last executing test programs: 10.674447086s ago: executing program 4 (id=3126): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) syz_open_procfs(0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x20, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 9.957772276s ago: executing program 1 (id=3127): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x4004844) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4040) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008504"]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0x9c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x358, 0x0) 9.800950749s ago: executing program 4 (id=3128): mq_open(&(0x7f0000000080)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x41, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="0110030000008a6a05d70040000102030109022d0001010590090904002402030103010921b9008101225903020581030002080007090502032000080706006497bcb86e84ffedde31ead10ed2b00dfb62b7688cad4a84"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x2000}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000000882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) 9.304103841s ago: executing program 2 (id=3131): socket(0x10, 0x80002, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x88, 0x2eb5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="b405000000000000611063000000000053184300020000009500000000000000ec58352053c43f109364c33b38b058fa2c368f2e72e59d36e22255ac996b90d77200eaa15198358ebf1a6ea5c4"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r0, 0x1d853000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x9f, 0x400) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x409, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x8000000004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffff", 0x42}], 0x1) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 7.295282829s ago: executing program 2 (id=3133): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001d80)={'vxcan0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 7.279160211s ago: executing program 1 (id=3134): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x1}, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) r2 = dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0xfffffffffffffe3a, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x2404c004}, 0x40040d5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x0, 0x4}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1, 0xf4c, 0xffff, 0x2, 0x9, 0x100}, &(0x7f0000000040)=0x14) 7.254163373s ago: executing program 3 (id=3135): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001d80)={'vxcan0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 6.542008622s ago: executing program 4 (id=3136): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.375291086s ago: executing program 3 (id=3137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x54, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 6.242439267s ago: executing program 3 (id=3139): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 6.163394684s ago: executing program 3 (id=3140): syz_mount_image$fuse(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000e0c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="b0000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000005"], 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x2, '\x00', 0x8}}, 0x2a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0xb0, &(0x7f0000000200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) listxattr(0x0, 0x0, 0x0) 6.126633687s ago: executing program 2 (id=3141): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x82, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB="f7"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89101) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) mmap(&(0x7f0000002000/0x6000)=nil, 0x6000, 0x2, 0x10033, r0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x57}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) timer_create(0x4, 0x0, &(0x7f0000bbdffc)) syz_usb_disconnect(r2) 6.048257554s ago: executing program 0 (id=3142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x360044, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) write$cgroup_subtree(r4, &(0x7f00000061c0)=ANY=[@ANYBLOB], 0x6) 5.090597874s ago: executing program 0 (id=3143): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) read$dsp(0xffffffffffffffff, &(0x7f0000001200)=""/4096, 0x1000) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "5233f503dd8ad31feb7649d2f36f51602148f233d2f07c46d48811538630ce115cef7c3020ee1e44c7efd31fcaa4954cbbd4"}, 0x3d) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711205000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 4.124237435s ago: executing program 1 (id=3144): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x4004844) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x4040) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008504"]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0x9c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x358, 0x0) 4.021223583s ago: executing program 0 (id=3145): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x4004844) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000100000000005", @ANYBLOB="ec15f46e4a516d55843d6d2f81225f178127f60d4a0724c48450b858f139ccf7d12b68091a8adb2fb0e31d34dde8df4b6fe07f90da2883c7d527f6b2afafb15cba51dd266838e8a30aa26f3c178654283fa19108af8316108bac39263c3cf16fec610f4d908285adfca1e01c885c53d2e6d9fbe3f204a1fd57453b75832aa5a2765261e52d3189d53d52fe19c2044c169076b23295642d9f42888bd670b9d024ebebf95ad9f60118", @ANYRES32=r0, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x4040) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008504"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0x9c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x358, 0x0) 3.952006149s ago: executing program 4 (id=3146): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000200)={[{@grpjquota}, {@oldalloc}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {}, {@nombcache}, {@resuid={'resuid', 0x3d, 0xee00}}, {@data_err_abort}, {@grpid}, {@noauto_da_alloc}]}, 0x0, 0x4f0, &(0x7f0000000640)="$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") syz_open_dev$usbfs(0x0, 0x76, 0x101b01) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x75) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x1100) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3b000200010001", 0x7) 3.265437337s ago: executing program 1 (id=3147): mq_open(&(0x7f0000000080)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x41, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="0110030000008a6a05d70040000102030109022d0001010590090904002402030103010921b9008101225903020581030002080007090502032000080706006497bcb86e84ffedde31ead10ed2b00dfb62b7688cad4a84"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x2000}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000000882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) 3.174914904s ago: executing program 0 (id=3148): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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") mknod$loop(&(0x7f0000000b40)='./file0\x00', 0x6000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000840)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c757466383d302c757365667265652c73686f72746e6169653d77696e6e742c757466383d312c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72744f616d653d77696e39352c756e695f786c6174653d302c00d504d37dd7e1d71aa8b42b65c12ada5a3e0a96e62718263a9ac20a27f83c27f1feff023b7a612cc4d3304e692499c3eb98"], 0x0, 0x274, &(0x7f0000000280)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) unshare(0x2c020400) r3 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x280000c, &(0x7f0000000900)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d69736f383835392d312c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030332c63726561746f723d85f194712c626172726965722c63726561746f723d65fe04c22c756d61736b3d30303030303030303030303030303030303030303231372c6465636f6d706f73652c666f7263652c7569643d", @ANYRES64=r0, @ANYRES8=r3], 0x1, 0x6ee, &(0x7f0000001e80)="$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") ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f00000024c0)=""/4089) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/19}, 0x1b, 0xffffff7f00000000, 0x3000) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/uts\x00') 3.028333346s ago: executing program 2 (id=3149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}], {0x14, 0x10}}, 0x88}}, 0x0) 3.016331947s ago: executing program 2 (id=3150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000540)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 2.290181458s ago: executing program 4 (id=3151): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 2.207968425s ago: executing program 0 (id=3152): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001d80)={'vxcan0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2.183489377s ago: executing program 4 (id=3153): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009603000700000000070c00000016b8ef0a1a7083000000000b000017008332"], 0x0}, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x5, 0x34, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 2.03159515s ago: executing program 3 (id=3154): chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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") chdir(0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000140)={0x0}) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x1) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB="1000000000000000"], 0x5c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0x800c5011, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000000)=0x27) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000d0a0500000000000000000000000000090001007300000000000000"], 0x20}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f00000001c0)}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000108a900000002d1d7d1e58c4b8240e4"], 0x14}}, 0x0) 1.301478021s ago: executing program 1 (id=3155): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001d80)={'vxcan0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 207.571832ms ago: executing program 0 (id=3156): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000300)=""/104, 0x68) 163.986176ms ago: executing program 2 (id=3157): r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./bus\x00', 0x4000, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c64656275672c6572726f72733d72656d6f756e742d726f2c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d72656c617865642c757466383d302c726f6469722c726f6469722c00bd11a3d82e3cc8e94a1ac3169cb253bc51dceb1a3c8675eef705933dac0549813c420584251b8849a95afa9de1a80dcc7f9d4e26116050410b89f88108d551843f6115dded9b54fcb36a3a7bab7fb11d2c7265fa11a3ff2f3ca1c0df2142ff9ce532341817f2bb2fef3428793728d4daa090c5becbb74d00c95f965afa83e5bb562620ea9e99853533ca4ef0702dad548503917329f0f431d87efa28137d3f0e0fa2906cb9e236094a2d7a9ce877c1d8509500"/315], 0x1, 0x217, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000280)={0xfffffffd}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = fanotify_init(0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r7, 0x455, 0x40001000, r8, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000002000018110000fbe78492123a3a75a3be3b255a78f426e8107a878570dba5f0e20f4b67d9d1e95d5d884a3d9def4d9beec4880d61cdd6891493f937a0cc67164446cb150891a37a8cc700b71928b85ef9272590c0c071591e81cfc0f5df03eb48e557e8681143320a15f602725cf746b50cba7f25fbb2d87f023897e56d0a950950d749e6f0615e31b94cebe193be7b3e8fe189ff1db15dd172cd50d154e348546e8a03a31d34", @ANYRES32, @ANYRESHEX=r6, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 60.606025ms ago: executing program 3 (id=3158): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001d80)={'vxcan0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 0s ago: executing program 1 (id=3159): chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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") chdir(0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000140)={0x0}) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x1) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0400000000008000080000", @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB="1000000000000000"], 0x5c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0x800c5011, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000000)=0x27) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000d0a0500000000000000000000000000090001007300000000000000"], 0x20}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f00000001c0)}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000108a900000002d1d7d1e58c4b8240e4"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): e= 0.40 [ 616.238492][ T3619] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 616.253636][ T3619] usb 4-1: Product: syz [ 616.259139][ T3619] usb 4-1: Manufacturer: syz [ 616.289530][ T21] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 616.299460][T13016] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 616.319678][ T3572] usbtest 5-1:0.0: Linux user mode ISO test driver [ 616.320109][ T3619] cdc_wdm 4-1:1.0: skipping garbage [ 616.326187][ T3572] usbtest 5-1:0.0: high-speed {control iso-out} tests (+alt) [ 616.356410][ T3619] cdc_wdm 4-1:1.0: skipping garbage [ 616.372130][ T3619] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 616.378126][ T3619] cdc_wdm 4-1:1.0: Unknown control protocol [ 616.389314][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 616.409111][ T21] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 616.431945][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 616.521654][ T3572] usb 5-1: USB disconnect, device number 43 [ 616.539135][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 616.558357][ T21] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 616.558761][ T3619] usb 4-1: USB disconnect, device number 48 [ 616.569591][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 616.569611][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 616.569626][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 616.621915][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 616.719255][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 616.731712][ T21] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 616.753568][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 616.849334][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 616.860411][ T21] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 616.881618][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 617.009528][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 617.023684][ T21] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 617.034836][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 617.111148][T13045] binder: 13044:13045 unknown command 0 [ 617.125066][T13045] binder: 13044:13045 ioctl c0306201 200002c0 returned -22 [ 617.139872][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 617.152692][ T21] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 617.164079][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 617.279649][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 617.293764][ T21] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 617.334981][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 617.452032][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 617.461488][ T21] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 617.478132][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 