 1293.277125][ T10] usb 3-1: config 0 descriptor?? [ 1293.283070][ T1211] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1293.294519][T20701] dlm: Unknown command passed to DLM device : 16 [ 1293.294519][T20701] [ 1293.304891][ T10] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 1293.320479][ T10] usb 3-1: No valid video chain found. [ 1293.348112][ T9962] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 1293.391421][ T1211] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1293.507027][ T1211] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1293.573776][ T10] usb 3-1: USB disconnect, device number 27 [ 1293.609953][ T1211] usb 5-1: USB disconnect, device number 14 [ 1293.777738][T20707] fido_id[20707]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1293.795703][ T9962] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1293.829487][T20713] sock: sock_timestamping_bind_phc: sock not bind to device [ 1294.008180][ T9962] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1294.017858][ T9962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.026518][ T9962] usb 2-1: Product: syz [ 1294.030747][ T9962] usb 2-1: Manufacturer: syz [ 1294.095876][ T9962] usb 2-1: SerialNumber: syz [ 1294.131409][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1294.152558][ T9962] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1294.212994][ T1211] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1294.304941][ T10] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1294.315199][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.341757][ T10] usb 4-1: config 0 has no interface number 0 [ 1294.367011][ T10] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1294.378530][ T10] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1294.408642][ T10] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1294.422782][T20722] FAULT_INJECTION: forcing a failure. [ 1294.422782][T20722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1294.474636][ T9962] usb 2-1: USB disconnect, device number 30 [ 1294.514247][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.522282][T20722] CPU: 1 UID: 0 PID: 20722 Comm: syz.2.3916 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1294.522316][T20722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1294.522330][T20722] Call Trace: [ 1294.522339][T20722] [ 1294.522348][T20722] dump_stack_lvl+0x189/0x250 [ 1294.522383][T20722] ? __pfx____ratelimit+0x10/0x10 [ 1294.522408][T20722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1294.522435][T20722] ? __pfx__printk+0x10/0x10 [ 1294.522480][T20722] should_fail_ex+0x414/0x560 [ 1294.522510][T20722] strncpy_from_user+0x36/0x290 [ 1294.522537][T20722] getname_flags+0xf3/0x540 [ 1294.522565][T20722] user_path_at+0x24/0x60 [ 1294.522593][T20722] do_utimes+0x131/0x2a0 [ 1294.522623][T20722] ? __pfx_do_utimes+0x10/0x10 [ 1294.522651][T20722] ? __fget_files+0x3a0/0x420 [ 1294.522684][T20722] __x64_sys_utimensat+0x14f/0x230 [ 1294.522717][T20722] ? __pfx___x64_sys_utimensat+0x10/0x10 [ 1294.522755][T20722] ? do_syscall_64+0xbe/0x3b0 [ 1294.522789][T20722] do_syscall_64+0xfa/0x3b0 [ 1294.522816][T20722] ? lockdep_hardirqs_on+0x9c/0x150 [ 1294.522843][T20722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.522869][T20722] ? clear_bhb_loop+0x60/0xb0 [ 1294.522899][T20722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.522923][T20722] RIP: 0033:0x7f3ecab8e9a9 [ 1294.522946][T20722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1294.522977][T20722] RSP: 002b:00007f3ecb944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 1294.523004][T20722] RAX: ffffffffffffffda RBX: 00007f3ecadb6160 RCX: 00007f3ecab8e9a9 [ 1294.523022][T20722] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1294.523038][T20722] RBP: 00007f3ecb944090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.523055][T20722] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1294.523070][T20722] R13: 0000000000000000 R14: 00007f3ecadb6160 R15: 00007f3ecaedfa28 [ 1294.523106][T20722] [ 1294.730342][T20723] binder: 20721:20723 ioctl c00c6211 0 returned -14 [ 1294.736392][ T10] usb 4-1: Product: syz [ 1294.746358][ T10] usb 4-1: Manufacturer: syz [ 1294.751675][ T10] usb 4-1: SerialNumber: syz [ 1294.757967][T20701] input: syz1 as /devices/virtual/input/input33 [ 1294.788443][ T10] usb 4-1: config 0 descriptor?? [ 1295.051615][ T5911] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1295.384579][ T1211] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1295.393073][ T5911] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1295.402313][ T1211] ath9k_htc: Failed to initialize the device [ 1295.408464][ T5911] usb 5-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 1295.435695][ T9962] usb 2-1: ath9k_htc: USB layer deinitialized [ 1295.534007][ T5911] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1295.570428][ T5911] usb 5-1: config 1 has no interface number 1 [ 1295.591072][ T10] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1295.595934][ T5911] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1295.634810][ T5911] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1295.653089][ T10] usb 4-1: USB disconnect, device number 32 [ 1295.680337][ T5911] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1295.710420][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.734829][ T5911] usb 5-1: Product: syz [ 1295.739072][ T5911] usb 5-1: Manufacturer: syz [ 1295.831220][ T5911] usb 5-1: SerialNumber: syz [ 1296.091074][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1296.278332][T20723] fuse: Bad value for 'fd' [ 1296.375974][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1296.442294][ T5911] usb 5-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1296.479613][ T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1296.489575][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.500217][ T9] usb 2-1: config 220 has no interface number 2 [ 1296.506814][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1296.520350][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1296.549382][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1296.559214][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1296.593183][ T5911] usb 5-1: MIDIStreaming interface descriptor not found [ 1296.725651][ T5911] usb 5-1: USB disconnect, device number 15 [ 1296.840947][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1296.893517][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1296.902814][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.911143][ T9] usb 2-1: Product: syz [ 1296.915346][ T9] usb 2-1: Manufacturer: syz [ 1296.920004][ T9] usb 2-1: SerialNumber: syz [ 1298.531703][ T5911] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1298.727425][ T5911] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 1298.746769][ T5911] usb 1-1: config 0 has no interface number 0 [ 1298.753092][ T1211] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1298.781542][ T5911] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 1298.811498][ T5911] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1298.842535][ T5911] usb 1-1: config 0 interface 48 has no altsetting 0 [ 1298.856752][ T5911] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1298.883657][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.892063][ T9962] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1298.906703][ T1211] usb 4-1: device descriptor read/64, error -71 [ 1298.927288][ T5911] usb 1-1: config 0 descriptor?? [ 1299.061700][ T9962] usb 5-1: Using ep0 maxpacket: 32 [ 1299.073326][ T9962] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1299.085391][ T9962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1299.100257][ T9962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1299.121303][ T9962] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1299.135987][ T9962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.149105][ T9962] usb 5-1: config 0 descriptor?? [ 1299.154476][ T1211] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1299.213669][T20761] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1299.226397][ T9962] hub 5-1:0.0: USB hub found [ 1299.232065][ T9] usb 2-1: selecting invalid altsetting 0 [ 1299.257549][ T9] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1299.309069][ T9] usb 2-1: No valid video chain found. [ 1299.336468][ T9] usb 2-1: selecting invalid altsetting 0 [ 1299.341388][ T1211] usb 4-1: device descriptor read/64, error -71 [ 1299.358050][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1299.404690][ T9] usb 2-1: USB disconnect, device number 31 [ 1299.437040][ T9962] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1299.472304][ T1211] usb usb4-port1: attempt power cycle [ 1299.653339][ T9962] usbhid 5-1:0.0: can't add hid device: -71 [ 1299.666466][ T9962] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1300.005026][ T1211] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1300.412583][ T9962] usb 5-1: USB disconnect, device number 16 [ 1300.418705][ T1211] usb 4-1: device descriptor read/8, error -71 [ 1300.431493][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.440528][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.638396][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3936'. [ 1300.681429][ T1211] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1300.714547][ T1211] usb 4-1: device descriptor read/8, error -71 [ 1300.732121][T20784] team0: entered promiscuous mode [ 1300.743477][T20784] team_slave_0: entered promiscuous mode [ 1300.760443][T20784] team_slave_1: entered promiscuous mode [ 1300.775144][T20784] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1300.790923][T20784] bridge0: port 3(macvlan2) entered blocking state [ 1300.805637][T20784] bridge0: port 3(macvlan2) entered disabled state [ 1300.822364][T20784] macvlan2: entered allmulticast mode [ 1300.827806][T20784] team0: entered allmulticast mode [ 1300.843887][ T1211] usb usb4-port1: unable to enumerate USB device [ 1300.844361][T20784] team_slave_0: entered allmulticast mode [ 1300.879661][T20784] team_slave_1: entered allmulticast mode [ 1300.929083][T20784] macvlan2: entered promiscuous mode [ 1300.956993][T20784] bridge0: port 3(macvlan2) entered blocking state [ 1300.963762][T20784] bridge0: port 3(macvlan2) entered forwarding state [ 1301.090373][ T5911] usb 1-1: string descriptor 0 read error: -71 [ 1301.108218][ T5911] cp210x 1-1:0.48: cp210x converter detected [ 1301.154413][ T5911] cp210x 1-1:0.48: failed to get vendor val 0x370b size 1: -71 [ 1301.174453][ T5911] cp210x 1-1:0.48: querying part number failed [ 1301.227167][ T5911] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1301.262114][ T5911] usb 1-1: USB disconnect, device number 33 [ 1301.345853][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1301.346439][ T5911] cp210x 1-1:0.48: device disconnected [ 1301.879443][T20801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3942'. [ 1303.711268][ T9962] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1303.873378][ T9962] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1303.881761][ T9962] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1303.890622][ T9962] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.903119][ T9962] usb 1-1: config 220 has no interface number 2 [ 1303.909498][ T9962] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1303.924703][ T9962] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1303.931787][ T9962] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1303.938733][ T9962] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1303.948237][ T9962] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1303.958126][ T9962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.985288][ T1211] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1304.032920][ T9962] usb 1-1: Product: syz [ 1304.037592][ T9962] usb 1-1: Manufacturer: syz [ 1304.043830][ T9962] usb 1-1: SerialNumber: syz [ 1304.175300][ T1211] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1304.184643][ T1211] usb 3-1: config 0 has no interface number 0 [ 1304.190766][ T1211] usb 3-1: config 0 interface 29 has no altsetting 0 [ 1304.225131][ T1211] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1304.234861][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.247187][ T1211] usb 3-1: Product: syz [ 1304.256960][ T1211] usb 3-1: Manufacturer: syz [ 1304.272803][ T1211] usb 3-1: SerialNumber: syz [ 1304.313850][ T1211] usb 3-1: config 0 descriptor?? [ 1304.606465][ T1211] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels) [ 1304.887012][T20820] IPVS: Error connecting to the multicast addr [ 1305.968543][ T9962] usb 1-1: selecting invalid altsetting 0 [ 1306.024434][ T9962] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1306.093127][ T9962] usb 1-1: No valid video chain found. [ 1306.166910][ T9962] usb 1-1: selecting invalid altsetting 0 [ 1306.180370][ T9962] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1306.202753][ T9962] usb 1-1: USB disconnect, device number 34 [ 1307.461506][ T1211] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1307.551696][ T1211] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1307.641230][T20858] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 1307.647873][T20858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1307.662576][ T1211] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 1307.682892][T20858] vhci_hcd vhci_hcd.0: Device attached [ 1307.751466][ T1211] usb 3-1: USB disconnect, device number 28 [ 1307.765519][T20858] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 1307.772175][T20858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1307.801331][ T7625] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1307.810374][T20863] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 1307.817027][T20863] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1307.892343][T20863] vhci_hcd vhci_hcd.0: Device attached [ 1307.896976][T20858] vhci_hcd vhci_hcd.0: Device attached [ 1307.937341][T20866] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1307.941482][ T9962] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 1307.980881][T20858] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 1307.987539][T20858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1308.001303][ T7625] usb 4-1: Using ep0 maxpacket: 32 [ 1308.030607][ T7625] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1308.042419][ T7625] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 1308.045826][T20858] vhci_hcd vhci_hcd.0: Device attached [ 1308.066642][ T7625] usb 4-1: config 7 has no interface number 0 [ 1308.101287][ T7625] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 1308.134910][T20858] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 1308.137848][ T7625] usb 4-1: config 7 interface 187 has no altsetting 0 [ 1308.141560][T20858] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1308.166640][T20863] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1308.183804][T20863] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1308.192426][ T7625] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1308.202020][ T7625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.210088][ T7625] usb 4-1: Product: syz [ 1308.214712][ T7625] usb 4-1: Manufacturer: syz [ 1308.224146][ T7625] usb 4-1: SerialNumber: syz [ 1308.236186][T20856] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1308.251117][T20858] vhci_hcd vhci_hcd.0: Device attached [ 1308.257313][T20863] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1308.501110][T20861] vhci_hcd: connection closed [ 1308.501735][T20869] vhci_hcd: connection closed [ 1308.506520][T20871] vhci_hcd: connection closed [ 1308.511633][T20864] vhci_hcd: connection closed [ 1308.522284][T20859] vhci_hcd: connection reset by peer [ 1308.532858][ T7625] usb 4-1: Cannot retrieve CPort count: 0 [ 1308.567735][ T13] vhci_hcd: stop threads [ 1308.573733][ T7625] usb 4-1: Cannot retrieve CPort count: -5 [ 1308.582141][ T13] vhci_hcd: release socket [ 1308.593511][ T7625] es2_ap_driver 4-1:7.187: probe with driver es2_ap_driver failed with error -5 [ 1308.603289][ T13] vhci_hcd: disconnect device [ 1308.609456][ T13] vhci_hcd: stop threads [ 1308.632191][ T13] vhci_hcd: release socket [ 1308.650097][ T13] vhci_hcd: disconnect device [ 1308.661534][ T13] vhci_hcd: stop threads [ 1308.665965][ T13] vhci_hcd: release socket [ 1308.684379][ T13] vhci_hcd: disconnect device [ 1308.725269][T20856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.736278][T20856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.776509][ T13] vhci_hcd: stop threads [ 1308.798990][ T13] vhci_hcd: release socket [ 1308.832236][T20876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'. [ 1308.891129][ T13] vhci_hcd: disconnect device [ 1308.901377][ T13] vhci_hcd: stop threads [ 1308.905701][ T13] vhci_hcd: release socket [ 1308.920492][ T13] vhci_hcd: disconnect device [ 1309.636997][ T7625] usb 4-1: USB disconnect, device number 37 [ 1309.748608][T20888] bridge_slave_0: default FDB implementation only supports local addresses [ 1309.812607][T20891] lo: entered allmulticast mode [ 1309.868711][T20891] tunl0: entered allmulticast mode [ 1309.909929][T20894] input: syz1 as /devices/virtual/input/input35 [ 1310.028282][T20891] gre0: entered allmulticast mode [ 1310.420490][T20891] gretap0: entered allmulticast mode [ 1310.490905][T20891] erspan0: entered allmulticast mode [ 1310.499023][T20891] ip_vti0: entered allmulticast mode [ 1310.611841][T20891] ip6_vti0: entered allmulticast mode [ 1310.671109][ T5911] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1310.847499][T20891] sit0: entered allmulticast mode [ 1310.884102][T20891] ip6tnl0: entered allmulticast mode [ 1310.905594][T20891] ip6gre0: entered allmulticast mode [ 1310.932885][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.943362][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1310.963061][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1311.038811][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1311.056247][ T5911] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1311.066296][T20891] syz_tun: entered allmulticast mode [ 1311.078486][T20891] ip6gretap0: entered allmulticast mode [ 1311.089880][T20891] bridge0: port 3(macvlan2) entered disabled state [ 1311.096607][T20891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.104267][T20891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.112639][ T5911] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1311.120673][ T5911] usb 5-1: Manufacturer: syz [ 1311.209928][ T5911] usb 