last executing test programs: 13.873607129s ago: executing program 4 (id=605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13.692493113s ago: executing program 4 (id=609): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x5, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3f19, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x80, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x9, 0x3, {0x7, 0x25, 0x1, 0x0, 0x6, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x5, 0xfa, {0x7, 0x25, 0x1, 0xc, 0x40, 0x9}}}}}}}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) 10.262536272s ago: executing program 4 (id=620): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9.377045499s ago: executing program 3 (id=623): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32, @ANYBLOB="140012800c0001006d616376746170000400028008"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9.23454845s ago: executing program 4 (id=624): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000103e9b042cbd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028005001d"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000044c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) epoll_create1(0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xe8}, @TCA_CAKE_RTT={0x8, 0x7, 0xfff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4c840) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg$alg(r3, 0x0, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000140)=""/215) 8.57862699s ago: executing program 3 (id=628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000140)="a6", 0x1, 0x24000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) 8.477377928s ago: executing program 3 (id=630): syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000006040)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090243000101000000090400001202060000"], 0x0) syz_create_resource$binfmt(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x18}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/7) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 7.674436668s ago: executing program 1 (id=635): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000280)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) syz_open_dev$vim2m(0x0, 0x3fe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) getdents64(r5, &(0x7f0000000680)=""/4067, 0xfe3) ioctl$KVM_RUN(r2, 0xae80, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000080)={&(0x7f0000001000)={[{&(0x7f0000000040), 0x0, 0x1}]}, 0x1}, 0x1) 5.664554151s ago: executing program 4 (id=640): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x149102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1200000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$802154_dgram(r2, &(0x7f00000001c0)={&(0x7f00000003c0)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14, 0x0, 0x7, 0x0, 0x0, 0x20000010}, 0x4005) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x30, 0xffffffffffffffff, 0x180000000) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r4, 0x0, 0xff2e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0xf4, 0x36, 0x107, 0x70bd2f, 0x0, {0x5, 0x7c}, [@generic="23582b14798092e83562ee364d40ebc9617b707414d04b0434a7454348846bf2b3b2ef6d3e542d79667c2e727a4ffeabf2c71cf8dfded021af5375040cdb44060caf637916af29f41c8b01db50a8640872267fd3f633f000a68bb8389b5355e61f35f6489d0e2661563bd644f5ca52bdc1720b19d7ae99c6288f72029e86c64384f57b965831b1647c691285c73ad5d984769850e7551c44b57ad04bd83fd12198602bb784d83ad25d589497b1f9f234ef2f4bb18d4abc7f174d4ce46cf05214c8b5958fd89859c0956cd47c7c310cc48805e308564cb59c26376f855c9e"]}, 0xf4}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2"], 0x0) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0106000000000000000009000000180004801300010062726f616463617374426c2ea25f75"], 0x2c}}, 0x0) 4.669603456s ago: executing program 3 (id=643): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff44, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 3.679792601s ago: executing program 1 (id=646): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.950396806s ago: executing program 3 (id=647): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6dbf}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) r3 = getpid() syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x28, 0x0, 0xffffffffffff625e, {{0x5, 0x6c2, 0x1, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x0, 0x2}) 2.729946693s ago: executing program 1 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}, "00016337fe9b1803"}}}}}, 0x0) r2 = socket(0x2b, 0x80801, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000000)=0xfffffff7, 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x11, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0xa, 0xffffffff, 0x0, 0x1f0, 0xb8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'xfrm0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@local, @private, 0x0, 0x0, 'veth0_virt_wifi\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x24}}, 0x40) 2.687289136s ago: executing program 2 (id=650): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000103e9b042cbd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028005001d"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000044c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) epoll_create1(0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xe8}, @TCA_CAKE_RTT={0x8, 0x7, 0xfff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4c840) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg$alg(r3, 0x0, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000140)=""/215) 2.686511926s ago: executing program 0 (id=651): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000480)=ANY=[], 0x50}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r2, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 2.675436547s ago: executing program 1 (id=652): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x40009}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.526465158s ago: executing program 4 (id=653): syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000006040)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090243000101000000090400001202060000"], 0x0) syz_create_resource$binfmt(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x18}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/7) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1.694550631s ago: executing program 0 (id=654): socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40940, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) alarm(0x5) 1.694072841s ago: executing program 1 (id=655): socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x8000000) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000580)}}, 0x18) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8800000010000304000f00"/20, @ANYBLOB="05220000000000002400128009000100766c616e00000000140002800c000200000000000000000004000480800b000100697036677265"], 0x88}, 0x1, 0xba01}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) shutdown(r0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 1.693867241s ago: executing program 2 (id=656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000140)="a6", 0x1, 0x24000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) 1.678056512s ago: executing program 3 (id=657): ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000000080)=""/160, 0xa0}) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500285d5c208600404003196015403010902"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000b00)) syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) ioctl$TUNSETIFF(r2, 0x400454da, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) ptrace$peeksig(0x1a, r1, 0x0, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000180)) 1.530351084s ago: executing program 2 (id=658): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket(0x10, 0x2, 0x2) syz_emit_ethernet(0xfd6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x1, 0x3, [0x3e9, 0x6b0, 0x584, 0x7f9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000380)=@mmap={0x800, 0x1, 0x4, 0x100, 0x81, {0x0, 0x2710}, {0x3, 0xc, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 732.400224ms ago: executing program 0 (id=659): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 535.392039ms ago: executing program 2 (id=660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r4 = eventfd(0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x400200) name_to_handle_at(r5, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@reiserfs_6={0x18, 