617.659416][ T21] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 617.671408][ T21] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 617.688231][ T21] usb 1-1: Product: syz [ 617.695956][ T21] usb 1-1: Manufacturer: syz [ 617.704106][ T21] usb 1-1: SerialNumber: syz [ 617.725119][ T21] usb 1-1: config 0 descriptor?? [ 617.771838][ T21] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 618.083040][ T21] usb 1-1: USB disconnect, device number 59 [ 618.099119][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 618.107702][T13055] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 618.109168][ T21] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 618.226807][T13058] fuse: Bad value for 'fd' [ 618.927625][T13072] netlink: 'syz.0.2569': attribute type 10 has an invalid length. [ 618.950841][T13072] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.958437][T13072] bond0: (slave team0): Enslaving as an active interface with an up link [ 619.269169][ T9356] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 619.458028][T13086] netlink: 107572 bytes leftover after parsing attributes in process `syz.4.2574'. [ 619.467489][ T3673] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 619.672171][ T9356] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 619.695538][ T9356] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0xC has invalid wMaxPacketSize 0 [ 619.707928][ T9356] usb 1-1: config 0 interface 0 has no altsetting 0 [ 619.829173][ T3673] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 619.837807][ T3673] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 619.861330][ T3673] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 619.877045][ T3673] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 619.889284][ T9356] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 619.894071][ T3673] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 619.916711][ T9356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.924952][ T3572] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 619.946376][ T9356] usb 1-1: Product: syz [ 619.955714][ T9356] usb 1-1: Manufacturer: syz [ 619.960757][ T9356] usb 1-1: SerialNumber: syz [ 619.981684][ T9356] usb 1-1: config 0 descriptor?? [ 620.033196][ T3673] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 620.052760][ T3673] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 620.066987][ T3673] usb 2-1: Product: syz [ 620.075887][ T3673] usb 2-1: Manufacturer: syz [ 620.099574][T13081] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 620.119668][ T3673] cdc_wdm 2-1:1.0: skipping garbage [ 620.125113][ T3673] cdc_wdm 2-1:1.0: skipping garbage [ 620.135402][T13092] fuse: Bad value for 'fd' [ 620.135695][ T3673] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 620.150109][ T3673] cdc_wdm 2-1:1.0: Unknown control protocol [ 620.250812][ T9356] usbtest 1-1:0.0: Linux user mode ISO test driver [ 620.259223][ T9356] usbtest 1-1:0.0: high-speed {control iso-out} tests (+alt) [ 620.309146][ T3572] usb 5-1: config 0 has no interfaces? [ 620.339125][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 620.345723][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 620.359089][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 620.361393][ T9356] usb 2-1: USB disconnect, device number 65 [ 620.365687][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 620.377617][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 620.455699][ T3676] usb 1-1: USB disconnect, device number 60 [ 620.509377][ T3572] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 620.521057][ T3572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.529875][ T3572] usb 5-1: Product: syz [ 620.534043][ T3572] usb 5-1: Manufacturer: syz [ 620.538868][ T3572] usb 5-1: SerialNumber: syz [ 620.555753][ T3572] usb 5-1: config 0 descriptor?? [ 621.269151][ T3676] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 621.679238][ T3676] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 621.789175][ T3676] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.798339][ T3676] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.809462][ T3676] usb 1-1: config 0 interface 0 has no altsetting 0 [ 621.909280][ T3676] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.924141][ T3676] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.942099][ T3676] usb 1-1: config 0 interface 0 has no altsetting 0 [ 622.039235][ T3676] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.051433][ T3676] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.063274][ T3676] usb 1-1: config 0 interface 0 has no altsetting 0 [ 622.169228][ T3676] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.181247][ T3676] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.193016][ T3676] usb 1-1: config 0 interface 0 has no altsetting 0 [ 622.279302][ T3676] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.288207][ T3676] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.299113][ T3676] usb 1-1: config 0 interface 0 has no altsetting 0 [ 622.389422][ T3676] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.398357][ T3676] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.409329][ T3676] usb 1-1: config 0 interface 0 has no altsetting 0 [ 622.509192][ T3676] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.527006][ T3676] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.542494][ T3673] usb 5-1: USB disconnect, device number 44 [ 622.543110][ T3676] usb 1-1: config 0 interface 0 has no altsetting 0 [ 622.639277][ T3676] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.651692][ T3676] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.662984][ T3676] usb 1-1: config 0 interface 0 has no altsetting 0 [ 622.849431][ T3676] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 622.876532][ T3676] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 622.907212][ T3676] usb 1-1: Product: syz [ 622.917355][ T3676] usb 1-1: Manufacturer: syz [ 622.925656][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2589'. [ 622.938546][ T3676] usb 1-1: SerialNumber: syz [ 622.985275][ T3676] usb 1-1: config 0 descriptor?? [ 623.056173][ T3676] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 623.360941][ T3673] usb 1-1: USB disconnect, device number 61 [ 623.369275][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 623.383430][T13149] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 623.383541][ T3673] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 624.101039][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.107382][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.322927][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 625.637096][T13205] loop4: detected capacity change from 0 to 4096 [ 625.710451][T13205] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 627.927096][T13258] netlink: 'syz.4.2624': attribute type 32 has an invalid length. [ 628.309155][ T9356] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 628.569786][ T9356] usb 5-1: Using ep0 maxpacket: 16 [ 628.719258][ T9356] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 628.727465][ T9356] usb 5-1: config 0 has no interface number 0 [ 628.733654][ T9356] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 628.745004][ T9356] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 628.899314][ T9356] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 628.915730][ T9356] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 628.924196][ T9356] usb 5-1: Product: syz [ 628.928375][ T9356] usb 5-1: SerialNumber: syz [ 628.944831][ T9356] usb 5-1: config 0 descriptor?? [ 628.990853][ T9356] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 629.023657][ T9356] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input17 [ 629.131408][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'. [ 629.145952][T13299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2637'. [ 629.158284][T13299] batman_adv: Cannot find parent device [ 629.164816][T13299] device erspan1 entered promiscuous mode [ 629.202392][T13304] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 629.217461][T13269] udc-core: couldn't find an available UDC or it's busy [ 629.237780][T13269] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 629.251483][T13301] netlink: 'syz.1.2638': attribute type 32 has an invalid length. [ 629.376801][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 629.409236][ T3673] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 629.583333][T13269] tipc: Started in network mode [ 629.588303][T13269] tipc: Node identity 220ef21352a8, cluster identity 4711 [ 629.595771][T13269] tipc: Enabled bearer , priority 0 [ 629.605157][ T9356] usb 5-1: USB disconnect, device number 45 [ 629.629322][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 629.636478][ T9356] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 629.769389][ T3673] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 629.784412][ T3673] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 629.794133][ T3673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65522, setting to 1024 [ 629.805476][ T3673] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 629.815994][ T3673] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.909246][ T3673] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 629.918498][ T3673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 629.930146][ T3673] usb 1-1: SerialNumber: syz [ 629.936120][ T3673] usb 1-1: config 0 descriptor?? [ 629.959408][T13290] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 629.979922][ T3673] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 630.079189][ T3676] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 630.208670][T13329] tipc: New replicast peer: 255.255.255.255 [ 630.217495][T13329] tipc: Enabled bearer , priority 10 [ 630.349149][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 630.469352][ T3676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 630.487397][ T3676] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 630.588965][T13340] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2651'. [ 630.649888][T13340] team0: Port device macvlan1 added [ 630.664599][ T3676] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 630.683591][ T3676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.698771][ T3676] usb 4-1: Product: syz [ 630.712092][ T3676] usb 4-1: Manufacturer: syz [ 630.726549][ T3676] usb 4-1: SerialNumber: syz [ 630.740195][ T3676] usb 4-1: config 0 descriptor?? [ 630.769382][T13323] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 630.794982][ T3676] hub 4-1:0.0: bad descriptor, ignoring hub [ 630.802185][ T3676] hub: probe of 4-1:0.0 failed with error -5 [ 630.824302][ T3676] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 631.329154][ T3676] tipc: Node number set to 1889989139 [ 631.592370][ T3619] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 631.769243][ T3676] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 631.893606][ T3572] usb 1-1: USB disconnect, device number 62 [ 631.959277][ T3619] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.984314][ T3619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 631.999114][ T3619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 632.014000][ T3619] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.027347][ T3619] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 632.039173][ T3676] usb 5-1: Using ep0 maxpacket: 8 [ 632.047798][ T3619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.071235][ T3619] usb 2-1: config 0 descriptor?? [ 632.115930][ T3619] usb 2-1: MIDIStreaming interface descriptor not found [ 632.179545][ T3676] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 632.199356][ T3676] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 632.225742][ T3676] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 632.267770][ T3676] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.285591][ T3676] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 632.295962][ T3676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.323385][ T3619] usb 2-1: USB disconnect, device number 66 [ 632.359168][ T3572] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 632.592152][ T3676] usb 5-1: GET_CAPABILITIES returned 0 [ 632.597695][ T3676] usbtmc 5-1:16.0: can't read capabilities [ 632.629245][ T3572] usb 1-1: Using ep0 maxpacket: 8 [ 632.749335][ T3572] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 632.769148][ T3572] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 632.794085][T13352] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 632.804868][ T3572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.814060][ T3619] usb 5-1: USB disconnect, device number 46 [ 632.835915][ T3572] usb 1-1: config 0 descriptor?? [ 632.894443][ T3572] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 633.149401][ T9835] usb 4-1: USB disconnect, device number 49 [ 633.161304][ T9356] usb 1-1: USB disconnect, device number 63 [ 633.189853][ T3673] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 633.298801][ T9214] syz-executor invoked oom-killer: gfp_mask=0x1100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 633.415424][ T9214] CPU: 0 PID: 9214 Comm: syz-executor Not tainted 5.15.168-syzkaller #0 [ 633.423811][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 633.433875][ T9214] Call Trace: [ 633.437241][ T9214] [ 633.440186][ T9214] dump_stack_lvl+0x1e3/0x2d0 [ 633.444879][ T9214] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 633.450523][ T9214] ? panic+0x860/0x860 [ 633.454597][ T9214] ? local_lock_release+0x170/0x170 [ 633.459804][ T9214] dump_header+0xd4/0x940 [ 633.464141][ T9214] oom_kill_process+0xef/0x3d0 [ 633.468909][ T9214] out_of_memory+0xe97/0x1280 [ 633.473605][ T9214] ? mutex_lock_io_nested+0x60/0x60 [ 633.478813][ T9214] ? unregister_oom_notifier+0x20/0x20 [ 633.484287][ T9214] mem_cgroup_out_of_memory+0x25f/0x3c0 [ 633.489843][ T9214] ? __lock_acquire+0x1ff0/0x1ff0 [ 633.494876][ T9214] ? mem_cgroup_oom_trylock+0x210/0x210 [ 633.500437][ T9214] ? do_raw_spin_unlock+0x137/0x8b0 [ 633.505634][ T9214] ? mem_cgroup_iter+0x3b4/0x520 [ 633.510592][ T9214] try_charge_memcg+0x101e/0x1530 [ 633.515639][ T9214] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 633.521469][ T9214] ? read_lock_is_recursive+0x10/0x10 [ 633.526950][ T9214] charge_memcg+0x10b/0x340 [ 633.531496][ T9214] ? __mem_cgroup_charge+0x80/0x80 [ 633.536621][ T9214] mem_cgroup_swapin_charge_page+0x1f1/0x2f0 [ 633.542607][ T9214] __read_swap_cache_async+0x6de/0xb30 [ 633.548083][ T9214] ? find_get_incore_page+0x250/0x250 [ 633.553454][ T9214] ? mark_lock+0x98/0x340 [ 633.557789][ T9214] swap_cluster_readahead+0x372/0x880 [ 633.563168][ T9214] ? read_swap_cache_async+0x160/0x160 [ 633.568647][ T9214] swapin_readahead+0x102/0xba0 [ 633.573522][ T9214] ? rcu_lock_release+0x5/0x20 [ 633.578302][ T9214] ? __lock_acquire+0x1ff0/0x1ff0 [ 633.583334][ T9214] ? exit_swap_address_space+0x290/0x290 [ 633.588981][ T9214] ? put_swap_device+0x15d/0x210 [ 633.593923][ T9214] ? lookup_swap_cache+0x132/0x440 [ 633.599039][ T9214] ? get_swap_device+0x209/0x370 [ 633.603981][ T9214] do_swap_page+0x523/0x2130 [ 633.608599][ T9214] ? remove_device_exclusive_entry+0xbf0/0xbf0 [ 633.614764][ T9214] ? unmap_mapping_range+0x3e0/0x3e0 [ 633.620064][ T9214] handle_mm_fault+0x24cf/0x5960 [ 633.625037][ T9214] ? numa_migrate_prep+0x1a0/0x1a0 [ 633.630172][ T9214] ? vmacache_find+0x545/0x590 [ 633.634934][ T9214] ? vmacache_update+0x9f/0xf0 [ 633.639711][ T9214] exc_page_fault+0x271/0x700 [ 