5-1: config 0 descriptor?? [ 1311.228013][T20891] bridge0: entered allmulticast mode [ 1311.335440][T20891] vcan0: entered allmulticast mode [ 1311.446617][T20891] bond0: entered allmulticast mode [ 1311.481284][T20891] bond_slave_0: entered allmulticast mode [ 1311.517707][T20891] bond_slave_1: entered allmulticast mode [ 1311.581382][T20891] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1311.783852][T20891] tipc: Resetting bearer [ 1311.813832][T20891] dummy0: entered allmulticast mode [ 1311.821058][ T5911] rc_core: IR keymap rc-hauppauge not found [ 1311.827004][ T5911] Registered IR keymap rc-empty [ 1311.886544][ T5911] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1311.902665][T20891] nlmon0: entered allmulticast mode [ 1311.909414][T20891] caif0: entered allmulticast mode [ 1311.934238][T20891] batadv0: entered allmulticast mode [ 1311.944778][T20891] vxcan0: entered allmulticast mode [ 1311.950883][T20891] vxcan1: entered allmulticast mode [ 1311.972681][T20891] veth0: entered allmulticast mode [ 1312.001559][ T5911] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1312.023280][ T5911] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1312.043529][T20911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.053038][T20911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.074230][T20891] veth1: entered allmulticast mode [ 1312.125711][ T5911] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input36 [ 1312.170706][T20891] wg0: entered allmulticast mode [ 1312.180119][T20891] wg1: entered allmulticast mode [ 1312.230091][T20891] wg2: entered allmulticast mode [ 1312.242196][T20891] veth0_to_bridge: entered allmulticast mode [ 1312.256547][ T5911] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1312.301703][T20891] veth1_to_bridge: entered allmulticast mode [ 1312.348400][ T5911] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1312.371419][ T5911] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1312.386352][T20891] veth0_to_bond: entered allmulticast mode [ 1312.405870][T20891] veth1_to_bond: entered allmulticast mode [ 1312.415193][ T5911] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1312.441336][ T5911] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1312.453026][T20891] veth0_to_team: entered allmulticast mode [ 1312.461609][ T5911] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1312.486119][T20891] veth1_to_team: entered allmulticast mode [ 1312.492812][ T5911] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1312.552231][ T5911] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1312.582983][T20891] veth0_to_batadv: entered allmulticast mode [ 1312.599796][ T5911] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1312.630833][T20891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.640666][ T5911] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1312.662938][T20891] batadv_slave_0: entered allmulticast mode [ 1312.694168][ T5911] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1312.705435][T20891] veth1_to_batadv: entered allmulticast mode [ 1312.752681][T20891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.767211][ T5911] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1312.793899][ T5911] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1312.805827][T20891] batadv_slave_1: entered allmulticast mode [ 1312.840444][ T5911] usb 5-1: USB disconnect, device number 17 [ 1312.853886][T20891] xfrm0: entered allmulticast mode [ 1312.917203][T20891] veth0_to_hsr: entered allmulticast mode [ 1312.995735][T20891] hsr_slave_0: entered allmulticast mode [ 1313.040327][T20891] veth1_to_hsr: entered allmulticast mode [ 1313.072791][ T9962] vhci_hcd: vhci_device speed not set [ 1313.088240][T20891] hsr_slave_1: entered allmulticast mode [ 1313.104550][T20891] hsr0: entered allmulticast mode [ 1313.118407][T20891] veth1_virt_wifi: entered allmulticast mode [ 1313.135717][T20891] veth0_virt_wifi: entered allmulticast mode [ 1313.146954][T20891] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1313.172754][T20891] veth1_vlan: entered allmulticast mode [ 1313.197684][T20891] veth0_vlan: entered allmulticast mode [ 1313.246810][T20891] vlan1: entered allmulticast mode [ 1313.256546][T20891] macvlan0: entered allmulticast mode [ 1313.273814][T20891] macvlan1: entered allmulticast mode [ 1313.293468][T20891] ipvlan0: entered allmulticast mode [ 1313.299028][T20891] ipvlan1: entered allmulticast mode [ 1313.306172][T20891] veth1_macvtap: entered allmulticast mode [ 1313.324230][T20891] veth0_macvtap: entered allmulticast mode [ 1313.367398][T20891] macvtap0: entered allmulticast mode [ 1313.399201][T20891] macsec0: entered allmulticast mode [ 1313.422481][T20891] geneve0: entered allmulticast mode [ 1313.451397][T20891] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.468806][T20891] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.487907][T20891] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.506661][T20891] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.525929][T20891] geneve1: entered allmulticast mode [ 1313.578684][T20891] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1313.598128][T20891] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 1313.609297][T20891] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 1313.645694][T20891] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 1313.658803][T20891] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 1313.680560][T20891] : entered allmulticast mode [ 1313.689731][T20891] team0: left promiscuous mode [ 1313.711771][T20891] team_slave_0: left promiscuous mode [ 1313.736710][T20891] team_slave_1: left promiscuous mode [ 1314.019560][ T5911] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1314.182150][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 1314.189715][ T5911] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1314.306573][ T5911] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1314.337415][ T5911] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1314.363066][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.482411][T16099] usb usb38-port1: attempt power cycle [ 1314.499456][ T5911] usb 1-1: Product: syz [ 1314.657943][ T5911] usb 1-1: Manufacturer: syz [ 1314.664196][ T5911] usb 1-1: SerialNumber: syz [ 1315.294139][T16099] usb usb38-port1: unable to enumerate USB device [ 1315.461952][ T5911] usb 1-1: USB disconnect, device number 35 [ 1315.926746][T20947] block device autoloading is deprecated and will be removed. [ 1315.934728][T20947] syz.1.3976: attempt to access beyond end of device [ 1315.934728][T20947] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1316.186282][T20949] bridge0: entered allmulticast mode [ 1317.061180][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.068473][ C1] bridge0: topology change detected, propagating [ 1317.075354][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.082637][ C1] bridge0: topology change detected, propagating [ 1319.632686][T20978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3987'. [ 1320.292217][T20993] tipc: Enabling of bearer rejected, already enabled [ 1322.861179][T21026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4000'. [ 1322.929038][T21018] vimc link validate: Scaler:src:510x56 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:1022x2160 (0x30314752, 8, 0, 0, 0) [ 1322.942618][T21026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4000'. [ 1322.951682][T21026] bridge: RTM_NEWNEIGH with invalid ether address [ 1325.142471][T21049] tipc: Enabling of bearer rejected, already enabled [ 1326.382293][ T30] audit: type=1326 audit(1752924696.337:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21054 comm="syz.4.4008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f64f8e9a9 code=0x0 [ 1327.601152][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1327.825702][ T10] usb 3-1: no configurations [ 1327.835288][ T10] usb 3-1: can't read configurations, error -22 [ 1328.041208][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1328.181444][T16058] Bluetooth: hci4: command 0x0406 tx timeout [ 1328.221948][ T10] usb 3-1: no configurations [ 1328.227491][ T10] usb 3-1: can't read configurations, error -22 [ 1328.252069][ T10] usb usb3-port1: attempt power cycle [ 1328.321142][ T9962] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1328.611279][ T9962] usb 4-1: config 150 has an invalid descriptor of length 148, skipping remainder of the config [ 1328.621844][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1328.646349][ T10] usb 3-1: no configurations [ 1328.651115][ T10] usb 3-1: can't read configurations, error -22 [ 1328.726220][ T9962] usb 4-1: config 150 has 0 interfaces, different from the descriptor's value: 1 [ 1328.785362][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1328.795528][ T9962] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1328.808555][ T9962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.847184][ T10] usb 3-1: no configurations [ 1328.851947][ T10] usb 3-1: can't read configurations, error -22 [ 1328.879100][ T10] usb usb3-port1: unable to enumerate USB device [ 1328.911037][ T9962] usb 4-1: Product: syz [ 1328.980290][ T9962] usb 4-1: Manufacturer: syz [ 1328.995081][T21103] binder: 21101:21103 ioctl c00c6211 0 returned -14 [ 1329.005368][T21104] binder: 