last executing test programs: 10.956831101s ago: executing program 1 (id=763): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x24, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x88c4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r6, 0x0, 0x138) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f00000011c0), &(0x7f0000001200)=0x4) 10.612098586s ago: executing program 4 (id=764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x2, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010120, @broadcast}, "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"}}, 0xfce) 10.32480914s ago: executing program 1 (id=765): r0 = io_uring_setup(0x6b22, &(0x7f0000000bc0)={0x0, 0x0, 0x20, 0x3, 0x30e}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r2 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r2, 0xffff) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r11 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x85) writev(r11, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x3c}}, 0x400c084) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r4}) close_range(r0, 0xffffffffffffffff, 0x0) 8.494533249s ago: executing program 4 (id=766): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xa, 0x1, 0x2, "e87431788519d69070beb38f1888b4a25c0696294063e3d9fa1540a37bd91f12", 0x30314142}) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x2, 0x3, 0x7, 0x8001, [0x6, 0x7]}}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$rds(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r5, @ANYBLOB="020000000a0001"], 0x30}, 0x1, 0x0, 0x0, 0x68eaadec908dc23b}, 0x20024090) 8.140049094s ago: executing program 1 (id=768): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) r1 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x0, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44c40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) close_range(r7, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) fchown(r8, 0x0, 0xffffffffffffffff) r9 = syz_open_procfs(0x0, &(0x7f0000000640)='uid_map\x00') syz_usb_connect(0x1, 0xeb2, &(0x7f0000002040)={{0x12, 0x1, 0x110, 0xe9, 0xfa, 0x26, 0x30, 0xbb4, 0xa60, 0x143, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea0, 0x4, 0x4, 0x35, 0xd0, 0x13, [{{0x9, 0x4, 0x59, 0xd, 0x5, 0xe8, 0x73, 0x37, 0x5, [@generic={0x33, 0x5, "5d894fac60cad0d276aed42238ab5cbb2af8d791942b69ac576ed5dc07b4981cb8e69e04d03036c45af85bb199ab20332b"}], [{{0x9, 0x5, 0x6, 0x1, 0x238, 0x8, 0x7, 0x0, [@generic={0x64, 0x9, "d83ae8ee29931eedab23ba2efdb7a3f4630b6f28d809531f0ea7fb633c0f59e46725c1fe1b071e7cd2530c20cd2b1b9c4caf82c99aa5cb112cfd72e569e3b26af24bbd11fc63456f7912515579f74411a0c2ace2804af417c90f55b8fb124b5ade51"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x228, 0x9, 0xd6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf3, 0xffff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x8, 0xf3, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x4}, @generic={0x7c, 0x8, "380dafd57c040e89281c8ed09c7ca9d5d3925dab55020e56847a88bcc8b6696f7f4d40d9638b3435dbd979f3ab27261fd10b6af73f9218ce4d8127c1aff77814cfc6e9e8a2eefb35f95dbc938d095e81dae5e24351bea41797ec25a3e324c35dc769a4f16c3b4439df63a2bd9046a90b031f04fd4624d36c0730"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x6, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x100}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x3, 0x4, 0xf9, [@generic={0x2, 0x21}, @generic={0x34, 0x22, "90de6bb2e5e97d9af8ac5930f4bcb280feeb77a185d22ba7d5ac22ddbea92be23a9c88a4a5077196ffb3614f345a80224cd2"}]}}]}}, {{0x9, 0x4, 0xd9, 0x7, 0xd, 0xc4, 0x5a, 0x7a, 0x3, [], [{{0x9, 0x5, 0x0, 0x4, 0x8, 0x4, 0x0, 0x26, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9d, 0xd}, @generic={0xd9, 0x3, "31780ef2ad9db0086e857327871b5965024fa95712bd86155bbd0b8f6856240f813246cbbeffc0b8354c3cbfd9ddd896d6ec7588569acf16b8f1602a15ee76f31ce5d1ef1a8a707d39a8a4beee31344dd2f46022bdb38bd7d8eeb62a50bcbb24ed7379880daf58bd8f3092a01eea1ffc5848af40bfe3932b28cdb322e42981b16258e357f3e98a1f8d213a283d3957847184ae2ccd0c3fbb8824d1204f9a6004e7436d574966beb7c059c6a8cd6071c45acabc8693aa23162d70476501676e183f8cac520df5be5684a555d49ab6ddf5a748d63b5e225c"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x30, 0x7, 0x1, [@generic={0x5d, 0xe, "92f847f13f211863674ac24931c3910e50dbdbdb7bff8f2a230d7e6bf5ad57e31ca3e2ce99a806903697dab1c49f14f71ece0bf7498d024730ce41fca609d7b58b8195318c70f2a14fda76c4851c92f2746d15ebe20a95277b4f8c"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x1, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x8, 0x6, 0x9e}}, {{0x9, 0x5, 0x4, 0x34, 0x8, 0xff, 0x5, 0x4}}, {{0x9, 0x5, 0x1, 0x10, 0x197, 0xf, 0xfd, 0x7, [@generic={0xa8, 0x6, "5752a3f8d2a0c6ee1914aacb3b790959eb14086974a0ce18ee2f98718b73384edf86aaa68bb06594f57484cbd8b81e7a6ee32b2f261b8f956b015853e74b11650f268a18137f8dfc953c92a3749a32261b0f0e53c9010e04bcf328af0c5b6ea6c1e7cc906a486766399595bc0288de72ad2b865cfdc25b3b0c280317c2d87ce2e7fe4a7e7bcacdd2e545fb6c2e1db37ce0887157c7c24783f8d3b826fbce3c95bfe2e0324c66"}, @generic={0xc9, 0x9, "8865bcead423c3d46402fdc0a6a65745bb0dc19e66546a99f596fd596b2bcb694f1634fb9ad54f286772ccefe0e946f31b204f43974ea8cb17782fbf83342265927bb6aa27a3cde35d6a1e25c8bbdba810a2ae4177588bb8ec0d277f3ff39e00cff3d7cd16291464923b5c2e008cd6d0a184a97802c99d78622a4d643fef5e99852718b1980463727211f7c1e80771f9b8d973bb7826f1f227c465c323116e8d0894f34f08cbb4ecaa2bb344923abdb3fbd6b14bdb0a63f3be094e5a8a3bc59d87697a8e84c7cb"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xb, 0xf, 0x8}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x2, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x7}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xc7, 0xfd, 0x8, [@generic={0xdc, 0x11, "6a5c354aa3d9ea7d90a106d4700bb3bdb61983667d96c85a0bab7fced5fc746ee1cf20b1686e2457beaaf631db46d98fbdfe88132990e04eea09437b5aae813655a640ca75647ed21266b0017377fdf9033fdfe9dd9ef1a2b8559df8de676ab0c38ce2690e8ed0e3d9b954253d5a5c749912d2ccf13140128a5fe79647da6b7bdbc3405d10ceb4c60ce7eab9b54fab310bac39e6cc16aefeec67ef24351077304276954ae2d38d71e9b54e0b7c4729da09af40f059afeaf9ce1437cdf05997768fcbc645c9d54b7a876a4978faf93a4b9402d750e568c0d67c44"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x4, 0x4}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x5, 0xfe, 0xfc}}, {{0x9, 0x5, 0x9, 0x12, 0x40, 0x2, 0x6, 0x7, [@generic={0x2, 0x30}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x2, 0xc2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb, 0x7fff}]}}]}}, {{0x9, 0x4, 0x8b, 0xf, 0xd, 0x70, 0xa1, 0x9d, 0x8, [@generic={0x2e, 0x23, "808788475138b624835dedf855e35d628cab05483ff6d3503b2340210290560571b0365c0f66af41c9ff01d6"}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x15, 0x5, [@generic={0x89, 0xe, "2c0bba17ab3e812077693a23e2826a7ab846f3202524c7cb51f5b29a4889f4653676a691f246427ff79a9ee552d1cb2f4e49952523e699e34145de6c39fb9e38e83bf936195303d9fa2ef5997cf8e6590e2e9c3ed5c111192c963b9319194941f48a7cb9d5135758cf4709d4bba2a0de1c1949dd87ac429294a4f70167a568b9b1bcfcb7d26481"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x4, 0x80, 0x8}}, {{0x9, 0x5, 0x2878254d1810aafa, 0x4, 0xe1923bd5e82f338c, 0xd, 0xff, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x5, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xfff9}, @generic={0x63, 0x29, "6fcff7c8b743a1e49c96bdd1152d8ba5456c7d8225a49ac344797afa14f8b5f6c04275199f30d7797c938cc6338574cfb9ab4a6ce61c33b90d3ded6facc12af95ceee6442869937e00667a0d7a4931e1f41f66c9a977d4b58e693e7143da27a9c6"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x2, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0x2}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x2, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x6}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x25, 0x8, 0x3, [@generic={0xd, 0x23, "b7cec4b933f79b81752ce7"}, @generic={0xe6, 0x10, "5b4ac2b1b2cbb79925fcd4eb0c1d004d891ce80198fe554553485201067dd8f5326aaec0141a345efda8db5c7b9751141a128f199bba510564a9b617cc479f338a280989d5e6b9bdf433653c41a934bfa7fd23e0f3d51f21da06b85ecfe6b9ca9dcbf073c118331233b1ed2da4ab8029dc1a4f27e06c2eec6d9aebc46e0611e64bc0efb569e7e6004db81aa71dfc8689565c03d51f12a0d5ab928060fd3f7645cfdc96467218a1a71ab53b19ab601326ea737f4f8ebe6c7d60c36d181f8a503537a387d5a3e0e81181c5f76e8cabd9094f368eca06d2c3f69136b40968841c8e61e0324d"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x6, 0x6, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xa, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x6, 0xde, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9}, @generic={0xfa, 0x11, "869257c7adff2f72f98a664973b170caccc42407cb828b39a7e806b69988ecad6c66a5494d99631dbf420f7e0948ff6df3298b3c09bf778218872d8759b9da66b22533a8855f406bfeb03b5d40af88f181cc5efc4c68f8efc655fc65ddaa3514d72b701517d8537f9e995a3ed95e2f907de4663a1d4725ec107c733abd9adeb9610ff95a797d2a50964d95502a56f997ed964b446400da9e4fd760acb1998af1aed59daba09e0dd3980aefc00cdd6636d6937b1cd899cb3a1f8235d19445d3cb80b9e8af0c8d5812f26ed867a3b27bd5a159f0b5e42f1098d24948903c974948a00f89062af5e8122edeb877bcd99b7224d35ab93b279688"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x8, 0x5, 0x3, [@generic={0x27, 0xb, "f364dd391cd6c995e12b0ea26c2e8c393ce11c15366818e526bec6572d7d8090b62bbbde75"}, @generic={0xdb, 0xe, "ac40ad99eb1dd549051d8e0267181eec01d2dfd6c6a2b48084c8329a6081cc18edf765207444ecbe395c6e06c3b443d163ba3d8db7972975d7463ecc87fa6dd9c80be9bc14ae59be427684e723ceefcb39a3bb86605825a31f2636cbb824d3396ba4df978f9b26751645ea5365f45b4f25ed07c548cd992314bf1245816162bbeebaf580a6c34af411990c01892403eab32488318a3869d49845be5754a5208cd8f94fe486cb05e360bb6f4768c2c872bae6009c33179c3f653d89f61a1fb94a734e7da313a54e20330b89f3b98740f8796cfcd89a79227260"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x7, 0x3, 0x9}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x1, 0x0, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x7, 0x7, 0xda}}]}}, {{0x9, 0x4, 0x59, 0x5, 0xa, 0xd6, 0x30, 0x8c, 0x8, [], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x0, 0x3, 0xd8, [@generic={0x71, 0x24, "e9035f8af494f5ff46be9aac9259d446d7e24a979203c2859a623ef50583d105abe11331bd43deca2c47a28541ec7b7a48019b09ace2e46f6b7008123f45202bb6babba88ec66e2d91876c68fa7bbce609a465e31e22c138b95b377e3ad42b56db951262cb4138f3a92c20fd164446"}, @generic={0xa4, 0x22, "a9f977e811e338260f331c05713ae9a1747e38f9e92fdda5169a1305021360a7e216fcf2b54799c34529b64da3cd0e5ee92e3c83d89cfe8099b57740d725d4664d272c0dc8cdf4b7cdbbf326d5355e69640c1d2aa4ff31b33746bb980ace5ee308e529a3f10bb7bdde8caee213ad8683fd71755db29fb61b62f9617a409aa81cabb5a4ebcefb64f270b530177290aa713c99c1a77fd8d4b8b7d909299555acb8c939"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x620, 0x4, 0x4, 0x8, [@generic={0x28, 0xc, "1f949143c97e89004fff7a00e26c8fb96980bc4d8046c1ca695fd52b87e48aab7442371b6eec"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x2, 0x3, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x30, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x3}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x3, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x8, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xc}, @generic={0xdb, 0x24, "f4d1db9f2b8dc248b41b80216b5952dc1dde9e665d03224b57038eeb1e7108f1d5ff688c5fd9f40ff6e1b24d5315131522c71ea41400f2d8ed0c7eecea6948bbed7397a9a8718fdf37b08d39e0a2bd8a1ba4329638b988b62ece7376aa84222a0aaa69043d3c9983c68de1ba643efe11aa85331545ee2c762acb9837b98bc0556942a9316999af40521815a4bab3827c0bdee0e93ba689a4b50d708d83612f8026dc5c655ae6fdf8c9d14b85fe6e878212f3490479b6002d4af01dae61177af45d80d4c360ee22420829b57e8491f72ef8f2aa838521c4470a"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x96, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x4}, @generic={0x3c, 0x5, "e556ca3c196b276b645fd0240c3955b6ce8e93ce7dd093ccbd949c50929e49dca98cd971b6f42ea0c7c01a64b1cd58340a1d830ccd49eaead00c"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x8, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x81}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x0, 0x37, 0x7, [@generic={0xcc, 0x7, "5632205854ac66a07b8fc510f0e7acbbafe271674bae33705df170173e5e48fdc9218a945c25ac83d35412cd1f920b25732a34e25567c2f9d70ba75f0748ad80c36beabb56599311e2fa68aa1129be20824f14cd98721368150698aff9f63a79405b02636dc6f234059597eb5f198c8b08c1517551e208bd27c56c971e81f9caa2c2da4e73caf9f29b14dc8d0fc14400d8a1fc02a2488daf078f328c946a964a29f93ba42fa47798138baeddebc01abc36e00158c08e23739fe5a0b94d8f82dace2a118af91868e6f7c7"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x8, 0x51, 0xf7, [@generic={0x61, 0x7, "daa06176c1ac94a2d9da815a93e629462f7e37d4dde270519837b4494dc71eb620325a66949255589c759a2e099a04eb2ab82e5f88a606aadf9819433e44495ea45d2cb6f538bea96b2a41a557a05a61c3257d1f6d37623773fa1ea0f14fc6"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x5, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0xe}, @generic={0x2, 0x9}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x0, 0x61, 0xf, 0x20, 0x1e}, 0x3e, &(0x7f0000000240)={0x5, 0xf, 0x3e, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "78075468b88341cbca83deae8752c414"}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x9085, 0xf000, 0x4, [0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0xb, 0x8, 0x7fff, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x7, 0x1ff}, @ptm_cap={0x3}]}, 0x2, [{0xcf, &(0x7f0000000340)=@string={0xcf, 0x3, "111f6dfbf3802fac613f872bf4f0bf92a789d425b092028e904b4c6b2a24d07dd56e4d2d332ba73be828e7bbd787a86e1b32e2ab2b107ea09fdecc46ca933b2a94dd2bd114002b1d261c5659c2343be6c8f74d68eddaa83cefda1ea7d2ef50633b2bc5e98bbf2dc863f79a786425a0d24f333b9a4c88d10a47009e43cdbd7cd45c26a87ea0d1d35ca6d852d58eb633d957d83814f368703c4f30b4e981b34b2a5808ac2846a6b56aaf2397fc17d59ee2cb2a678bb2c09fe407163366de4d703b1fda46064506f599d5b5bbc129"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x459}}]}) readv(r9, &(0x7f0000001440)=[{0x0}], 0x1) 7.7691173s ago: executing program 2 (id=770): socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "0e3ad5de"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x9, 0x4, 0x0, 0xffffffff, 0x8}, 0x0, &(0x7f0000000080)={0x7fc, 0x2, 0x4000000000800000, 0xfffffffffffffffc, 0x0, 0xc3ad}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.892558734s ago: executing program 4 (id=772): r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = io_uring_setup(0x7782, &(0x7f0000000140)={0x0, 0x6a18, 0x400, 0x1, 0x192}) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f00000000c0), 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x2400c8a0) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000480)='}', 0x1}], 0x1) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f0000000b00)=[{&(0x7f0000000940)=':', 0xfdef}], 0x1) r6 = accept4$unix(r3, 0x0, 0x0, 0x800) recvfrom$unix(r6, &(0x7f0000000240)=""/148, 0x94, 0x10100, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x4b, 0x0, 0x0, 0x7f11b2d5, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x6, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) 6.488161389s ago: executing program 4 (id=773): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) r0 = socket(0x10, 0x803, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mmap(&(0x7f0000405000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xab24d000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000600)={{0x3, 0x1, 0x7, 0x3}, 0x1, 0x405}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r7, 0x321) sendmsg$inet_sctp(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000000000008400000006"], 0xd0}, 0x807) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) 5.036427382s ago: executing program 4 (id=774): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x2, @desc4}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000100)={0xa, 0x1, 0xbe, @local, 0xfffffff1}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)}, 0x40) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x880, 0x4c, 0x21}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @aes256, 0x1, @desc1}) sched_setscheduler(r2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) 4.955087483s ago: executing program 2 (id=776): r0 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="402345000000453061639c545d2ce9daa7602630c6863773fddd911869efc89610aab1b0d2363bdd00b77c5bdfd51207b2908fceb485a8995d912501"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.023549947s ago: executing program 0 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = getpid() r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.998347918s ago: executing program 2 (id=780): unshare(0x42000000) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r4, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0) 2.975652883s ago: executing program 3 (id=782): unshare(0x22020600) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) write(r2, &(0x7f0000000240)="e6", 0x1) tee(r1, r0, 0x800000003, 0x0) 2.918267404s ago: executing program 1 (id=783): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x200000d4) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) r3 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x5, 0x9, 0x4, 0xe000, 0x1, {}, {0x5, 0x0, 0x0, 0x0, 0x2, 0x6, "c8993072"}, 0x877, 0x4, {}, 0x10000}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000380)={0xd5, 0x0, 0x0}, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) dup(r6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.760679307s ago: executing program 0 (id=784): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000000000", @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010", @ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.712135228s ago: executing program 2 (id=785): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) r0 = socket(0x10, 0x803, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mmap(&(0x7f0000405000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xab24d000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000600)={{0x3, 0x1, 0x7, 0x3}, 0x1, 