633.644396][ T9214] asm_exc_page_fault+0x22/0x30 [ 633.649250][ T9214] RIP: 0033:0x7fc7eed6b0e8 [ 633.653662][ T9214] Code: 3c 24 48 89 4c 24 18 e8 c6 57 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 1f 58 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 633.673262][ T9214] RSP: 002b:00007ffc5bb8b150 EFLAGS: 00010293 [ 633.679329][ T9214] RAX: 0000000000000000 RBX: 000000000000027e RCX: 00007fc7eed6b0e5 [ 633.687302][ T9214] RDX: 00007ffc5bb8b190 RSI: 0000000000000000 RDI: 0000000000000000 [ 633.695273][ T9214] RBP: 00007ffc5bb8b1ec R08: 0000000000000000 R09: 0000000000000010 [ 633.703352][ T9214] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 633.711325][ T9214] R13: 000000000009a08e R14: 0000000000099d42 R15: 00007ffc5bb8b240 [ 633.719313][ T9214] [ 633.743599][ T9214] memory: usage 233188kB, limit 307200kB, failcnt 921 [ 633.758260][ T9214] memory+swap: usage 232624kB, limit 9007199254740988kB, failcnt 0 [ 633.774210][ T9214] kmem: usage 227564kB, limit 9007199254740988kB, failcnt 0 [ 633.781766][ T3673] usb 2-1: Using ep0 maxpacket: 16 [ 633.790319][ T9214] Memory cgroup stats for /syz2: [ 633.792081][ T9214] anon 0 [ 633.792081][ T9214] file 0 [ 633.792081][ T9214] kernel_stack 393216 [ 633.792081][ T9214] pagetables 942080 [ 633.792081][ T9214] percpu 0 [ 633.792081][ T9214] sock 0 [ 633.792081][ T9214] shmem 0 [ 633.792081][ T9214] file_mapped 0 [ 633.792081][ T9214] file_dirty 0 [ 633.792081][ T9214] file_writeback 0 [ 633.792081][ T9214] swapcached 13955072 [ 633.792081][ T9214] anon_thp 0 [ 633.792081][ T9214] file_thp 0 [ 633.792081][ T9214] shmem_thp 0 [ 633.792081][ T9214] inactive_anon 0 [ 633.792081][ T9214] active_anon 0 [ 633.792081][ T9214] inactive_file 0 [ 633.792081][ T9214] active_file 0 [ 633.792081][ T9214] unevictable 0 [ 633.792081][ T9214] slab_reclaimable 1745208 [ 633.792081][ T9214] slab_unreclaimable 9331056 [ 633.792081][ T9214] slab 11076264 [ 633.792081][ T9214] workingset_refault_anon 12 [ 633.792081][ T9214] workingset_refault_file 0 [ 633.792081][ T9214] workingset_activate_anon 12 [ 633.792081][ T9214] workingset_activate_file 0 [ 633.929085][ T9214] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2645,pid=13324,uid=0 [ 633.970687][ T9214] Memory cgroup out of memory: Killed process 13325 (syz.2.2645) total-vm:95312kB, anon-rss:616kB, file-rss:16688kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 633.988630][ T3673] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 634.006607][ T3673] usb 2-1: config 0 has no interface number 0 [ 634.019128][ T3673] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 634.049786][ T3673] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 634.179120][ T9356] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 634.204568][ T3673] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 634.223909][ T3673] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 634.243294][ T3673] usb 2-1: Product: syz [ 634.264593][ T3673] usb 2-1: SerialNumber: syz [ 634.272451][ T3673] usb 2-1: config 0 descriptor?? [ 634.325242][ T3673] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 634.350328][ T3673] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input19 [ 634.419331][ T9356] usb 5-1: Using ep0 maxpacket: 16 [ 634.528698][T13357] udc-core: couldn't find an available UDC or it's busy [ 634.539281][ T9356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.555425][T13357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 634.567604][ T9356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.597245][ T9356] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.599151][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 634.623307][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 634.625741][ T9356] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 634.639077][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 634.653079][ T9356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.659103][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 634.679075][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 634.681794][ T9356] usb 5-1: config 0 descriptor?? [ 634.702994][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 634.712758][ T3676] usb 2-1: USB disconnect, device number 67 [ 634.719073][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 634.726052][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 634.737120][ T3676] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 634.886732][ T25] kauditd_printk_skb: 32 callbacks suppressed [ 634.886746][ T25] audit: type=1326 audit(1729387878.240:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f3c8eff9 code=0x7ffc0000 [ 634.941226][ T25] audit: type=1326 audit(1729387878.240:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f02f3c8eff9 code=0x7ffc0000 [ 635.004552][ T25] audit: type=1326 audit(1729387878.240:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f3c8eff9 code=0x7ffc0000 [ 635.074397][ T25] audit: type=1326 audit(1729387878.240:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02f3c8eff9 code=0x7ffc0000 [ 635.123302][ T25] audit: type=1326 audit(1729387878.240:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f3c8eff9 code=0x7ffc0000 [ 635.182185][ T25] audit: type=1326 audit(1729387878.240:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f02f3c8eff9 code=0x7ffc0000 [ 635.243529][ T25] audit: type=1326 audit(1729387878.240:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f02f3c8f033 code=0x7ffc0000 [ 635.319135][ T25] audit: type=1326 audit(1729387878.240:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f3c8eff9 code=0x7ffc0000 [ 635.369121][ T25] audit: type=1326 audit(1729387878.240:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02f3c8d990 code=0x7ffc0000 [ 635.429690][ T25] audit: type=1326 audit(1729387878.240:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f3c8eff9 code=0x7ffc0000 [ 635.569244][ T9356] usbhid 5-1:0.0: can't add hid device: -71 [ 635.581712][ T9356] usbhid: probe of 5-1:0.0 failed with error -71 [ 635.625723][ T9356] usb 5-1: USB disconnect, device number 47 [ 636.139154][ T3673] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 636.230786][ T9356] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 636.439337][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'. [ 636.487504][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2677'. [ 636.497540][T13430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2677'. [ 636.506722][T13430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2677'. [ 636.515846][ T3673] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.528409][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2677'. [ 636.528704][ T3673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 636.551552][ T3673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 636.562488][ T3673] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 636.581284][ T3673] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 636.593753][ T3673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.617784][ T3673] usb 1-1: config 0 descriptor?? [ 636.629191][ T21] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 636.637160][ T9356] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 636.653160][ T9356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.661534][ T3673] usb 1-1: MIDIStreaming interface descriptor not found [ 636.667211][ T9356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.687798][ T9356] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 636.789352][ T9356] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 636.800120][ T9356] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 636.808292][ T9356] usb 2-1: Manufacturer: syz [ 636.820017][ T9356] usb 2-1: config 0 descriptor?? [ 636.881327][ T3619] usb 1-1: USB disconnect, device number 64 [ 636.969312][ T21] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 637.061018][ T21] usb 5-1: config 0 has no interfaces? [ 637.139261][ T21] usb 5-1: config 0 has no interfaces? [ 637.240358][ T21] usb 5-1: config 0 has no interfaces? [ 637.290742][ T9356] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 637.298006][ T9356] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 637.328710][ T9356] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 637.340075][ T21] usb 5-1: config 0 has no interfaces? [ 637.430552][ T21] usb 5-1: config 0 has no interfaces? [ 637.519426][ T21] usb 5-1: config 0 has no interfaces? [ 637.599275][ T21] usb 5-1: config 0 has no interfaces? [ 637.699231][ T21] usb 5-1: config 0 has no interfaces? [ 637.704985][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 637.714151][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.724067][ T21] usb 5-1: config 0 descriptor?? [ 637.994842][T13416] udc-core: couldn't find an available UDC or it's busy [ 638.005156][T13416] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 638.020463][ T3619] usb 5-1: USB disconnect, device number 48 [ 638.186702][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2686'. [ 638.819147][ T9835] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 639.339243][ T9835] usb 5-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 639.348615][ T9835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.360645][ T9835] usb 5-1: Product: syz [ 639.364818][ T9835] usb 5-1: Manufacturer: syz [ 639.369535][ T9835] usb 5-1: SerialNumber: syz [ 639.382580][ T9835] usb 5-1: config 0 descriptor?? [ 639.439369][ T3673] usb 2-1: USB disconnect, device number 68 [ 639.459345][ T9835] pwc: Logitech QuickCam Zoom (new model) USB webcam detected. [ 639.652342][T13471] udc-core: couldn't find an available UDC or it's busy [ 639.659659][T13471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 640.239176][ T9835] pwc: Failed to set LED on/off time (-71) [ 640.259220][ T9835] pwc: send_video_command error -71 [ 640.270172][ T9835] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 640.278732][ T9835] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 640.290357][ T3676] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 640.313865][ T9835] usb 5-1: USB disconnect, device number 49 [ 640.469212][ T21] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 640.569482][ T3676] usb 4-1: Using ep0 maxpacket: 32 [ 640.719182][ T3676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.730312][ T3676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.740120][ T3676] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 640.749349][ T3676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.764992][ T3676] usb 4-1: config 0 descriptor?? [ 640.879266][ T21] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 640.893153][ T21] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 640.906921][ T21] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 640.916037][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.974356][ T21] usb 1-1: invalid MIDI out EP 0 [ 641.024021][ T3988] udevd[3988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.053877][ T21] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 641.159385][ T3676] usbhid 4-1:0.0: can't add hid device: -71 [ 641.165303][ T3676] usbhid: probe of 4-1:0.0 failed with error -71 [ 641.191098][ T3676] usb 4-1: USB disconnect, device number 50 [ 641.207459][ T21] usb 1-1: USB disconnect, device number 65 [ 641.720581][T13536] loop3: detected capacity change from 0 to 32768 [ 641.769657][T13536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2714 (13536) [ 641.802369][T13536] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 641.811745][T13536] BTRFS info (device loop3): using free space tree [ 641.818428][T13536] BTRFS info (device loop3): has skinny extents [ 641.848073][T13540] loop4: detected capacity change from 0 to 128 [ 641.966897][T13540] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 641.985800][T13540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.734549][ T25] kauditd_printk_skb: 6 callbacks suppressed [ 642.734563][ T25] audit: type=1800 audit(1729387886.090:892): pid=13540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2716" name="file0" dev="loop4" ino=89 res=0 errno=0 [ 642.898859][T13536] BTRFS info (device loop3): enabling ssd optimizations [ 643.973223][ T3562] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (3562) [ 644.354851][ T9356] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 644.739332][ T9356] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 644.761775][ T9356] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 644.812764][ T9356] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 644.864704][ T9356] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 7 [ 644.935099][ T9356] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 645.131052][ T9356] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 645.151143][ T9356] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 645.174853][ T9356] usb 1-1: Product: syz [ 645.188233][ T9356] usb 1-1: Manufacturer: syz [ 645.260119][ T9356] cdc_wdm 1-1:1.0: skipping garbage [ 645.274753][ T9356] cdc_wdm 1-1:1.0: skipping garbage [ 645.289113][ T9356] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 645.531190][T13594] usb 1-1: USB disconnect, device number 66 [ 645.718695][T13610] loop4: detected capacity change from 0 to 2048 [ 646.001367][T13610] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 646.021178][T13610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 647.710923][T13634] fuse: Unknown parameter 'fK' [ 647.718379][ T25] audit: type=1326 audit(1729387891.070:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 647.740716][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.280911][ T25] audit: type=1326 audit(1729387891.070:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 648.312962][ T25] audit: type=1326 audit(1729387891.100:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 648.343879][ T25] audit: type=1326 audit(1729387891.100:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 648.385745][ T25] audit: type=1326 audit(1729387891.100:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 648.408127][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.439209][ T21] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 648.508673][ T25] audit: type=1326 audit(1729387891.120:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc000057990 code=0x7ffc0000 [ 648.587208][ T25] audit: type=1326 audit(1729387891.120:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 648.609550][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.671510][ T25] audit: type=1326 audit(1729387891.120:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 648.693849][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.770070][ T25] audit: type=1326 audit(1729387891.120:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc000057990 code=0x7ffc0000 [ 648.792412][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.853730][ T25] audit: type=1326 audit(1729387891.120:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc000058bfb code=0x7ffc0000 [ 648.882222][ T25] audit: type=1326 audit(1729387891.120:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc000058bfb code=0x7ffc0000 [ 648.920028][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.943435][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 648.976487][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 648.987690][ T21] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 649.000876][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.039754][T13632] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 649.070366][ T21] hub 2-1:1.0: bad descriptor, ignoring hub [ 649.076293][ T21] hub: probe of 2-1:1.0 failed with error -5 [ 649.095834][ T21] cdc_wdm 2-1:1.0: skipping garbage [ 649.108589][ T21] cdc_wdm 2-1:1.0: skipping garbage [ 649.208953][ T21] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 649.235820][ T21] cdc_wdm 2-1:1.0: Unknown control protocol [ 650.359860][ T21] usb 2-1: USB disconnect, device number 69 [ 650.709143][ T9835] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 651.829216][ T9835] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 652.192942][ T9835] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 652.218800][ T9835] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 652.231820][ T9835] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 7 [ 652.259131][ T9835] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 652.409170][ T9835] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 652.420882][ T9835] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 652.436574][ T9835] usb 5-1: Product: syz [ 652.446273][ T9835] usb 5-1: Manufacturer: syz [ 652.490405][ T9835] cdc_wdm 5-1:1.0: skipping garbage [ 652.496151][ T9835] cdc_wdm 5-1:1.0: skipping garbage [ 652.507148][ T9835] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 652.696629][T13594] usb 5-1: USB disconnect, device number 50 [ 653.537452][ T9835] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 654.001044][T13687] udc-core: couldn't find an available UDC or it's busy [ 654.019478][T13687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.190484][T13692] loop4: detected capacity change from 0 to 32768 [ 654.200647][T13687] udc-core: couldn't find an available UDC or it's busy [ 654.209207][T13687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.389379][ T9835] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 654.427163][T13694] fuse: Unknown parameter 'fK' [ 654.569167][ T9835] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.578880][ T9835] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.593567][ T9835] usb 1-1: config 0 interface 0 has no altsetting 0 [ 654.679243][ T9835] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.696117][ T9835] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.715493][ T9835] usb 1-1: config 0 interface 0 has no altsetting 0 [ 655.269275][ T9835] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 655.282752][ T9835] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 655.294142][ T9835] usb 1-1: config 0 interface 0 has no altsetting 0 [ 655.385183][ T9835] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 655.405482][ T25] kauditd_printk_skb: 29 callbacks suppressed [ 655.405494][ T25] audit: type=1326 audit(1729387898.760:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7eed38ff9 code=0x7ffc0000 [ 655.407114][ T9835] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 655.449211][ T25] audit: type=1326 audit(1729387898.800:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7eed38ff9 code=0x7ffc0000 [ 655.474513][ T25] audit: type=1326 audit(1729387898.800:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7eed38ff9 code=0x7ffc0000 [ 655.499154][ T9835] usb 1-1: config 0 interface 0 has no altsetting 0 [ 655.506705][ T25] audit: type=1326 audit(1729387898.800:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7eed37990 code=0x7ffc0000 [ 655.530440][ T25] audit: type=1326 audit(1729387898.800:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7eed38ff9 code=0x7ffc0000 [ 655.558986][ T25] audit: type=1326 audit(1729387898.830:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7eed37990 code=0x7ffc0000 [ 655.587634][ T25] audit: type=1326 audit(1729387898.830:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7eed38bfb code=0x7ffc0000 [ 655.611494][ T9835] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 655.620588][ T25] audit: type=1326 audit(1729387898.830:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7eed38bfb code=0x7ffc0000 [ 655.643649][ T9835] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 655.643957][T13712] netlink: 'syz.4.2763': attribute type 32 has an invalid length. [ 655.654991][ T9835] usb 1-1: config 0 interface 0 has no altsetting 0 [ 655.669880][ T25] audit: type=1326 audit(1729387898.830:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7eed38bfb code=0x7ffc0000 [ 655.693327][ T25] audit: type=1326 audit(1729387898.830:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7eed38bfb code=0x7ffc0000 [ 655.769241][ T9835] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 655.863011][ T9835] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 655.874525][ T9835] usb 1-1: config 0 interface 0 has no altsetting 0 [ 656.312409][ T3673] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 656.338762][ T9835] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 656.411695][ T9835] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 656.516870][ T9835] usb 1-1: config 0 interface 0 has no altsetting 0 [ 656.719176][ T9835] usb 1-1: unable to read config index 7 descriptor/start: -71 [ 656.730904][ T9835] usb 1-1: can't read configurations, error -71 [ 656.848890][T13726] loop4: detected capacity change from 0 to 32768 [ 657.137511][ T3673] usb 2-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 657.147388][ T3673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.156336][ T3673] usb 2-1: Product: syz [ 657.160768][ T3673] usb 2-1: Manufacturer: syz [ 657.165417][ T3673] usb 2-1: SerialNumber: syz [ 657.172334][ T3673] usb 2-1: config 0 descriptor?? [ 657.849463][ T9835] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 657.864146][ T3675] Bluetooth: hci0: command 0x0406 tx timeout [ 657.936760][ T3673] pwc: Logitech QuickCam Zoom (new model) USB webcam detected. [ 658.085448][T13718] udc-core: couldn't find an available UDC or it's busy [ 658.092649][T13718] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 658.259171][ T9835] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 658.268020][ T9835] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 658.278454][ T9835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 658.287618][ T9835] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 7 [ 658.298788][ T9835] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 658.429228][ T9835] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 658.441905][ T9835] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 658.450832][ T9835] usb 1-1: Product: syz [ 658.454995][ T9835] usb 1-1: Manufacturer: syz [ 658.500254][ T9835] cdc_wdm 1-1:1.0: skipping garbage [ 658.505543][ T9835] cdc_wdm 1-1:1.0: skipping garbage [ 658.511198][ T9835] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 658.737656][ T3673] pwc: Failed to set LED on/off time (-71) [ 658.759492][ T9835] usb 1-1: USB disconnect, device number 68 [ 658.765466][ T3673] pwc: send_video_command error -71 [ 658.770956][ T3673] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 658.784994][ T3673] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 658.802178][ T3673] usb 2-1: USB disconnect, device number 70 [ 658.863463][T13747] fuse: Unknown parameter 'fK' [ 659.014672][T13749] netlink: 'syz.4.2776': attribute type 32 has an invalid length. [ 659.169137][ T3673] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 659.410125][ T3673] usb 2-1: Using ep0 maxpacket: 16 [ 659.539329][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.550908][ T3673] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 659.565906][ T3673] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 659.575411][ T3673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.589909][ T3673] usb 2-1: config 0 descriptor?? [ 660.095315][ T3673] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input20 [ 660.191645][ T3673] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 660.229198][T13594] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 660.311033][T13745] udc-core: couldn't find an available UDC or it's busy [ 660.323888][T13745] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.340340][T13745] udc-core: couldn't find an available UDC or it's busy [ 660.347501][T13745] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.522486][ T25] kauditd_printk_skb: 14 callbacks suppressed [ 660.522500][ T25] audit: type=1326 audit(1729387903.880:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82647cdbfb code=0x7ffc0000 [ 660.562659][ T25] audit: type=1326 audit(1729387903.920:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82647cdbfb code=0x7ffc0000 [ 660.589560][ T25] audit: type=1326 audit(1729387903.950:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82647cdbfb code=0x7ffc0000 [ 660.619326][ T25] audit: type=1326 audit(1729387903.980:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82647cdbfb code=0x7ffc0000 [ 660.644692][ T3673] usb 2-1: USB disconnect, device number 71 [ 660.653137][ T25] audit: type=1326 audit(1729387904.000:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82647cdbfb code=0x7ffc0000 [ 660.679185][T13594] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.699093][ T25] audit: type=1326 audit(1729387904.050:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82647cdbfb code=0x7ffc0000 [ 660.735667][T13594] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 660.752701][T13594] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 660.772936][T13594] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 660.789174][T13594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.829870][ T25] audit: type=1326 audit(1729387904.190:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82647cdbfb code=0x7ffc0000 [ 660.852587][T13771] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 660.870974][ T25] audit: type=1326 audit(1729387904.210:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82647cdbfb code=0x7ffc0000 [ 660.897419][ T25] audit: type=1326 audit(1729387904.210:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82647cdbfb code=0x7ffc0000 [ 660.900453][T13594] hub 5-1:1.0: bad descriptor, ignoring hub [ 660.935768][ T25] audit: type=1326 audit(1729387904.220:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82647cdbfb code=0x7ffc0000 [ 660.948987][T13594] hub: probe of 5-1:1.0 failed with error -5 [ 660.986946][T13594] cdc_wdm 5-1:1.0: skipping garbage [ 660.992206][T13594] cdc_wdm 5-1:1.0: skipping garbage [ 661.006974][T13594] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 661.013522][T13594] cdc_wdm 5-1:1.0: Unknown control protocol [ 661.201309][T13781] netlink: 'syz.3.2787': attribute type 32 has an invalid length. [ 661.251024][T13594] usb 5-1: USB disconnect, device number 51 [ 661.295290][T13784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2788'. [ 663.081589][T13823] netlink: 'syz.4.2801': attribute type 32 has an invalid length. [ 663.136338][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2803'. [ 663.307907][T13838] loop4: detected capacity change from 0 to 32768 [ 663.779657][T13594] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 664.323319][T13849] loop4: detected capacity change from 0 to 256 [ 665.379353][T13594] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.409843][T13594] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 665.459632][T13594] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 665.505743][T13594] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 665.528080][T13594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.579286][ T25] kauditd_printk_skb: 37 callbacks suppressed [ 665.579299][ T25] audit: type=1326 audit(1729387908.940:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc000058bfb code=0x7ffc0000 [ 665.579512][ T25] audit: type=1326 audit(1729387908.940:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc000058bfb code=0x7ffc0000 [ 665.579719][ T25] audit: type=1326 audit(1729387908.940:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc000058bfb code=0x7ffc0000 [ 665.579858][T13845] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 665.580003][ T25] audit: type=1326 audit(1729387908.940:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc000058bfb code=0x7ffc0000 [ 665.610238][T13594] hub 2-1:1.0: bad descriptor, ignoring hub [ 665.610263][T13594] hub: probe of 2-1:1.0 failed with error -5 [ 665.610656][T13594] cdc_wdm 2-1:1.0: skipping garbage [ 665.610671][T13594] cdc_wdm 2-1:1.0: skipping garbage [ 665.611706][T13594] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 665.611724][T13594] cdc_wdm 2-1:1.0: Unknown control protocol [ 665.611813][ T25] audit: type=1326 audit(1729387908.970:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc00008b0e5 code=0x7ffc0000 [ 665.876571][ T25] audit: type=1326 audit(1729387909.230:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 665.978486][ T25] audit: type=1326 audit(1729387909.260:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 666.029355][ T9835] usb 2-1: USB disconnect, device number 72 [ 666.125472][ T25] audit: type=1326 audit(1729387909.260:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc00005af17 code=0x7ffc0000 [ 666.177147][ T25] audit: type=1326 audit(1729387909.260:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc00005ae8c code=0x7ffc0000 [ 666.281239][ T25] audit: type=1326 audit(1729387909.260:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.1.