21102:21104 ioctl c00c6211 0 returned -14 [ 1329.022760][ T9962] usb 4-1: SerialNumber: syz [ 1329.271209][T16099] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1329.279137][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1329.441129][T21106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1329.463062][T16099] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1329.812585][T16099] usb 2-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 1329.824944][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1329.833784][ T10] usb 5-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 1329.847974][T16099] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1329.858144][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1329.871548][T16099] usb 2-1: config 1 has no interface number 1 [ 1329.888376][ T10] usb 5-1: config 1 has no interface number 1 [ 1329.894740][T16099] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1329.910507][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1330.015034][T16099] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1330.029154][ T10] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1330.046625][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1330.056330][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.064628][ T10] usb 5-1: Product: syz [ 1330.069115][T16099] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1330.078504][T16099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.086715][ T10] usb 5-1: Manufacturer: syz [ 1330.091698][ T10] usb 5-1: SerialNumber: syz [ 1330.096543][T16099] usb 2-1: Product: syz [ 1330.105295][T16099] usb 2-1: Manufacturer: syz [ 1330.147875][T16099] usb 2-1: SerialNumber: syz [ 1330.359755][T21104] fuse: Bad value for 'fd' [ 1330.370632][T21103] fuse: Bad value for 'fd' [ 1330.421346][ T10] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1330.452388][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 1330.671390][T16099] usb 2-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1330.688341][ T10] usb 5-1: USB disconnect, device number 18 [ 1330.705508][T16099] usb 2-1: MIDIStreaming interface descriptor not found [ 1330.892840][T16099] usb 2-1: USB disconnect, device number 32 [ 1330.901609][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1331.039691][ T6153] udevd[6153]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1331.428408][T21118] netlink: 'syz.0.4026': attribute type 1 has an invalid length. [ 1331.465061][T21118] netlink: 'syz.0.4026': attribute type 2 has an invalid length. [ 1331.564977][T21118] netlink: 'syz.0.4026': attribute type 1 has an invalid length. [ 1331.591283][ T9962] usb 4-1: USB disconnect, device number 38 [ 1331.620426][T21118] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.4026'. [ 1331.981472][ T7625] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1332.253376][ T7625] usb 5-1: config 0 has no interfaces? [ 1332.266530][ T7625] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1332.279773][ T7625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.294849][ T7625] usb 5-1: Product: syz [ 1332.312471][ T7625] usb 5-1: Manufacturer: syz [ 1332.614716][ T7625] usb 5-1: SerialNumber: syz [ 1332.643823][ T7625] usb 5-1: config 0 descriptor?? [ 1333.771274][ T5911] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1333.819969][T21158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4038'. [ 1333.831662][T21158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4038'. [ 1333.984691][ T5911] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1333.993849][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.005621][ T5911] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1334.075433][T21160] binder: 21159:21160 ioctl c00c6211 0 returned -14 [ 1334.125191][ T5911] usb 3-1: config 1 has no interface number 1 [ 1334.139777][ T5911] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1334.161144][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1334.254426][ T5911] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1334.265764][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.273893][ T5911] usb 3-1: Product: syz [ 1334.286053][ T5911] usb 3-1: Manufacturer: syz [ 1334.306162][ T5911] usb 3-1: SerialNumber: syz [ 1334.321207][T16099] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1334.329015][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1334.355253][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 11 [ 1334.364897][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 1334.437569][ T10] usb 2-1: config 0 has no interface number 0 [ 1334.495715][T16099] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1334.524111][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1334.531206][T16099] usb 4-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 1334.673122][T16099] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1334.728925][T16099] usb 4-1: config 1 has no interface number 1 [ 1334.774687][T16099] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1334.908217][T16099] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1335.117319][T16099] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1335.145800][T16099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.276482][T16099] usb 4-1: Product: syz [ 1335.339123][T16099] usb 4-1: Manufacturer: syz [ 1335.409048][T16099] usb 4-1: SerialNumber: syz [ 1335.416303][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1335.519045][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.543854][ T7625] usb 5-1: USB disconnect, device number 19 [ 1335.687933][ T10] usb 2-1: Product: syz [ 1335.736165][ T10] usb 2-1: Manufacturer: syz [ 1335.744114][T21160] fuse: Bad value for 'fd' [ 1335.799337][ T10] usb 2-1: SerialNumber: syz [ 1335.838742][ T10] usb 2-1: config 0 descriptor?? [ 1335.916312][T21167] trusted_key: encrypted_key: insufficient parameters specified [ 1336.089931][ T10] smsc75xx v1.0.0 [ 1336.475907][ T5911] usb 3-1: USB disconnect, device number 33 [ 1336.508772][T16099] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1336.685339][T16099] usb 4-1: MIDIStreaming interface descriptor not found [ 1337.312014][T16099] usb 4-1: USB disconnect, device number 39 [ 1337.641169][ T5911] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1337.916326][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 1338.441317][T16099] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1338.633842][T16099] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1338.664207][T16099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.915828][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1338.942824][T16099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1338.958487][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1338.991404][T16099] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1339.074859][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1339.166915][T21185] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4046'. [ 1339.194178][T21185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1339.219596][T16099] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1339.231430][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1339.308418][T16099] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1339.357370][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1339.385957][T16099] usb 4-1: Manufacturer: syz [ 1339.419933][T16099] usb 4-1: config 0 descriptor?? [ 1339.446703][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1339.492005][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1339.511142][ T10] usb 2-1: USB disconnect, device number 33 [ 1339.603888][T16099] usbhid 4-1:0.0: can't add hid device: -71 [ 1339.610150][T16099] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1339.666712][T16099] usb 4-1: USB disconnect, device number 40 [ 1339.889904][T21190] sit1: entered allmulticast mode [ 1339.911879][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1340.087914][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1340.139319][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.169656][T16099] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1340.197892][ T10] usb 2-1: config 220 has no interface number 2 [ 1340.208061][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1340.240629][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1340.254335][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1340.338475][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1340.352466][ T5911] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1340.361111][T16099] usb 4-1: Using ep0 maxpacket: 16 [ 1340.377318][T16099] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1340.396996][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1340.402091][ T5911] usb 3-1: can't read configurations, error -71 [ 1340.417324][T16099] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.434020][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1340.451600][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.460117][T16099] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1340.478113][ T10] usb 2-1: Product: syz [ 1340.486957][ T10] usb 2-1: Manufacturer: syz [ 1340.530546][T16099] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1340.540248][T16099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.571291][T16099] usb 