0x405}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r7, 0x321) sendmsg$inet_sctp(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000000000008400000006"], 0xd0}, 0x807) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) 2.304784224s ago: executing program 0 (id=786): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a00", 0x12) close_range(r0, 0xffffffffffffffff, 0x0) 2.231863025s ago: executing program 4 (id=787): socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "0e3ad5de"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x9, 0x4, 0x0, 0xffffffff, 0x8}, 0x0, &(0x7f0000000080)={0x7fc, 0x2, 0x4000000000800000, 0xfffffffffffffffc, 0x0, 0xc3ad}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.215032885s ago: executing program 3 (id=788): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffb) connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x8001) 2.061645388s ago: executing program 0 (id=789): ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000940)={{0x2, 0x4e23, @empty}, {0x0, @remote}, 0x15, {0x2, 0x4e20, @remote}, 'gre0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001c00), 0x0, 0x40428c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x47}, 0xa) close(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c00"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x548f0}, 0x20000051) recvmmsg(r5, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) 1.128590752s ago: executing program 3 (id=790): r0 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="402345000000453061639c545d2ce9daa7602630c6863773fddd911869efc89610aab1b0d2363bdd00b77c5bdfd51207b2908fceb485a8995d912501"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.077154253s ago: executing program 0 (id=791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, 0x0}], 0x1, 0x22, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0xf, 0x7}, {0x4000, 0x2, 0xd, 0x8, 0x6, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0x9, 0x0, 0x2, 0x7, 0xa, 0x1, 0xc, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0x8, 0xf, 0x43, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x5000, 0xdddd1000, 0xc, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0xe, 0x4b}, {0x2, 0x0, 0x9, 0x7, 0x7, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x3, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x7, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x100000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x9, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001800)={"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"}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 979.930604ms ago: executing program 0 (id=792): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000008010200000000000000000a00000287ff010073797a310000000014000480080001400000000508000240fffffff7050003002100000014000480080002400000aede0800e80000000000000033c770fc4f166185222e4127e9a0c4d4a73a628841d97304ef2abfb8d27861339e8b4d2568fe51a7e29825dc95eb67f8aaa89b31338425d37c4fb6a0c19ba72f59c37cfc98ee9e92558c8d75bce096683cb4746d3830b588e779523469eb5bf20fb1fed71499534f1a531035a9e001fb6f5c87792857dd828dfb350d1451c70290e9115defefdd7ba9a51775eac8afa66b0218b5b0b78a8b4d96"], 0x50}, 0x1, 0x0, 0x0, 0x84000}, 0x8810) r4 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 672.640279ms ago: executing program 1 (id=793): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 490.485042ms ago: executing program 3 (id=794): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000440)="0b031a005000020002004788aa96a13bb1000011000088ca1a00379e7caafdbe7766f69d0cead6fa51f42b433973998bd191fa5f3e8389dae9d9f8b5a83de3b2220099f2c3c650f99d15a2cae0105771f9fac61f4c7cab7d88f9c7f012242bcf8938568d759b5a38ffc146ab57abf759b1a4fd24f12b518357e63df4a7b4ccf1bd9db6d2ba820844969e96f6f31dad2cbc9880c4a0", 0x95, 0x809, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 407.412493ms ago: executing program 2 (id=795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = eventfd(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000804}, 0x40) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x0, r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x1}) write$eventfd(r2, &(0x7f0000000140)=0x7, 0x8) 322.349425ms ago: executing program 3 (id=796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2cc, 0x45, 0x7, 0x10001, 0x3, 0xd, 0x8, 0x0, 0xb909}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 211.580486ms ago: executing program 1 (id=797): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000000000", @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010", @ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 140.806747ms ago: executing program 2 (id=798): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = fanotify_init(0x18, 0x1000) r2 = memfd_create(&(0x7f0000000080)='-B\xd5\x9appp\xf0\x00\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}\x00\x10\x00\x00\x00\x00\x00\x00\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x11\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r3 = dup(r2) fanotify_mark(r1, 0x1, 0x48001023, r3, 0x0) sendfile(r3, r0, 0x0, 0x49e) 0s ago: executing program 3 (id=799): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000200)='./file1/../file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0xc0185879, &(0x7f0000000680)={0x4, 0x4000000966a, 0x7d, 0x4, 0x0, 0x0, 0x2401}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) chroot(0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) kernel console output (not intermixed with test programs): 9][ T1335] usb 1-1: config 0 descriptor?? [ 92.200439][ T25] audit: type=1326 audit(1752734564.134:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c727929 code=0x7ffc0000 [ 92.623468][ T1335] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 92.636350][ T1335] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 92.655262][ T1335] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 94.604420][ T4836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.158'. [ 95.256362][ T1335] usb 1-1: USB disconnect, device number 6 [ 97.204387][ T4867] netlink: 36 bytes leftover after parsing attributes in process `syz.2.166'. [ 98.687872][ T4876] tipc: Started in network mode [ 98.692812][ T4876] tipc: Node identity 06bf7491e2f6, cluster identity 4711 [ 98.731180][ T4876] tipc: Enabled bearer , priority 0 [ 98.774328][ T4878] device syzkaller0 entered promiscuous mode [ 98.836240][ T4880] netlink: 36 bytes leftover after parsing attributes in process `syz.3.169'. [ 98.958566][ T4875] tipc: Resetting bearer [ 99.000959][ T4875] tipc: Disabling bearer [ 100.986763][ T4907] [U] : [ 100.989586][ T4907] [U] [ 100.992272][ T4907] [U] [ 100.994958][ T4907] [U] [ 100.998596][ T4907] [U] [ 101.001288][ T4907] [U] [ 101.003969][ T4907] [U] [ 101.006659][ T4907] [U] [ 101.009802][ T4907] [U] [ 101.012493][ T4907] [U] [ 101.015175][ T4907] [U] [ 101.017857][ T4907] [U] [ 101.020984][ T4907] [U] [ 101.023675][ T4907] [U] [ 101.026360][ T4907] [U] [ 101.029041][ T4907] [U] [ 101.393944][ T4321] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 101.499820][ T4907] netlink: 132 bytes leftover after parsing attributes in process `syz.1.176'. [ 101.655383][ T4907] [U] [ 102.570117][ T4321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.601374][ T4321] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 102.611152][ T4925] 9pnet_virtio: no channels available for device syz [ 102.628171][ T4321] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 102.648625][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.682728][ T4321] usb 1-1: config 0 descriptor?? [ 102.828616][ T4922] program syz.1.182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.848671][ T4922] program syz.1.182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.858093][ T4922] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 102.870827][ T4922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.182'. [ 102.983292][ T25] kauditd_printk_skb: 10 callbacks suppressed [ 102.983306][ T25] audit: type=1326 audit(1752734575.854:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 103.011501][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.030030][ T4321] Bluetooth: Can't get state to change to load ram patch err [ 103.037433][ T4321] Bluetooth: Loading patch file failed [ 103.059772][ T4321] ath3k: probe of 1-1:0.0 failed with error -71 [ 103.094245][ T4321] usb 1-1: USB disconnect, device number 7 [ 103.110114][ T25] audit: type=1326 audit(1752734575.854:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 103.132178][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.145328][ T4936] tipc: Enabled bearer , priority 0 [ 103.184025][ T4936] device syzkaller0 entered promiscuous mode [ 103.202931][ T25] audit: type=1326 audit(1752734575.854:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 103.255521][ T4935] tipc: Resetting bearer [ 103.297144][ T4935] tipc: Disabling bearer [ 103.307169][ T25] audit: type=1326 audit(1752734575.854:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 103.329174][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.376198][ T25] audit: type=1326 audit(1752734575.854:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 103.398287][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.467668][ T25] audit: type=1326 audit(1752734575.854:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 106.178185][ T25] audit: type=1326 audit(1752734575.854:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 106.221185][ T25] audit: type=1326 audit(1752734575.854:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 106.243830][ T25] audit: type=1326 audit(1752734575.854:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 106.340962][ T25] audit: type=1326 audit(1752734575.854:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 106.540050][ T4958] tipc: Started in network mode [ 106.559068][ T4958] tipc: Node identity 52cd2374ada5, cluster identity 4711 [ 106.628083][ T4958] tipc: Enabled bearer , priority 0 [ 106.702248][ T4964] device syzkaller0 entered promiscuous mode [ 108.269184][ T1335] tipc: Node number set to 4285014900 [ 108.284578][ T4970] program syz.3.195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.294631][ T4970] program syz.3.195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.304019][ T4970] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 108.313809][ T4970] netlink: 36 bytes leftover after parsing attributes in process `syz.3.195'. [ 108.400267][ T4979] tipc: Started in network mode [ 108.424139][ T4979] tipc: Node identity d27ae1cdd4e7, cluster identity 4711 [ 108.449972][ T4979] tipc: Enabled bearer , priority 0 [ 108.478983][ T4986] device syzkaller0 entered promiscuous mode [ 108.503076][ T4958] tipc: Resetting bearer [ 108.562814][ T4958] tipc: Disabling bearer [ 108.584469][ T4978] tipc: Resetting bearer [ 108.612382][ T4978] tipc: Disabling bearer [ 108.650284][ T1324] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.839991][ T4225] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 108.949815][ T1324] usb 4-1: Using ep0 maxpacket: 8 [ 110.362814][ T1324] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 110.391644][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.399822][ T1324] usb 4-1: Product: syz [ 110.403996][ T1324] usb 4-1: Manufacturer: syz [ 110.409828][ T1324] usb 4-1: SerialNumber: syz [ 110.423490][ T1324] usb 4-1: config 0 descriptor?? [ 110.510082][ T4225] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.553556][ T4225] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 110.614117][ T4225] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 110.656705][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.680084][ T1324] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 110.692704][ T4225] usb 1-1: config 0 descriptor?? [ 111.046485][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 111.046498][ T25] audit: type=1326 audit(1752734583.914:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 111.096428][ T25] audit: type=1326 audit(1752734583.914:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 111.205461][ T4225] Bluetooth: Can't get state to change to load ram patch err [ 111.205516][ T4225] Bluetooth: Loading patch file failed [ 111.206216][ T4225] ath3k: probe of 1-1:0.0 failed with error -71 [ 111.220684][ T4225] usb 1-1: USB disconnect, device number 8 [ 111.823328][ T25] audit: type=1326 audit(1752734583.954:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 111.845421][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.940579][ T1324] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 111.953994][ T1324] usb 4-1: USB disconnect, device number 3 [ 112.066985][ T5017] program syz.3.210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.076286][ T25] audit: type=1326 audit(1752734583.954:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 112.076859][ T5017] program syz.3.210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.098432][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.114049][ T5017] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 112.130802][ T5017] netlink: 36 bytes leftover after parsing attributes in process `syz.3.210'. [ 112.209607][ T25] audit: type=1326 audit(1752734583.954:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 112.269216][ T5022] tipc: Enabled bearer , priority 0 [ 112.336100][ T5022] device syzkaller0 entered promiscuous mode [ 112.345705][ T25] audit: type=1326 audit(1752734583.964:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 112.377509][ T5021] tipc: Resetting bearer [ 112.419595][ T5021] tipc: Disabling bearer [ 112.420015][ T25] audit: type=1326 audit(1752734583.964:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 112.459334][ T25] audit: type=1326 audit(1752734583.964:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 112.501464][ T25] audit: type=1326 audit(1752734583.964:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 112.557021][ T25] audit: type=1326 audit(1752734583.964:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 113.361275][ T5052] program syz.1.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.388245][ T5052] program syz.1.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.397621][ T5052] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 113.413674][ T5052] netlink: 36 bytes leftover after parsing attributes in process `syz.1.223'. [ 113.509948][ T1324] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.874084][ T1324] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.888331][ T1324] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.924579][ T1324] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.939981][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.950723][ T1324] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 114.100031][ T1324] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.389950][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.400376][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 114.410027][ T21] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 114.410202][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.419322][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.441797][ T21] usb 2-1: config 0 descriptor?? [ 114.531999][ T1324] usb 3-1: Product: syz [ 114.536536][ T1324] usb 3-1: Manufacturer: syz [ 114.601859][ T1324] cdc_wdm 3-1:1.0: skipping garbage [ 114.620425][ T1324] cdc_wdm 3-1:1.0: skipping garbage [ 114.645083][ T1324] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 115.127248][ T5084] tipc: Enabled bearer , priority 0 [ 115.148099][ T5084] device syzkaller0 entered promiscuous mode [ 115.172390][ T1335] usb 3-1: USB disconnect, device number 5 [ 115.264088][ T21] Bluetooth: Can't get state to change to load ram patch err [ 115.280232][ T21] Bluetooth: Loading patch file failed [ 115.293680][ T21] ath3k: probe of 2-1:0.0 failed with error -71 [ 115.300226][ T5080] tipc: Resetting bearer [ 115.330201][ T21] usb 2-1: USB disconnect, device number 4 [ 115.376482][ T5080] tipc: Disabling bearer [ 115.592920][ T5095] [U] : [ 115.592950][ T5095] [U] [ 115.592973][ T5095] [U] [ 115.592995][ T5095] [U] [ 115.593250][ T5095] [U] [ 115.593274][ T5095] [U] [ 115.593296][ T5095] [U] [ 115.593319][ T5095] [U] [ 115.593779][ T5095] [U] [ 115.593803][ T5095] [U] [ 115.593826][ T5095] [U] [ 115.593848][ T5095] [U] [ 115.594123][ T5095] [U] [ 115.594148][ T5095] [U] [ 115.594172][ T5095] [U] [ 115.594196][ T5095] [U] [ 115.594522][ T5095] [U] [ 115.594545][ T5095] [U] [ 115.594568][ T5095] [U] [ 115.594591][ T5095] [U] [ 115.594902][ T5095] [U] [ 115.594925][ T5095] [U] [ 115.594948][ T5095] [U] [ 115.594971][ T5095] [U] [ 115.595280][ T5095] [U] [ 115.595301][ T5095] [U] [ 115.595323][ T5095] [U] [ 115.595345][ T5095] [U] [ 115.595650][ T5095] [U] [ 115.595676][ T5095] [U] [ 115.595700][ T5095] [U] [ 115.595724][ T5095] [U] [ 115.596078][ T5095] [U] [ 115.596108][ T5095] [U] [ 115.596132][ T5095] [U] [ 115.596156][ T5095] [U] [ 115.596428][ T5095] [U] [ 115.596452][ T5095] [U] [ 115.596474][ T5095] [U] [ 115.596496][ T5095] [U] [ 115.596817][ T5095] [U] [ 115.596840][ T5095] [U] [ 115.596863][ T5095] [U] [ 115.596886][ T5095] [U] [ 115.597116][ T5095] [U] [ 115.597139][ T5095] [U] [ 115.597162][ T5095] [U] [ 115.597186][ T5095] [U] [ 115.597509][ T5095] [U] [ 115.597533][ T5095] [U] [ 115.597555][ T5095] [U] [ 115.597578][ T5095] [U] [ 115.597874][ T5095] [U] [ 115.597898][ T5095] [U] [ 115.597920][ T5095] [U] [ 115.597943][ T5095] [U] [ 115.598228][ T5095] [U] [ 115.598257][ T5095] [U] [ 115.598281][ T5095] [U] [ 115.598299][ T5095] [U] [ 115.602504][ T5095] [U] [ 115.602531][ T5095] [U] [ 115.602556][ T5095] [U] [ 115.602581][ T5095] [U] [ 115.603055][ T5095] [U] [ 115.603078][ T5095] [U] [ 115.603105][ T5095] [U] [ 115.603127][ T5095] [U] [ 115.603529][ T5095] [U] [ 115.603553][ T5095] [U] [ 115.603576][ T5095] [U] [ 115.603599][ T5095] [U] [ 