0x6, {0x9, 0x9e63, 0x9, 0x8000, 0x40, 0xbc99}}, &(0x7f0000000400), 0x0) r6 = eventfd(0x1) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r7, &(0x7f0000005140)={0x2020}, 0x2020) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r7, 0x0, r8, 0x0, 0x7c1c, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) io_submit(r3, 0x7, &(0x7f0000000780)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x8, r1, &(0x7f0000000080)="d730f2e9b3b1ad4cb22235c4d1a62dd955b9f9590250bb16", 0x18, 0x8000, 0x0, 0x3, r4}, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f0000000200)="7ad1bf387b622c42c05500bb20ffe94d890880e44cfbdc4f45bcbb5374f6f534193049fa096182b86a7c365dd0c8993d0f17e89ecb6017a330d3ca64322be7e2e189842a21d8d910de8b687deb23354934815592bfae16275409c4f2329509fe3642ea28fc67187a040bd55b0dc8796b14077101d048e7fda40787285d778759f3a3b1558d585f550c60c7c4f5b93096fefd01f3b88fd158f0376b65a6c3df9c748bebdd43d873b001bef88e18fb56f6f3dcec2cc6e1c2022fec9910a8b9c084", 0xc0, 0x7, 0x0, 0x1, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000300)="ea19b629c5804f2c2f8e3c85646876467abb09f7f65677e0dc921007bd8c32f2ffa189663134a20b05017a7b294799e11dff65e6ab4053d18d4a67c1cb6833273be5d5df06630e6d1cde032d094da7", 0x4f, 0x120, 0x0, 0x0, r5}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f0000000440)="54a04352a390f00c5bb68589f3d31215e0c7d7769c1c68a239fad538620cecf5711c5a5d2b3a5864189a96631a61215c8c0d56783b01005f8a897d9f67627204550d96f8293de94c412166037bce4894418575a390db817f8dd2d0e6322cf077e3a6a8bcee5723ab71984d7c560e16eac67f36ad1a6a4d5383bae16d1149f8f4365dfbd2ce4270a49c6461a7b52a7adb90055b0090ed7f5e4831cbe174471a341bca2d619cfa88fda3ae1f84a28c", 0xae, 0xffffffffffffffff, 0x0, 0x1, r6}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x44f, r0, &(0x7f0000000540)="b7f857d3d87176e9906229e4ffd5fed8af94e4924cc8f658c819f2aae732422aa725b6336d524785acbdb078601ee3c6c1b6e60f255ff1dcdc2e826b6a32cb4f0717c4bcab0cffc574488f9d998d8c1779dd33aac90206a241a196b27c3df5532d5f3412fb35c0dbb21d4783ffc28e27c1e5a400b4bd6ae950f19ccc36", 0x7d, 0x0, 0x0, 0x3, r8}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000600)="932ad4cae499c86b16c583d7c6b2e1660b9dbc207512a9225a11576311f57df69dc541eea198ec6eadb0ce86b5c9df784163408ebbd55c7ace2bd21ba0073a355081576428175c0d48a14721866239ae4e8fdcfd8ece03db665635eebbc5c38b4a8257c55f562c351354b62241030e473a3183243cd2f418d7e36c0a649bf538fc957b069fb9caddffb62efd5b2bc215993dd79b4fe116a35d699175892a490af869ba97904c13775a6eef7549b8db55089051d81fe1e58effa83c6c52b0a3e6e77271dbbe240adaf3d4d9268211099ebf67bcd48eab849de73dcc1e0adf27cb14760c25895e168a6567fcd0e7496bdd426b", 0xf2, 0xe, 0x0, 0x1, r9}]) 396.16728ms ago: executing program 0 (id=661): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd7000053500000a000400500000000000000060001200726663343534332867636d28616573292900"/234, @ANYRES32], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 250.556451ms ago: executing program 2 (id=662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xf, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 212.509973ms ago: executing program 0 (id=663): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') preadv(r0, &(0x7f0000003900)=[{&(0x7f00000003c0)=""/124, 0x7c}], 0x1, 0x2f, 0x7ff) 105.034341ms ago: executing program 0 (id=664): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) close(0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @empty, 0x100001}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f00004e220000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 639.82µs ago: executing program 1 (id=665): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) r1 = gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000480)=ANY=[], 0x50}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r3, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 0s ago: executing program 2 (id=666): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x40009}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): omiscuous mode [ 73.430639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.439623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.481724][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.489606][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.537506][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.559041][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.571767][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.585288][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.595416][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.606270][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.619096][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.629856][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.639768][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.650337][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.663163][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.675406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.683582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.692607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.701915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.744649][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.765830][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.777167][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.814890][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.834219][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.848154][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.859608][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.871425][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.884825][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.897956][ T1457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.910978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.928547][ T1457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.947542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.962262][ T4275] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 73.974971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.997264][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.012408][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.025974][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.031425][ T26] audit: type=1804 audit(1778566382.986:2): pid=4274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1" name="/newroot/0/file1" dev="fuse" ino=1 res=1 errno=0 [ 74.062617][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.076279][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.090297][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.127519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.211422][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.219318][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.317597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.419409][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.445225][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.494234][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.547418][ T1457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.566515][ T1457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.581253][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.615488][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.841482][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 74.901962][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 74.908697][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 74.929816][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 74.948152][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 74.966242][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 74.972961][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.991035][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.030157][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.105409][ T7] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 75.146964][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.168449][ T7] usb 3-1: config 0 descriptor?? [ 75.426406][ T4281] netlink: 'syz.2.3': attribute type 11 has an invalid length. [ 75.511366][ T4281] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.901589][ T4234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.052904][ T4237] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.181192][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 77.301904][ T4237] usb 5-1: Using ep0 maxpacket: 32 [ 