4-1: Product: syz [ 1340.585445][ T10] usb 2-1: SerialNumber: syz [ 1340.600450][T16099] usb 4-1: Manufacturer: syz [ 1340.617911][T16099] usb 4-1: SerialNumber: syz [ 1340.828318][T21185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.901632][T21185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.109431][T16099] usb 4-1: 0:2 : does not exist [ 1341.119647][T16099] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1341.194027][ T10] usb 2-1: selecting invalid altsetting 0 [ 1341.216344][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1341.227261][T16099] usb 4-1: USB disconnect, device number 41 [ 1341.271152][ T10] usb 2-1: No valid video chain found. [ 1341.323618][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.356874][ T10] usb 2-1: selecting invalid altsetting 0 [ 1341.371036][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1341.411389][ T10] usb 2-1: USB disconnect, device number 34 [ 1342.442325][T16099] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1342.650407][T16099] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1342.684789][T16099] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.731499][T16099] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1342.741168][ T5911] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1342.759456][T16099] usb 4-1: config 1 has no interface number 1 [ 1342.778010][T16099] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1342.816681][T16099] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1342.902028][T16099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.912033][T16099] usb 4-1: Product: syz [ 1342.916252][T16099] usb 4-1: Manufacturer: syz [ 1342.920910][T16099] usb 4-1: SerialNumber: syz [ 1342.927153][ T5911] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1342.959005][ T5911] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1343.027482][ T5911] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.099763][ T5911] usb 5-1: config 220 has no interface number 2 [ 1343.134136][ T5911] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1343.322691][ T5911] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1343.470406][ T5911] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1343.477882][ T5911] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1343.523129][T16099] usb 4-1: USB disconnect, device number 42 [ 1343.532738][ T5911] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1343.558786][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.581210][ T5911] usb 5-1: Product: syz [ 1343.585818][ T5911] usb 5-1: Manufacturer: syz [ 1343.590661][ T5911] usb 5-1: SerialNumber: syz [ 1343.810924][T21233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4058'. [ 1343.864029][T21235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4058'. [ 1343.953814][ T30] audit: type=1800 audit(1752924713.907:331): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4059" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1344.712425][ T7605] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1344.951478][ T7605] usb 4-1: Using ep0 maxpacket: 8 [ 1344.973277][ T7605] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1344.997324][ T7605] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1345.023531][ T7605] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1345.062879][ T7605] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1345.096476][ T7605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.126186][ T7605] usb 4-1: Product: syz [ 1345.136742][ T7605] usb 4-1: Manufacturer: syz [ 1345.157183][ T7605] usb 4-1: SerialNumber: syz [ 1345.534752][ T5911] usb 5-1: selecting invalid altsetting 0 [ 1345.583236][ T5911] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1345.613958][ T7605] cdc_ncm 4-1:1.0: bind() failure [ 1345.630905][ T5911] usb 5-1: No valid video chain found. [ 1345.643046][ T7605] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1345.658865][ T7605] cdc_ncm 4-1:1.1: bind() failure [ 1345.693103][ T5911] usb 5-1: selecting invalid altsetting 0 [ 1345.695496][ T7605] usb 4-1: USB disconnect, device number 43 [ 1345.821112][ T5911] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1345.952945][ T5911] usb 5-1: USB disconnect, device number 20 [ 1346.360719][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4067'. [ 1346.651135][ T5911] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1346.805558][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.842483][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.991222][ T5911] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1347.054508][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.105010][ T5911] usb 5-1: config 0 descriptor?? [ 1347.600155][ T5911] usbhid 5-1:0.0: can't add hid device: -71 [ 1347.610699][ T5911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1347.670093][ T7605] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1347.690428][ T5911] usb 5-1: USB disconnect, device number 21 [ 1347.863480][ T7605] usb 4-1: not running at top speed; connect to a high speed hub [ 1347.892044][ T7605] usb 4-1: config 9 has an invalid interface number: 10 but max is 3 [ 1347.900304][ T7605] usb 4-1: config 9 has an invalid interface number: 35 but max is 3 [ 1347.916374][ T7605] usb 4-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 1347.933124][ T7605] usb 4-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1347.943239][ T7605] usb 4-1: config 9 has an invalid descriptor of length 245, skipping remainder of the config [ 1347.959208][ T7605] usb 4-1: config 9 has 2 interfaces, different from the descriptor's value: 4 [ 1347.971819][T21276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4072'. [ 1347.980897][T21276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4072'. [ 1347.994318][T21276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4072'. [ 1348.003988][ T7605] usb 4-1: config 9 has no interface number 0 [ 1348.010124][ T7605] usb 4-1: config 9 has no interface number 1 [ 1348.024093][ T7605] usb 4-1: config 9 interface 10 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1348.036623][ T7605] usb 4-1: config 9 interface 10 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1348.048044][ T7605] usb 4-1: config 9 interface 10 altsetting 4 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1348.059386][ T7605] usb 4-1: config 9 interface 10 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1348.070710][ T7605] usb 4-1: config 9 interface 10 altsetting 4 has an endpoint descriptor with address 0x1A, changing to 0xA [ 1348.085809][ T7605] usb 4-1: config 9 interface 10 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1348.100478][ T7605] usb 4-1: config 9 interface 35 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 1348.113289][ T7605] usb 4-1: config 9 interface 35 altsetting 224 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1348.175933][ T7605] usb 4-1: config 9 interface 35 altsetting 224 has a duplicate endpoint with address 0x8, skipping [ 1348.195114][ T7605] usb 4-1: config 9 interface 35 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 1348.208674][ T7605] usb 4-1: config 9 interface 35 altsetting 224 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1348.241048][ T7605] usb 4-1: config 9 interface 35 altsetting 224 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 1348.253130][ T7605] usb 4-1: config 9 interface 35 altsetting 224 endpoint 0x83 has invalid maxpacket 61352, setting to 64 [ 1348.264675][ T7605] usb 4-1: config 9 interface 35 altsetting 224 endpoint 0xC has invalid wMaxPacketSize 0 [ 1348.276349][ T7605] usb 4-1: config 9 interface 35 altsetting 224 has a duplicate endpoint with address 0x2, skipping [ 1348.287415][ T7605] usb 4-1: config 9 interface 35 altsetting 224 has a duplicate endpoint with address 0xA, skipping [ 1348.298608][ T7605] usb 4-1: config 9 interface 35 altsetting 224 has 10 endpoint descriptors, different from the interface descriptor's value: 16 [ 1348.316724][ T7605] usb 4-1: config 9 interface 10 has no altsetting 0 [ 1348.342059][ T7605] usb 4-1: config 9 interface 35 has no altsetting 0 [ 1348.358842][ T7605] usb 4-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=19.cb [ 1348.375564][ T7605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.394021][ T7605] usb 4-1: Product: ଟ뾄嚫ꪠ檫䠍嬲ਵ쭋眴髁첡頁쭑왩拑ℌ쬎䋧뷽羨એ偮졺⌚恏㓔䌘摂ṣ▷ĕ썲炰ﬓ䆌忰㙀ꩿ睨厡纗徯Ṭ锜肵꬘샂▤䲾޶褴畸툪롁蕓ꖡ勒좈⊜툗Νဠ쫵猢훮紜阤능 [ 1348.429954][ T7605] usb 4-1: Manufacturer: Ж [ 1348.441151][T16099] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1348.453606][ T7605] usb 4-1: SerialNumber:   [ 1348.613990][T16099] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1348.623462][T16099] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.633665][T16099] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1348.642679][T16099] usb 2-1: config 1 has no interface number 1 [ 1348.648806][T16099] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1348.665739][T21271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4070'. [ 1348.683017][T16099] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1348.713841][T16099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.776281][T16099] usb 2-1: Product: syz [ 1348.780513][T16099] usb 2-1: Manufacturer: syz [ 1348.795675][T16099] usb 2-1: SerialNumber: syz [ 1348.801387][ T5911] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1349.065368][ T5911] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1349.087362][ T5911] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1349.103088][ T5911] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.113544][ T5911] usb 5-1: config 220 has no interface number 2 [ 1349.124621][ T5911] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1349.168829][ T5911] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1349.268400][ T30] audit: type=1326 audit(1752924719.217:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecab8e9a9 code=0x7ffc0000 [ 1349.311931][ T5911] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1349.352891][ T30] audit: type=1326 audit(1752924719.217:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecab8e9a9 code=0x7ffc0000 [ 1349.378702][ T30] audit: type=1326 audit(1752924719.247:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f3ecab8e9a9 code=0x7ffc0000 [ 1349.409361][ T5911] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1349.434768][ T5911] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1349.468000][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.493820][ T30] audit: type=1326 audit(1752924719.247:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecab8e9a9 code=0x7ffc0000 [ 1349.516576][ T5911] usb 5-1: Product: syz [ 1349.520777][ T5911] usb 5-1: Manufacturer: syz [ 1349.535646][ T30] audit: type=1326 audit(1752924719.247:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3ecab8e9a9 code=0x7ffc0000 [ 1349.558717][ T30] audit: type=1326 audit(1752924719.247:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecab8e9a9 code=0x7ffc0000 [ 1349.582027][ T30] audit: type=1326 audit(1752924719.247:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ecab8e9a9 code=0x7ffc0000 [ 1349.604915][ T30] audit: type=1326 audit(1752924719.247:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecab8e9a9 code=0x7ffc0000 [ 1349.661426][ T5911] usb 5-1: SerialNumber: syz [ 1349.721274][ T30] audit: type=1326 audit(1752924719.247:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3ecab8e9a9 code=0x7ffc0000 [ 1349.743773][ T30] audit: type=1326 audit(1752924719.247:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21296 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecab8e9a9 code=0x7ffc0000 [ 1350.253144][ T7605] usb 4-1: USB disconnect, device number 44 [ 1350.272233][T16099] usb 2-1: USB disconnect, device number 35 [ 1350.376501][T21299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4079'. [ 1350.512915][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1350.542579][T21305] program syz.2.4079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1350.563047][T21305] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1350.705223][T21305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4079'. [ 1351.741116][ T7625] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1351.997131][ T5911] usb 5-1: selecting invalid altsetting 0 [ 1352.021444][ T7625] usb 2-1: Using ep0 maxpacket: 32 [ 1352.046981][ T7625] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1352.057903][ T5911] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1352.116875][ T7625] usb 2-1: config 0 has an invalid interface number: 5 but max is 0 [ 1352.125973][ T5911] usb 5-1: No valid video chain found. [ 1352.133024][ T7625] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1352.148707][ T5911] usb 5-1: selecting invalid altsetting 0 [ 1352.155839][ T7625] usb 2-1: config 0 has no interface number 0 [ 1352.162169][ T5911] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1352.180702][ T7625] usb 2-1: config 0 has no interface number 1 [ 1352.202102][ T5911] usb 5-1: USB disconnect, device number 22 [ 1352.213726][ T7625] usb 2-1: config 0 interface 21 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1352.316385][ T7625] usb 2-1: config 0 interface 5 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1352.329921][ T7625] usb 2-1: config 0 interface 21 has no altsetting 0 [ 1352.356011][ T7625] usb 2-1: config 0 interface 5 has no altsetting 0 [ 1352.486830][ T7625] usb 2-1: New USB device found, idVendor=19d2, idProduct=0086, bcdDevice=ec.26 [ 1352.533982][ T7625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.591351][ T7625] usb 2-1: Product: syz [ 1352.595694][ T7625] usb 2-1: Manufacturer: syz [ 1352.600554][ T7625] usb 2-1: SerialNumber: syz [ 1352.719214][ T7625] usb 2-1: config 0 descriptor?? [ 1353.091086][T16099] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1353.263197][T16099] usb 5-1: config 0 has no interfaces? [ 1353.272051][T16099] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1353.281941][T16099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.290152][T16099] usb 5-1: Product: syz [ 1353.294871][T16099] usb 5-1: Manufacturer: syz [ 1353.299910][T16099] usb 5-1: SerialNumber: syz [ 1353.309851][T16099] usb 5-1: config 0 descriptor?? [ 1353.498415][ T7625] option 2-1:0.21: GSM modem (1-port) converter detected [ 1353.539340][ T7625] smsusb:smsusb_probe: board id=14, interface number 5 [ 1353.556714][ T7625] smsusb:smsusb_probe: Device initialized with return code -19 [ 1353.855368][T21340] netlink: 'syz.0.4091': attribute type 5 has an invalid length. [ 1353.941689][T21341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4091'. [ 1354.043332][ T7625] usb 2-1: USB disconnect, device number 36 [ 1354.083083][T21340] ip6erspan0: entered promiscuous mode [ 1354.110413][ T7625] option 2-1:0.21: device disconnected [ 1355.011270][T16099] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1355.086079][ T7605] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1355.302370][ T7605] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1355.321151][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1355.349905][ T7605] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.399097][ T7605] usb 4-1: config 0 has no interface number 0 [ 1355.450417][ T7605] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1355.477926][ T7605] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1355.500184][ T7605] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1355.510399][ T7605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.524602][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.537151][ T9] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1355.554468][ T7605] usb 4-1: Product: syz [ 1355.560489][ T7605] usb 4-1: Manufacturer: syz [ 1355.565695][ T7605] usb 4-1: SerialNumber: syz [ 1355.570416][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1355.585240][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.594974][ T7605] usb 4-1: config 0 descriptor?? [ 1355.625968][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1355.633387][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1355.683595][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1355.694076][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1355.761857][ T7625] usb 5-1: USB disconnect, device number 23 [ 1355.815627][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1355.837358][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.849150][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.859799][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1355.882869][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1355.893335][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1355.901998][ T10] usb 1-1: Manufacturer: syz [ 1355.914129][ T10] usb 1-1: config 0 descriptor?? [ 1356.208111][T21361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.217389][T21361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.339938][ T10] appleir 0003:05AC:8243.0039: unknown main item tag 0x0 [ 1356.354883][ T10] appleir 0003:05AC:8243.0039: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1356.741370][ T7605] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1356.769585][ T7605] usb 4-1: USB disconnect, device number 45 [ 1357.117519][T21386] netlink: 'syz.3.4102': attribute type 5 has an invalid length. [ 1357.136827][T21386] ip6erspan0: entered promiscuous mode [ 1357.166059][T21386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4102'. [ 1357.991639][ T10] usb 3-1: USB disconnect, device number 36 [ 1358.002415][T21366] delete_channel: no stack [ 1358.061331][T16099] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1358.147844][T21396] netlink: 'syz.0.4106': attribute type 46 has an invalid length. [ 1358.157069][T21396] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4106'. [ 1358.242418][T16099] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1358.250884][T16099] usb 2-1: config 0 has no interface number 0 [ 1358.259600][T16099] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1358.278620][T16099] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1358.377852][ T7605] usb 1-1: USB disconnect, device number 36 [ 1358.426354][T21402] netlink: 'syz.2.4104': attribute type 13 has an invalid length. [ 1358.450530][T16099] usb 2-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 1358.459900][T16099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.795340][T16099] usb 2-1: Product: syz [ 1358.811112][T21402] bridge0: port 3(syz_tun) entered blocking state [ 1358.817780][T21402] bridge0: port 3(syz_tun) entered forwarding