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc00005adc4 code=0x7ffc0000 [ 666.379144][ T9835] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 666.620157][ T9835] usb 1-1: Using ep0 maxpacket: 16 [ 666.740333][ T9835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.755942][ T3675] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 666.773649][ T9835] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 666.794308][ T9835] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 666.804706][ T9835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.821007][ T9835] usb 1-1: config 0 descriptor?? [ 666.857984][T13871] netlink: 'syz.2.2814': attribute type 32 has an invalid length. [ 666.997279][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2817'. [ 667.129225][ T3675] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 667.137557][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 667.154071][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 667.165364][ T3675] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 667.184336][ T3675] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 667.195041][ T3675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.208796][ T3675] usb 2-1: config 0 descriptor?? [ 667.229357][T13869] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 667.302637][ T9835] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input21 [ 667.383079][ T9835] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 667.502727][T13867] udc-core: couldn't find an available UDC or it's busy [ 667.510880][T13867] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 667.519888][T13867] udc-core: couldn't find an available UDC or it's busy [ 667.526948][T13867] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 667.690939][ T3675] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 667.700616][ T3675] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 667.736141][ T3675] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 667.737843][T13594] usb 1-1: USB disconnect, device number 69 [ 668.072836][ T3675] usb 2-1: USB disconnect, device number 73 [ 668.855088][T13908] netlink: 'syz.1.2826': attribute type 32 has an invalid length. [ 670.824382][T13936] fuse: Unknown parameter 'fK' [ 672.048124][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'. [ 672.117537][T13959] loop3: detected capacity change from 0 to 512 [ 672.239152][ T3675] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 672.289738][T13959] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 672.307837][T13959] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 672.324395][T13959] System zones: 0-1, 15-15, 18-18, 34-34 [ 672.337024][T13959] EXT4-fs (loop3): orphan cleanup on readonly fs [ 672.354831][T13959] __quota_error: 13 callbacks suppressed [ 672.354846][T13959] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 672.377111][T13959] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 672.391856][T13959] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 672.401624][T13959] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2842: bg 0: block 40: padding at end of block bitmap is not set [ 672.803602][T13959] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 672.813862][T13959] EXT4-fs (loop3): 1 truncate cleaned up [ 672.819644][T13959] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 672.989509][ T3675] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 673.001271][ T3675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 673.120852][ T3675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 673.132458][ T3675] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 673.145489][ T3675] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 673.154652][ T3675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.324406][T13971] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.2842: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 673.329823][ T3675] usb 5-1: config 0 descriptor?? [ 673.360015][T13946] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 673.818543][T13983] fuse: Bad value for 'fd' [ 674.601027][ T3675] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 674.628123][ T3675] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 674.645237][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 674.665435][ T3675] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 674.694804][T13987] MPTCP: addr_signal error, rm_addr=1 [ 674.972217][T13995] fuse: Unknown parameter 'fK' [ 675.212509][T13946] loop4: detected capacity change from 0 to 512 [ 675.303500][T13946] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 675.354703][T13946] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 675.428662][T13946] EXT4-fs (loop4): 1 truncate cleaned up [ 675.460977][T13946] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 675.598803][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2852'. [ 676.449209][T13594] usb 5-1: reset high-speed USB device number 52 using dummy_hcd [ 676.468396][T14035] fuse: Unknown parameter 'grou00000000000000000000' [ 677.278169][T14050] fuse: Unknown parameter 'fK' [ 677.445655][ T9356] usb 5-1: USB disconnect, device number 52 [ 677.693197][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2865'. [ 678.189909][ T3675] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 678.489283][ T3675] usb 2-1: Using ep0 maxpacket: 16 [ 678.664247][T14072] loop3: detected capacity change from 0 to 32768 [ 678.719817][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.736789][ T3675] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 678.763300][ T3675] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 678.778440][ T3675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.790103][ T3675] usb 2-1: config 0 descriptor?? [ 678.795391][T14072] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 678.805600][T14072] BTRFS info (device loop3): using free space tree [ 678.812404][T14072] BTRFS info (device loop3): has skinny extents [ 678.940550][T14072] BTRFS info (device loop3): enabling ssd optimizations [ 679.273872][ T3675] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000F/input/input24 [ 679.333273][T14103] loop3: detected capacity change from 0 to 512 [ 679.397651][T14103] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 679.399883][ T3675] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 679.412924][T14103] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 679.430110][T14103] System zones: 0-1, 15-15, 18-18, 34-34 [ 679.436876][T14103] EXT4-fs (loop3): orphan cleanup on readonly fs [ 679.443534][T14103] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 679.453012][T14103] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 679.467940][T14103] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 679.478804][T14065] udc-core: couldn't find an available UDC or it's busy [ 679.493154][T14065] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.505272][T14103] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2871: bg 0: block 40: padding at end of block bitmap is not set [ 679.533631][T14065] udc-core: couldn't find an available UDC or it's busy [ 679.545955][T14065] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.555244][T14103] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 679.571646][T14103] EXT4-fs (loop3): 1 truncate cleaned up [ 679.577496][T14103] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 679.775013][ T3675] usb 2-1: USB disconnect, device number 74 [ 681.939512][T14110] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.2871: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 682.294030][T14130] fuse: Unknown parameter 'group_i00000000000000000000' [ 682.304822][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2877'. [ 682.390152][T14128] netlink: 'syz.0.2878': attribute type 32 has an invalid length. [ 682.485456][ T25] audit: type=1326 audit(1729387925.840:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 682.507927][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.618231][ T25] audit: type=1326 audit(1729387925.840:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 682.640707][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.734283][ T25] audit: type=1326 audit(1729387925.840:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 682.756742][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.799083][T14099] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 682.858868][ T25] audit: type=1326 audit(1729387925.840:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 682.953519][ T25] audit: type=1326 audit(1729387925.840:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 683.076227][ T25] audit: type=1326 audit(1729387925.870:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0331d8b990 code=0x7ffc0000 [ 683.170056][ T25] audit: type=1326 audit(1729387925.870:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 683.281920][T14143] loop4: detected capacity change from 0 to 32768 [ 683.318296][ T25] audit: type=1326 audit(1729387925.870:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 683.355814][T14143] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2882 (14143) [ 683.383494][T14143] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 683.392329][T14143] BTRFS info (device loop4): using free space tree [ 683.398837][T14143] BTRFS info (device loop4): has skinny extents [ 683.427031][ T25] audit: type=1326 audit(1729387925.880:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0331d8b990 code=0x7ffc0000 [ 683.479341][T14099] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.502804][T14099] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 683.549931][T14099] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 683.549974][T14099] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 683.549999][T14099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.579478][T14141] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 683.610042][T14099] hub 1-1:1.0: bad descriptor, ignoring hub [ 683.729177][T14143] BTRFS info (device loop4): enabling ssd optimizations [ 683.737532][T14099] hub: probe of 1-1:1.0 failed with error -5 [ 683.840157][T14099] cdc_wdm 1-1:1.0: skipping garbage [ 683.845482][T14099] cdc_wdm 1-1:1.0: skipping garbage [ 683.862333][T14099] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 683.868261][T14099] cdc_wdm 1-1:1.0: Unknown control protocol [ 683.919794][T14099] usb 1-1: USB disconnect, device number 70 [ 684.579248][T14098] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 684.849134][T14098] usb 5-1: Using ep0 maxpacket: 32 [ 685.009498][T14098] usb 5-1: config 0 has an invalid interface number: 141 but max is 0 [ 685.018137][T14098] usb 5-1: config 0 has no interface number 0 [ 685.024449][T14098] usb 5-1: config 0 interface 141 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 685.225247][T14098] usb 5-1: config 0 interface 141 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 685.367123][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2890'. [ 685.399245][T14098] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 685.412615][T14098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.421055][T14098] usb 5-1: Product: syz [ 685.425335][T14098] usb 5-1: Manufacturer: syz [ 685.430125][T14098] usb 5-1: SerialNumber: syz [ 685.438506][T14098] usb 5-1: config 0 descriptor?? [ 685.520836][T14206] netlink: 'syz.0.2891': attribute type 32 has an invalid length. [ 685.532406][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.540743][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.711655][T14214] fuse: Unknown parameter 'group_i00000000000000000000' [ 685.940922][T14218] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 688.221791][ T9835] usb 5-1: USB disconnect, device number 53 [ 688.574996][T14236] loop4: detected capacity change from 0 to 256 [ 688.678507][T14240] netlink: 'syz.1.2903': attribute type 32 has an invalid length. [ 690.048111][T14264] fuse: Unknown parameter 'group_i00000000000000000000' [ 690.090372][ T9835] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 690.339209][ T9835] usb 4-1: Using ep0 maxpacket: 16 [ 690.459227][ T9835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.475870][ T9835] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 690.494934][ T9835] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 690.504529][ T9835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.527645][ T9835] usb 4-1: config 0 descriptor?? [ 691.549108][T14176] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 691.624816][ T9835] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0010/input/input25 [ 691.715029][ T9835] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 691.789121][T14176] usb 1-1: Using ep0 maxpacket: 32 [ 691.822960][T14259] udc-core: couldn't find an available UDC or it's busy [ 691.830076][T14259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 691.838400][T14259] udc-core: couldn't find an available UDC or it's busy [ 691.845482][T14259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 691.909199][T14176] usb 1-1: config 0 has an invalid interface number: 141 but max is 0 [ 691.917441][T14176] usb 1-1: config 0 has no interface number 0 [ 691.923600][T14176] usb 1-1: config 0 interface 141 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 691.933528][T14176] usb 1-1: config 0 interface 141 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 692.056977][ T9835] usb 4-1: USB disconnect, device number 51 [ 692.099609][T14176] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 692.108849][T14176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.117444][T14176] usb 1-1: Product: syz [ 692.121864][T14176] usb 1-1: Manufacturer: syz [ 692.126461][T14176] usb 1-1: SerialNumber: syz [ 692.133075][T14176] usb 1-1: config 0 descriptor?? [ 692.894946][T14099] usb 1-1: USB disconnect, device number 71 [ 692.971495][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2914'. [ 692.988628][T14279] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 693.631983][T14279] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 694.057652][T14294] fuse: Unknown parameter 'fK' [ 694.394123][T14297] loop3: detected capacity change from 0 to 32768 [ 694.476314][T14297] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2920 (14297) [ 694.570085][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2922'. [ 694.586915][T14297] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 694.640187][T14297] BTRFS info (device loop3): using free space tree [ 694.657361][T14297] BTRFS info (device loop3): has skinny extents [ 694.929151][T14098] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 694.978572][T14336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2935'. [ 695.219383][T14098] usb 2-1: Using ep0 maxpacket: 16 [ 695.449765][T14098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.525448][T14098] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 695.571369][T14098] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 695.586369][T14297] BTRFS info (device loop3): enabling ssd optimizations [ 695.598591][T14098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.732567][T14098] usb 2-1: config 0 descriptor?? [ 697.371081][T14098] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0011/input/input26 [ 697.549490][T14313] udc-core: couldn't find an available UDC or it's busy [ 697.802158][T14098] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 697.814294][T14313] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 697.855053][T14313] udc-core: couldn't find an available UDC or it's busy [ 697.889176][T14313] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 698.145643][T14372] usb 2-1: USB disconnect, device number 75 [ 698.194624][T14380] fuse: Unknown parameter 'fK' [ 698.715335][T14386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2938'. [ 699.542236][T14419] loop4: detected capacity change from 0 to 512 [ 699.672546][T14419] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 699.686134][T14419] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 699.713777][T14419] System zones: 0-1, 15-15, 18-18, 34-34 [ 699.733528][T14419] EXT4-fs (loop4): orphan cleanup on readonly fs [ 699.750681][T14419] __quota_error: 31 callbacks suppressed [ 699.750697][T14419] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 699.792795][T14419] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 699.816810][T14419] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 699.835044][T14419] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2949: bg 0: block 40: padding at end of block bitmap is not set [ 699.883941][T14419] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 699.905692][T14419] EXT4-fs (loop4): 1 truncate cleaned up [ 699.913682][T14419] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 700.092757][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2953'. [ 700.516043][T14439] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.2949: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 700.607857][ T3675] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 700.703497][T14442] loop3: detected capacity change from 0 to 2048 [ 700.767905][T14442] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 700.925682][ T3675] usb 2-1: Using ep0 maxpacket: 16 [ 700.946410][T14442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 701.773297][T14455] fuse: Unknown parameter 'fK' [ 701.949173][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.979415][ T3675] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 702.021703][ T3675] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 702.066262][ T3675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.102757][ T3675] usb 2-1: config 0 descriptor?? [ 702.538091][ T25] audit: type=1326 audit(1729387945.890:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7eed38ff9 