77.321281][ T4234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.356665][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.404450][ T4234] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 77.421402][ T4237] usb 5-1: config index 0 descriptor too short (expected 249, got 27) [ 77.442953][ T4237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.513751][ T4237] usb 5-1: config 0 has no interfaces? [ 77.538539][ T4237] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 77.563036][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.599322][ T4237] usb 5-1: config 0 descriptor?? [ 77.613861][ T4234] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 77.645041][ T4234] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 77.702275][ T4234] usb 4-1: Manufacturer: syz [ 77.741776][ T4234] usb 4-1: config 0 descriptor?? [ 77.781384][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 77.791407][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 77.851970][ T7] usb 3-1: USB disconnect, device number 2 [ 77.947634][ T4337] capability: warning: `syz.2.17' uses 32-bit capabilities (legacy support in use) [ 78.181495][ T4235] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.434176][ T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 78.442064][ T4235] usb 1-1: Using ep0 maxpacket: 16 [ 78.501460][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.561458][ T4235] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.577930][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.596364][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 78.607864][ T4235] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 78.624169][ T4235] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.711697][ T4235] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 78.725445][ T4235] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 78.738860][ T4235] usb 1-1: Manufacturer: syz [ 78.760317][ T4235] usb 1-1: config 0 descriptor?? [ 78.811555][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.981341][ T7] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 78.984761][ T4234] usb 2-1: unable to get BOS descriptor or descriptor too short [ 78.997182][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.011863][ T7] usb 3-1: Product: syz [ 79.016186][ T7] usb 3-1: Manufacturer: syz [ 79.020957][ T7] usb 3-1: SerialNumber: syz [ 79.037302][ T7] usb 3-1: config 0 descriptor?? [ 79.089105][ T7] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 79.105675][ T4235] rc_core: IR keymap rc-hauppauge not found [ 79.111781][ T4235] Registered IR keymap rc-empty [ 79.117015][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.152911][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.188027][ T4235] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 79.202306][ T4235] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 79.228511][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.264209][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.281474][ T4234] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 79.297228][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.301521][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.305893][ T4234] usb 2-1: Product: syz [ 79.317026][ T4234] usb 2-1: Manufacturer: syz [ 79.325819][ T4234] usb 2-1: SerialNumber: syz [ 79.341244][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.373376][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.401348][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.428422][ T4339] program syz.0.18 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.437762][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.450495][ T4339] Zero length message leads to an empty skb [ 79.471266][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.501368][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.541266][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 79.572872][ T4235] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 79.591875][ T4235] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 79.651693][ T4237] usb 5-1: USB disconnect, device number 2 [ 79.712029][ T23] usb 4-1: USB disconnect, device number 2 [ 79.723453][ T4344] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.753174][ T4344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.760723][ T4344] IPv6: NLM_F_CREATE should be set when creating new route [ 79.768070][ T4344] IPv6: NLM_F_CREATE should be set when creating new route [ 79.775385][ T4344] IPv6: NLM_F_CREATE should be set when creating new route [ 79.829921][ T4362] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.20'. [ 79.842733][ T7] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 79.852136][ T7] gspca_pac7302: probe of 3-1:0.0 failed with error -110 [ 80.030975][ T4367] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.054558][ T7] usb 3-1: USB disconnect, device number 3 [ 80.101545][ T4234] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 80.219428][ T4234] usb 2-1: USB disconnect, device number 2 [ 80.548999][ T4334] udevd[4334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.885718][ T1108] usb 1-1: USB disconnect, device number 2 [ 81.032872][ T4394] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.458681][ T4405] device syzkaller0 entered promiscuous mode [ 81.771799][ T4418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.42'. [ 81.821328][ T4418] netlink: 40 bytes leftover after parsing attributes in process `syz.4.42'. [ 81.851381][ T4418] netlink: 40 bytes leftover after parsing attributes in process `syz.4.42'. [ 82.849276][ T4445] device syzkaller0 entered promiscuous mode [ 83.013336][ T4454] netlink: 'syz.4.55': attribute type 3 has an invalid length. [ 83.041518][ T4454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.55'. [ 83.069758][ T4455] process 'syz.1.54' launched './file2' with NULL argv: empty string added [ 83.380472][ T4462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.56'. [ 83.419987][ T4462] netlink: 40 bytes leftover after parsing attributes in process `syz.4.56'. [ 83.456650][ T4462] netlink: 40 bytes leftover after parsing attributes in process `syz.4.56'. [ 83.951254][ T4473] syz.4.59 uses obsolete (PF_INET,SOCK_PACKET) [ 84.004177][ T4477] binder: 4476:4477 ioctl c0306201 200000000300 returned -14 [ 84.015303][ T4473] netlink: 'syz.4.59': attribute type 2 has an invalid length. [ 84.277931][ T4485] binder: 4480:4485 ioctl c0306201 0 returned -14 [ 84.329753][ T4481] binder: 4480:4481 ioctl c0306201 0 returned -14 [ 84.631304][ T4234] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.805967][ T4492] capability: warning: `syz.1.66' uses deprecated v2 capabilities in a way that may be insecure [ 85.021356][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.031703][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 85.042842][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.055839][ T4234] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 85.071294][ T4495] device syzkaller0 entered promiscuous mode [ 85.071810][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.126690][ T4234] usb 5-1: config 0 descriptor?? [ 85.141226][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.401690][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 85.416000][ T4497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.68'. [ 85.418686][ T4487] kernel profiling enabled (shift: 3) [ 85.521387][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.535538][ T4383] syz.2.25 (4383): drop_caches: 3 [ 85.557370][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.589644][ T4499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 85.595346][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.661172][ T4499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.70'. [ 85.680834][ T1108] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.712446][ T4503] binder_alloc: 4502: binder_alloc_buf, no vma [ 85.735403][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.776159][ T1108] usb 2-1: config 0 descriptor?? [ 86.027141][ T4492] trusted_key: encrypted_key: insufficient parameters specified [ 86.185380][ T23] usb 5-1: USB disconnect, device number 3 [ 86.321272][ T1108] usbhid 2-1:0.0: can't add hid device: -71 [ 86.327351][ T1108] usbhid: probe of 2-1:0.0 failed with error -71 [ 86.359200][ T1108] usb 2-1: USB disconnect, device number 3 [ 86.656314][ T1324] cfg80211: failed to load regulatory.db [ 86.864487][ T4537] __nla_validate_parse: 2 callbacks suppressed [ 86.864504][ T4537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 86.896388][ T4537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.84'. [ 86.910104][ T4537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.84'. [ 87.231732][ T4557] netlink: 32 bytes leftover after parsing attributes in process `syz.2.91'. [ 87.341318][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.404519][ T4561] binder_alloc: 4560: binder_alloc_buf, no vma [ 87.446836][ T26] audit: type=1804 audit(1778566396.406:3): pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.93" name="/newroot/10/file1" dev="fuse" ino=1 res=1 errno=0 [ 87.601263][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 87.722372][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.741917][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 87.911399][ T1324] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.311913][ T1324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.372752][ T1324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 88.516171][ T1324] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.677221][ T1324] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 88.787279][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.795758][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.795823][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 88.795844][ T23] usb 2-1: SerialNumber: syz [ 88.877886][ T23] usb 2-1: bad CDC descriptors [ 88.926981][ T1324] usb 3-1: config 0 descriptor?? [ 88.950272][ T4596] netlink: 32 bytes leftover after parsing attributes in process `syz.4.103'. [ 89.248178][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.261502][ T26] audit: type=1804 audit(1778566398.226:4): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.107" name="/newroot/21/file1" dev="fuse" ino=1 res=1 errno=0 [ 89.304660][ T4193] usb 3-1: USB disconnect, device number 4 [ 89.457392][ T4611] fuse: Bad value for 'fd' [ 89.571207][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 89.711402][ T23] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 89.725234][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.747689][ T23] usb 1-1: config 0 descriptor?? [ 90.021637][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 90.039729][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 90.071814][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 90.091487][ T23] usb 1-1: media controller created [ 90.132962][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.231600][ T23] az6027: usb out operation failed. (-71) [ 90.263569][ T23] az6027: usb out operation failed. (-71) [ 90.270014][ T23] stb0899_attach: Driver disabled by Kconfig [ 90.276499][ T23] az6027: no front-end attached [ 90.276499][ T23] [ 90.311282][ T23] az6027: usb out operation failed. (-71) [ 90.319304][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 90.328668][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 90.377969][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 90.392187][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 90.406592][ T23] usb 1-1: USB disconnect, device number 4 [ 90.458180][ T4237] usb 2-1: USB disconnect, device number 4 [ 90.578456][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 90.671240][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.738515][ T4630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.116'. [ 90.931271][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 91.005444][ T26] audit: type=1804 audit(1778566399.966:5): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.119" name="/newroot/31/file1" dev="fuse" ino=1 res=1 errno=0 [ 91.054920][ T4647] fuse: Bad value for 'fd' [ 91.147416][ T1108] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.311052][ T4657] syz.0.126 sent an empty control message without MSG_MORE. [ 91.366634][ T4659] netlink: 32 bytes leftover after parsing attributes in process `syz.0.127'. [ 91.451562][ T1108] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 91.460675][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.470912][ T1108] usb 4-1: Product: syz [ 91.475218][ T1108] usb 4-1: Manufacturer: syz [ 91.479910][ T1108] usb 4-1: SerialNumber: syz [ 91.863659][ T1108] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 91.877636][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061484000: rx timeout, send abort [ 91.891311][ T1108] gspca_vc032x: reg_w err -71 [ 91.896059][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.906370][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.917372][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.934513][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.944756][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.972305][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.984688][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.995830][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.008412][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.032298][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.047943][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.060304][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.071643][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.077554][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.088464][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.094227][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.099557][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.114718][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.120152][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 92.133535][ T1108] gspca_vc032x: Unknown sensor... [ 92.139079][ T1108] vc032x: probe of 4-1:12.0 failed with error -22 [ 92.165349][ T1108] usb 4-1: USB disconnect, device number 3 [ 93.002820][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061486800: rx timeout, send abort [ 93.011222][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061484000: abort rx timeout. Force session deactivation [ 93.115530][ T4684] netlink: 48 bytes leftover after parsing attributes in process `syz.2.136'. [ 93.164593][ T4688] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.183943][ T4686] netlink: 32 bytes leftover after parsing attributes in process `syz.4.138'. [ 93.274109][ T26] audit: type=1804 audit(1778566402.236:6): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.137" name="/newroot/39/file1" dev="fuse" ino=1 res=1 errno=0 [ 93.481164][ T1324] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.511456][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061486800: abort rx timeout. Force session deactivation [ 93.641351][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.851614][ T1324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.874109][ T1324] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 93.891319][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 93.907119][ T1324] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 93.931793][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.975098][ T1324] usb 2-1: config 0 descriptor?? [ 94.011439][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.037612][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.061582][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.083189][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 94.134402][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.351420][ T7] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 94.369654][ T7] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 94.409566][ T7] usb 5-1: Manufacturer: syz [ 94.459077][ T7] usb 5-1: config 0 descriptor?? [ 94.563489][ T1324] Bluetooth: Can't get state to change to load configuration err [ 94.579309][ T1324] Bluetooth: Loading sysconfig file failed [ 94.599622][ T1324] ath3k: probe of 2-1:0.0 failed with error -16 [ 94.625157][ T1324] usb 2-1: USB disconnect, device number 5 [ 94.801519][ T4235] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 95.131279][ T7] rc_core: IR keymap rc-hauppauge not found [ 95.137277][ T7] Registered IR keymap rc-empty [ 95.172129][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 95.202289][ T4699] program syz.4.143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.241499][ T4235] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.252470][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 95.303439][ T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 95.372835][ C0] ODEBUG: Out of memory. ODEBUG disabled [ 96.221930][ T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 