state [ 1358.853469][T21402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.873221][T21402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.896261][T21402] tipc: Resetting bearer [ 1358.931307][T21402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1358.952236][T16099] usb 2-1: Manufacturer: syz [ 1358.956905][T16099] usb 2-1: SerialNumber: syz [ 1359.270442][T16099] usb 2-1: config 0 descriptor?? [ 1359.291876][T21389] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1359.355536][T21408] netlink: 'syz.0.4107': attribute type 13 has an invalid length. [ 1359.433763][T21408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1359.849076][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1360.121222][ T9] usb 5-1: device descriptor read/64, error -71 [ 1360.379677][T16099] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1360.392786][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1360.416242][T16099] usb 2-1: MIDIStreaming interface descriptor not found [ 1360.571579][ T9] usb 5-1: device descriptor read/64, error -71 [ 1360.630236][T16099] usb 2-1: USB disconnect, device number 38 [ 1360.756360][ T9] usb usb5-port1: attempt power cycle [ 1361.182676][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1361.221934][ T9] usb 5-1: device descriptor read/8, error -71 [ 1361.871483][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.878323][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.044903][ T6153] udevd[6153]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1362.063155][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1362.131731][ T9] usb 5-1: device descriptor read/8, error -71 [ 1362.244870][ T9] usb usb5-port1: unable to enumerate USB device [ 1362.474905][T16099] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1362.743436][T16099] usb 4-1: config 0 has no interfaces? [ 1362.756895][T21437] netlink: 'syz.1.4113': attribute type 1 has an invalid length. [ 1362.765104][T21437] netlink: 'syz.1.4113': attribute type 2 has an invalid length. [ 1362.773600][T16099] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1362.783572][T16099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.791685][T16099] usb 4-1: Product: syz [ 1362.795884][T21437] netlink: 'syz.1.4113': attribute type 1 has an invalid length. [ 1362.795922][T21437] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.4113'. [ 1362.860034][T16099] usb 4-1: Manufacturer: syz [ 1362.870313][T16099] usb 4-1: SerialNumber: syz [ 1362.949220][T16099] usb 4-1: config 0 descriptor?? [ 1363.061680][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1363.294506][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1363.362560][ T1211] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1363.363649][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1363.387581][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1363.401396][T21454] loop9: detected capacity change from 0 to 7 [ 1363.408517][T21454] buffer_io_error: 28 callbacks suppressed [ 1363.408535][T21454] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.423010][T21454] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.431675][T21454] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.439857][T21454] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.448009][T21454] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.460233][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1363.468309][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1363.481316][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1363.500497][T21454] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.509012][T21454] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.517406][T21454] ldm_validate_partition_table(): Disk read failed. [ 1363.524375][T21454] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.532677][T21454] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.541483][T21454] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.549891][T21454] Dev loop9: unable to read RDB block 0 [ 1363.556354][T21454] loop9: unable to read partition table [ 1363.562723][T21454] loop9: partition table beyond EOD, truncated [ 1363.569111][T21454] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1363.569111][T21454] ) failed (rc=-5) [ 1363.592245][ T1211] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1363.603467][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.615081][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.625348][ T1211] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1363.648616][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1363.651651][ T1211] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1363.666330][ T1211] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1363.667272][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1363.686528][ T1211] usb 5-1: Manufacturer: syz [ 1363.686948][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1363.703517][ T1211] usb 5-1: config 0 descriptor?? [ 1363.720149][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1363.738381][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1363.753072][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1363.778236][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1363.795578][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1363.829446][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1363.899637][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1363.924504][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1363.949237][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1363.962534][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1363.992274][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1364.005366][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1364.017153][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1364.038646][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1364.047863][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1364.074250][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1364.108588][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1364.124617][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1364.131280][ T1211] appleir 0003:05AC:8243.003A: unknown main item tag 0x0 [ 1364.145886][ T1211] appleir 0003:05AC:8243.003A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1364.168910][ T9] usb 1-1: Product: syz [ 1364.180936][ T9] usb 1-1: Manufacturer: syz [ 1364.196562][ T9] usb 1-1: SerialNumber: syz [ 1364.248330][ T9] usb 1-1: config 0 descriptor?? [ 1364.332225][ T9] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 1364.530923][ T1211] usb 4-1: USB disconnect, device number 46 [ 1364.635995][ T5911] usb 1-1: USB disconnect, device number 37 [ 1364.645073][ T5911] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 1364.759532][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4117'. [ 1364.770216][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4117'. [ 1364.793583][T21458] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1364.811219][T21444] cgroup: fork rejected by pids controller in /syz0 [ 1364.848300][T21458] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1364.943161][T21458] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1364.953599][T21458] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1364.994495][T21458] geneve2: entered allmulticast mode [ 1366.033267][T21577] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1366.049353][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.145521][ T5911] usb 5-1: USB disconnect, device number 28 [ 1366.583098][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.729232][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.158770][T21597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4130'. [ 1368.026598][T21603] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 1368.107848][T21606] netlink: 'syz.1.4130': attribute type 29 has an invalid length. [ 1368.121566][T21607] netlink: 'syz.1.4130': attribute type 29 has an invalid length. [ 1368.257072][T16058] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1368.273513][T16058] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1368.299587][T16058] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1368.311576][T16058] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1368.319660][T16058] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1368.531442][ T64] bridge_slave_1: left allmulticast mode [ 1368.562343][ T64] bridge_slave_1: left promiscuous mode [ 1368.603635][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.666632][ T64] bridge_slave_0: left allmulticast mode [ 1368.682830][ T64] bridge_slave_0: left promiscuous mode [ 1368.708134][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.504687][ T64] bridge0 (unregistering): left allmulticast mode [ 1369.841627][ T64] team0: Port device bond0 removed [ 1369.852194][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.866976][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.881312][ T5911] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1369.897126][ T64] bond0 (unregistering): Released all slaves [ 1370.061894][ T5911] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1370.084878][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1370.109882][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1370.123447][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1370.238903][ T5911] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1370.251076][ T1211] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1370.370789][ T5911] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1370.401215][ T5911] usb 2-1: Manufacturer: syz [ 1370.427750][T16058] Bluetooth: hci0: command tx timeout [ 1370.435845][ T5911] usb 2-1: config 0 descriptor?? [ 1370.567218][T21667] page: refcount:515 mapcount:0 mapping:ffff88805b810c40 index:0x0 pfn:0x46000 [ 1370.576946][T21667] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 1370.585514][T21667] aops:hugetlbfs_aops ino:16208 dentry name(?):"anon_hugepage" [ 1370.593281][T21667] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 1370.601443][T21667] page_type: f4(hugetlb) [ 1370.605703][T21667] raw: 00fff00000000041 ffffea0000de0008 ffffc900125ffe10 ffff88805b810c40 [ 1370.614305][T21667] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 1370.622920][T21667] head: 00fff00000000041 ffffea0000de0008 ffffc900125ffe10 ffff88805b810c40 [ 1370.631601][T21667] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 1370.640292][T21667] head: 00fff00000000009 ffffea0001180001 0000000000000000 0000000000000000 [ 1370.648964][T21667] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 1370.657632][T21667] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 1370.664924][T21667] page_owner tracks the page as allocated [ 1370.671525][T21667] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 21064, tgid 21058 (syz.2.4010), ts 1327112564309, free_ts 1282254842282 [ 1370.692482][T21667] post_alloc_hook+0x240/0x2a0 [ 1370.697463][T21667] get_page_from_freelist+0x21e4/0x22c0 [ 1370.703052][T21667] __alloc_frozen_pages_noprof+0x181/0x370 [ 1370.708873][T21667] alloc_buddy_hugetlb_folio+0xdf/0x1c0 [ 1370.714423][T21667] only_alloc_fresh_hugetlb_folio+0x8c/0x280 [ 1370.720417][T21667] alloc_surplus_hugetlb_folio+0x103/0x430 [ 1370.726229][T21667] alloc_hugetlb_folio+0xb1a/0x16a0 [ 1370.731446][T21667] hugetlb_fault+0x1de0/0x29e0 [ 1370.736224][T21667] handle_mm_fault+0x740/0x8e0 [ 1370.741003][T21667] __get_user_pages+0x1af4/0x30b0 [ 1370.746155][T21667] populate_vma_page_range+0x26b/0x340 [ 1370.751692][T21667] __mm_populate+0x24c/0x380 [ 1370.756288][T21667] vm_mmap_pgoff+0x3f0/0x4c0 [ 1370.761161][T21667] ksys_mmap_pgoff+0x587/0x760 [ 1370.765943][T21667] do_syscall_64+0xfa/0x3b0 [ 1370.770458][T21667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.776358][T21667] page last free pid 20580 tgid 20574 stack trace: [ 1370.782853][T21667] __free_frozen_pages+0xc71/0xe70 [ 1370.787979][T21667] __folio_put+0x21b/0x2c0 [ 1370.792408][T21667] update_and_free_hugetlb_folio+0x169/0x280 [ 1370.798409][T21667] free_huge_folio+0xd72/0x1100 [ 1370.803266][T21667] folios_put_refs+0x410/0x640 [ 1370.808035][T21667] remove_inode_hugepages+0xee3/0x1100 [ 1370.813515][T21667] hugetlbfs_evict_inode+0xbf/0x230 [ 1370.818729][T21667] evict+0x501/0x9c0 [ 1370.822630][T21667] __dentry_kill+0x209/0x660 [ 1370.827220][T21667] dput+0x19f/0x2b0 [ 1370.831034][T21667] __fput+0x68e/0xa70 [ 1370.835038][T21667] task_work_run+0x1d1/0x260 [ 1370.839645][T21667] do_exit+0x6b5/0x22e0 [ 1370.843886][T21667] do_group_exit+0x21c/0x2d0 [ 1370.848492][T21667] get_signal+0x1286/0x1340 [ 1370.853011][T21667] arch_do_signal_or_restart+0x9a/0x750 [ 1370.858723][T21667] ------------[ cut here ]------------ [ 1370.864194][T21667] kernel BUG at mm/filemap.c:154! [ 1370.869245][T21667] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1370.875494][T21667] CPU: 1 UID: 0 PID: 21667 Comm: syz.3.4141 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1370.887552][T21667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1370.897608][T21667] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 1370.903861][T21667] Code: c3 ca ff 48 89 df 48 c7 c6 80 2e 94 8b e8 93 f9 10 00 90 0f 0b e8 eb c2 ca ff 48 89 df 48 c7 c6 60 2d 94 8b e8 7c f9 10 00 90 <0f> 0b e8 d4 c2 ca ff 48 89 df 48 c7 c6 80 2e 94 8b e8 65 f9 10 00 [ 1370.923482][T21667] RSP: 0000:ffffc900121cf0e0 EFLAGS: 00010046 [ 1370.929556][T21667] RAX: 5725afd0826f0d00 RBX: ffffea0001180000 RCX: 5725afd0826f0d00 [ 1370.937544][T21667] RDX: 0000000000000005 RSI: ffffffff8db83cac RDI: ffff88807ef80000 [ 1370.945522][T21667] RBP: 0000000000000001 R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 1370.953496][T21667] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 0000000000000040 [ 1370.961555][T21667] R13: 1ffffd4000230000 R14: 1ffffd4000230001 R15: ffffea0001180008 [ 1370.969526][T21667] FS: 00007f7d23d976c0(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 1370.978463][T21667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1370.985052][T21667] CR2: 00007f7d23d96f98 CR3: 000000003c130000 CR4: 00000000003526f0 [ 1370.993034][T21667] Call Trace: [ 1370.996340][T21667] [ 1370.999277][T21667] __filemap_remove_folio+0xc3/0x500 [ 1371.004573][T21667] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1371.009960][T21667] ? __pfx___filemap_remove_folio+0x10/0x10 [ 1371.015864][T21667] ? _raw_spin_lock_irq+0xae/0xf0 [ 1371.020901][T21667] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1371.026479][T21667] filemap_remove_folio+0xe6/0x1f0 [ 1371.031596][T21667] remove_inode_hugepages+0x594/0x1100 [ 1371.037075][T21667] ? preempt_schedule_irq+0xb5/0x150 [ 1371.042536][T21667] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 1371.048449][T21667] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 1371.054358][T21667] ? hugetlbfs_fallocate+0xbaf/0x1100 [ 1371.059738][T21667] ? up_write+0x1c4/0x420 [ 1371.064081][T21667] hugetlbfs_fallocate+0xbc7/0x1100 [ 1371.069377][T21667] ? __rcu_read_unlock+0x84/0xe0 [ 1371.074329][T21667] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 1371.079974][T21667] ? aa_file_perm+0x3e7/0xed0 [ 1371.084658][T21667] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1371.090392][T21667] ? rcu_read_lock_any_held+0xb3/0x120 [ 1371.095862][T21667] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1371.101777][T21667] vfs_fallocate+0x6a0/0x830 [ 1371.106380][T21667] ? __pfx_vfs_fallocate+0x10/0x10 [ 1371.111502][T21667] madvise_do_behavior+0x169d/0x2e70 [ 1371.116800][T21667] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1371.122445][T21667] ? finish_task_switch+0x18b/0x950 [ 1371.127645][T21667] ? finish_task_switch+0x266/0x950 [ 1371.132840][T21667] ? lockdep_hardirqs_on+0x9c/0x150 [ 1371.138040][T21667] ? rcu_is_watching+0x15/0xb0 [ 1371.142807][T21667] ? trace_sched_exit_tp+0x38/0x120 [ 1371.148002][T21667] ? __schedule+0x1713/0x4d00 [ 1371.152713][T21667] ? __lock_acquire+0xab9/0xd20 [ 1371.157569][T21667] ? madvise_lock+0xda/0x200 [ 1371.162171][T21667] do_madvise+0x174/0x220 [ 1371.166511][T21667] ? count_memcg_event_mm+0x21/0x260 [ 1371.171908][T21667] ? __pfx_do_madvise+0x10/0x10 [ 1371.177221][T21667] ? irqentry_exit+0x74/0x90 [ 1371.181822][T21667] ? __x64_sys_madvise+0x1e/0xc0 [ 1371.186770][T21667] __x64_sys_madvise+0xa7/0xc0 [ 1371.191636][T21667] do_syscall_64+0xfa/0x3b0 [ 1371.196148][T21667] ? lockdep_hardirqs_on+0x9c/0x150 [ 1371.201347][T21667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.207506][T21667] ? clear_bhb_loop+0x60/0xb0 [ 1371.212196][T21667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.218093][T21667] RIP: 0033:0x7f7d22f8e9a9 [ 1371.222512][T21667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1371.242209][T21667] RSP: 002b:00007f7d23d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1371.250625][T21667] RAX: ffffffffffffffda RBX: 00007f7d231b6400 RCX: 00007f7d22f8e9a9 [ 1371.258599][T21667] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 1371.266581][T21667] RBP: 00007f7d23010d69 R08: 0000000000000000 R09: 0000000000000000 [ 1371.274584][T21667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1371.282591][T21667] R13: 0000000000000001 R14: 00007f7d231b6400 R15: 00007f7d232dfa28 [ 1371.290572][T21667] [ 1371.293600][T21667] Modules linked in: [ 1371.297677][T21667] ---[ end trace 0000000000000000 ]--- [ 1371.303130][T21667] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 1371.309394][T21667] Code: c3 ca ff 48 89 df 48 c7 c6 80 2e 94 8b e8 93 f9 10 00 90 0f 0b e8 eb c2 ca ff 48 89 df 48 c7 c6 60 2d 94 8b e8 7c f9 10 00 90 <0f> 0b e8 d4 c2 ca ff 48 89 df 48 c7 c6 80 2e 94 8b e8 65 f9 10 00 [ 1371.329000][T21667] RSP: 0000:ffffc900121cf0e0 EFLAGS: 00010046 [ 1371.335083][T21667] RAX: 5725afd0826f0d00 RBX: ffffea0001180000 RCX: 5725afd0826f0d00 [ 1371.343065][T21667] RDX: 0000000000000005 RSI: ffffffff8db83cac RDI: ffff88807ef80000 [ 1371.351036][T21667] RBP: 0000000000000001 R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 1371.359007][T21667] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 0000000000000040 [ 1371.366980][T21667] R13: 1ffffd4000230000 R14: 1ffffd4000230001 R15: ffffea0001180008 [ 1371.374980][T21667] FS: 00007f7d23d976c0(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 1371.383923][T21667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1371.390524][T21667] CR2: 00007f7d23d96f98 CR3: 000000003c130000 CR4: 00000000003526f0 [ 1371.398525][T21667] Kernel panic - not syncing: Fatal exception [ 1371.404959][T21667] Kernel Offset: disabled [ 1371.409290][T21667] Rebooting in 86400 seconds..