code=0x7ffc0000 [ 702.924585][ T3675] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0012/input/input27 [ 703.362820][T14428] udc-core: couldn't find an available UDC or it's busy [ 703.370490][ T3675] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 703.409381][T14428] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 703.429098][ T25] audit: type=1326 audit(1729387945.890:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7eed38ff9 code=0x7ffc0000 [ 703.488745][ T25] audit: type=1326 audit(1729387945.890:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7eed38ff9 code=0x7ffc0000 [ 703.540983][ T25] audit: type=1326 audit(1729387945.890:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7eed38ff9 code=0x7ffc0000 [ 703.567069][ T25] audit: type=1326 audit(1729387945.890:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7eed38ff9 code=0x7ffc0000 [ 703.595494][ T25] audit: type=1326 audit(1729387945.890:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7eed37990 code=0x7ffc0000 [ 703.634243][ T25] audit: type=1326 audit(1729387945.890:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7eed38ff9 code=0x7ffc0000 [ 703.662861][ T25] audit: type=1326 audit(1729387945.890:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7eed38ff9 code=0x7ffc0000 [ 703.686098][ T25] audit: type=1326 audit(1729387945.890:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7eed37990 code=0x7ffc0000 [ 703.701726][ T3675] usb 2-1: USB disconnect, device number 76 [ 703.819166][ T5770] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 704.094445][T14492] device pim6reg1 entered promiscuous mode [ 704.309783][ T5770] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 704.363599][ T5770] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 704.536276][ T5770] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 704.616681][ T5770] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 704.760541][ T5770] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 704.797509][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 704.888009][ T5770] usb 4-1: Product: syz [ 704.895712][ T5770] usb 4-1: Manufacturer: syz [ 705.180063][ T5770] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 705.343736][T14507] fuse: Unknown parameter 'fK' [ 706.695957][ T5770] usb 4-1: USB disconnect, device number 52 [ 706.839527][T14098] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 707.509224][T14098] usb 1-1: config index 0 descriptor too short (expected 213, got 72) [ 707.709253][T14098] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 707.721928][T14098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.732551][T14098] usb 1-1: Product: syz [ 707.736781][T14098] usb 1-1: Manufacturer: syz [ 707.741773][T14098] usb 1-1: SerialNumber: syz [ 707.801668][T14098] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 708.364048][ T3675] usb 1-1: USB disconnect, device number 72 [ 708.379130][T14098] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 708.390450][ T3675] usb 1-1: ath9k_htc: USB layer deinitialized [ 708.547867][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 708.547880][ T25] audit: type=1326 audit(1729387951.900:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14547 comm="syz.1.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 709.824948][ T25] audit: type=1326 audit(1729387952.610:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14547 comm="syz.1.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 709.882174][ T25] audit: type=1326 audit(1729387952.610:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14547 comm="syz.1.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 709.905765][ T25] audit: type=1326 audit(1729387952.610:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14547 comm="syz.1.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 709.953267][ T25] audit: type=1326 audit(1729387952.610:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14547 comm="syz.1.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 710.001069][ T25] audit: type=1326 audit(1729387953.160:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14547 comm="syz.1.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc000057990 code=0x7ffc0000 [ 710.054678][ T25] audit: type=1326 audit(1729387953.160:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14547 comm="syz.1.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 710.078122][ T25] audit: type=1326 audit(1729387953.160:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14547 comm="syz.1.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 710.160992][T14098] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 710.532159][ T25] audit: type=1326 audit(1729387953.170:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14547 comm="syz.1.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc000057990 code=0x7ffc0000 [ 710.562610][ T25] audit: type=1326 audit(1729387953.170:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14547 comm="syz.1.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc000058bfb code=0x7ffc0000 [ 710.609222][T14372] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 710.859119][T14372] usb 1-1: Using ep0 maxpacket: 16 [ 710.949529][T14098] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.949587][T14098] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 710.949621][T14098] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 710.949656][T14098] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 710.949680][T14098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.979235][T14372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.979267][T14372] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 710.979298][T14372] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 710.979332][T14372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.983021][T14548] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 710.984090][T14372] usb 1-1: config 0 descriptor?? [ 711.100468][T14098] hub 2-1:1.0: bad descriptor, ignoring hub [ 711.106396][T14098] hub: probe of 2-1:1.0 failed with error -5 [ 711.134635][T14098] cdc_wdm 2-1:1.0: skipping garbage [ 711.147558][T14098] cdc_wdm 2-1:1.0: skipping garbage [ 711.161065][T14098] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 711.167093][T14098] cdc_wdm 2-1:1.0: Unknown control protocol [ 711.369571][T14176] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 711.439326][T14098] usb 2-1: USB disconnect, device number 77 [ 711.574566][T14372] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0013/input/input28 [ 711.660969][T14372] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 711.739147][T14176] usb 5-1: config index 0 descriptor too short (expected 213, got 72) [ 711.767676][T14558] udc-core: couldn't find an available UDC or it's busy [ 711.775825][T14558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.785392][T14558] udc-core: couldn't find an available UDC or it's busy [ 711.792540][T14558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.899360][T14176] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 711.908651][T14176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.922813][T14176] usb 5-1: Product: syz [ 711.927150][T14176] usb 5-1: Manufacturer: syz [ 711.939545][T14176] usb 5-1: SerialNumber: syz [ 711.990089][T14176] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 712.022387][T14372] usb 1-1: USB disconnect, device number 73 [ 712.579236][T14176] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 713.138911][T14578] udc-core: couldn't find an available UDC or it's busy [ 713.152847][T14578] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 713.173384][ T5770] usb 5-1: USB disconnect, device number 54 [ 714.269493][T14176] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 714.276494][T14176] ath9k_htc: Failed to initialize the device [ 714.283780][ T5770] usb 5-1: ath9k_htc: USB layer deinitialized [ 714.575468][T14611] loop3: detected capacity change from 0 to 256 [ 714.932977][T14178] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 715.119331][ T5770] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 715.269332][T14178] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 715.399206][ T5770] usb 5-1: Using ep0 maxpacket: 16 [ 715.419393][T14178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 715.428321][T14178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 715.540192][ T5770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.541694][T14178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 715.582958][ T5770] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 715.603263][ T5770] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 715.629278][ T5770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.639586][T14178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 715.646275][ T5770] usb 5-1: config 0 descriptor?? [ 715.648515][T14178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 715.648544][T14178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 715.799672][T14178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 715.831966][T14178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 715.894213][T14178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 716.039463][T14178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 716.078115][T14178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 716.118384][T14178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 716.209142][T14178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 716.228228][T14178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 716.364813][T14178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 716.380067][T14622] udc-core: couldn't find an available UDC or it's busy [ 716.387269][T14622] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 716.651102][T14633] loop3: detected capacity change from 0 to 32768 [ 716.779712][T14178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 716.818196][T14178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 716.848392][T14622] udc-core: couldn't find an available UDC or it's busy [ 716.905113][T14622] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 716.928150][T14178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 717.139278][T14178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.158513][T14178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.195006][T14178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 717.279238][T14178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.285678][ T5770] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0014/input/input29 [ 717.306282][T14178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.318076][T14178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 717.343118][T14633] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3017 (14633) [ 717.386874][ T5770] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 717.421289][ T5770] usb 5-1: USB disconnect, device number 55 [ 717.432355][T14633] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 717.441197][T14633] BTRFS info (device loop3): using free space tree [ 717.447705][T14633] BTRFS info (device loop3): has skinny extents [ 717.479328][T14178] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 717.488421][T14178] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 717.557943][T14178] usb 2-1: Product: syz [ 717.565816][T14178] usb 2-1: Manufacturer: syz [ 717.576032][T14178] usb 2-1: SerialNumber: syz [ 717.594046][T14178] usb 2-1: config 0 descriptor?? [ 717.606384][T14633] BTRFS info (device loop3): enabling ssd optimizations [ 717.629257][T14178] usb 2-1: can't set config #0, error -71 [ 717.668179][T14178] usb 2-1: USB disconnect, device number 78 [ 719.009109][T14177] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 719.249151][T14177] usb 5-1: Using ep0 maxpacket: 16 [ 719.369221][T14177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.380281][T14177] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 719.393193][T14177] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 719.402517][T14177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.426582][T14177] usb 5-1: config 0 descriptor?? [ 719.509923][T14686] loop3: detected capacity change from 0 to 512 [ 719.546519][T14686] EXT4-fs (loop3): Ignoring removed oldalloc option [ 719.553636][T14686] EXT4-fs (loop3): filesystem is read-only [ 719.563114][T14686] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 719.578790][T14686] EXT4-fs (loop3): failed to initialize system zone (-117) [ 719.587620][T14686] EXT4-fs (loop3): mount failed [ 719.942461][T14177] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0015/input/input30 [ 720.069400][T14697] loop3: detected capacity change from 0 to 2048 [ 720.101910][T14177] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 720.144407][T14697] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 720.164593][T14697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 720.395520][T14177] usb 5-1: USB disconnect, device number 56 [ 721.540172][T14708] loop3: detected capacity change from 0 to 512 [ 721.648306][T14708] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 721.659202][T14708] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 721.669372][T14708] System zones: 0-1, 15-15, 18-18, 34-34 [ 721.676055][T14708] EXT4-fs (loop3): orphan cleanup on readonly fs [ 721.706109][T14708] __quota_error: 30 callbacks suppressed [ 721.706125][T14708] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 721.721604][T14708] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 721.736923][T14708] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 721.744780][T14708] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3032: bg 0: block 40: padding at end of block bitmap is not set [ 721.765630][T14708] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 721.775858][T14708] EXT4-fs (loop3): 1 truncate cleaned up [ 721.781659][T14708] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 722.116622][T14720] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.3032: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 722.479325][ T5770] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 722.749166][ T5770] usb 2-1: Using ep0 maxpacket: 16 [ 722.871020][ T5770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.886649][ T5770] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 722.908836][ T5770] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 722.918342][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.948019][ T5770] usb 2-1: config 0 descriptor?? [ 723.614022][T14741] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 723.672703][ T5770] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0016/input/input31 [ 723.775836][ T5770] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 723.779146][T14176] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 723.872260][T14718] udc-core: couldn't find an available UDC or it's busy [ 723.909906][T14718] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 723.925087][T14718] udc-core: couldn't find an available UDC or it's busy [ 723.933075][T14718] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 724.152072][T14099] usb 2-1: USB disconnect, device number 79 [ 724.169332][T14176] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 724.185717][T14176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 724.202512][T14176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 724.214445][T14176] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 