115.603995][ T5095] [U] [ 115.604018][ T5095] [U] [ 115.604041][ T5095] [U] [ 115.604064][ T5095] [U] [ 115.604397][ T5095] [U] [ 115.604421][ T5095] [U] [ 115.604444][ T5095] [U] [ 115.604466][ T5095] [U] [ 115.604906][ T5095] [U] [ 115.604930][ T5095] [U] [ 115.604952][ T5095] [U] [ 115.604976][ T5095] [U] [ 115.605381][ T5095] [U] [ 115.605404][ T5095] [U] [ 115.605425][ T5095] [U] [ 115.605446][ T5095] [U] [ 115.605831][ T5095] [U] [ 115.605855][ T5095] [U] [ 115.605877][ T5095] [U] [ 115.605899][ T5095] [U] [ 115.606424][ T5095] [U] [ 115.606447][ T5095] [U] [ 115.606469][ T5095] [U] [ 115.606492][ T5095] [U] [ 115.606878][ T5095] [U] [ 115.606902][ T5095] [U] [ 115.606924][ T5095] [U] [ 115.606946][ T5095] [U] [ 115.607244][ T5095] [U] [ 115.607270][ T5095] [U] [ 115.607294][ T5095] [U] [ 115.607318][ T5095] [U] [ 115.607775][ T5095] [U] [ 115.607799][ T5095] [U] [ 115.607821][ T5095] [U] [ 115.607843][ T5095] [U] [ 115.608245][ T5095] [U] [ 115.608271][ T5095] [U] [ 115.608295][ T5095] [U] [ 115.608319][ T5095] [U] [ 115.608746][ T5095] [U] [ 115.608771][ T5095] [U] [ 115.608795][ T5095] [U] [ 115.608821][ T5095] [U] [ 115.609321][ T5095] [U] [ 115.609345][ T5095] [U] [ 115.609367][ T5095] [U] [ 115.609389][ T5095] [U] [ 115.609738][ T5095] [U] [ 115.609776][ T5095] [U] [ 115.609802][ T5095] [U] [ 115.609826][ T5095] [U] [ 115.610056][ T5095] [U] [ 115.610080][ T5095] [U] [ 115.610111][ T5095] [U] [ 115.633865][ T5095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.234'. [ 116.372609][ T5093] [U] [ 116.547974][ T5099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 117.700504][ T5115] binder: BINDER_SET_CONTEXT_MGR already set [ 117.700574][ T5115] binder: 5109:5115 ioctl 4018620d 200000000040 returned -16 [ 117.701251][ T5115] binder: 5109:5115 ioctl c0306201 200000000240 returned -11 [ 117.717053][ T5099] team0 (unregistering): Port device team_slave_0 removed [ 118.728682][ T5099] team0 (unregistering): Port device team_slave_1 removed [ 118.929838][ T1324] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.179834][ T1324] usb 1-1: Using ep0 maxpacket: 8 [ 119.472323][ T1324] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 119.729869][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 119.865938][ T1324] usb 1-1: Product: syz [ 119.887999][ T1324] usb 1-1: Manufacturer: syz [ 119.909835][ T1324] usb 1-1: SerialNumber: syz [ 120.063510][ T5150] [U] : [ 120.066326][ T5150] [U] [ 120.069012][ T5150] [U] [ 120.071692][ T5150] [U] [ 120.074767][ T5150] [U] [ 120.077466][ T5150] [U] [ 120.080149][ T5150] [U] [ 120.082832][ T5150] [U] [ 120.085852][ T5150] [U] [ 120.088543][ T5150] [U] [ 120.091223][ T5150] [U] [ 120.093904][ T5150] [U] [ 120.097321][ T5150] [U] [ 120.100018][ T5150] [U] [ 120.102703][ T5150] [U] [ 120.105388][ T5150] [U] [ 120.108621][ T5150] [U] [ 120.111314][ T5150] [U] [ 120.113994][ T5150] [U] [ 120.116676][ T5150] [U] [ 120.214091][ T1324] usb 1-1: config 0 descriptor?? [ 120.305732][ T5147] [U] [ 120.578239][ T4258] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.872473][ T1324] usb 1-1: USB disconnect, device number 9 [ 121.879998][ T4258] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.910092][ T4258] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 121.922467][ T5174] futex_wake_op: syz.2.259 tries to shift op by -1; fix this program [ 121.945239][ T4258] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 121.988150][ T4258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.139575][ T4258] usb 2-1: config 0 descriptor?? [ 122.839822][ T1324] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 122.920033][ T4258] Bluetooth: Can't get state to change to load ram patch err [ 122.955839][ T4258] Bluetooth: Loading patch file failed [ 122.974526][ T5184] tipc: Enabled bearer , priority 0 [ 122.980980][ T4258] ath3k: probe of 2-1:0.0 failed with error -71 [ 123.010893][ T4258] usb 2-1: USB disconnect, device number 5 [ 123.042844][ T5189] device syzkaller0 entered promiscuous mode [ 123.125743][ T5191] [U] : [ 123.128553][ T5191] [U] [ 123.131237][ T5191] [U] [ 123.133916][ T5191] [U] [ 123.136996][ T5191] [U] [ 123.139682][ T5191] [U] [ 123.142450][ T5191] [U] [ 123.145130][ T5191] [U] [ 123.148293][ T5191] [U] [ 123.150985][ T5191] [U] [ 123.153755][ T5191] [U] [ 123.156440][ T5191] [U] [ 123.159407][ T5191] [U] [ 123.162095][ T5191] [U] [ 123.164777][ T5191] [U] [ 123.167457][ T5191] [U] [ 123.170578][ T5191] [U] [ 123.173263][ T5191] [U] [ 123.175946][ T5191] [U] [ 123.178626][ T5191] [U] [ 123.259901][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.306037][ T5184] tipc: Resetting bearer [ 123.333037][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 123.370349][ T1324] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 123.385789][ T1324] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 123.405686][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.426335][ T1324] usb 1-1: config 0 descriptor?? [ 123.441903][ T5183] tipc: Resetting bearer [ 123.451507][ T5172] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.467424][ T5183] tipc: Disabling bearer [ 123.509035][ T5191] [U] [ 124.390688][ T1324] aureal 0003:0755:2626.0005: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 124.410337][ T1324] aureal 0003:0755:2626.0005: unknown main item tag 0x6 [ 124.417425][ T1324] aureal 0003:0755:2626.0005: report_id 29495 is invalid [ 124.499945][ T1324] aureal 0003:0755:2626.0005: item 0 2 1 8 parsing failed [ 124.520309][ T1324] aureal: probe of 0003:0755:2626.0005 failed with error -22 [ 124.593449][ T5172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 125.800184][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.817773][ T1324] usb 1-1: USB disconnect, device number 10 [ 126.889875][ T4221] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.039641][ T5238] [U] : [ 127.042453][ T5238] [U] [ 127.045142][ T5238] [U] [ 127.047822][ T5238] [U] [ 127.050871][ T5238] [U] [ 127.053560][ T5238] [U] [ 127.056241][ T5238] [U] [ 127.058921][ T5238] [U] [ 127.061954][ T5238] [U] [ 127.064644][ T5238] [U] [ 127.067327][ T5238] [U] [ 127.070008][ T5238] [U] [ 127.073110][ T5238] [U] [ 127.075796][ T5238] [U] [ 127.078478][ T5238] [U] [ 127.081164][ T5238] [U] [ 127.084248][ T5238] [U] [ 127.086930][ T5238] [U] [ 127.089623][ T5238] [U] [ 127.092303][ T5238] [U] [ 127.203232][ T5235] [U] [ 127.259999][ T4221] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.274828][ T4221] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 127.306325][ T4221] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 127.335357][ T4221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.350534][ T4221] usb 3-1: config 0 descriptor?? [ 127.545042][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 127.653706][ T25] kauditd_printk_skb: 10 callbacks suppressed [ 127.653720][ T25] audit: type=1326 audit(1752734600.524:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483e191929 code=0x7ffc0000 [ 127.748425][ T5247] team0 (unregistering): Port device team_slave_0 removed [ 127.755992][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.781902][ T25] audit: type=1326 audit(1752734600.524:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483e191929 code=0x7ffc0000 [ 127.809959][ T25] audit: type=1326 audit(1752734600.594:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f483e191929 code=0x7ffc0000 [ 127.842331][ T25] audit: type=1326 audit(1752734600.594:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483e191929 code=0x7ffc0000 [ 127.865723][ T25] audit: type=1326 audit(1752734600.594:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483e191929 code=0x7ffc0000 [ 127.878914][ T5247] team0 (unregistering): Port device team_slave_1 removed [ 127.895490][ T25] audit: type=1326 audit(1752734600.594:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f483e191929 code=0x7ffc0000 [ 127.989918][ T4221] Bluetooth: Can't get state to change to load ram patch err [ 127.997815][ T25] audit: type=1326 audit(1752734600.594:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483e191929 code=0x7ffc0000 [ 128.020269][ T4221] Bluetooth: Loading patch file failed [ 128.026368][ T4221] ath3k: probe of 3-1:0.0 failed with error -71 [ 128.034191][ T25] audit: type=1326 audit(1752734600.594:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483e191929 code=0x7ffc0000 [ 128.059880][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 128.086491][ T4221] usb 3-1: USB disconnect, device number 6 [ 128.111590][ T1324] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 128.369943][ T13] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 128.509902][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.595346][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.603915][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 128.622226][ T13] usb 5-1: Product: syz [ 128.626469][ T13] usb 5-1: Manufacturer: syz [ 128.659913][ T1324] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 128.673177][ T13] usb 5-1: SerialNumber: syz [ 128.679590][ T13] usb 5-1: config 0 descriptor?? [ 128.685068][ T1324] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 128.699947][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.710340][ T1324] usb 1-1: config 0 descriptor?? [ 128.730112][ T5256] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 128.738709][ T13] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 128.749448][ T13] usb 5-1: Detected FT-X [ 128.950003][ T13] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 128.984816][ T13] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 129.012597][ T5275] binder: BINDER_SET_CONTEXT_MGR already set [ 129.018860][ T5275] binder: 5274:5275 ioctl 4018620d 200000000040 returned -16 [ 129.050190][ T13] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 129.072188][ T13] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 129.133983][ T13] usb 5-1: USB disconnect, device number 6 [ 129.165480][ T13] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 129.191367][ T1324] aureal 0003:0755:2626.0006: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 129.277910][ T1324] aureal 0003:0755:2626.0006: unknown main item tag 0x6 [ 129.286020][ T13] ftdi_sio 5-1:0.0: device disconnected [ 129.292270][ T1324] aureal 0003:0755:2626.0006: report_id 29495 is invalid [ 129.299309][ T1324] aureal 0003:0755:2626.0006: item 0 2 1 8 parsing failed [ 129.338465][ T1324] aureal: probe of 0003:0755:2626.0006 failed with error -22 [ 129.762751][ T4225] usb 1-1: USB disconnect, device number 11 [ 131.492651][ T5307] binder_alloc: 5306: binder_alloc_buf, no vma [ 132.161837][ T4221] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.619976][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.626568][ T4221] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.639846][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.667406][ T4221] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 132.696828][ T4221] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 132.736300][ T4221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.759624][ T5330] tipc: Started in network mode [ 132.770268][ T4221] usb 3-1: config 0 descriptor?? [ 132.829401][ T5330] tipc: Node identity 4af4e7400fff, cluster identity 4711 [ 132.857481][ T5330] tipc: Enabled bearer , priority 0 [ 132.899182][ T5330] tipc: Resetting bearer [ 132.964262][ T5329] tipc: Disabling bearer [ 133.072434][ T25] audit: type=1326 audit(1752734605.944:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483e191929 code=0x7ffc0000 [ 133.094602][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.179926][ T4221] Bluetooth: Can't get state to change to load ram patch err [ 133.187526][ T4221] Bluetooth: Loading patch file failed [ 133.205973][ T25] audit: type=1326 audit(1752734605.944:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483e191929 code=0x7ffc0000 [ 133.228190][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.228305][ T4221] ath3k: probe of 3-1:0.0 failed with error -71 [ 133.235083][ T4221] usb 3-1: USB disconnect, device number 7 [ 133.819757][ T25] audit: type=1326 audit(1752734605.944:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f483e191929 code=0x7ffc0000 [ 133.842923][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.861877][ T25] audit: type=1326 audit(1752734605.944:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483e191929 code=0x7ffc0000 [ 134.742207][ T25] audit: type=1326 audit(1752734605.944:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483e191929 code=0x7ffc0000 [ 134.947109][ T5357] binder: BINDER_SET_CONTEXT_MGR already set [ 135.010531][ T5357] binder: 5356:5357 ioctl 4018620d 200000000040 returned -16 [ 135.060831][ T5369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 136.385210][ T5387] [U] : [ 136.388019][ T5387] [U] [ 136.390700][ T5387] [U] [ 136.393377][ T5387] [U] [ 136.396457][ T5387] [U] [ 136.399147][ T5387] [U] [ 136.401828][ T5387] [U] [ 136.404508][ T5387] [U] [ 136.407572][ T5387] [U] [ 136.410260][ T5387] [U] [ 136.412950][ T5387] [U] [ 136.415638][ T5387] [U] [ 136.418720][ T5387] [U] [ 136.421419][ T5387] [U] [ 136.424106][ T5387] [U] [ 136.426790][ T5387] [U] [ 136.430353][ T5387] [U] [ 136.433056][ T5387] [U] [ 136.435737][ T5387] [U] [ 136.438415][ T5387] [U] [ 136.527055][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 136.599129][ T5383] [U] [ 136.768897][ T5400] [U] : [ 136.771681][ T5400] [U] [ 136.774340][ T5400] [U] [ 136.777002][ T5400] [U] [ 136.779800][ T5400] [U] [ 136.782466][ T5400] [U] [ 136.785121][ T5400] [U] [ 136.787779][ T5400] [U] [ 136.790516][ T5400] [U] [ 136.793172][ T5400] [U] [ 136.795829][ T5400] [U] [ 136.798484][ T5400] [U] [ 136.801203][ T5400] [U] [ 136.803861][ T5400] [U] [ 136.806513][ T5400] [U] [ 136.809167][ T5400] [U] [ 136.811906][ T5400] [U] [ 136.814562][ T5400] [U] [ 136.817213][ T5400] [U] [ 136.819866][ T5400] [U] [ 136.822598][ T5400] [U] [ 136.825260][ T5400] [U] [ 136.827914][ T5400] [U] [ 136.830576][ T5400] [U] [ 136.833556][ T5400] [U] [ 136.836217][ T5400] [U] [ 136.838870][ T5400] [U] [ 136.841531][ T5400] [U] [ 136.844266][ T5400] [U] [ 136.846920][ T5400] [U] [ 136.849572][ T5400] [U] [ 136.852225][ T5400] [U] [ 136.854977][ T5400] [U] [ 136.857632][ T5400] [U] [ 136.860289][ T5400] [U] [ 136.862944][ T5400] [U] [ 136.865725][ T5400] [U] [ 136.868381][ T5400] [U] [ 136.871036][ T5400] [U] [ 136.873701][ T5400] [U] [ 136.876564][ T5400] [U] [ 136.879246][ T5400] [U] [ 136.881915][ T5400] [U] [ 136.884582][ T5400] [U] [ 136.887367][ T5400] [U] [ 136.890053][ T5400] [U] [ 136.892722][ T5400] [U] [ 136.895387][ T5400] [U] [ 136.898134][ T5400] [U] [ 136.900796][ T5400] [U] [ 136.903714][ T5400] [U] [ 136.906371][ T5400] [U] [ 136.909112][ T5400] [U] [ 136.911769][ T5400] [U] [ 136.914427][ T5400] [U] [ 136.917085][ T5400] [U] [ 136.919841][ T5400] [U] [ 136.922503][ T5400] [U] [ 136.925160][ T5400] [U] [ 136.927816][ T5400] [U] [ 136.930542][ T5400] [U] [ 136.933201][ T5400] [U] [ 136.935858][ T5400] [U] [ 136.938526][ T5400] [U] [ 136.941583][ T5400] [U] [ 136.944267][ T5400] [U] [ 136.946933][ T5400] [U] [ 136.949602][ T5400] [U] [ 136.952320][ T5400] [U] [ 136.955010][ T5400] [U] [ 136.957666][ T5400] [U] [ 136.960321][ T5400] [U] [ 136.963058][ T5400] [U] [ 136.965727][ T5400] [U] [ 136.968400][ T5400] [U] [ 136.971062][ T5400] [U] [ 136.973784][ T5400] [U] [ 136.976445][ T5400] [U] [ 136.979103][ T5400] [U] [ 136.981762][ T5400] [U] [ 136.984534][ T5400] [U] [ 136.987198][ T5400] [U] [ 136.989855][ T5400] [U] [ 136.992512][ T5400] [U] [ 136.995236][ T5400] [U] [ 136.997894][ T5400] [U] [ 137.000551][ T5400] [U] [ 137.003215][ T5400] [U] [ 137.005948][ T5400] [U] [ 137.008608][ T5400] [U] [ 137.011266][ T5400] [U] [ 137.013923][ T5400] [U] [ 137.016640][ T5400] [U] [ 137.019300][ T5400] [U] [ 137.021969][ T5400] [U] [ 137.024639][ T5400] [U] [ 137.027369][ T5400] [U] [ 137.030028][ T5400] [U] [ 137.032686][ T5400] [U] [ 137.035343][ T5400] [U] [ 137.038341][ T5400] [U] [ 137.041010][ T5400] [U] [ 137.043667][ T5400] [U] [ 137.046323][ T5400] [U] [ 137.049064][ T5400] [U] [ 137.051739][ T5400] [U] [ 137.054835][ T5400] [U] [ 137.057492][ T5400] [U] [ 137.060228][ T5400] [U] [ 137.062915][ T5400] [U] [ 137.065576][ T5400] [U] [ 137.068242][ T5400] [U] [ 137.070980][ T5400] [U] [ 137.073644][ T5400] [U] [ 137.076300][ T5400] [U] [ 137.078955][ T5400] [U] [ 137.081792][ T5400] [U] [ 137.084581][ T5400] [U] [ 137.087244][ T5400] [U] [ 137.089905][ T5400] [U] [ 137.092659][ T5400] [U] [ 137.095322][ T5400] [U] [ 137.097980][ T5400] [U] [ 137.100647][ T5400] [U] [ 137.103379][ T5400] [U] [ 137.106126][ T5400] [U] [ 137.108782][ T5400] [U] [ 137.455482][ T5391] [U] [ 138.297927][ T5413] fuse: Bad value for 'fd' [ 139.432617][ T4998] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 139.899877][ T4998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.986720][ T5438] [U] : [ 139.989526][ T5438] [U] [ 139.992209][ T5438] [U] [ 139.994888][ T5438] [U] [ 139.997998][ T5438] [U] [ 140.000683][ T5438] [U] [ 140.003366][ T5438] [U] [ 140.006047][ T5438] [U] [ 140.009792][ T5438] [U] [ 140.012491][ T5438] [U] [ 140.015175][ T5438] [U] [ 140.017861][ T5438] [U] [ 140.020839][ T5438] [U] [ 140.023526][ T5438] [U] [ 140.026204][ T5438] [U] [ 140.028888][ T5438] [U] [ 140.031921][ T5438] [U] [ 140.034609][ T5438] [U] [ 140.037290][ T5438] [U] [ 140.039967][ T5438] [U] [ 140.061225][ T5439] netlink: 132 bytes leftover after parsing attributes in process `syz.4.338'. [ 140.199826][ T4998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 140.210873][ T4998] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 140.233516][ T4998] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 140.242802][ T4998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.264688][ T4998] usb 1-1: config 0 descriptor?? [ 140.283877][ T5432] [U] [ 140.299968][ T5418] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.583009][ C1] sd 0:0:1:0: tag#3494 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 140.592955][ C1] sd 0:0:1:0: tag#3494 CDB: Write(6) 0a 00 00 00 9e 7a 00 00 98 18 00 00 [ 140.704613][ T5443] [U] : [ 140.707396][ T5443] [U] [ 140.710060][ T5443] [U] [ 140.712721][ T5443] [U] [ 140.715531][ T5443] [U] [ 140.718193][ T5443] [U] [ 140.720850][ T5443] [U] [ 140.723523][ T5443] [U] [ 140.726615][ T5443] [U] [ 140.729282][ T5443] [U] [ 140.731942][ T5443] [U] [ 140.734703][ T5443] [U] [ 140.737578][ T5443] [U] [ 140.740243][ T5443] [U] [ 140.742912][ T5443] [U] [ 140.745572][ T5443] [U] [ 141.508383][ T5443] [U] [ 141.511107][ T5443] [U] [ 141.513803][ T5443] [U] [ 141.516565][ T5443] [U] [ 141.615126][ T5440] [U] [ 141.709870][ T4998] usbhid 1-1:0.0: can't add hid device: -71 [ 141.717298][ T4998] usbhid: probe of 1-1:0.0 failed with error -71 [ 141.825979][ T5459] program syz.0.345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.841742][ T5459] program syz.0.345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.851643][ T5459] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 142.251327][ T4998] usb 1-1: USB disconnect, device number 12 [ 142.388383][ T5465] mmap: syz.4.347 (5465) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 142.604251][ T5472] [U] : [ 142.607090][ T5472] [U] [ 142.609773][ T5472] [U] [ 142.612470][ T5472] [U] [ 142.615686][ T5472] [U] [ 142.618519][ T5472] [U] [ 142.621207][ T5472] [U] [ 142.623892][ T5472] [U] [ 142.627045][ T5472] [U] [ 142.629738][ T5472] [U] [ 142.632422][ T5472] [U] [ 142.635099][ T5472] [U] [ 142.648103][ T5472] [U] [ 142.650811][ T5472] [U] [ 142.653513][ T5472] [U] [ 142.656196][ T5472] [U] [ 142.674283][ T5475] netlink: 132 bytes leftover after parsing attributes in process `syz.3.350'. [ 142.864037][ T5470] [U] [ 143.834591][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'. [ 143.938166][ T5500] team0 (unregistering): Port device team_slave_0 removed [ 143.973838][ T5500] team0 (unregistering): Port device team_slave_1 removed [ 145.416879][ T5520] [U] : [ 145.419705][ T5520] [U] [ 145.422391][ T5520] [U] [ 145.425073][ T5520] [U] [ 145.429667][ T5520] [U] [ 145.432376][ T5520] [U] [ 145.435064][ T5520] [U] [ 145.437751][ T5520] [U] [ 145.441550][ T5520] [U] [ 145.444253][ T5520] [U] [ 145.446934][ T5520] [U] [ 145.449618][ T5520] [U] [ 145.452623][ T5520] [U] [ 145.455310][ T5520] [U] [ 145.457996][ T5520] [U] [ 145.460675][ T5520] [U] [ 145.463822][ T5520] [U] [ 145.466513][ T5520] [U] [ 145.469194][ T5520] [U] [ 145.471878][ T5520] [U] [ 145.633138][ T5519] policy can only be matched on NF_INET_PRE_ROUTING [ 145.633157][ T5519] unable to load match [ 145.782094][ T5520] netlink: 132 bytes leftover after parsing attributes in process `syz.4.365'. [ 145.817775][ T5517] [U] [ 149.644700][ T5553] [U] : [ 149.647487][ T5553] [U] [ 149.650167][ T5553] [U] [ 149.652833][ T5553] [U] [ 149.655633][ T5553] [U] [ 149.658302][ T5553] [U] [ 149.660966][ T5553] [U] [ 149.663673][ T5553] [U] [ 149.666500][ T5553] [U] [ 149.669164][ T5553] [U] [ 149.671821][ T5553] [U] [ 149.674489][ T5553] [U] [ 149.677231][ T5553] [U] [ 149.679893][ T5553] [U] [ 149.682561][ T5553] [U] [ 149.685223][ T5553] [U] [ 149.687966][ T5553] [U] [ 149.690630][ T5553] [U] [ 149.693288][ T5553] [U] [ 149.695943][ T5553] [U] [ 149.698666][ T5553] [U] [ 149.701329][ T5553] [U] [ 149.703987][ T5553] [U] [ 149.706642][ T5553] [U] [ 149.709397][ T5553] [U] [ 149.712054][ T5553] [U] [ 149.714711][ T5553] [U] [ 149.717364][ T5553] [U] [ 149.720094][ T5553] [U] [ 149.722754][ T5553] [U] [ 149.725412][ T5553] [U] [ 149.728072][ T5553] [U] [ 149.730801][ T5553] [U] [ 149.733460][ T5553] [U] [ 149.736115][ T5553] [U] [ 149.738774][ T5553] [U] [ 149.741799][ T5553] [U] [ 149.744460][ T5553] [U] [ 149.747116][ T5553] [U] [ 149.749775][ T5553] [U] [ 149.753411][ T5553] [U] [ 149.753437][ T5553] [U] [ 149.753461][ T5553] [U] [ 149.753484][ T5553] [U] [ 149.753591][ T5553] [U] [ 149.753614][ T5553] [U] [ 149.753638][ T5553] [U] [ 149.753658][ T5553] [U] [ 149.753768][ T5553] [U] [ 149.753793][ T5553] [U] [ 149.753814][ T5553] [U] [ 149.753836][ T5553] [U] [ 149.753937][ T5553] [U] [ 149.753960][ T5553] [U] [ 149.753981][ T5553] [U] [ 149.754002][ T5553] [U] [ 149.754102][ T5553] [U] [ 149.754124][ T5553] [U] [ 149.754146][ T5553] [U] [ 149.754166][ T5553] [U] [ 149.754252][ T5553] [U] [ 149.754274][ T5553] [U] [ 149.754296][ T5553] [U] [ 149.754316][ T5553] [U] [ 149.754413][ T5553] [U] [ 149.754435][ T5553] [U] [ 149.754457][ T5553] [U] [ 149.754478][ T5553] [U] [ 149.754575][ T5553] [U] [ 149.754596][ T5553] [U] [ 149.754615][ T5553] [U] [ 149.754636][ T5553] [U] [ 149.754744][ T5553] [U] [ 149.754766][ T5553] [U] [ 149.754787][ T5553] [U] [ 149.754807][ T5553] [U] [ 149.754898][ T5553] [U] [ 149.754918][ T5553] [U] [ 149.754938][ T5553] [U] [ 149.754957][ T5553] [U] [ 149.755050][ T5553] [U] [ 149.755070][ T5553] [U] [ 149.755091][ T5553] [U] [ 149.755112][ T5553] [U] [ 149.755194][ T5553] [U] [ 149.755214][ T5553] [U] [ 149.755238][ T5553] [U] [ 149.755260][ T5553] [U] [ 149.755366][ T5553] [U] [ 149.755389][ T5553] [U] [ 149.755411][ T5553] [U] [ 149.755433][ T5553] [U] [ 149.755528][ T5553] [U] [ 149.755561][ T5553] [U] [ 149.755584][ T5553] [U] [ 149.755607][ T5553] [U] [ 149.755699][ T5553] [U] [ 149.755720][ T5553] [U] [ 149.755741][ T5553] [U] [ 149.755763][ T5553] [U] [ 149.755852][ T5553] [U] [ 149.755874][ T5553] [U] [ 149.755895][ T5553] [U] [ 149.755916][ T5553] [U] [ 149.756014][ T5553] [U] [ 149.756036][ T5553] [U] [ 149.756059][ T5553] [U] [ 149.756079][ T5553] [U] [ 149.756170][ T5553] [U] [ 149.756183][ T5553] [U] [ 149.756196][ T5553] [U] [ 149.756209][ T5553] [U] [ 149.756265][ T5553] [U] [ 149.756279][ T5553] [U] [ 149.756292][ T5553] [U] [ 149.756305][ T5553] [U] [ 149.756355][ T5553] [U] [ 149.756368][ T5553] [U] [ 149.756380][ T5553] [U] [ 149.756394][ T5553] [U] [ 149.756448][ T5553] [U] [ 149.756461][ T5553] [U] [ 149.756474][ T5553] [U] [ 149.756486][ T5553] [U] [ 149.756528][ T5553] [U] [ 149.756541][ T5553] [U] [ 149.756563][ T5553] [U] [ 149.790191][ T5552] [U] [ 151.475689][ T5577] tipc: Enabled bearer , priority 0 [ 151.483380][ T5577] device syzkaller0 entered promiscuous mode [ 151.500287][ T5577] tipc: Resetting bearer [ 151.507815][ T5574] tipc: Resetting bearer [ 151.530572][ T5574] tipc: Disabling bearer [ 151.587847][ T5586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 151.604269][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 151.620277][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 151.629129][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 151.921516][ T5598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 152.832527][ T5609] [U] : [ 152.835327][ T5609] [U] [ 152.837991][ T5609] [U] [ 152.840648][ T5609] [U] [ 152.843443][ T5609] [U] [ 152.846102][ T5609] [U] [ 152.848756][ T5609] [U] [ 152.851414][ T5609] [U] [ 152.854162][ T5609] [U] [ 152.856821][ T5609] [U] [ 152.859474][ T5609] [U] [ 152.862129][ T5609] [U] [ 152.864844][ T5609] [U] [ 152.867502][ T5609] [U] [ 152.870156][ T5609] [U] [ 152.872813][ T5609] [U] [ 152.875537][ T5609] [U] [ 152.878192][ T5609] [U] [ 152.880851][ T5609] [U] [ 152.883505][ T5609] [U] [ 152.886243][ T5609] [U] [ 152.888918][ T5609] [U] [ 152.891598][ T5609] [U] [ 152.894268][ T5609] [U] [ 152.985100][ T5607] [U] [ 155.415571][ T5636] tipc: Enabled bearer , priority 0 [ 155.444255][ T5636] device syzkaller0 entered promiscuous mode [ 155.514568][ T5636] tipc: Resetting bearer [ 155.597274][ T5635] tipc: Resetting bearer [ 155.656346][ T5635] tipc: Disabling bearer [ 156.882998][ T5665] kvm: vcpu 0: requested 67840 ns lapic timer period limited to 200000 ns [ 158.685567][ T5691] tipc: Enabled bearer , priority 0 [ 158.810110][ T5695] device syzkaller0 entered promiscuous mode [ 158.868307][ T5691] tipc: Resetting bearer [ 158.893395][ T5690] tipc: Resetting bearer [ 159.640943][ T5690] tipc: Disabling bearer [ 159.680051][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 160.070006][ T4221] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 160.141879][ T26] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 160.299865][ T13] usb 4-1: config 0 has no interfaces? [ 160.389883][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 160.450117][ T4221] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.470935][ T4221] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 160.507024][ T4221] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 160.516406][ T13] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 160.527182][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.616860][ T4221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.625288][ T13] usb 4-1: Product: syz [ 160.629464][ T13] usb 4-1: Manufacturer: syz [ 160.642712][ T4221] usb 5-1: config 0 descriptor?? [ 160.648254][ T13] usb 4-1: SerialNumber: syz [ 160.663996][ T13] usb 4-1: config 0 descriptor?? [ 160.684648][ T26] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 161.086554][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.139934][ T26] usb 1-1: Product: syz [ 161.210997][ T26] usb 1-1: Manufacturer: syz [ 161.221762][ T26] usb 1-1: SerialNumber: syz [ 161.295560][ T26] r8152-cfgselector 1-1: config 0 descriptor?? [ 161.300111][ T4221] Bluetooth: Can't get state to change to load ram patch err [ 161.309634][ T4221] Bluetooth: Loading patch file failed [ 161.317171][ T4221] ath3k: probe of 5-1:0.0 failed with error -71 [ 161.424768][ T4221] usb 5-1: USB disconnect, device number 7 [ 162.957790][ T5740] [U] : [ 162.960582][ T5740] [U] [ 162.963244][ T5740] [U] [ 162.965901][ T5740] [U] [ 162.968669][ T5740] [U] [ 162.971333][ T5740] [U] [ 162.973990][ T5740] [U] [ 162.976647][ T5740] [U] [ 162.979397][ T5740] [U] [ 162.982055][ T5740] [U] [ 162.984713][ T5740] [U] [ 162.987376][ T5740] [U] [ 162.990121][ T5740] [U] [ 162.992780][ T5740] [U] [ 162.995440][ T5740] [U] [ 162.998097][ T5740] [U] [ 163.001107][ T5740] [U] [ 163.003774][ T5740] [U] [ 163.006430][ T5740] [U] [ 163.009084][ T5740] [U] [ 163.011822][ T5740] [U] [ 163.014482][ T5740] [U] [ 163.017140][ T5740] [U] [ 163.019800][ T5740] [U] [ 163.022552][ T5740] [U] [ 163.025214][ T5740] [U] [ 163.027870][ T5740] [U] [ 163.030525][ T5740] [U] [ 163.033259][ T5740] [U] [ 163.035919][ T5740] [U] [ 163.038573][ T5740] [U] [ 163.041229][ T5740] [U] [ 163.043957][ T5740] [U] [ 163.046628][ T5740] [U] [ 163.049298][ T5740] [U] [ 163.051955][ T5740] [U] [ 163.055019][ T5740] [U] [ 163.057682][ T5740] [U] [ 163.060340][ T5740] [U] [ 163.062998][ T5740] [U] [ 163.065751][ T5740] [U] [ 163.068411][ T5740] [U] [ 163.071078][ T5740] [U] [ 163.073732][ T5740] [U] [ 163.076465][ T5740] [U] [ 163.079142][ T5740] [U] [ 163.081800][ T5740] [U] [ 163.084456][ T5740] [U] [ 163.087205][ T5740] [U] [ 163.089868][ T5740] [U] [ 163.092525][ T5740] [U] [ 163.095189][ T5740] [U] [ 163.097925][ T5740] [U] [ 163.100583][ T5740] [U] [ 163.103268][ T5740] [U] [ 163.105921][ T5740] [U] [ 163.108719][ T5740] [U] [ 163.111389][ T5740] [U] [ 163.114071][ T5740] [U] [ 163.116746][ T5740] [U] [ 163.119590][ T5740] [U] [ 163.122273][ T5740] [U] [ 163.124942][ T5740] [U] [ 163.127606][ T5740] [U] [ 163.130444][ T5740] [U] [ 163.133135][ T5740] [U] [ 163.135798][ T5740] [U] [ 163.138456][ T5740] [U] [ 163.141186][ T5740] [U] [ 163.143847][ T5740] [U] [ 163.146512][ T5740] [U] [ 163.149179][ T5740] [U] [ 163.152233][ T5740] [U] [ 163.154899][ T5740] [U] [ 163.157559][ T5740] [U] [ 163.160220][ T5740] [U] [ 163.162956][ T5740] [U] [ 163.165620][ T5740] [U] [ 163.168280][ T5740] [U] [ 163.170938][ T5740] [U] [ 163.173692][ T5740] [U] [ 163.176354][ T5740] [U] [ 163.179022][ T5740] [U] [ 163.181740][ T5740] [U] [ 163.184469][ T5740] [U] [ 163.187133][ T5740] [U] [ 163.189792][ T5740] [U] [ 163.192455][ T5740] [U] [ 163.195204][ T5740] [U] [ 163.197872][ T5740] [U] [ 163.200534][ T5740] [U] [ 163.203199][ T5740] [U] [ 163.205935][ T5740] [U] [ 163.208593][ T5740] [U] [ 163.211250][ T5740] [U] [ 163.213908][ T5740] [U] [ 163.216673][ T5740] [U] [ 163.219335][ T5740] [U] [ 163.221997][ T5740] [U] [ 163.224657][ T5740] [U] [ 163.227379][ T5740] [U] [ 163.230042][ T5740] [U] [ 163.232701][ T5740] [U] [ 163.235371][ T5740] [U] [ 163.238119][ T5740] [U] [ 163.240779][ T5740] [U] [ 163.243437][ T5740] [U] [ 163.246096][ T5740] [U] [ 163.248842][ T5740] [U] [ 163.251504][ T5740] [U] [ 163.254174][ T5740] [U] [ 163.256834][ T5740] [U] [ 163.259909][ T5740] [U] [ 163.262580][ T5740] [U] [ 163.265246][ T5740] [U] [ 163.267907][ T5740] [U] [ 163.270740][ T5740] [U] [ 163.273409][ T5740] [U] [ 163.276068][ T5740] [U] [ 163.278727][ T5740] [U] [ 163.281485][ T5740] [U] [ 163.284146][ T5740] [U] [ 163.286803][ T5740] [U] [ 163.289474][ T5740] [U] [ 163.292198][ T5740] [U] [ 163.294860][ T5740] [U] [ 163.297517][ T5740] [U] [ 163.314130][ T5743] tipc: Enabled bearer , priority 0 [ 163.322481][ T5743] device syzkaller0 entered promiscuous mode [ 163.345354][ T5743] tipc: Resetting bearer [ 163.355913][ T5742] tipc: Resetting bearer [ 163.371729][ T5739] [U] [ 163.379371][ T5742] tipc: Disabling bearer [ 163.415529][ T4239] usb 4-1: USB disconnect, device number 4 [ 163.544121][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 164.406744][ T26] r8152-cfgselector 1-1: Unknown version 0x0000 [ 164.460212][ T26] r8152-cfgselector 1-1: bad CDC descriptors [ 164.499881][ T26] r8152-cfgselector 1-1: Unknown version 0x0000 [ 164.529792][ T4239] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 164.609194][ T26] r8152-cfgselector 1-1: USB disconnect, device number 13 [ 164.709947][ T5755] [U] : [ 164.712729][ T5755] [U] [ 164.715387][ T5755] [U] [ 164.718040][ T5755] [U] [ 164.731601][ T5755] [U] [ 164.734308][ T5755] [U] [ 164.736972][ T5755] [U] [ 164.739639][ T5755] [U] [ 164.750805][ T5755] [U] [ 164.753515][ T5755] [U] [ 164.756207][ T5755] [U] [ 164.758906][ T5755] [U] [ 164.868964][ T5755] [U] [ 164.871682][ T5755] [U] [ 164.874363][ T5755] [U] [ 164.877035][ T5755] [U] [ 164.888236][ T5755] netlink: 132 bytes leftover after parsing attributes in process `syz.0.435'. [ 164.904458][ T5754] [U] [ 165.049859][ T4239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.199962][ T4258] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 165.570589][ T4258] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.681943][ T4258] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 165.715521][ T4258] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 165.725081][ T4258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.795336][ T4258] usb 3-1: config 0 descriptor?? [ 165.869034][ T4239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 165.880207][ T4239] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 165.893297][ T4239] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 165.902614][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.920612][ T4239] usb 4-1: config 0 descriptor?? [ 165.950217][ T5745] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 166.013525][ T5782] [U] : [ 166.016311][ T5782] [U] [ 166.018972][ T5782] [U] [ 166.021631][ T5782] [U] [ 166.024720][ T5782] [U] [ 166.027385][ T5782] [U] [ 166.030044][ T5782] [U] [ 166.032701][ T5782] [U] [ 166.035480][ T5782] [U] [ 166.038139][ T5782] [U] [ 166.040803][ T5782] [U] [ 166.043472][ T5782] [U] [ 166.046200][ T5782] [U] [ 166.048862][ T5782] [U] [ 166.051518][ T5782] [U] [ 166.054177][ T5782] [U] [ 166.056939][ T5782] [U] [ 166.059599][ T5782] [U] [ 166.062253][ T5782] [U] [ 166.065014][ T5782] [U] [ 166.086954][ T5781] [U] [ 166.109991][ T4258] Bluetooth: Can't get state to change to load ram patch err [ 166.126735][ T4258] Bluetooth: Loading patch file failed [ 166.132788][ T4258] ath3k: probe of 3-1:0.0 failed with error -71 [ 166.146810][ T4258] usb 3-1: USB disconnect, device number 8 [ 166.390875][ T4239] aureal 0003:0755:2626.0007: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 166.602723][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 167.025104][ T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 167.113977][ T4239] aureal 0003:0755:2626.0007: unknown main item tag 0x6 [ 167.159945][ T4239] aureal 0003:0755:2626.0007: report_id 29495 is invalid [ 167.172729][ T4239] aureal 0003:0755:2626.0007: item 0 2 1 8 parsing failed [ 167.190869][ T4239] aureal: probe of 0003:0755:2626.0007 failed with error -22 [ 167.212035][ T4239] usb 4-1: USB disconnect, device number 5 [ 167.316506][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 167.349805][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 167.389894][ T4258] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 167.470036][ T26] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 167.690052][ T4258] usb 3-1: Using ep0 maxpacket: 8 [ 167.710175][ T26] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 167.753037][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.814035][ T26] usb 2-1: Product: syz [ 167.843609][ T26] usb 2-1: Manufacturer: syz [ 167.848428][ T26] usb 2-1: SerialNumber: syz [ 167.904341][ T26] usb 2-1: config 0 descriptor?? [ 167.971802][ T26] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 168.008761][ T26] usb 2-1: setting power ON [ 168.036924][ T26] dvb-usb: bulk message failed: -22 (2/0) [ 168.070899][ T4258] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 168.083660][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.094994][ T4258] usb 3-1: Product: syz [ 168.103938][ T4258] usb 3-1: Manufacturer: syz [ 168.109066][ T4258] usb 3-1: SerialNumber: syz [ 168.508816][ T5778] dvb-usb: bulk message failed: -22 (4/0) [ 168.528351][ T5778] cxusb: i2c read failed [ 168.544430][ T26] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.550095][ T4258] usb 3-1: config 0 descriptor?? [ 168.580170][ T26] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 168.594144][ T26] usb 2-1: media controller created [ 168.608571][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.651944][ T26] usb 2-1: selecting invalid altsetting 6 [ 168.747651][ T26] usb 2-1: digital interface selection failed (-22) [ 168.757747][ T26] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 168.949953][ T4258] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 169.020142][ T26] usb 2-1: setting power OFF [ 169.025089][ T26] dvb-usb: bulk message failed: -22 (2/0) [ 169.034191][ T26] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 169.047924][ T26] (NULL device *): no alternate interface [ 169.101907][ T26] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 169.130485][ T25] audit: type=1326 audit(1752734642.004:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5822 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 169.231900][ T26] usb 2-1: USB disconnect, device number 6 [ 169.261424][ T25] audit: type=1326 audit(1752734642.044:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5822 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 169.317602][ T25] audit: type=1326 audit(1752734642.124:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5822 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 169.370876][ T25] audit: type=1326 audit(1752734642.124:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5822 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 169.370900][ T25] audit: type=1326 audit(1752734642.124:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5822 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 169.370920][ T25] audit: type=1326 audit(1752734642.124:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5822 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 169.370938][ T25] audit: type=1326 audit(1752734642.124:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5822 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 169.370956][ T25] audit: type=1326 audit(1752734642.124:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5822 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 169.370972][ T25] audit: type=1326 audit(1752734642.124:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5822 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 169.370989][ T25] audit: type=1326 audit(1752734642.124:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5822 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e49700929 code=0x7ffc0000 [ 169.669978][ T4239] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 169.739759][ T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 169.909786][ T4239] usb 1-1: Using ep0 maxpacket: 16 [ 170.660033][ T4239] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 170.799975][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.820889][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.842943][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.856463][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.882931][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.893188][ T4239] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 170.989072][ T26] usb 2-1: config 0 descriptor?? [ 171.003628][ T4239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.014744][ T4239] usb 1-1: Product: syz [ 171.018895][ T4239] usb 1-1: Manufacturer: syz [ 171.023583][ T4239] usb 1-1: SerialNumber: syz [ 171.034583][ T4239] usb 1-1: config 0 descriptor?? [ 171.299770][ T4253] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 171.448019][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 171.492508][ T26] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 171.527229][ T26] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 171.622022][ T4258] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 171.635262][ T4258] usb 3-1: USB disconnect, device number 9 [ 171.669992][ T4253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.681106][ T4253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 171.692484][ T4253] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 171.705653][ T4253] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 171.737298][ T4253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.756679][ T4253] usb 5-1: config 0 descriptor?? [ 171.782812][ T5838] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 171.876121][ T4258] usb 2-1: USB disconnect, device number 7 [ 172.587331][ T26] usb 1-1: USB disconnect, device number 14 [ 172.642577][ T4253] aureal 0003:0755:2626.0009: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 172.653540][ T4253] aureal 0003:0755:2626.0009: unknown main item tag 0x6 [ 172.675897][ T4253] aureal 0003:0755:2626.0009: report_id 29495 is invalid [ 172.699878][ T4253] aureal 0003:0755:2626.0009: item 0 2 1 8 parsing failed [ 172.712274][ T4253] aureal: probe of 0003:0755:2626.0009 failed with error -22 [ 172.823783][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 172.863425][ T4253] usb 5-1: USB disconnect, device number 8 [ 173.525415][ T5874] tipc: Enabled bearer , priority 0 [ 173.536998][ T5872] [U] : [ 173.539775][ T5872] [U] [ 173.542433][ T5872] [U] [ 173.545095][ T5872] [U] [ 173.547893][ T5872] [U] [ 173.550556][ T5872] [U] [ 173.553212][ T5872] [U] [ 173.555867][ T5872] [U] [ 173.558613][ T5872] [U] [ 173.561273][ T5872] [U] [ 173.563929][ T5872] [U] [ 173.566584][ T5872] [U] [ 173.572726][ T5872] [U] [ 173.575427][ T5872] [U] [ 173.578096][ T5872] [U] [ 173.580761][ T5872] [U] [ 173.583514][ T5872] [U] [ 173.586174][ T5872] [U] [ 173.588835][ T5872] [U] [ 173.591498][ T5872] [U] [ 173.594230][ T5872] [U] [ 173.596898][ T5872] [U] [ 173.599555][ T5872] [U] [ 173.602211][ T5872] [U] [ 173.604948][ T5872] [U] [ 173.607608][ T5872] [U] [ 173.610264][ T5872] [U] [ 173.612919][ T5872] [U] [ 173.615639][ T5872] [U] [ 173.618296][ T5872] [U] [ 173.620951][ T5872] [U] [ 173.623609][ T5872] [U] [ 173.626362][ T5872] [U] [ 173.629018][ T5872] [U] [ 173.631675][ T5872] [U] [ 173.634331][ T5872] [U] [ 173.637049][ T5872] [U] [ 173.639720][ T5872] [U] [ 173.642384][ T5872] [U] [ 173.645040][ T5872] [U] [ 173.647776][ T5872] [U] [ 173.650432][ T5872] [U] [ 173.653093][ T5872] [U] [ 173.655756][ T5872] [U] [ 173.658479][ T5872] [U] [ 173.661145][ T5872] [U] [ 173.663799][ T5872] [U] [ 173.666455][ T5872] [U] [ 173.669196][ T5872] [U] [ 173.671855][ T5872] [U] [ 173.674512][ T5872] [U] [ 173.677167][ T5872] [U] [ 173.679904][ T5872] [U] [ 173.682561][ T5872] [U] [ 173.685213][ T5872] [U] [ 173.687873][ T5872] [U] [ 173.697281][ T5874] device syzkaller0 entered promiscuous mode [ 173.736716][ T5872] [U] [ 173.739416][ T5872] [U] [ 173.742076][ T5872] [U] [ 173.744742][ T5872] [U] [ 173.747537][ T5872] [U] [ 173.750204][ T5872] [U] [ 173.752865][ T5872] [U] [ 173.755521][ T5872] [U] [ 173.770441][ T5874] tipc: Resetting bearer [ 173.776996][ T5872] [U] [ 173.779704][ T5872] [U] [ 173.782381][ T5872] [U] [ 173.785041][ T5872] [U] [ 173.811607][ T5877] [U] [ 173.829329][ T5873] tipc: Resetting bearer [ 173.847205][ T5873] tipc: Disabling bearer [ 174.208473][ T5887] [U] : [ 174.211261][ T5887] [U] [ 174.213919][ T5887] [U] [ 174.216572][ T5887] [U] [ 174.230180][ T5887] [U] [ 174.232876][ T5887] [U] [ 174.235554][ T5887] [U] [ 174.238244][ T5887] [U] [ 174.853242][ T5887] [U] [ 174.855975][ T5887] [U] [ 174.858652][ T5887] [U] [ 174.861328][ T5887] [U] [ 174.909842][ T4253] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.967447][ T5887] [U] [ 174.970167][ T5887] [U] [ 174.972847][ T5887] [U] [ 174.975516][ T5887] [U] [ 175.175768][ T5887] netlink: 132 bytes leftover after parsing attributes in process `syz.0.475'. [ 175.209799][ T4253] usb 5-1: Using ep0 maxpacket: 8 [ 175.623208][ T5886] [U] [ 175.729927][ T4232] Bluetooth: hci0: command 0x0406 tx timeout [ 175.754676][ T4232] Bluetooth: hci1: command 0x0406 tx timeout [ 175.773773][ T4232] Bluetooth: hci3: command 0x0406 tx timeout [ 175.780271][ T4232] Bluetooth: hci4: command 0x0406 tx timeout [ 175.790293][ T4232] Bluetooth: hci2: command 0x0406 tx timeout [ 175.880510][ T4253] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 176.755595][ T4253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.806072][ T4253] usb 5-1: Product: syz [ 176.829376][ T4253] usb 5-1: Manufacturer: syz [ 176.877389][ T4253] usb 5-1: SerialNumber: syz [ 176.947908][ T5929] tipc: Enabled bearer , priority 0 [ 176.965510][ T5929] device syzkaller0 entered promiscuous mode [ 176.985866][ T4253] usb 5-1: config 0 descriptor?? [ 177.008251][ T5929] tipc: Resetting bearer [ 177.058812][ T5927] tipc: Resetting bearer [ 177.069892][ T4253] usb 5-1: can't set config #0, error -71 [ 177.106681][ T4253] usb 5-1: USB disconnect, device number 9 [ 177.120970][ T5927] tipc: Disabling bearer [ 177.977056][ T4998] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 178.067616][ T5940] program syz.2.492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.077547][ T5940] program syz.2.492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.086942][ T5940] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 178.841319][ T4998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.870258][ T4998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 178.875431][ T5958] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 178.886696][ T4998] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 178.915440][ T4998] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 178.932705][ T4998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.947769][ T4998] usb 4-1: config 0 descriptor?? [ 178.980010][ T5926] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 179.220042][ T4239] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 179.442752][ T4998] aureal 0003:0755:2626.000A: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 179.480710][ T4239] usb 5-1: Using ep0 maxpacket: 8 [ 179.493294][ T4998] aureal 0003:0755:2626.000A: unknown main item tag 0x6 [ 179.506500][ T4998] aureal 0003:0755:2626.000A: report_id 29495 is invalid [ 179.524575][ T4998] aureal 0003:0755:2626.000A: item 0 2 1 8 parsing failed [ 179.562857][ T4998] aureal: probe of 0003:0755:2626.000A failed with error -22 [ 179.570601][ T4253] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 179.645193][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 179.668797][ T4998] usb 4-1: USB disconnect, device number 6 [ 179.769862][ T4239] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 179.780873][ T4239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.794047][ T4239] usb 5-1: Product: syz [ 179.804289][ T4239] usb 5-1: Manufacturer: syz [ 179.811943][ T4239] usb 5-1: SerialNumber: syz [ 179.829902][ T4253] usb 1-1: Using ep0 maxpacket: 32 [ 179.836401][ T4239] usb 5-1: config 0 descriptor?? [ 179.969866][ T4253] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 179.979436][ T4253] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 180.033814][ T4253] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 180.055485][ T4253] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 180.076299][ T4253] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.102142][ T4239] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 180.280009][ T4253] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 180.290782][ T4253] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 180.314859][ T4253] usb 1-1: Product: syz [ 181.882156][ T4253] usb 1-1: Manufacturer: syz [ 181.907644][ T4253] usb 1-1: SerialNumber: syz [ 181.999017][ T4253] usb 1-1: config 0 descriptor?? [ 182.062664][ T4253] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 182.097937][ T4253] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 182.196613][ T5982] program syz.1.506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.206529][ T5982] program syz.1.506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.215846][ T5982] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 182.299046][ T4253] usb 1-1: USB disconnect, device number 15 [ 182.385109][ T4239] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 182.401039][ T4239] usb 5-1: USB disconnect, device number 10 [ 182.434457][ T4253] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 185.322491][ T6013] program syz.3.518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.334032][ T6013] program syz.3.518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.343337][ T6013] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 185.391321][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 186.149807][ T1324] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 186.259509][ T6044] netlink: 'syz.0.528': attribute type 2 has an invalid length. [ 186.389766][ T1324] usb 4-1: Using ep0 maxpacket: 8 [ 186.672266][ T1324] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 186.694067][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.726119][ T1324] usb 4-1: Product: syz [ 186.742555][ T1324] usb 4-1: Manufacturer: syz [ 186.758442][ T1324] usb 4-1: SerialNumber: syz [ 186.812243][ T1324] usb 4-1: config 0 descriptor?? [ 187.089856][ T1324] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 188.390779][ T1324] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110 [ 188.875706][ T1324] usb 4-1: USB disconnect, device number 7 [ 189.439782][ T1324] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 189.779833][ T4998] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 189.824967][ T1324] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 189.842109][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.963601][ T1324] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 189.981881][ T1324] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 190.018375][ T1324] usb 4-1: Manufacturer: syz [ 190.037579][ T1324] usb 4-1: config 0 descriptor?? [ 190.199889][ T1324] rc_core: IR keymap rc-hauppauge not found [ 190.210064][ T4998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.210163][ T1324] Registered IR keymap rc-empty [ 190.239052][ T4998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 190.263786][ T4998] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 190.301799][ T4998] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 190.324285][ T4998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.354403][ T4998] usb 2-1: config 0 descriptor?? [ 190.400112][ T6075] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 190.453582][ T1324] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 190.586321][ T1324] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 190.785279][ T4239] usb 4-1: USB disconnect, device number 8 [ 190.851499][ T4998] aureal 0003:0755:2626.000B: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 190.890635][ T4998] aureal 0003:0755:2626.000B: unknown main item tag 0x6 [ 190.938664][ T4998] aureal 0003:0755:2626.000B: report_id 29495 is invalid [ 190.999871][ T4998] aureal 0003:0755:2626.000B: item 0 2 1 8 parsing failed [ 191.030249][ T4998] aureal: probe of 0003:0755:2626.000B failed with error -22 [ 191.060093][ T4998] usb 2-1: USB disconnect, device number 8 [ 191.152476][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 191.299982][ T1324] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 191.346467][ T6098] netlink: 'syz.0.544': attribute type 10 has an invalid length. [ 191.670066][ T1324] usb 3-1: config 0 has no interfaces? [ 192.000541][ T1324] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 193.121544][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.129574][ T1324] usb 3-1: Product: syz [ 193.223877][ T1324] usb 3-1: Manufacturer: syz [ 193.246530][ T1324] usb 3-1: SerialNumber: syz [ 193.335106][ T1324] usb 3-1: config 0 descriptor?? [ 193.784842][ T6118] MPTCP: addr_signal error, add_addr=1, echo=0 [ 194.170462][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.189072][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.289273][ T4239] usb 3-1: USB disconnect, device number 10 [ 194.870301][ T6139] binder: 6138:6139 unknown command 0 [ 194.896221][ T6139] binder: 6138:6139 ioctl c0306201 200000000080 returned -22 [ 195.025885][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 195.034958][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.043073][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.053100][ T6141] device bridge_slave_0 left promiscuous mode [ 195.060882][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.165725][ T6141] device bridge_slave_1 left promiscuous mode [ 195.194343][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.228114][ T6141] bond0: (slave bond_slave_0): Releasing backup interface [ 195.263334][ T6141] bond0: (slave bond_slave_1): Releasing backup interface [ 195.292732][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.308695][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.335890][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.349924][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.374600][ T6145] netlink: 'syz.3.558': attribute type 10 has an invalid length. [ 196.041527][ T6153] loop8: detected capacity change from 0 to 79 [ 196.102969][ T6153] loop_set_status: loop8 () has still dirty pages (nrpages=2) [ 196.237558][ T6157] [U] : [ 196.240346][ T6157] [U] [ 196.243003][ T6157] [U] [ 196.245661][ T6157] [U] [ 196.248564][ T6157] [U] [ 196.251225][ T6157] [U] [ 196.253880][ T6157] [U] [ 196.256534][ T6157] [U] [ 196.259293][ T6157] [U] [ 196.261956][ T6157] [U] [ 196.264611][ T6157] [U] [ 196.267266][ T6157] [U] [ 196.270032][ T6157] [U] [ 196.272693][ T6157] [U] [ 196.275346][ T6157] [U] [ 196.278002][ T6157] [U] [ 196.280743][ T6157] [U] [ 196.283399][ T6157] [U] [ 196.286058][ T6157] [U] [ 196.288712][ T6157] [U] [ 196.291683][ T6157] [U] [ 196.294354][ T6157] [U] [ 196.297009][ T6157] [U] [ 196.299660][ T6157] [U] [ 196.302629][ T6157] [U] [ 196.305299][ T6157] [U] [ 196.307955][ T6157] [U] [ 196.310614][ T6157] [U] [ 196.313368][ T6157] [U] [ 196.316026][ T6157] [U] [ 196.318677][ T6157] [U] [ 196.321332][ T6157] [U] [ 196.324068][ T6157] [U] [ 196.326728][ T6157] [U] [ 196.329383][ T6157] [U] [ 196.332044][ T6157] [U] [ 196.335279][ T6157] [U] [ 196.337952][ T6157] [U] [ 196.340620][ T6157] [U] [ 196.343296][ T6157] [U] [ 196.374860][ T6157] [U] [ 196.377579][ T6157] [U] [ 196.380252][ T6157] [U] [ 196.382919][ T6157] [U] [ 196.385778][ T6157] [U] [ 196.388457][ T6157] [U] [ 196.391208][ T6157] [U] [ 196.393868][ T6157] [U] [ 196.396623][ T6157] [U] [ 196.399285][ T6157] [U] [ 196.401955][ T6157] [U] [ 196.404620][ T6157] [U] [ 196.407366][ T6157] [U] [ 196.410027][ T6157] [U] [ 196.412687][ T6157] [U] [ 196.415345][ T6157] [U] [ 196.418105][ T6157] [U] [ 196.420766][ T6157] [U] [ 196.423422][ T6157] [U] [ 196.426077][ T6157] [U] [ 196.429270][ T6157] [U] [ 196.431947][ T6157] [U] [ 196.434613][ T6157] [U] [ 196.437407][ T6157] [U] [ 196.440212][ T6157] [U] [ 196.442888][ T6157] [U] [ 196.445548][ T6157] [U] [ 196.448208][ T6157] [U] [ 196.450945][ T6157] [U] [ 196.453610][ T6157] [U] [ 196.456270][ T6157] [U] [ 196.458931][ T6157] [U] [ 196.461695][ T6157] [U] [ 196.464358][ T6157] [U] [ 196.467017][ T6157] [U] [ 196.469684][ T6157] [U] [ 196.472446][ T6157] [U] [ 196.475107][ T6157] [U] [ 196.477771][ T6157] [U] [ 196.480432][ T6157] [U] [ 196.483228][ T6157] [U] [ 196.485887][ T6157] [U] [ 196.488551][ T6157] [U] [ 196.491209][ T6157] [U] [ 196.493983][ T6157] [U] [ 196.496652][ T6157] [U] [ 196.499310][ T6157] [U] [ 196.501974][ T6157] [U] [ 196.504733][ T6157] [U] [ 196.507398][ T6157] [U] [ 196.510057][ T6157] [U] [ 196.512714][ T6157] [U] [ 196.515475][ T6157] [U] [ 196.518138][ T6157] [U] [ 196.520795][ T6157] [U] [ 196.523451][ T6157] [U] [ 196.526233][ T6157] [U] [ 196.528897][ T6157] [U] [ 196.531554][ T6157] [U] [ 196.534212][ T6157] [U] [ 196.537287][ T6157] [U] [ 196.539957][ T6157] [U] [ 196.542617][ T6157] [U] [ 196.545275][ T6157] [U] [ 196.548041][ T6157] [U] [ 196.550718][ T6157] [U] [ 196.553387][ T6157] [U] [ 196.556046][ T6157] [U] [ 196.558770][ T6157] [U] [ 196.561429][ T6157] [U] [ 196.564089][ T6157] [U] [ 196.566746][ T6157] [U] [ 196.569535][ T6157] [U] [ 196.572199][ T6157] [U] [ 196.574858][ T6157] [U] [ 196.577517][ T6157] [U] [ 196.580265][ T6157] [U] [ 196.582923][ T6157] [U] [ 196.585603][ T6157] [U] [ 196.588265][ T6157] [U] [ 196.591131][ T6157] [U] [ 196.593799][ T6157] [U] [ 196.596457][ T6157] [U] [ 196.599116][ T6157] [U] [ 196.601957][ T6157] [U] [ 196.604617][ T6157] [U] [ 196.607272][ T6157] [U] [ 196.663326][ T6156] [U] [ 196.692356][ T6162] loop2: detected capacity change from 0 to 7 [ 196.763625][ T6162] loop2: [ 196.767033][ T6162] loop2: partition table partially beyond EOD, truncated [ 196.861641][ T6161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.953007][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 198.216867][ T6194] program syz.1.573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.232916][ T6194] program syz.1.573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.242313][ T6194] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 198.264325][ T6194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.573'. [ 198.412383][ T6199] rtc_cmos 00:00: Alarms can be up to one day in the future [ 198.768469][ T6203] [U] : [ 198.771251][ T6203] [U] [ 198.773917][ T6203] [U] [ 198.776581][ T6203] [U] [ 198.779367][ T6203] [U] [ 198.782034][ T6203] [U] [ 198.784696][ T6203] [U] [ 198.787354][ T6203] [U] [ 198.790398][ T6203] [U] [ 198.793060][ T6203] [U] [ 198.795718][ T6203] [U] [ 198.798381][ T6203] [U] [ 198.801104][ T6203] [U] [ 198.803760][ T6203] [U] [ 198.806424][ T6203] [U] [ 198.809080][ T6203] [U] [ 198.811827][ T6203] [U] [ 198.814483][ T6203] [U] [ 198.817137][ T6203] [U] [ 198.819796][ T6203] [U] [ 198.822539][ T6203] [U] [ 198.825199][ T6203] [U] [ 198.827851][ T6203] [U] [ 198.830507][ T6203] [U] [ 198.833262][ T6203] [U] [ 198.835920][ T6203] [U] [ 198.838573][ T6203] [U] [ 198.841228][ T6203] [U] [ 198.843966][ T6203] [U] [ 198.846625][ T6203] [U] [ 198.849279][ T6203] [U] [ 198.851933][ T6203] [U] [ 198.854673][ T6203] [U] [ 198.857330][ T6203] [U] [ 198.859986][ T6203] [U] [ 198.862643][ T6203] [U] [ 198.865363][ T6203] [U] [ 198.868017][ T6203] [U] [ 198.870687][ T6203] [U] [ 198.873364][ T6203] [U] [ 198.897124][ T6203] [U] [ 198.899845][ T6203] [U] [ 198.902518][ T6203] [U] [ 198.905180][ T6203] [U] [ 198.908011][ T6203] [U] [ 198.910278][ T6205] netlink: 132 bytes leftover after parsing attributes in process `syz.0.576'. [ 198.910695][ T6203] [U] [ 198.922264][ T6203] [U] [ 198.924927][ T6203] [U] [ 198.927772][ T6203] [U] [ 198.930440][ T6203] [U] [ 198.933099][ T6203] [U] [ 198.935757][ T6203] [U] [ 198.938493][ T6203] [U] [ 198.941151][ T6203] [U] [ 198.943808][ T6203] [U] [ 198.946469][ T6203] [U] [ 198.949238][ T6203] [U] [ 198.951903][ T6203] [U] [ 198.954567][ T6203] [U] [ 198.957228][ T6203] [U] [ 198.960136][ T6203] [U] [ 198.962809][ T6203] [U] [ 198.965473][ T6203] [U] [ 198.968136][ T6203] [U] [ 198.970882][ T6203] [U] [ 198.973559][ T6203] [U] [ 198.976221][ T6203] [U] [ 198.978879][ T6203] [U] [ 198.981657][ T6203] [U] [ 198.984321][ T6203] [U] [ 198.986982][ T6203] [U] [ 198.989644][ T6203] [U] [ 198.992796][ T6203] [U] [ 198.995470][ T6203] [U] [ 198.998127][ T6203] [U] [ 199.000785][ T6203] [U] [ 199.003541][ T6203] [U] [ 199.006201][ T6203] [U] [ 199.008866][ T6203] [U] [ 199.011533][ T6203] [U] [ 199.014272][ T6203] [U] [ 199.016931][ T6203] [U] [ 199.019594][ T6203] [U] [ 199.022251][ T6203] [U] [ 199.024993][ T6203] [U] [ 199.027665][ T6203] [U] [ 199.030325][ T6203] [U] [ 199.032982][ T6203] [U] [ 199.035730][ T6203] [U] [ 199.038395][ T6203] [U] [ 199.041051][ T6203] [U] [ 199.043708][ T6203] [U] [ 199.046449][ T6203] [U] [ 199.049108][ T6203] [U] [ 199.051771][ T6203] [U] [ 199.054437][ T6203] [U] [ 199.057197][ T6203] [U] [ 199.059868][ T6203] [U] [ 199.062539][ T6203] [U] [ 199.065198][ T6203] [U] [ 199.067948][ T6203] [U] [ 199.070625][ T6203] [U] [ 199.073289][ T6203] [U] [ 199.075946][ T6203] [U] [ 199.078689][ T6203] [U] [ 199.081348][ T6203] [U] [ 199.084012][ T6203] [U] [ 199.086670][ T6203] [U] [ 199.089424][ T6203] [U] [ 199.092084][ T6203] [U] [ 199.094747][ T6203] [U] [ 199.097404][ T6203] [U] [ 199.100491][ T6203] [U] [ 199.103156][ T6203] [U] [ 199.105816][ T6203] [U] [ 199.108484][ T6203] [U] [ 199.111234][ T6203] [U] [ 199.113893][ T6203] [U] [ 199.116551][ T6203] [U] [ 199.119207][ T6203] [U] [ 199.121969][ T6203] [U] [ 199.124633][ T6203] [U] [ 199.127291][ T6203] [U] [ 199.129951][ T6203] [U] [ 199.132671][ T6203] [U] [ 199.135337][ T6203] [U] [ 199.137998][ T6203] [U] [ 199.153523][ T26] rtc_cmos 00:00: Alarms can be up to one day in the future [ 199.187137][ T6202] [U] [ 199.203380][ T26] rtc_cmos 00:00: Alarms can be up to one day in the future [ 199.240009][ T26] rtc_cmos 00:00: Alarms can be up to one day in the future [ 199.257949][ T26] rtc_cmos 00:00: Alarms can be up to one day in the future [ 199.366538][ T26] rtc rtc0: __rtc_set_alarm: err=-22 [ 200.011228][ T6219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.018859][ T6219] IPv6: NLM_F_CREATE should be set when creating new route [ 200.999753][ T4232] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 201.281779][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 201.453709][ T6239] [U] : [ 201.456492][ T6239] [U] [ 201.459157][ T6239] [U] [ 201.461817][ T6239] [U] [ 201.464885][ T6239] [U] [ 201.467559][ T6239] [U] [ 201.470215][ T6239] [U] [ 201.472871][ T6239] [U] [ 201.475896][ T6239] [U] [ 201.478561][ T6239] [U] [ 201.481999][ T6239] [U] [ 201.484653][ T6239] [U] [ 201.487387][ T6239] [U] [ 201.490044][ T6239] [U] [ 201.492708][ T6239] [U] [ 201.495363][ T6239] [U] [ 201.498139][ T6239] [U] [ 201.500798][ T6239] [U] [ 201.503466][ T6239] [U] [ 201.506119][ T6239] [U] [ 201.508855][ T6239] [U] [ 201.511522][ T6239] [U] [ 201.514191][ T6239] [U] [ 201.516857][ T6239] [U] [ 201.521118][ T4239] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 201.570498][ T6239] netlink: 132 bytes leftover after parsing attributes in process `syz.2.588'. [ 201.589959][ T6238] [U] [ 201.599978][ T26] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 201.619915][ T4232] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 201.635467][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.653963][ T4232] usb 2-1: Product: syz [ 201.658141][ T4232] usb 2-1: Manufacturer: syz [ 201.671903][ T4232] usb 2-1: SerialNumber: syz [ 201.690523][ T4232] usb 2-1: config 0 descriptor?? [ 201.699007][ T6242] binder_alloc: 6241: binder_alloc_buf, no vma [ 201.815138][ T4239] usb 4-1: Using ep0 maxpacket: 16 [ 201.827144][ T6244] program syz.0.590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.839218][ T6244] program syz.0.590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.848614][ T6244] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 201.859627][ T6244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.590'. [ 201.950101][ T4232] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 202.005117][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.023335][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.050522][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.143408][ T4239] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 202.168109][ T26] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.213485][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.254435][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.274276][ T4239] usb 4-1: Product: syz [ 202.291894][ T4239] usb 4-1: Manufacturer: syz [ 202.335043][ T4239] usb 4-1: SerialNumber: syz [ 202.344406][ T26] usb 5-1: config 0 descriptor?? [ 202.447498][ T4239] usb 4-1: config 0 descriptor?? [ 202.528690][ T4239] usb 4-1: Found UVC 0.00 device syz (046d:0721) [ 202.561920][ T4239] usb 4-1: No valid video chain found. [ 202.768248][ T4998] usb 4-1: USB disconnect, device number 9 [ 202.860244][ T26] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 202.913294][ T26] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 202.937361][ T6265] tipc: Enabled bearer , priority 0 [ 202.945853][ T6265] device syzkaller0 entered promiscuous mode [ 202.964893][ T6265] tipc: Resetting bearer [ 202.975196][ T6264] tipc: Resetting bearer [ 202.997929][ T6264] tipc: Disabling bearer [ 203.029458][ T6266] kvm: pic: non byte write [ 203.036167][ T6266] kvm: vcpu 0: requested 56 ns lapic timer period limited to 200000 ns [ 203.149319][ T6271] [U] : [ 203.152104][ T6271] [U] [ 203.154764][ T6271] [U] [ 203.157435][ T6271] [U] [ 203.160285][ T6271] [U] [ 203.162951][ T6271] [U] [ 203.165606][ T6271] [U] [ 203.168262][ T6271] [U] [ 203.171006][ T6271] [U] [ 203.173665][ T6271] [U] [ 203.176323][ T6271] [U] [ 203.178979][ T6271] [U] [ 203.181703][ T6271] [U] [ 203.184362][ T6271] [U] [ 203.187028][ T6271] [U] [ 203.189705][ T6271] [U] [ 203.192771][ T6271] [U] [ 203.195437][ T6271] [U] [ 203.198095][ T6271] [U] [ 203.200760][ T6271] [U] [ 203.203515][ T6271] [U] [ 203.206264][ T6271] [U] [ 203.208923][ T6271] [U] [ 203.211580][ T6271] [U] [ 203.214315][ T6271] [U] [ 203.216975][ T6271] [U] [ 203.219633][ T6271] [U] [ 203.222305][ T6271] [U] [ 203.245177][ T6271] netlink: 132 bytes leftover after parsing attributes in process `syz.0.599'. [ 203.260143][ T6269] [U] [ 203.305447][ T6277] [U] : [ 203.305465][ T6277] [U] [ 203.305479][ T6277] [U] [ 203.305493][ T6277] [U] [ 203.305546][ T6277] [U] [ 203.305560][ T6277] [U] [ 203.305573][ T6277] [U] [ 203.305585][ T6277] [U] [ 203.305639][ T6277] [U] [ 203.305653][ T6277] [U] [ 203.305666][ T6277] [U] [ 203.305678][ T6277] [U] [ 203.305729][ T6277] [U] [ 203.305742][ T6277] [U] [ 203.305755][ T6277] [U] [ 203.305768][ T6277] [U] [ 203.305822][ T6277] [U] [ 203.305835][ T6277] [U] [ 203.305848][ T6277] [U] [ 203.305861][ T6277] [U] [ 203.305911][ T6277] [U] [ 203.305931][ T6277] [U] [ 203.305952][ T6277] [U] [ 203.305973][ T6277] [U] [ 203.306057][ T6277] [U] [ 203.306071][ T6277] [U] [ 203.306084][ T6277] [U] [ 203.306097][ T6277] [U] [ 203.306151][ T6277] [U] [ 203.306164][ T6277] [U] [ 203.306178][ T6277] [U] [ 203.306198][ T6277] [U] [ 203.306305][ T6277] [U] [ 203.306320][ T6277] [U] [ 203.306334][ T6277] [U] [ 203.306348][ T6277] [U] [ 203.306400][ T6277] [U] [ 203.306413][ T6277] [U] [ 203.306427][ T6277] [U] [ 203.306440][ T6277] [U] [ 203.306494][ T6277] [U] [ 203.306507][ T6277] [U] [ 203.306520][ T6277] [U] [ 203.306533][ T6277] [U] [ 203.306583][ T6277] [U] [ 203.306597][ T6277] [U] [ 203.306610][ T6277] [U] [ 203.306623][ T6277] [U] [ 203.306677][ T6277] [U] [ 203.306690][ T6277] [U] [ 203.306703][ T6277] [U] [ 203.306716][ T6277] [U] [ 203.306767][ T6277] [U] [ 203.306780][ T6277] [U] [ 203.306793][ T6277] [U] [ 203.306806][ T6277] [U] [ 203.306861][ T6277] [U] [ 203.306874][ T6277] [U] [ 203.306886][ T6277] [U] [ 203.306899][ T6277] [U] [ 203.306950][ T6277] [U] [ 203.306963][ T6277] [U] [ 203.306976][ T6277] [U] [ 203.306989][ T6277] [U] [ 203.307042][ T6277] [U] [ 203.307055][ T6277] [U] [ 203.307068][ T6277] [U] [ 203.307081][ T6277] [U] [ 203.307132][ T6277] [U] [ 203.307145][ T6277] [U] [ 203.307158][ T6277] [U] [ 203.307171][ T6277] [U] [ 203.307224][ T6277] [U] [ 203.307237][ T6277] [U] [ 203.307250][ T6277] [U] [ 203.307263][ T6277] [U] [ 203.307322][ T6277] [U] [ 203.307336][ T6277] [U] [ 203.307350][ T6277] [U] [ 203.307363][ T6277] [U] [ 203.307418][ T6277] [U] [ 203.307431][ T6277] [U] [ 203.307444][ T6277] [U] [ 203.307457][ T6277] [U] [ 203.307508][ T6277] [U] [ 203.307521][ T6277] [U] [ 203.307535][ T6277] [U] [ 203.307548][ T6277] [U] [ 203.307601][ T6277] [U] [ 203.307614][ T6277] [U] [ 203.307627][ T6277] [U] [ 203.307640][ T6277] [U] [ 203.307690][ T6277] [U] [ 203.307703][ T6277] [U] [ 203.307716][ T6277] [U] [ 203.307728][ T6277] [U] [ 203.307782][ T6277] [U] [ 203.307795][ T6277] [U] [ 203.307808][ T6277] [U] [ 203.307821][ T6277] [U] [ 203.307870][ T6277] [U] [ 203.307883][ T6277] [U] [ 203.307896][ T6277] [U] [ 203.307910][ T6277] [U] [ 203.307964][ T6277] [U] [ 203.307977][ T6277] [U] [ 203.307989][ T6277] [U] [ 203.308002][ T6277] [U] [ 203.308053][ T6277] [U] [ 203.308066][ T6277] [U] [ 203.308079][ T6277] [U] [ 203.308092][ T6277] [U] [ 203.308145][ T6277] [U] [ 203.308159][ T6277] [U] [ 203.308172][ T6277] [U] [ 203.308185][ T6277] [U] [ 203.308236][ T6277] [U] [ 203.308249][ T6277] [U] [ 203.308262][ T6277] [U] [ 203.308280][ T6277] [U] [ 203.308336][ T6277] [U] [ 203.308350][ T6277] [U] [ 203.308363][ T6277] [U] [ 203.308377][ T6277] [U] [ 203.308419][ T6277] [U] [ 203.308432][ T6277] [U] [ 203.308444][ T6277] [U] [ 203.344407][ T6276] [U] [ 203.418495][ T6279] program syz.3.603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.770634][ T6279] program syz.3.603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.780052][ T6279] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 203.792668][ T6279] netlink: 36 bytes leftover after parsing attributes in process `syz.3.603'. [ 204.025409][ T6291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.606'. [ 204.034626][ T6291] netlink: 'syz.3.606': attribute type 4 has an invalid length. [ 204.043514][ T6291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.606'. [ 204.056644][ T6291] device geneve2 entered promiscuous mode [ 204.119870][ T1324] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 204.270244][ T26] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 204.309873][ T4232] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 204.339006][ T4232] usb 2-1: USB disconnect, device number 9 [ 204.420965][ T6299] tipc: Enabled bearer , priority 0 [ 204.460821][ T6299] device syzkaller0 entered promiscuous mode [ 204.602757][ T6299] tipc: Resetting bearer [ 204.611991][ T6298] tipc: Resetting bearer [ 204.637254][ T6304] [U] : [ 204.640034][ T6304] [U] [ 204.642696][ T6304] [U] [ 204.645356][ T6304] [U] [ 204.648148][ T6304] [U] [ 204.650814][ T6304] [U] [ 204.653479][ T6304] [U] [ 204.656137][ T6304] [U] [ 204.658906][ T6304] [U] [ 204.661574][ T6304] [U] [ 204.664234][ T6304] [U] [ 204.666891][ T6304] [U] [ 204.669632][ T6304] [U] [ 204.672301][ T6304] [U] [ 204.674960][ T6304] [U] [ 204.677620][ T6304] [U] [ 204.680369][ T6304] [U] [ 204.683035][ T6304] [U] [ 204.685694][ T6304] [U] [ 204.688364][ T6304] [U] [ 204.702680][ T1324] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 204.713707][ T6298] tipc: Disabling bearer [ 204.725964][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.735567][ T1324] usb 3-1: Product: syz [ 204.740023][ T1324] usb 3-1: Manufacturer: syz [ 204.744621][ T1324] usb 3-1: SerialNumber: syz [ 204.753031][ T6304] netlink: 132 bytes leftover after parsing attributes in process `syz.4.613'. [ 204.763061][ T6303] [U] [ 204.781529][ T1324] usb 3-1: config 0 descriptor?? [ 204.852256][ T1324] gspca_main: sq930x-2.14.0 probing 2770:930c [ 205.113339][ T6322] program syz.4.616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.132979][ T6322] program syz.4.616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.143707][ T6322] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 205.154399][ T4246] usb 5-1: USB disconnect, device number 11 [ 205.201055][ T6321] netlink: 36 bytes leftover after parsing attributes in process `syz.4.616'. [ 205.564185][ T6310] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 205.627320][ T6310] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 205.715690][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 205.749822][ T1324] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 205.755796][ T1324] sq930x: probe of 3-1:0.0 failed with error -71 [ 205.791459][ T1324] usb 3-1: USB disconnect, device number 11 [ 206.403989][ T4246] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 206.473157][ T6344] tipc: Enabled bearer , priority 0 [ 206.529112][ T6345] device syzkaller0 entered promiscuous mode [ 206.596162][ T6351] [U] : [ 206.599032][ T6351] [U] [ 206.601694][ T6351] [U] [ 206.604352][ T6351] [U] [ 206.607200][ T6351] [U] [ 206.609866][ T6351] [U] [ 206.612653][ T6351] [U] [ 206.615317][ T6351] [U] [ 206.618152][ T6351] [U] [ 206.620823][ T6351] [U] [ 206.623482][ T6351] [U] [ 206.626141][ T6351] [U] [ 206.628944][ T6351] [U] [ 206.631605][ T6351] [U] [ 206.634266][ T6351] [U] [ 206.636935][ T6351] [U] [ 206.639748][ T6351] [U] [ 206.642418][ T6351] [U] [ 206.645079][ T6351] [U] [ 206.647741][ T6351] [U] [ 206.673234][ T6344] tipc: Resetting bearer [ 206.682256][ T6351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.626'. [ 206.692119][ T6350] [U] [ 206.744968][ T6343] tipc: Resetting bearer [ 206.763351][ T6343] tipc: Disabling bearer [ 206.880101][ T4246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.340132][ T4246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.350314][ T4246] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.363782][ T4246] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.368849][ T6364] program syz.2.628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.372963][ T4246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.374765][ T4246] usb 5-1: config 0 descriptor?? [ 207.591519][ T6364] program syz.2.628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.612757][ T6364] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 207.822966][ T6358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.628'. [ 207.932694][ T4246] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 207.976830][ T4246] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 208.171687][ T4246] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 208.484462][ T4232] usb 5-1: USB disconnect, device number 12 [ 208.610024][ T4246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.625746][ T4246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 208.645675][ T4246] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 208.664627][ T4246] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 208.676507][ T4246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.706131][ T4246] usb 1-1: config 0 descriptor?? [ 208.730071][ T6372] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 208.866448][ T6389] [U] : [ 208.869235][ T6389] [U] [ 208.871900][ T6389] [U] [ 208.874568][ T6389] [U] [ 208.877440][ T6389] [U] [ 208.880103][ T6389] [U] [ 208.882763][ T6389] [U] [ 208.885424][ T6389] [U] [ 208.888155][ T6389] [U] [ 208.890820][ T6389] [U] [ 208.893482][ T6389] [U] [ 208.896138][ T6389] [U] [ 208.898885][ T6389] [U] [ 208.901547][ T6389] [U] [ 208.904206][ T6389] [U] [ 208.906862][ T6389] [U] [ 208.909610][ T6389] [U] [ 208.912274][ T6389] [U] [ 208.914940][ T6389] [U] [ 208.917613][ T6389] [U] [ 208.944824][ T6389] netlink: 132 bytes leftover after parsing attributes in process `syz.1.638'. [ 209.305341][ T6380] [U] [ 209.320014][ T4246] usbhid 1-1:0.0: can't add hid device: -71 [ 209.330124][ T6402] program syz.1.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.340307][ T6402] program syz.1.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.349613][ T6402] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 209.362946][ T6402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.644'. [ 209.390121][ T4246] usbhid: probe of 1-1:0.0 failed with error -71 [ 209.418765][ T4246] usb 1-1: USB disconnect, device number 16 [ 209.923937][ T6415] MPTCP: addr_signal error, add_addr=1, echo=0 [ 210.466782][ T6436] program syz.1.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.485208][ T6436] program syz.1.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.494631][ T6436] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 210.522829][ T6436] netlink: 36 bytes leftover after parsing attributes in process `syz.1.656'. [ 211.732455][ T6460] binder: BINDER_SET_CONTEXT_MGR already set [ 211.738639][ T6460] binder: 6452:6460 ioctl 4018620d 200000000040 returned -16 [ 211.782518][ T6460] binder: 6452:6460 ioctl c0306201 200000000240 returned -11 [ 212.691007][ T6485] tipc: Enabled bearer , priority 0 [ 212.712263][ T6485] device syzkaller0 entered promiscuous mode [ 212.745016][ T6485] tipc: Resetting bearer [ 212.769521][ T6484] tipc: Resetting bearer [ 212.806574][ T6484] tipc: Disabling bearer [ 213.157688][ T6495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.675'. [ 213.823620][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.824149][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.433800][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.599009][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.307440][ T6492] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.320101][ T6492] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.329289][ T6492] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.338445][ T6492] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.360665][ T6517] process 'syz.1.682' launched './file0' with NULL argv: empty string added [ 215.807212][ T6527] tipc: Enabled bearer , priority 0 [ 215.815405][ T6527] device syzkaller0 entered promiscuous mode [ 215.826838][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 215.846567][ T6527] tipc: Resetting bearer [ 215.856335][ T6526] tipc: Resetting bearer [ 215.894517][ T6526] tipc: Disabling bearer [ 215.972371][ T6533] kvm: pic: non byte write [ 215.986619][ T6533] kvm: vcpu 0: requested 56 ns lapic timer period limited to 200000 ns [ 216.031496][ T25] kauditd_printk_skb: 50 callbacks suppressed [ 216.031511][ T25] audit: type=1800 audit(1752734688.904:190): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.688" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 216.379810][ T1108] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 216.716654][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.692'. [ 216.749884][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.771115][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.796921][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.810418][ T1108] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.819905][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.836536][ T1108] usb 4-1: config 0 descriptor?? [ 217.154695][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060816800: rx timeout, send abort [ 217.177527][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888060816800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 217.533364][ T1108] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 217.716379][ T1108] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 217.866004][ T4221] usb 4-1: USB disconnect, device number 10 [ 217.939909][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 217.950121][ T6565] fido_id[6565]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 218.079882][ T1335] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 218.300705][ T6576] kvm: pic: non byte write [ 218.451324][ T1335] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 218.476193][ T1335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.869995][ T1335] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.883705][ T1335] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 218.893420][ T1335] usb 5-1: Product: syz [ 218.897774][ T1335] usb 5-1: Manufacturer: syz [ 218.915459][ T1335] usb 5-1: SerialNumber: syz [ 218.936282][ T1335] usb 5-1: config 0 descriptor?? [ 219.020588][ T1335] usb 5-1: selecting invalid altsetting 0 [ 220.518501][ T4221] usb 5-1: USB disconnect, device number 13 [ 220.626852][ T6620] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.838171][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 220.979853][ T1335] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 221.399851][ T1335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.426571][ T1335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.471839][ T1335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.487010][ T1335] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.498525][ T1335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.205061][ T1335] usb 3-1: config 0 descriptor?? [ 222.539943][ T6648] 9pnet_virtio: no channels available for device syz [ 222.715355][ T1335] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 222.753745][ T1335] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 223.046276][ T4221] usb 3-1: USB disconnect, device number 12 [ 224.150043][ T6660] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 224.191318][ T6660] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 227.459758][ T4246] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 227.711807][ T4221] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 227.829828][ T4246] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.902282][ T4246] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.150835][ T4221] usb 2-1: config 0 has no interfaces? [ 228.160134][ T4246] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.169195][ T4246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.214344][ T6699] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 228.309867][ T4221] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 228.336873][ T4221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.361480][ T6714] 9pnet_virtio: no channels available for device syz [ 228.414800][ T4221] usb 2-1: Product: syz [ 228.441485][ T4221] usb 2-1: Manufacturer: syz [ 228.467696][ T4221] usb 2-1: SerialNumber: syz [ 228.560436][ T4221] usb 2-1: config 0 descriptor?? [ 230.645167][ T4221] usb 2-1: USB disconnect, device number 10 [ 231.342323][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 231.890403][ T7] usb 5-1: USB disconnect, device number 14 [ 232.279930][ T4221] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 232.383045][ T6750] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 232.409135][ T6750] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 232.649845][ T4221] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 232.685812][ T4221] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 232.756328][ T4221] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.798455][ T4221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.155027][ T6772] 9pnet_virtio: no channels available for device syz [ 234.299818][ T7] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 234.459806][ T6786] binder: BINDER_SET_CONTEXT_MGR already set [ 234.474351][ T6786] binder: 6783:6786 ioctl 4018620d 200000000040 returned -16 [ 234.586930][ T4232] usb 1-1: USB disconnect, device number 17 [ 234.679901][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 234.699958][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 234.728241][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 234.762701][ T7] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 234.786302][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.823300][ T7] usb 2-1: config 0 descriptor?? [ 234.860017][ T6781] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 235.031867][ T4232] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 235.320705][ T7] aureal 0003:0755:2626.0010: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 235.349469][ T7] aureal 0003:0755:2626.0010: unknown main item tag 0x6 [ 235.367360][ T7] aureal 0003:0755:2626.0010: report_id 29495 is invalid [ 235.392119][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'. [ 235.410015][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.425131][ T7] aureal 0003:0755:2626.0010: item 0 2 1 8 parsing failed [ 235.449320][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.492783][ T7] aureal: probe of 0003:0755:2626.0010 failed with error -22 [ 235.536863][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.600233][ T7] usb 2-1: USB disconnect, device number 11 [ 235.739167][ T4232] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.779739][ T4239] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 235.818677][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.903138][ T4232] usb 1-1: config 0 descriptor?? [ 236.349866][ T4239] usb 4-1: config 0 has no interfaces? [ 236.427282][ T6806] device syzkaller1 entered promiscuous mode [ 236.650724][ T4232] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 236.739329][ T4232] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 236.799852][ T4239] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 236.816570][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.271048][ T4239] usb 4-1: Product: syz [ 238.372902][ T4239] usb 4-1: Manufacturer: syz [ 238.476805][ T4239] usb 4-1: SerialNumber: syz [ 238.660304][ T4239] usb 4-1: config 0 descriptor?? [ 239.122031][ T4239] usb 4-1: can't set config #0, error -71 [ 239.148704][ T4239] usb 4-1: USB disconnect, device number 11 [ 239.209916][ T1108] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 239.339932][ T4246] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 239.368879][ T6829] [U] : [ 239.371672][ T6829] [U] [ 239.374349][ T6829] [U] [ 239.377016][ T6829] [U] [ 239.379847][ T6829] [U] [ 239.382522][ T6829] [U] [ 239.385273][ T6829] [U] [ 239.387933][ T6829] [U] [ 239.390758][ T6829] [U] [ 239.393425][ T6829] [U] [ 239.396090][ T6829] [U] [ 239.398748][ T6829] [U] [ 239.401511][ T6829] [U] [ 239.404174][ T6829] [U] [ 239.406831][ T6829] [U] [ 239.409489][ T6829] [U] [ 239.412227][ T6829] [U] [ 239.414890][ T6829] [U] [ 239.417545][ T6829] [U] [ 239.420220][ T6829] [U] [ 239.423003][ T6829] [U] [ 239.425670][ T6829] [U] [ 239.428331][ T6829] [U] [ 239.430991][ T6829] [U] [ 239.433740][ T6829] [U] [ 239.436405][ T6829] [U] [ 239.439068][ T6829] [U] [ 239.441736][ T6829] [U] [ 239.444814][ T6829] [U] [ 239.447479][ T6829] [U] [ 239.450150][ T6829] [U] [ 239.452821][ T6829] [U] [ 239.455705][ T6829] [U] [ 239.458376][ T6829] [U] [ 239.461039][ T6829] [U] [ 239.463699][ T6829] [U] [ 239.466450][ T6829] [U] [ 239.469111][ T6829] [U] [ 239.471782][ T6829] [U] [ 239.474467][ T6829] [U] [ 239.508017][ T6829] [U] [ 239.510743][ T6829] [U] [ 239.513440][ T6829] [U] [ 239.516116][ T6829] [U] [ 239.519266][ T6829] [U] [ 239.521273][ T6830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.769'. [ 239.522145][ T6829] [U] [ 239.533814][ T6829] [U] [ 239.536483][ T6829] [U] [ 239.539617][ T6829] [U] [ 239.542301][ T6829] [U] [ 239.544971][ T6829] [U] [ 239.547636][ T6829] [U] [ 239.550409][ T6829] [U] [ 239.553079][ T6829] [U] [ 239.555746][ T6829] [U] [ 239.558407][ T6829] [U] [ 239.561181][ T6829] [U] [ 239.563848][ T6829] [U] [ 239.566506][ T6829] [U] [ 239.569167][ T6829] [U] [ 239.571919][ T6829] [U] [ 239.574585][ T6829] [U] [ 239.577248][ T6829] [U] [ 239.579912][ T6829] [U] [ 239.582775][ T6829] [U] [ 239.585439][ T6829] [U] [ 239.588099][ T6829] [U] [ 239.590866][ T6829] [U] [ 239.594185][ T6829] [U] [ 239.596848][ T6829] [U] [ 239.599505][ T6829] [U] [ 239.602166][ T6829] [U] [ 239.604936][ T6829] [U] [ 239.607610][ T6829] [U] [ 239.610282][ T6829] [U] [ 239.612939][ T6829] [U] [ 239.615713][ T6829] [U] [ 239.618374][ T6829] [U] [ 239.621033][ T6829] [U] [ 239.623691][ T6829] [U] [ 239.626459][ T6829] [U] [ 239.629130][ T6829] [U] [ 239.631804][ T6829] [U] [ 239.634469][ T6829] [U] [ 239.637215][ T6829] [U] [ 239.639884][ T6829] [U] [ 239.642561][ T6829] [U] [ 239.645224][ T6829] [U] [ 239.648296][ T6829] [U] [ 239.650975][ T6829] [U] [ 239.653649][ T6829] [U] [ 239.656309][ T6829] [U] [ 239.659053][ T6829] [U] [ 239.661715][ T6829] [U] [ 239.664378][ T6829] [U] [ 239.667036][ T6829] [U] [ 239.669826][ T6829] [U] [ 239.672486][ T6829] [U] [ 239.675145][ T6829] [U] [ 239.677803][ T6829] [U] [ 239.680698][ T6829] [U] [ 239.683371][ T6829] [U] [ 239.686201][ T6829] [U] [ 239.688859][ T6829] [U] [ 239.691626][ T6829] [U] [ 239.694286][ T6829] [U] [ 239.697096][ T6829] [U] [ 239.699796][ T6829] [U] [ 239.702537][ T6829] [U] [ 239.705196][ T6829] [U] [ 239.707859][ T6829] [U] [ 239.710518][ T6829] [U] [ 239.713281][ T6829] [U] [ 239.715941][ T6829] [U] [ 239.718612][ T6829] [U] [ 239.721280][ T6829] [U] [ 239.724119][ T6829] [U] [ 239.726785][ T6829] [U] [ 239.729446][ T6829] [U] [ 239.732103][ T6829] [U] [ 239.734859][ T6829] [U] [ 239.737533][ T6829] [U] [ 239.740203][ T6829] [U] [ 239.742861][ T6829] [U] [ 239.745872][ T6829] [U] [ 239.748539][ T6829] [U] [ 239.751210][ T6829] [U] [ 239.790199][ T1108] usb 1-1: device firmware changed [ 239.797846][ T4253] usb 1-1: USB disconnect, device number 18 [ 239.809503][ T6827] [U] [ 239.930302][ T4998] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 239.981208][ T4253] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 240.070753][ T4246] usb 2-1: config 0 has no interfaces? [ 240.182886][ T6835] [U] : [ 240.185695][ T6835] [U] [ 240.188379][ T6835] [U] [ 240.191058][ T6835] [U] [ 240.194225][ T6835] [U] [ 240.196914][ T6835] [U] [ 240.199596][ T6835] [U] [ 240.202314][ T6835] [U] [ 240.205402][ T6835] [U] [ 240.208097][ T6835] [U] [ 240.210782][ T6835] [U] [ 240.213464][ T6835] [U] [ 240.216494][ T6835] [U] [ 240.219182][ T6835] [U] [ 240.221862][ T6835] [U] [ 240.224540][ T6835] [U] [ 240.227739][ T6835] [U] [ 240.230425][ T6835] [U] [ 240.233105][ T6835] [U] [ 240.235783][ T6835] [U] [ 240.330001][ T4998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.339760][ T1335] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 240.379822][ T4253] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.403628][ T4253] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.403858][ T6833] [U] [ 240.413780][ T4998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.429763][ T4253] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 240.439614][ T4998] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.460208][ T4253] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.473503][ T4998] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.493349][ T4253] usb 1-1: config 0 descriptor?? [ 240.506024][ T4998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.520183][ T4246] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 240.533060][ T4246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.572113][ T4998] usb 3-1: config 0 descriptor?? [ 240.578653][ T4246] usb 2-1: Product: syz [ 240.588825][ T4246] usb 2-1: Manufacturer: syz [ 240.598980][ T4246] usb 2-1: SerialNumber: syz [ 240.618674][ T4246] usb 2-1: config 0 descriptor?? [ 240.742895][ T1335] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.758564][ T1335] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.781229][ T1335] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.801164][ T1335] usb 4-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 240.814213][ T6840] binder: BINDER_SET_CONTEXT_MGR already set [ 240.824798][ T1335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.824833][ T6840] binder: 6837:6840 ioctl 4018620d 200000000040 returned -16 [ 240.848396][ T1335] usb 4-1: config 0 descriptor?? [ 240.918690][ T25] audit: type=1326 audit(1752734713.784:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f95ae929 code=0x7ffc0000 [ 240.949854][ T25] audit: type=1326 audit(1752734713.814:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61f95ae929 code=0x7ffc0000 [ 240.979746][ T25] audit: type=1326 audit(1752734713.814:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f95ae929 code=0x7ffc0000 [ 241.014585][ T4253] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 241.057172][ T25] audit: type=1326 audit(1752734713.814:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f61f95ae929 code=0x7ffc0000 [ 241.057481][ T4253] hid-thrustmaster 0003:044F:B65D.0012: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 241.093441][ T4998] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 241.119286][ T4998] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 241.121744][ T25] audit: type=1326 audit(1752734713.814:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f95ae929 code=0x7ffc0000 [ 241.173137][ T4253] hid-thrustmaster 0003:044F:B65D.0012: Wrong number of endpoints? [ 241.188789][ T25] audit: type=1326 audit(1752734713.814:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61f95ad290 code=0x7ffc0000 [ 241.267187][ T25] audit: type=1326 audit(1752734713.824:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f95ae929 code=0x7ffc0000 [ 241.339257][ T1335] wacom 0003:056A:00CC.0014: hidraw2: USB HID v0.00 Device [HID 056a:00cc] on usb-dummy_hcd.3-1/input0 [ 241.364126][ T25] audit: type=1326 audit(1752734713.844:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f95ae929 code=0x7ffc0000 [ 241.400208][ C1] hid-thrustmaster 0003:044F:B65D.0012: URB to get model id failed with error -71 [ 241.410421][ T4253] usb 1-1: USB disconnect, device number 19 [ 241.439226][ T6842] fido_id[6842]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 241.478464][ T25] audit: type=1326 audit(1752734713.974:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61f95ad290 code=0x7ffc0000 [ 241.506271][ T1335] usb 3-1: USB disconnect, device number 13 [ 241.546569][ T7] usb 4-1: USB disconnect, device number 12 [ 241.632886][ T25] audit: type=1326 audit(1752734713.984:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f95ae929 code=0x7ffc0000 [ 241.670069][ T6846] fido_id[6846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 242.016981][ T6848] loop4: detected capacity change from 0 to 512 [ 242.123479][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 242.308613][ T6848] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 242.949850][ T6848] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 243.030125][ T6848] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #13: comm syz.4.774: iget: bad i_size value: 12154757448730 [ 243.164870][ T6848] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.774: couldn't read orphan inode 13 (err -117) [ 243.186724][ T6863] loop0: detected capacity change from 0 to 2048 [ 243.292030][ T6863] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.327441][ T6848] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 244.091062][ T1108] usb 2-1: USB disconnect, device number 12 [ 245.915625][ T4998] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 246.205309][ T6906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.792'. [ 246.309883][ T4998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.356775][ T4998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.373872][ T4998] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.387889][ T4998] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.397981][ T4998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.413492][ T6908] loop1: detected capacity change from 0 to 2048 [ 246.437666][ T4998] usb 5-1: config 0 descriptor?? [ 246.512881][ T6908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.686194][ T6908] UDF-fs: error (device loop1): udf_rename: directory (ino 1368) has no '..' entry [ 246.736977][ T6916] tipc: Enabled bearer , priority 0 [ 246.744925][ T6916] device syzkaller0 entered promiscuous mode [ 246.774773][ T6916] tipc: Resetting bearer [ 246.788703][ T6915] tipc: Resetting bearer [ 246.868585][ T6915] tipc: Disabling bearer [ 246.933110][ T4998] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 246.967916][ T6918] [ 246.970260][ T6918] ====================================================== [ 246.977269][ T6918] WARNING: possible circular locking dependency detected [ 246.984289][ T6918] 5.15.188-syzkaller #0 Not tainted [ 246.989476][ T6918] ------------------------------------------------------ [ 246.996486][ T6918] syz.2.798/6918 is trying to acquire lock: [ 247.002360][ T6918] ffff88802395c1c8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 247.010692][ T6918] [ 247.010692][ T6918] but task is already holding lock: [ 247.018075][ T6918] ffff8880169e6460 (sb_writers#3){.+.+}-{0:0}, at: do_sendfile+0x5b2/0xec0 [ 247.026679][ T6918] [ 247.026679][ T6918] which lock already depends on the new lock. [ 247.026679][ T6918] [ 247.037075][ T6918] [ 247.037075][ T6918] the existing dependency chain (in reverse order) is: [ 247.046151][ T6918] [ 247.046151][ T6918] -> #9 (sb_writers#3){.+.+}-{0:0}: [ 247.053511][ T6918] lo_write_bvec+0x193/0x770 [ 247.058607][ T6918] loop_process_work+0x1d62/0x2480 [ 247.064223][ T6918] process_one_work+0x863/0x1000 [ 247.069694][ T6918] worker_thread+0xaa8/0x12a0 [ 247.074890][ T6918] kthread+0x436/0x520 [ 247.079477][ T6918] ret_from_fork+0x1f/0x30 [ 247.084404][ T6918] [ 247.084404][ T6918] -> #8 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 247.093767][ T6918] process_one_work+0x7bf/0x1000 [ 247.099215][ T6918] worker_thread+0xaa8/0x12a0 [ 247.104389][ T6918] kthread+0x436/0x520 [ 247.108957][ T6918] ret_from_fork+0x1f/0x30 [ 247.113869][ T6918] [ 247.113869][ T6918] -> #7 ((wq_completion)loop1){+.+.}-{0:0}: [ 247.122102][ T6918] flush_workqueue+0x142/0x1380 [ 247.127549][ T6918] drain_workqueue+0xcf/0x380 [ 247.132732][ T6918] destroy_workqueue+0x7b/0xb20 [ 247.138080][ T6918] __loop_clr_fd+0x234/0xb90 [ 247.143166][ T6918] blkdev_put+0x53f/0x7d0 [ 247.147990][ T6918] deactivate_locked_super+0x93/0xf0 [ 247.153866][ T6918] cleanup_mnt+0x418/0x4d0 [ 247.158779][ T6918] task_work_run+0x125/0x1a0 [ 247.163863][ T6918] exit_to_user_mode_loop+0x10f/0x130 [ 247.169731][ T6918] exit_to_user_mode_prepare+0xb1/0x140 [ 247.175773][ T6918] syscall_exit_to_user_mode+0x16/0x40 [ 247.181736][ T6918] do_syscall_64+0x58/0xa0 [ 247.186668][ T6918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.193062][ T6918] [ 247.193062][ T6918] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 247.200510][ T6918] __mutex_lock_common+0x1eb/0x2390 [ 247.206211][ T6918] mutex_lock_killable_nested+0x17/0x20 [ 247.212258][ T6918] lo_open+0x6a/0x100 [ 247.216739][ T6918] blkdev_get_whole+0x90/0x390 [ 247.222001][ T6918] blkdev_get_by_dev+0x2d0/0xa60 [ 247.227442][ T6918] blkdev_open+0x12d/0x2c0 [ 247.232357][ T6918] do_dentry_open+0x7ff/0xf80 [ 247.237529][ T6918] path_openat+0x2682/0x2f30 [ 247.242615][ T6918] do_filp_open+0x1b3/0x3e0 [ 247.247620][ T6918] do_sys_openat2+0x142/0x4a0 [ 247.252794][ T6918] __x64_sys_openat+0x135/0x160 [ 247.258142][ T6918] do_syscall_64+0x4c/0xa0 [ 247.263057][ T6918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.269449][ T6918] [ 247.269449][ T6918] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 247.277244][ T6918] __mutex_lock_common+0x1eb/0x2390 [ 247.282947][ T6918] mutex_lock_nested+0x17/0x20 [ 247.288207][ T6918] bd_register_pending_holders+0x33/0x310 [ 247.294514][ T6918] device_add_disk+0x5a7/0xd40 [ 247.299778][ T6918] md_alloc+0x809/0xc00 [ 247.304431][ T6918] blk_request_module+0x26e/0x290 [ 247.309956][ T6918] blkdev_get_no_open+0x38/0x1d0 [ 247.315395][ T6918] blkdev_get_by_dev+0x77/0xa60 [ 247.320744][ T6918] swsusp_check+0x9b/0x2a0 [ 247.325657][ T6918] software_resume+0xc6/0x3b0 [ 247.330843][ T6918] resume_store+0xe4/0x130 [ 247.335756][ T6918] kernfs_fop_write_iter+0x379/0x4c0 [ 247.341543][ T6918] vfs_write+0x712/0xd00 [ 247.346282][ T6918] ksys_write+0x14d/0x250 [ 247.351107][ T6918] do_syscall_64+0x4c/0xa0 [ 247.356021][ T6918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.362419][ T6918] [ 247.362419][ T6918] -> #4 (disks_mutex){+.+.}-{3:3}: [ 247.369777][ T6918] __mutex_lock_common+0x1eb/0x2390 [ 247.375477][ T6918] mutex_lock_nested+0x17/0x20 [ 247.380743][ T6918] md_alloc+0x48/0xc00 [ 247.385306][ T6918] blk_request_module+0x26e/0x290 [ 247.390840][ T6918] blkdev_get_no_open+0x38/0x1d0 [ 247.396278][ T6918] blkdev_get_by_dev+0x77/0xa60 [ 247.401625][ T6918] swsusp_check+0x9b/0x2a0 [ 247.406542][ T6918] software_resume+0xc6/0x3b0 [ 247.411716][ T6918] resume_store+0xe4/0x130 [ 247.416714][ T6918] kernfs_fop_write_iter+0x379/0x4c0 [ 247.422498][ T6918] vfs_write+0x712/0xd00 [ 247.427240][ T6918] ksys_write+0x14d/0x250 [ 247.432065][ T6918] do_syscall_64+0x4c/0xa0 [ 247.436982][ T6918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.443385][ T6918] [ 247.443385][ T6918] -> #3 (major_names_lock){+.+.}-{3:3}: [ 247.451186][ T6918] __mutex_lock_common+0x1eb/0x2390 [ 247.456895][ T6918] mutex_lock_nested+0x17/0x20 [ 247.462164][ T6918] blk_request_module+0x31/0x290 [ 247.467601][ T6918] blkdev_get_no_open+0x38/0x1d0 [ 247.473038][ T6918] blkdev_get_by_dev+0x77/0xa60 [ 247.478387][ T6918] swsusp_check+0x9b/0x2a0 [ 247.483303][ T6918] software_resume+0xc6/0x3b0 [ 247.488479][ T6918] resume_store+0xe4/0x130 [ 247.493391][ T6918] kernfs_fop_write_iter+0x379/0x4c0 [ 247.499174][ T6918] vfs_write+0x712/0xd00 [ 247.503915][ T6918] ksys_write+0x14d/0x250 [ 247.508741][ T6918] do_syscall_64+0x4c/0xa0 [ 247.513651][ T6918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.520043][ T6918] [ 247.520043][ T6918] -> #2 (system_transition_mutex/1){+.+.}-{3:3}: [ 247.528532][ T6918] __mutex_lock_common+0x1eb/0x2390 [ 247.534229][ T6918] mutex_lock_nested+0x17/0x20 [ 247.539491][ T6918] software_resume+0x7c/0x3b0 [ 247.544666][ T6918] resume_store+0xe4/0x130 [ 247.549581][ T6918] kernfs_fop_write_iter+0x379/0x4c0 [ 247.555363][ T6918] vfs_write+0x712/0xd00 [ 247.560104][ T6918] ksys_write+0x14d/0x250 [ 247.564930][ T6918] do_syscall_64+0x4c/0xa0 [ 247.569848][ T6918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.576239][ T6918] [ 247.576239][ T6918] -> #1 (&of->mutex){+.+.}-{3:3}: [ 247.583423][ T6918] __mutex_lock_common+0x1eb/0x2390 [ 247.589122][ T6918] mutex_lock_nested+0x17/0x20 [ 247.594381][ T6918] kernfs_seq_start+0x51/0x3c0 [ 247.599728][ T6918] seq_read_iter+0x3c4/0xd50 [ 247.604818][ T6918] vfs_read+0x725/0xcf0 [ 247.609470][ T6918] ksys_read+0x14d/0x250 [ 247.614208][ T6918] do_syscall_64+0x4c/0xa0 [ 247.619125][ T6918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.625627][ T6918] [ 247.625627][ T6918] -> #0 (&p->lock){+.+.}-{3:3}: [ 247.632646][ T6918] __lock_acquire+0x2c33/0x7c60 [ 247.638014][ T6918] lock_acquire+0x197/0x3f0 [ 247.643033][ T6918] __mutex_lock_common+0x1eb/0x2390 [ 247.648747][ T6918] mutex_lock_nested+0x17/0x20 [ 247.654025][ T6918] seq_read_iter+0xad/0xd50 [ 247.659032][ T6918] generic_file_splice_read+0x3a2/0x590 [ 247.665084][ T6918] splice_direct_to_actor+0x413/0xb50 [ 247.670959][ T6918] do_splice_direct+0x1b9/0x2c0 [ 247.676317][ T6918] do_sendfile+0x5d5/0xec0 [ 247.681235][ T6918] __se_sys_sendfile64+0x13b/0x190 [ 247.686844][ T6918] do_syscall_64+0x4c/0xa0 [ 247.691933][ T6918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.698330][ T6918] [ 247.698330][ T6918] other info that might help us debug this: [ 247.698330][ T6918] [ 247.708533][ T6918] Chain exists of: [ 247.708533][ T6918] &p->lock --> (work_completion)(&lo->rootcg_work) --> sb_writers#3 [ 247.708533][ T6918] [ 247.722421][ T6918] Possible unsafe locking scenario: [ 247.722421][ T6918] [ 247.729846][ T6918] CPU0 CPU1 [ 247.735185][ T6918] ---- ---- [ 247.740527][ T6918] lock(sb_writers#3); [ 247.744666][ T6918] lock((work_completion)(&lo->rootcg_work)); [ 247.753309][ T6918] lock(sb_writers#3); [ 247.759962][ T6918] lock(&p->lock); [ 247.763745][ T6918] [ 247.763745][ T6918] *** DEADLOCK *** [ 247.763745][ T6918] [ 247.771862][ T6918] 1 lock held by syz.2.798/6918: [ 247.776772][ T6918] #0: ffff8880169e6460 (sb_writers#3){.+.+}-{0:0}, at: do_sendfile+0x5b2/0xec0 [ 247.785797][ T6918] [ 247.785797][ T6918] stack backtrace: [ 247.791670][ T6918] CPU: 1 PID: 6918 Comm: syz.2.798 Not tainted 5.15.188-syzkaller #0 [ 247.799715][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.809759][ T6918] Call Trace: [ 247.813019][ T6918] [ 247.815937][ T6918] dump_stack_lvl+0x168/0x230 [ 247.820596][ T6918] ? load_image+0x3b0/0x3b0 [ 247.825084][ T6918] ? show_regs_print_info+0x20/0x20 [ 247.830260][ T6918] ? print_circular_bug+0x12b/0x1a0 [ 247.835437][ T6918] check_noncircular+0x274/0x310 [ 247.840351][ T6918] ? add_chain_block+0x940/0x940 [ 247.845265][ T6918] ? lockdep_lock+0xdc/0x1e0 [ 247.849835][ T6918] ? __lock_acquire+0x12d9/0x7c60 [ 247.854839][ T6918] ? mark_lock+0x94/0x320 [ 247.859145][ T6918] __lock_acquire+0x2c33/0x7c60 [ 247.863978][ T6918] ? check_noncircular+0x16f/0x310 [ 247.869065][ T6918] ? verify_lock_unused+0x140/0x140 [ 247.874242][ T6918] ? add_chain_block+0x940/0x940 [ 247.879155][ T6918] ? lockdep_lock+0xdc/0x1e0 [ 247.883731][ T6918] ? verify_lock_unused+0x140/0x140 [ 247.888907][ T6918] ? lockdep_unlock+0x134/0x2d0 [ 247.893740][ T6918] ? lockdep_lock+0x1e0/0x1e0 [ 247.898393][ T6918] ? mark_lock+0x94/0x320 [ 247.902700][ T6918] ? mark_lock+0x94/0x320 [ 247.907012][ T6918] lock_acquire+0x197/0x3f0 [ 247.911495][ T6918] ? seq_read_iter+0xad/0xd50 [ 247.916148][ T6918] ? __might_sleep+0xf0/0xf0 [ 247.920717][ T6918] ? read_lock_is_recursive+0x10/0x10 [ 247.926070][ T6918] ? verify_lock_unused+0x140/0x140 [ 247.931332][ T6918] ? is_bpf_text_address+0x254/0x270 [ 247.936598][ T6918] ? seq_read_iter+0xad/0xd50 [ 247.941249][ T6918] __mutex_lock_common+0x1eb/0x2390 [ 247.946429][ T6918] ? seq_read_iter+0xad/0xd50 [ 247.951084][ T6918] ? unwind_get_return_address+0x49/0x80 [ 247.956700][ T6918] ? stack_trace_save+0xe0/0xe0 [ 247.961540][ T6918] ? arch_stack_walk+0xf2/0x140 [ 247.966371][ T6918] ? mutex_lock_io_nested+0x60/0x60 [ 247.971555][ T6918] ? rcu_lock_release+0x5/0x20 [ 247.976300][ T6918] ? __lock_acquire+0x7c60/0x7c60 [ 247.981305][ T6918] mutex_lock_nested+0x17/0x20 [ 247.986046][ T6918] seq_read_iter+0xad/0xd50 [ 247.990526][ T6918] ? memset+0x1e/0x40 [ 247.994487][ T6918] generic_file_splice_read+0x3a2/0x590 [ 248.000010][ T6918] ? splice_shrink_spd+0xc0/0xc0 [ 248.004930][ T6918] ? common_file_perm+0x171/0x1c0 [ 248.009928][ T6918] ? fsnotify_perm+0x254/0x560 [ 248.014674][ T6918] splice_direct_to_actor+0x413/0xb50 [ 248.020026][ T6918] ? do_splice_direct+0x2c0/0x2c0 [ 248.025028][ T6918] ? pipe_to_sendpage+0x310/0x310 [ 248.030028][ T6918] ? common_file_perm+0x171/0x1c0 [ 248.035030][ T6918] ? fsnotify_perm+0x5d/0x560 [ 248.039683][ T6918] ? security_file_permission+0x75/0xa0 [ 248.045248][ T6918] do_splice_direct+0x1b9/0x2c0 [ 248.050077][ T6918] ? splice_direct_to_actor+0xb50/0xb50 [ 248.055599][ T6918] ? rcu_read_lock_any_held+0xb0/0x120 [ 248.061037][ T6918] ? common_file_perm+0x171/0x1c0 [ 248.066041][ T6918] do_sendfile+0x5d5/0xec0 [ 248.070437][ T6918] ? do_pwritev+0x340/0x340 [ 248.074921][ T6918] ? __lock_acquire+0x7c60/0x7c60 [ 248.079932][ T6918] __se_sys_sendfile64+0x13b/0x190 [ 248.085022][ T6918] ? lock_chain_count+0x20/0x20 [ 248.089853][ T6918] ? __x64_sys_sendfile64+0xa0/0xa0 [ 248.095031][ T6918] ? lockdep_hardirqs_on+0x94/0x140 [ 248.100212][ T6918] do_syscall_64+0x4c/0xa0 [ 248.104604][ T6918] ? clear_bhb_loop+0x30/0x80 [ 248.109257][ T6918] ? clear_bhb_loop+0x30/0x80 [ 248.113915][ T6918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.119793][ T6918] RIP: 0033:0x7f483e191929 [ 248.124194][ T6918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.143952][ T6918] RSP: 002b:00007f483bff9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 248.152361][ T6918] RAX: ffffffffffffffda RBX: 00007f483e3b8fa0 RCX: 00007f483e191929 [ 248.160317][ T6918] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 248.168281][ T6918] RBP: 00007f483e213ca1 R08: 0000000000000000 R09: 0000000000000000 [ 248.176248][ T6918] R10: 000000000000049e R11: 0000000000000246 R12: 0000000000000000 [ 248.184214][ T6918] R13: 0000000000000000 R14: 00007f483e3b8fa0 R15: 00007ffd7f2e0638 [ 248.192185][ T6918] [ 248.212718][ T6922] loop3: detected capacity change from 0 to 256 [ 248.225574][ T4998] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 248.303073][ T4998] usb 5-1: USB disconnect, device number 15 [ 248.424432][ T6922] loop3: detected capacity change from 0 to 4096 [ 248.478728][ T6922] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.515477][ T6925] fido_id[6925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 255.481443][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.487751][ T1422] ieee802154 phy1 wpan1: encryption failed: -22