96.248909][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 96.341409][ T4235] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 96.362389][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.395971][ T4235] usb 1-1: Product: syz [ 96.401837][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 96.418756][ T4235] usb 1-1: Manufacturer: syz [ 96.449042][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 96.462026][ T4235] usb 1-1: SerialNumber: syz [ 96.491223][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 96.498648][ T4235] usb 1-1: config 0 descriptor?? [ 96.531210][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 96.581289][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 96.605104][ T4235] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 96.630544][ T4235] dvb-usb: bulk message failed: -22 (3/0) [ 96.636727][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 96.681250][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 96.690276][ T4235] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 96.721386][ T4235] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 96.733018][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 96.753823][ T4235] usb 1-1: media controller created [ 96.760749][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.769554][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 96.832284][ T7] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 96.853046][ T4235] dvb-usb: bulk message failed: -22 (6/0) [ 96.859147][ T4235] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 96.871497][ T7] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 96.923833][ T7] usb 5-1: USB disconnect, device number 4 [ 96.982396][ T4235] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 97.015144][ T4235] dvb-usb: schedule remote query interval to 150 msecs. [ 97.044386][ T4235] dvb-usb: bulk message failed: -22 (3/0) [ 97.091147][ T4235] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 97.202787][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 97.209038][ T7] dvb-usb: error while querying for an remote control event. [ 97.411184][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 97.417012][ T7] dvb-usb: error while querying for an remote control event. [ 97.434724][ T4738] netlink: 48 bytes leftover after parsing attributes in process `syz.4.151'. [ 97.504461][ T4740] netlink: 'syz.3.152': attribute type 39 has an invalid length. [ 97.601287][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 97.607880][ T7] dvb-usb: error while querying for an remote control event. [ 97.620179][ T4742] netlink: 32 bytes leftover after parsing attributes in process `syz.4.153'. [ 97.781218][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 97.787538][ T7] dvb-usb: error while querying for an remote control event. [ 97.971299][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 97.977404][ T4235] dvb-usb: error while querying for an remote control event. [ 98.161318][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 98.167320][ T4235] dvb-usb: error while querying for an remote control event. [ 98.232492][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.351231][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 98.357043][ T4235] dvb-usb: error while querying for an remote control event. [ 98.511174][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 98.542294][ T4237] dvb-usb: bulk message failed: -22 (1/0) [ 98.560873][ T4237] dvb-usb: error while querying for an remote control event. [ 98.631475][ T7] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 98.671291][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.801372][ T4237] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.306671][ T7] usb 4-1: config 0 descriptor?? [ 99.364954][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 99.371282][ T4235] dvb-usb: error while querying for an remote control event. [ 99.539709][ T4235] dvb-usb: bulk message failed: -22 (1/0) [ 99.545675][ T4235] dvb-usb: error while querying for an remote control event. [ 99.561184][ T4237] usb 5-1: Using ep0 maxpacket: 16 [ 99.621408][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 99.642565][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.681505][ T4237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.692198][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 99.710304][ T7] usb 4-1: media controller created [ 99.716139][ T4768] netlink: 48 bytes leftover after parsing attributes in process `syz.1.163'. [ 99.716175][ T4237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.749644][ T4193] usb 1-1: USB disconnect, device number 5 [ 99.810175][ T4237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 99.822839][ T4748] dvb-usb: bulk message failed: -22 (24/0) [ 99.834786][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.864337][ T4237] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 99.899740][ T4237] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.915576][ T4193] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 99.923651][ T7] az6027: usb out operation failed. (-71) [ 99.961370][ T7] az6027: usb out operation failed. (-71) [ 99.967666][ T7] stb0899_attach: Driver disabled by Kconfig [ 99.983468][ T7] az6027: no front-end attached [ 99.983468][ T7] [ 100.021392][ T7] az6027: usb out operation failed. (-71) [ 100.027175][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 100.035913][ T4237] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 100.049896][ T4237] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 100.076308][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 100.101317][ T4237] usb 5-1: Manufacturer: syz [ 100.120771][ T4237] usb 5-1: config 0 descriptor?? [ 100.134061][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 100.142407][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 100.168314][ T7] usb 4-1: USB disconnect, device number 4 [ 100.186343][ T4776] netlink: 32 bytes leftover after parsing attributes in process `syz.1.166'. [ 100.220960][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 100.511209][ T4237] rc_core: IR keymap rc-hauppauge not found [ 100.517267][ T4237] Registered IR keymap rc-empty [ 100.522318][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 100.563561][ T4782] netlink: 164 bytes leftover after parsing attributes in process `syz.3.168'. [ 100.591329][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 100.631945][ T4237] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 100.674393][ T4237] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 100.698934][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 100.733197][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 100.771272][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 100.801289][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 100.809170][ T4759] program syz.4.160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.851239][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 100.882330][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 100.911301][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 100.936418][ T4796] binder: 4793:4796 unknown command 1074553619 [ 100.942922][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 101.001274][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 101.021340][ T4796] binder: 4793:4796 ioctl c0306201 200000000540 returned -22 [ 101.023891][ T4803] binder: 4793:4803 unknown command 1074291477 [ 101.051238][ T4803] binder: 4793:4803 ioctl c0306201 200000000640 returned -22 [ 101.061231][ T4237] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 101.106880][ T4237] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 101.130099][ T4237] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 101.221359][ T4807] fuse: Unknown parameter '0x0000000000000003' [ 101.277842][ T7] usb 5-1: USB disconnect, device number 5 [ 101.531433][ T4237] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.654523][ T4813] netlink: 32 bytes leftover after parsing attributes in process `syz.3.177'. [ 101.781348][ T4237] usb 1-1: Using ep0 maxpacket: 16 [ 101.874618][ T4826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.182'. [ 101.898020][ T4826] netlink: 40 bytes leftover after parsing attributes in process `syz.4.182'. [ 101.907808][ T4237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.923111][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.944085][ T4828] device syzkaller0 entered promiscuous