724.227079][T14743] loop4: detected capacity change from 0 to 2048 [ 724.238377][T14176] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 724.261087][T14176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.280702][T14176] usb 4-1: config 0 descriptor?? [ 724.305236][T14743] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 724.309370][T14738] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 724.407776][T14743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 725.705183][T14176] plantronics 0003:047F:FFFF.0017: unknown main item tag 0xd [ 725.714678][T14176] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 725.735269][T14176] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 725.834341][T14753] loop3: detected capacity change from 0 to 512 [ 725.834511][T14757] loop4: detected capacity change from 0 to 256 [ 725.869163][T14099] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 725.891214][T14753] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 725.929375][T14753] EXT4-fs (loop3): 1 truncate cleaned up [ 725.935149][T14753] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 726.132671][T14099] usb 2-1: Using ep0 maxpacket: 16 [ 726.970044][T14099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.981282][T14099] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 726.996713][T14099] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 727.154592][T14099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.164803][T14099] usb 2-1: config 0 descriptor?? [ 727.305733][T14771] device pim6reg1 entered promiscuous mode [ 727.928186][ T5770] usb 4-1: USB disconnect, device number 53 [ 728.019683][T14099] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0018/input/input33 [ 728.141021][T14099] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 728.219890][T14780] loop4: detected capacity change from 0 to 256 [ 728.266645][T14176] usb 2-1: USB disconnect, device number 80 [ 729.001426][T14792] loop4: detected capacity change from 0 to 512 [ 729.086290][T14792] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 729.099995][T14792] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 729.108157][T14792] System zones: 0-1, 15-15, 18-18, 34-34 [ 729.119928][T14792] EXT4-fs (loop4): orphan cleanup on readonly fs [ 729.126326][T14792] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 729.136290][T14792] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 729.152502][T14792] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 729.169389][T14792] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3053: bg 0: block 40: padding at end of block bitmap is not set [ 729.189322][T14792] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 729.198368][T14792] EXT4-fs (loop4): 1 truncate cleaned up [ 729.208470][T14792] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 729.833736][T14176] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 729.844702][T14804] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.3053: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 730.441563][T14176] usb 4-1: Using ep0 maxpacket: 16 [ 730.559340][T14176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.703637][T14176] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 730.880337][T14176] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 730.938171][T14176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.048159][T14098] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 731.071166][T14815] loop4: detected capacity change from 0 to 256 [ 731.155466][T14176] usb 4-1: config 0 descriptor?? [ 731.709457][T14098] usb 2-1: config index 0 descriptor too short (expected 213, got 72) [ 731.930128][T14098] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 731.930148][T14098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.930159][T14098] usb 2-1: Product: syz [ 731.930168][T14098] usb 2-1: Manufacturer: syz [ 731.930177][T14098] usb 2-1: SerialNumber: syz [ 731.962998][T14176] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0019/input/input34 [ 731.970552][T14098] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 732.046560][T14176] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 732.143967][T14796] udc-core: couldn't find an available UDC or it's busy [ 732.166491][T14796] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 732.191268][T14796] udc-core: couldn't find an available UDC or it's busy [ 732.221236][T14796] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 732.264151][T14098] usb 2-1: USB disconnect, device number 81 [ 732.289180][T14099] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 732.308566][T14098] usb 2-1: ath9k_htc: USB layer deinitialized [ 732.827616][T14176] usb 4-1: USB disconnect, device number 54 [ 733.004890][T14851] loop4: detected capacity change from 0 to 256 [ 733.259413][T14098] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 733.560168][T14098] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 733.669172][T14098] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 733.674908][T14859] loop3: detected capacity change from 0 to 512 [ 733.678094][T14098] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 733.695602][T14098] usb 2-1: config 0 interface 0 has no altsetting 0 [ 733.782323][T14860] device pim6reg1 entered promiscuous mode [ 733.809447][T14098] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 733.840118][T14098] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 733.964151][T14098] usb 2-1: config 0 interface 0 has no altsetting 0 [ 734.079824][T14098] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.138887][T14098] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.344008][T14098] usb 2-1: config 0 interface 0 has no altsetting 0 [ 734.359446][T14859] EXT4-fs (loop3): Ignoring removed oldalloc option [ 734.379337][T14859] EXT4-fs (loop3): filesystem is read-only [ 734.400590][T14859] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 734.418082][T14859] EXT4-fs (loop3): failed to initialize system zone (-117) [ 734.445090][T14859] EXT4-fs (loop3): mount failed [ 734.459345][T14098] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.478469][T14098] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.509847][T14098] usb 2-1: config 0 interface 0 has no altsetting 0 [ 734.619356][T14098] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.628349][T14098] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.639960][T14098] usb 2-1: config 0 interface 0 has no altsetting 0 [ 734.739185][T14098] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.748237][T14098] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.759677][T14098] usb 2-1: config 0 interface 0 has no altsetting 0 [ 734.849201][ T9356] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 734.856932][T14098] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.868140][T14098] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.879936][T14098] usb 2-1: config 0 interface 0 has no altsetting 0 [ 734.979260][T14098] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.992007][T14098] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 735.004273][T14098] usb 2-1: config 0 interface 0 has no altsetting 0 [ 735.179302][T14098] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 735.188728][T14098] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 735.197153][T14098] usb 2-1: Product: syz [ 735.201596][T14098] usb 2-1: Manufacturer: syz [ 735.206198][T14098] usb 2-1: SerialNumber: syz [ 735.217071][T14098] usb 2-1: config 0 descriptor?? [ 735.239384][ T9356] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 735.248204][ T9356] usb 1-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 735.258828][ T9356] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 735.272286][T14098] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 735.279748][ T9356] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 735.401233][T14882] loop4: detected capacity change from 0 to 256 [ 735.431629][ T9356] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 735.446260][ T9356] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 735.481326][ T9356] usb 1-1: Product: syz [ 735.492278][ T9356] usb 1-1: Manufacturer: syz [ 735.699120][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 735.706401][T14176] usb 2-1: USB disconnect, device number 82 [ 736.039721][T14176] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 736.060021][ T9356] cdc_wdm 1-1:1.0: skipping garbage [ 736.067367][ T9356] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 736.289587][T14176] usb 1-1: USB disconnect, device number 74 [ 736.329260][T14372] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 736.589400][T14372] usb 5-1: Using ep0 maxpacket: 16 [ 736.709333][T14372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.729637][T14372] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 736.743761][T14372] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 736.753645][T14902] loop3: detected capacity change from 0 to 256 [ 736.760197][T14372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.807294][T14372] usb 5-1: config 0 descriptor?? [ 737.432356][T14372] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001A/input/input35 [ 737.559126][T14372] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 737.650339][T14893] udc-core: couldn't find an available UDC or it's busy [ 737.689355][T14893] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 738.583754][T14176] usb 5-1: USB disconnect, device number 57 [ 739.469210][ T9356] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 740.089617][ T9356] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 740.126140][T14954] loop3: detected capacity change from 0 to 2048 [ 740.199183][ T9356] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.211341][ T9356] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 740.232874][T14954] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 740.233779][ T9356] usb 2-1: config 0 interface 0 has no altsetting 0 [ 740.250460][T14954] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.854598][ T9356] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.873849][ T9356] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 740.903497][ T9356] usb 2-1: config 0 interface 0 has no altsetting 0 [ 741.009469][ T9356] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 741.018362][ T9356] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 741.049074][ T9356] usb 2-1: config 0 interface 0 has no altsetting 0 [ 741.900804][ T9356] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 741.924087][ T9356] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.012353][T14965] device pim6reg1 entered promiscuous mode [ 742.743606][ T9356] usb 2-1: config 0 interface 0 has no altsetting 0 [ 742.826816][T14969] loop4: detected capacity change from 0 to 256 [ 742.917080][ T9356] usb 2-1: unable to read config index 4 descriptor/start: -71 [ 742.942894][ T9356] usb 2-1: can't read configurations, error -71 [ 743.688755][ T25] audit: type=1326 audit(1729387987.040:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 743.712043][ T25] audit: type=1326 audit(1729387987.040:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 743.822291][ T25] audit: type=1326 audit(1729387987.070:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 743.934055][ T25] audit: type=1326 audit(1729387987.070:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 744.029422][T14098] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 744.372723][ T25] audit: type=1326 audit(1729387987.070:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 744.398606][ T25] audit: type=1326 audit(1729387987.090:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0331d8b990 code=0x7ffc0000 [ 744.457323][ T25] audit: type=1326 audit(1729387987.090:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 744.485943][ T25] audit: type=1326 audit(1729387987.090:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331d8cff9 code=0x7ffc0000 [ 744.518691][ T25] audit: type=1326 audit(1729387987.100:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0331d8b990 code=0x7ffc0000 [ 744.564007][ T25] audit: type=1326 audit(1729387987.100:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14977 comm="syz.0.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0331d8cbfb code=0x7ffc0000 [ 745.379553][T14098] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.442008][T14098] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 745.469266][T14098] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 745.484836][T14098] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 745.504725][T14098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.554712][T14978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 745.609951][T14098] hub 1-1:1.0: bad descriptor, ignoring hub [ 745.634646][T14098] hub: probe of 1-1:1.0 failed with error -5 [ 745.657949][T14098] cdc_wdm 1-1:1.0: skipping garbage [ 745.690573][T14098] cdc_wdm 1-1:1.0: skipping garbage [ 745.720053][T14098] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 745.726056][T14098] cdc_wdm 1-1:1.0: Unknown control protocol [ 745.989770][T14372] usb 1-1: USB disconnect, device number 75 [ 747.004981][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.011595][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.349920][T14372] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 747.709355][T14372] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 747.725072][T14372] usb 1-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 747.736154][T14372] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 747.750854][T14372] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 747.879148][T14372] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 747.888355][T14372] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 747.896430][T14372] usb 1-1: Product: syz [ 747.900990][T14372] usb 1-1: Manufacturer: syz [ 747.940029][T14372] cdc_wdm 1-1:1.0: skipping garbage [ 747.945250][T14372] cdc_wdm 1-1:1.0: skipping garbage [ 747.950610][T14372] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 748.154587][T14098] usb 1-1: USB disconnect, device number 76 [ 751.549244][T15062] device pim6reg1 entered promiscuous mode [ 751.889340][ T25] kauditd_printk_skb: 34 callbacks suppressed [ 751.889354][ T25] audit: type=1326 audit(1729387995.240:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15056 comm="syz.1.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 751.924094][ T25] audit: type=1326 audit(1729387995.250:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15056 comm="syz.1.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 751.985215][ T25] audit: type=1326 audit(1729387995.280:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15056 comm="syz.1.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc000057990 code=0x7ffc0000 [ 752.012396][ T25] audit: type=1326 audit(1729387995.280:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15056 comm="syz.1.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 752.035076][ T25] audit: type=1326 audit(1729387995.280:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15056 comm="syz.1.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000058ff9 code=0x7ffc0000 [ 752.118676][ T25] audit: type=1326 audit(1729387995.280:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15056 comm="syz.1.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc000057990 code=0x7ffc0000 [ 752.157180][ T25] audit: type=1326 audit(1729387995.280:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15056 comm="syz.1.