mode [ 101.951190][ T4826] netlink: 40 bytes leftover after parsing attributes in process `syz.4.182'. [ 101.958979][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.997344][ T4237] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.023496][ T4237] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.113903][ T4237] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 102.131333][ T4237] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 102.145167][ T4237] usb 1-1: Manufacturer: syz [ 102.178000][ T4237] usb 1-1: config 0 descriptor?? [ 102.310201][ T4846] netlink: 32 bytes leftover after parsing attributes in process `syz.4.189'. [ 102.472175][ T4854] ======================================================= [ 102.472175][ T4854] WARNING: The mand mount option has been deprecated and [ 102.472175][ T4854] and is ignored by this kernel. Remove the mand [ 102.472175][ T4854] option from the mount to silence this warning. [ 102.472175][ T4854] ======================================================= [ 102.541278][ T4237] rc_core: IR keymap rc-hauppauge not found [ 102.547496][ T4237] Registered IR keymap rc-empty [ 102.552841][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.589353][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.635488][ T4859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.194'. [ 102.649951][ T4237] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 102.707176][ T4237] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 102.745924][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.791218][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.826881][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.861332][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.911334][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.961016][ T26] audit: type=1326 audit(1778566411.916:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.198" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240c2d3dd9 code=0x7ffc0000 [ 102.985115][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.016742][ T26] audit: type=1326 audit(1778566411.916:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.198" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f240c2d3dd9 code=0x7ffc0000 [ 103.042075][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.052289][ T4874] syz.2.198 (4874): /proc/4870/oom_adj is deprecated, please use /proc/4870/oom_score_adj instead. [ 103.091293][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.141239][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.181274][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.197726][ T26] audit: type=1326 audit(1778566411.916:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.198" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240c2d3dd9 code=0x7ffc0000 [ 103.216384][ T4237] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 103.231870][ T4237] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 103.250714][ T26] audit: type=1326 audit(1778566411.916:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.198" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240c2d3dd9 code=0x7ffc0000 [ 103.285754][ T4237] usb 1-1: USB disconnect, device number 6 [ 103.330159][ T4880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.200'. [ 103.339403][ T26] audit: type=1326 audit(1778566411.966:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.198" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f240c2d3dd9 code=0x7ffc0000 [ 103.416995][ T26] audit: type=1326 audit(1778566411.966:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.198" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240c2d3dd9 code=0x7ffc0000 [ 103.451274][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 103.490181][ T26] audit: type=1326 audit(1778566411.966:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.198" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240c2d3dd9 code=0x7ffc0000 [ 103.567894][ T26] audit: type=1326 audit(1778566411.966:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.198" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240c2d3dd9 code=0x7ffc0000 [ 103.658798][ T26] audit: type=1326 audit(1778566411.966:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.198" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240c2d3dd9 code=0x7ffc0000 [ 104.041996][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.062905][ T26] audit: type=1326 audit(1778566411.966:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.2.198" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f240c2d3dd9 code=0x7ffc0000 [ 104.143557][ T23] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 104.384589][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.612208][ T23] usb 2-1: config 0 descriptor?? [ 104.671984][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 104.921083][ C0] sched: RT throttling activated [ 105.177466][ T4903] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.683028][ T4897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.851739][ T4234] usb 2-1: USB disconnect, device number 6 [ 107.048268][ T4923] fuse: Unknown parameter '0x0000000000000003' [ 107.076468][ T4928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.212'. [ 107.104949][ T4931] binder: BINDER_SET_CONTEXT_MGR already set [ 107.131463][ T4931] binder: 4930:4931 ioctl 4018620d 200000000040 returned -16 [ 107.308745][ T1324] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.421126][ T4237] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.801229][ T4237] usb 1-1: Using ep0 maxpacket: 16 [ 107.871391][ T1324] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 107.889429][ T1324] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 107.908779][ T1324] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.915817][ T1324] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 107.931798][ T4237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.947632][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.960981][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.987097][ T1324] usb 4-1: config 0 descriptor?? [ 107.997827][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 108.008871][ T4237] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 108.021617][ T4926] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.057991][ T4237] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.873176][ T1324] hid (null): report_id 0 is invalid [ 109.878709][ T4237] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 109.902030][ T4237] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 109.915134][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 109.930654][ T4237] usb 1-1: Manufacturer: syz [ 109.939135][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 109.954081][ T4237] usb 1-1: config 0 descriptor?? [ 109.983422][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 110.013053][ T4237] usb 1-1: can't set config #0, error -71 [ 110.027346][ T4237] usb 1-1: USB disconnect, device number 7 [ 110.068945][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 110.131335][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0xd [ 110.164650][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 110.524987][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 110.535466][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.272952][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.280003][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.287058][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.294074][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.301855][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.308858][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.316874][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.336304][ T4966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.227'. [ 111.359140][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.390202][ T4971] binder: BINDER_SET_CONTEXT_MGR already set [ 111.401220][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.411418][ T4959] vxcan1: MTU too low for tipc bearer [ 111.417103][ T4959] tipc: Enabling of bearer rejected, failed to enable media [ 111.444531][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.461812][ T4971] binder: 4970:4971 ioctl 4018620d 200000000040 returned -16 [ 111.489759][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.549795][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.597277][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.619144][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.628797][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 