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc000058bfb code=0x7ffc0000 [ 752.182289][ T25] audit: type=1326 audit(1729387995.280:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15056 comm="syz.1.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc000058bfb code=0x7ffc0000 [ 752.208249][ T25] audit: type=1326 audit(1729387995.340:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15056 comm="syz.1.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc000058bfb code=0x7ffc0000 [ 752.231460][ T25] audit: type=1326 audit(1729387995.340:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15056 comm="syz.1.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc000058bfb code=0x7ffc0000 [ 752.265625][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 752.277775][T14098] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 754.315150][T14098] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.330990][T14098] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 754.349531][T14098] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 754.377106][T14098] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 754.387924][T14098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.429179][T14098] usb 2-1: can't set config #1, error -71 [ 754.437980][T14098] usb 2-1: USB disconnect, device number 85 [ 754.564977][T15105] loop4: detected capacity change from 0 to 512 [ 754.619073][T15105] EXT4-fs (loop4): Ignoring removed oldalloc option [ 754.625905][T15105] EXT4-fs (loop4): filesystem is read-only [ 754.634919][T15105] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 754.647242][T15105] EXT4-fs (loop4): failed to initialize system zone (-117) [ 754.655051][T15105] EXT4-fs (loop4): mount failed [ 756.752319][T15126] loop3: detected capacity change from 0 to 32768 [ 756.782737][T15127] device pim6reg1 entered promiscuous mode [ 756.954191][T15126] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3154 (15126) [ 756.970773][T15126] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 756.979589][T15126] BTRFS info (device loop3): using free space tree [ 756.986103][T15126] BTRFS info (device loop3): has skinny extents [ 757.038983][T15126] BTRFS info (device loop3): enabling ssd optimizations [ 757.089097][T14098] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 757.496766][T15153] device pim6reg1 entered promiscuous mode [ 758.459255][T14098] usb 5-1: Using ep0 maxpacket: 16 [ 759.006713][T14098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.150674][T14098] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 759.151036][ T27] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 759.164800][T14098] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 759.180321][T14098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.209874][T14098] usb 5-1: config 0 descriptor?? [ 759.282046][ T27] Not tainted 5.15.168-syzkaller #0 [ 759.563945][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.618188][ T27] task:kworker/0:0 state:D stack:21848 pid: 7 ppid: 2 flags:0x00004000 [ 759.810221][ T27] Workqueue: events request_firmware_work_func [ 759.816878][ T27] Call Trace: [ 759.828023][ T27] [ 759.832451][ T27] __schedule+0x12c4/0x45b0 [ 759.837297][ T27] ? mark_lock+0x98/0x340 [ 759.842522][T14098] usbhid 5-1:0.0: can't add hid device: -71 [ 759.851416][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 759.857752][T14098] usbhid: probe of 5-1:0.0 failed with error -71 [ 760.337776][ T27] ? release_firmware_map_entry+0x190/0x190 [ 760.363371][T14098] usb 5-1: USB disconnect, device number 58 [ 760.380716][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 760.410862][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 760.420784][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 760.431604][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 760.441070][ T27] schedule+0x11b/0x1f0 [ 760.448248][ T27] schedule_preempt_disabled+0xf/0x20 [ 760.458865][ T27] __mutex_lock_common+0xe34/0x25a0 [ 760.470438][ T27] ? ath9k_hif_usb_firmware_cb+0x345/0x4b0 [ 760.480640][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 760.490598][ T27] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 760.500810][ T27] ? _raw_spin_unlock+0x40/0x40 [ 760.512247][ T27] ? swake_up_all_locked+0x95/0x170 [ 760.519162][ T27] mutex_lock_nested+0x17/0x20 [ 760.524365][ T27] ath9k_hif_usb_firmware_cb+0x345/0x4b0 [ 760.534388][ T27] request_firmware_work_func+0x199/0x270 [ 760.541299][ T27] ? ath9k_hif_request_firmware+0x4e0/0x4e0 [ 760.547713][ T27] ? request_firmware_nowait+0x450/0x450 [ 760.556612][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 760.563012][ T27] process_one_work+0x8a1/0x10c0 [ 760.568843][ T27] ? worker_detach_from_pool+0x260/0x260 [ 760.577781][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 760.586678][ T27] ? kthread_data+0x4e/0xc0 [ 760.595588][ T27] ? wq_worker_running+0x97/0x170 [ 760.601790][ T27] worker_thread+0xaca/0x1280 [ 760.607839][ T27] kthread+0x3f6/0x4f0 [ 760.615651][ T27] ? rcu_lock_release+0x20/0x20 [ 760.621801][ T27] ? kthread_blkcg+0xd0/0xd0 [ 760.627897][ T27] ret_from_fork+0x1f/0x30 [ 760.636312][ T27] [ 760.640587][ T27] INFO: task kworker/0:3:3581 blocked for more than 144 seconds. [ 760.648851][ T27] Not tainted 5.15.168-syzkaller #0 [ 760.657776][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 760.666558][ T27] task:kworker/0:3 state:D stack:22304 pid: 3581 ppid: 2 flags:0x00004000 [ 760.680214][ T27] Workqueue: usb_hub_wq hub_event [ 760.685774][ T27] Call Trace: [ 760.693402][ T27] [ 760.702357][ T27] __schedule+0x12c4/0x45b0 [ 760.707115][ T27] ? release_firmware_map_entry+0x190/0x190 [ 760.740748][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 760.749622][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 760.758215][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 760.765533][ T27] schedule+0x11b/0x1f0 [ 760.772272][ T27] schedule_timeout+0xac/0x300 [ 760.777063][ T27] ? console_conditional_schedule+0x40/0x40 [ 760.785234][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 760.794731][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 760.803140][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 760.808354][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 760.816863][ T27] do_wait_for_common+0x2d9/0x480 [ 760.824132][ T27] ? console_conditional_schedule+0x40/0x40 [ 760.833380][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 760.842199][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 760.847332][ T27] ? kthread_data+0x4e/0xc0 [ 760.855413][ T27] wait_for_completion+0x48/0x60 [ 760.862586][ T27] flush_workqueue+0x737/0x1610 [ 760.867463][ T27] ? rcu_work_rcufn+0x140/0x140 [ 760.875656][ T27] ? ath6kl_bmi_done+0x200/0x200 [ 760.882814][ T27] ? __kmalloc+0x168/0x300 [ 760.887248][ T27] ath6kl_usb_power_off+0x34/0x40 [ 760.895780][ T27] ath6kl_core_init+0xac2/0x1120 [ 760.902969][ T27] ? lockdep_softirqs_off+0x420/0x420 [ 760.908360][ T27] ? ath6kl_core_rx_complete+0x70/0x70 [ 760.918136][ T27] ath6kl_usb_probe+0x11e9/0x12e0 [ 760.925423][ T27] ? _raw_spin_unlock+0x40/0x40 [ 760.933607][ T27] usb_probe_interface+0x5c0/0xaf0 [ 760.938738][ T27] ? usb_register_driver+0x3d0/0x3d0 [ 760.946242][ T27] really_probe+0x24e/0xb60 [ 760.954072][ T27] __driver_probe_device+0x1a2/0x3d0 [ 760.961513][ T27] driver_probe_device+0x50/0x420 [ 760.966604][ T27] __device_attach_driver+0x2b9/0x500 [ 760.975606][ T27] ? deferred_probe_work_func+0x230/0x230 [ 760.983649][ T27] bus_for_each_drv+0x183/0x200 [ 760.988512][ T27] ? subsys_find_device_by_id+0x310/0x310 [ 760.997738][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 761.005201][ T27] __device_attach+0x359/0x570 [ 761.013272][ T27] ? kobject_uevent_env+0x36a/0x8d0 [ 761.018488][ T27] ? device_attach+0x20/0x20 [ 761.026278][ T27] ? kobject_uevent_env+0x36a/0x8d0 [ 761.034800][ T27] bus_probe_device+0xba/0x1e0 [ 761.041762][ T27] ? device_add+0xab9/0xfd0 [ 761.046281][ T27] device_add+0xb48/0xfd0 [ 761.053956][ T27] usb_set_configuration+0x19dd/0x2020 [ 761.061647][ T27] usb_generic_driver_probe+0x84/0x140 [ 761.067122][ T27] usb_probe_device+0x130/0x260 [ 761.075196][ T27] ? usb_register_device_driver+0x240/0x240 [ 761.083295][ T27] really_probe+0x24e/0xb60 [ 761.087822][ T27] __driver_probe_device+0x1a2/0x3d0 [ 761.096607][ T27] driver_probe_device+0x50/0x420 [ 761.104018][ T27] __device_attach_driver+0x2b9/0x500 [ 761.112681][ T27] ? deferred_probe_work_func+0x230/0x230 [ 761.118424][ T27] bus_for_each_drv+0x183/0x200 [ 761.124314][ T27] ? subsys_find_device_by_id+0x310/0x310 [ 761.130803][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 761.136038][ T27] __device_attach+0x359/0x570 [ 761.141141][ T27] ? kobject_uevent_env+0x36a/0x8d0 [ 761.146350][ T27] ? device_attach+0x20/0x20 [ 761.151317][ T27] ? kobject_uevent_env+0x36a/0x8d0 [ 761.156519][ T27] bus_probe_device+0xba/0x1e0 [ 761.161343][ T27] ? device_add+0xab9/0xfd0 [ 761.165861][ T27] device_add+0xb48/0xfd0 [ 761.170263][ T27] usb_new_device+0xc17/0x18e0 [ 761.175047][ T27] ? usb_disconnect+0x8c0/0x8c0 [ 761.181619][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 761.186854][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 761.192731][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 761.198055][ T27] hub_event+0x2cdf/0x54c0 [ 761.202608][ T27] ? led_work+0x700/0x700 [ 761.206949][ T27] ? read_lock_is_recursive+0x10/0x10 [ 761.212360][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 761.218348][ T27] ? __up_read+0x530/0x690 [ 761.222849][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 761.228057][ T27] process_one_work+0x8a1/0x10c0 [ 761.233040][ T27] ? worker_detach_from_pool+0x260/0x260 [ 761.238675][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 761.244295][ T27] ? kthread_data+0x4e/0xc0 [ 761.248799][ T27] ? wq_worker_running+0x97/0x170 [ 761.253846][ T27] worker_thread+0xaca/0x1280 [ 761.258536][ T27] kthread+0x3f6/0x4f0 [ 761.262627][ T27] ? rcu_lock_release+0x20/0x20 [ 761.267484][ T27] ? kthread_blkcg+0xd0/0xd0 [ 761.272116][ T27] ret_from_fork+0x1f/0x30 [ 761.276545][ T27] [ 761.279917][ T27] [ 761.279917][ T27] Showing all locks held in the system: [ 761.287630][ T27] 3 locks held by kworker/0:0/7: [ 761.292990][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 761.306097][ T27] #1: ffffc90000cc7d20 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 761.323159][ T27] #2: ffff88814824d220 (&dev->mutex){....}-{3:3}, at: ath9k_hif_usb_firmware_cb+0x345/0x4b0 [ 761.333672][ T27] 1 lock held by khungtaskd/27: [ 761.338523][ T27] #0: ffffffff8c91fc20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 761.347965][ T27] 2 locks held by getty/3324: [ 761.353225][ T27] #0: ffff88814b950098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 761.363052][ T27] #1: ffffc9000208e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 761.373301][ T27] 5 locks held by kworker/0:3/3581: [ 761.378490][ T27] #0: ffff88801c1d6138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 761.389232][ T27] #1: ffffc90002eb7d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 761.400675][ T27] #2: ffff88814824d220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0 [ 761.409621][ T27] #3: ffff8880749e5220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 761.418852][ T27] #4: ffff88807a05d1a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 761.428136][ T27] 3 locks held by kworker/1:8/5770: [ 761.433367][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 761.443737][ T27] #1: ffffc90003597d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 761.456380][ T27] #2: ffffffff8c9241e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 761.467606][ T27] 1 lock held by syz-executor/8502: [ 761.473126][ T27] #0: ffffffff8c9241e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 761.484151][ T27] 3 locks held by kworker/1:10/9356: [ 761.489662][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 761.500075][ T27] #1: ffffc90004947d20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 761.511357][ T27] #2: ffffffff8c9240f0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 761.521605][ T27] 4 locks held by kworker/1:12/13594: [ 761.527007][ T27] #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 761.537525][ T27] #1: ffff8880b9127848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x4e1/0x810 [ 761.548980][ T27] #2: ffff8880b9128098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 761.558351][ T27] #3: ffff888028379ce0 (&nsim_trap_data->trap_lock){+.+.}-{2:2}, at: nsim_dev_trap_report_work+0x1a3/0xab0 [ 761.570139][ T27] 2 locks held by kworker/1:19/14099: [ 761.575547][ T27] #0: ffff888017072138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 761.586569][ T27] #1: ffffc90003ebfd20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 761.598106][ T27] [ 761.601780][ T27] ============================================= [ 761.601780][ T27] [ 761.611398][ T27] NMI backtrace for cpu 0 [ 761.615734][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.168-syzkaller #0 [ 761.623704][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 761.633756][ T27] Call Trace: [ 761.637042][ T27] [ 761.639968][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 761.644686][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 761.650328][ T27] ? panic+0x860/0x860 [ 761.654411][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 761.659529][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 761.664465][ T27] ? __wake_up_klogd+0xd5/0x100 [ 761.669318][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 761.675477][ T27] ? _printk+0xd1/0x120 [ 761.679633][ T27] ? panic+0x860/0x860 [ 761.683709][ T27] ? __wake_up_klogd+0xcc/0x100 [ 761.688562][ T27] ? panic+0x860/0x860 [ 761.692638][ T27] ? __rcu_read_unlock+0x92/0x100 [ 761.697661][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 761.703728][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 761.709728][ T27] watchdog+0xe72/0xeb0 [ 761.713895][ T27] kthread+0x3f6/0x4f0 [ 761.717967][ T27] ? hungtask_pm_notify+0x50/0x50 [ 761.722994][ T27] ? kthread_blkcg+0xd0/0xd0 [ 761.727591][ T27] ret_from_fork+0x1f/0x30 [ 761.732009][ T27] [ 761.735438][ T27] Sending NMI from CPU 0 to CPUs 1: [ 761.740816][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_do_entry+0x10f/0x340 [ 761.743091][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 761.758589][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.168-syzkaller #0 [ 761.766573][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 761.776622][ T27] Call Trace: [ 761.779906][ T27] [ 761.782858][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 761.787535][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 761.793165][ T27] ? panic+0x860/0x860 [ 761.797247][ T27] panic+0x318/0x860 [ 761.801177][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 761.806812][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 761.812966][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 761.818165][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 761.824245][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 761.830398][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 761.836566][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 761.842721][ T27] watchdog+0xeb0/0xeb0 [ 761.846886][ T27] kthread+0x3f6/0x4f0 [ 761.850959][ T27] ? hungtask_pm_notify+0x50/0x50 [ 761.855982][ T27] ? kthread_blkcg+0xd0/0xd0 [ 761.860587][ T27] ret_from_fork+0x1f/0x30 [ 761.865048][ T27] [ 761.868299][ T27] Kernel Offset: disabled [ 761.872630][ T27] Rebooting in 86400 seconds..