111.639438][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.190156][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.197823][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.223262][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.236057][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.244857][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.258892][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.267795][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.292336][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.316225][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.343497][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.366866][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.380093][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.390607][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.404401][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.412220][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.419339][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.431583][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.501442][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.526751][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.546774][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.560110][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.579471][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.588105][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.600716][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.609566][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.623550][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.630872][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.645302][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.653325][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.660349][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.669939][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.683316][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.690700][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.705844][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.715685][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.726652][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.737723][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 112.748674][ T1324] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x1 [ 112.758384][ T1324] lg-g15 0003:046D:0A07.0001: report_id 0 is invalid [ 112.768966][ T1324] lg-g15 0003:046D:0A07.0001: item 0 1 1 8 parsing failed [ 112.779505][ T1324] lg-g15: probe of 0003:046D:0A07.0001 failed with error -22 [ 112.809743][ T1324] usb 4-1: USB disconnect, device number 5 [ 113.221250][ T2305] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.231385][ T4252] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x42 [ 113.491161][ T2305] usb 5-1: Using ep0 maxpacket: 8 [ 113.522821][ T5015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.243'. [ 113.546754][ T4234] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.611334][ T2305] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 113.619590][ T2305] usb 5-1: config 0 has no interface number 0 [ 113.653594][ T2305] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 113.681166][ T2305] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 113.700339][ T2305] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 113.713285][ T2305] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.331692][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.610869][ T4234] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 114.650483][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.684732][ T4234] usb 2-1: Product: syz [ 114.688979][ T4234] usb 2-1: Manufacturer: syz [ 114.710923][ T5027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 114.724458][ T4234] usb 2-1: SerialNumber: syz [ 114.740684][ T5027] netlink: 40 bytes leftover after parsing attributes in process `syz.4.248'. [ 114.749972][ T2305] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 114.763812][ T2305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.782629][ T5027] netlink: 40 bytes leftover after parsing attributes in process `syz.4.248'. [ 114.794354][ T2305] usb 5-1: Product: syz [ 114.801320][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.812991][ T4234] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 114.821863][ T2305] usb 5-1: config 0 descriptor?? [ 114.832927][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 114.851656][ T2305] usb 5-1: can't set config #0, error -71 [ 114.857645][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.876493][ T2305] usb 5-1: USB disconnect, device number 6 [ 114.901203][ T23] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 114.930725][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.958918][ T23] usb 4-1: config 0 descriptor?? [ 115.611475][ T4234] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 115.614924][ T2305] usb 4-1: USB disconnect, device number 6 [ 115.778746][ T5047] binder: BINDER_SET_CONTEXT_MGR already set [ 115.785196][ T5047] binder: 5044:5047 ioctl 4018620d 200000000040 returned -16 [ 116.273291][ T23] usb 2-1: USB disconnect, device number 7 [ 116.555352][ T5062] fuse: Bad value for 'fd' [ 116.731347][ T4234] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 116.739054][ T4234] ath9k_htc: Failed to initialize the device [ 116.759956][ T23] usb 2-1: ath9k_htc: USB layer deinitialized [ 116.776501][ T5067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'. [ 116.785672][ T5067] netlink: 40 bytes leftover after parsing attributes in process `syz.3.261'. [ 116.795117][ T5067] netlink: 40 bytes leftover after parsing attributes in process `syz.3.261'. [ 116.951653][ T5073] device syzkaller0 entered promiscuous mode [ 118.075883][ T5036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.215756][ T5081] rtc_cmos 00:00: Alarms can be up to one day in the future [ 118.238521][ T5082] binder: BINDER_SET_CONTEXT_MGR already set [ 118.267590][ T5082] binder: 5080:5082 ioctl 4018620d 200000000040 returned -16 [ 118.450322][ T5094] netlink: 14 bytes leftover after parsing attributes in process `syz.3.272'. [ 118.728868][ T5105] netlink: 32 bytes leftover after parsing attributes in process `syz.3.275'. [ 118.835310][ T5109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'. [ 118.873211][ T5111] tipc: Started in network mode [ 118.878813][ T5111] tipc: Node identity e671a5f2be36, cluster identity 4711 [ 118.902832][ T5109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.278'. [ 118.912881][ T2305] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 118.933533][ T5109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.278'. [ 118.943607][ T5111] tipc: Enabled bearer , priority 0 [ 118.950536][ T5116] device syzkaller0 entered promiscuous mode [ 118.962392][ T4234] rtc_cmos 00:00: Alarms can be up to one day in the future [ 118.971657][ T5110] tipc: Resetting bearer [ 118.983492][ T4234] rtc_cmos 00:00: Alarms can be up to one day in the future [ 118.995998][ T4234] rtc_cmos 00:00: Alarms can be up to one day in the future [ 119.006888][ T4234] rtc_cmos 00:00: Alarms can be up to one day in the future [ 119.015681][ T4234] rtc rtc0: __rtc_set_alarm: err=-22 [ 119.023812][ T5110] tipc: Disabling bearer [ 119.030452][ T26] audit: type=1804 audit(1778566427.986:17): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.279" name="/newroot/50/file1" dev="fuse" ino=1 res=1 errno=0 [ 119.106979][ T5122] binder: BINDER_SET_CONTEXT_MGR already set [ 119.121338][ T5122] binder: 5121:5122 ioctl 4018620d 200000000040 returned -16 [ 119.178077][ T5125] fuse: Unknown parameter '0x0000000000000003' [ 119.184680][ T2305] usb 5-1: Using ep0 maxpacket: 16 [ 119.321573][ T2305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.332347][ T2305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.344005][ T2305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.354215][ T2305] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 119.363668][ T2305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.374291][ T2305] usb 5-1: config 0 descriptor?? [ 119.487075][ T5134] netlink: 32 bytes leftover after parsing attributes in process `syz.2.287'. [ 119.506001][ T4237] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.544924][ T4235] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 119.624456][ T5102] netlink: 'syz.4.274': attribute type 11 has an invalid length. [ 119.632416][ T5102] netlink: 140 bytes leftover after parsing attributes in process `syz.4.274'. [ 119.781308][ T4237] usb 4-1: Using ep0 maxpacket: 32 [ 119.801248][ T4235] usb 1-1: Using ep0 maxpacket: 16 [ 119.844960][ T5144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 119.854343][ T5144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.291'. [ 119.864174][ T5144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.291'. [ 119.869753][ T5102] af_packet: tpacket_rcv: packet too big, clamped from 5172 to 3952. macoff=96 [ 119.911592][ T4237] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.921828][ T4237] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.935576][ T4235] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.946324][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.957734][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.967704][ T4235] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 119.979085][ T4235] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.031573][ T4237] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.043062][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 120.077747][ T4235] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 120.086959][ T4237] usb 4-1: SerialNumber: syz [ 120.095090][ T4235] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 120.116111][ T4235] usb 1-1: Manufacturer: syz [ 120.129847][ T4235] usb 1-1: config 0 descriptor?? [ 120.181138][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 120.211110][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 120.221101][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 120.231099][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 120.241106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 120.251108][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 120.261106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 120.271106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 120.281105][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 120.291105][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 121.717675][ T4237] usb 4-1: bad CDC descriptors [ 122.131495][ T2305] usbhid 5-1:0.0: can't add hid device: -71 [ 122.138661][ T2305] usbhid: probe of 5-1:0.0 failed with error -71 [ 122.513071][ T2305] usb 5-1: USB disconnect, device number 7 [ 123.080522][ T4235] rc_core: IR keymap rc-hauppauge not found [ 123.093757][ T4235] Registered IR keymap rc-empty [ 123.103775][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.161337][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.185672][ T5169] IPVS: Error connecting to the multicast addr [ 123.212151][ T4235] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 123.282135][ T5173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.298'. [ 123.296729][ T4235] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 123.389587][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.451324][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.491736][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.582595][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.641499][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.681367][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.731255][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.756785][ T5180] tipc: Started in network mode [ 123.762236][ T5180] tipc: Node identity 3e7cbd641798, cluster identity 4711 [ 123.769600][ T5180] tipc: Enabled bearer , priority 0 [ 123.777321][ T5180] device syzkaller0 entered promiscuous mode [ 123.797118][ T5179] tipc: Resetting bearer [ 123.801960][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.844203][ T5179] tipc: Disabling bearer [ 123.851398][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.969948][ T4235] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.977226][ T4237] usb 4-1: USB disconnect, device number 7 [ 124.012269][ T4235] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 124.029631][ T4235] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 124.040014][ T5186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 124.082172][ T4235] usb 1-1: USB disconnect, device number 8 [ 124.099005][ T5186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.302'. [ 124.134041][ T5192] device syzkaller0 entered promiscuous mode [ 124.163571][ T5186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.302'. [ 124.348698][ T5201] fuse: Unknown parameter '0x0000000000000003' [ 124.561284][ T4237] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.652121][ T4234] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 124.747295][ T5208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.309'. [ 124.801189][ T4237] usb 2-1: Using ep0 maxpacket: 16 [ 124.901331][ T5217] tipc: Enabled bearer , priority 0 [ 124.908826][ T5217] device syzkaller0 entered promiscuous mode [ 124.921323][ T4237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.934355][ T5217] tipc: Resetting bearer [ 124.940361][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.953020][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.970578][ T4237] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 124.980270][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.004618][ T4237] usb 2-1: config 0 descriptor?? [ 125.025879][ T5214] tipc: Resetting bearer [ 125.060583][ T5214] tipc: Disabling bearer [ 125.121251][ T4234] usb 1-1: Using ep0 maxpacket: 16 [ 125.293406][ T4234] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.336978][ T5197] netlink: 'syz.1.305': attribute type 11 has an invalid length. [ 125.424779][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.526633][ T5197] netlink: 140 bytes leftover after parsing attributes in process `syz.1.305'. [ 125.647332][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 125.772551][ T4234] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 125.897488][ T4234] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.031557][ T4234] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 126.054866][ T4234] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 126.075888][ T4234] usb 1-1: Manufacturer: syz [ 126.094748][ T5231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 126.114633][ T4234] usb 1-1: config 0 descriptor?? [ 126.127847][ T5231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.316'. [ 126.141312][ T5231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.316'. [ 126.481370][ T4234] rc_core: IR keymap rc-hauppauge not found [ 126.487552][ T4234] Registered IR keymap rc-empty [ 126.493043][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.521272][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.564215][ T4234] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 126.579575][ T4234] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 126.596518][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.641463][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.683369][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.691205][ T1324] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.721309][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.752170][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.792815][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.831337][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.861352][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.891320][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.933752][ T4234] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.962364][ T4234] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 126.973890][ T4234] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 126.995726][ T4234] usb 1-1: USB disconnect, device number 9 [ 127.051356][ T1324] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 127.059520][ T1324] usb 5-1: config 0 has no interface number 0 [ 127.075302][ T1324] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.090945][ T5248] netlink: 32 bytes leftover after parsing attributes in process `syz.3.321'. [ 127.241510][ T1324] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 127.255428][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.265595][ T1324] usb 5-1: Product: syz [ 127.269885][ T1324] usb 5-1: Manufacturer: syz [ 127.279365][ T1324] usb 5-1: SerialNumber: syz [ 127.288576][ T1324] usb 5-1: config 0 descriptor?? [ 127.360101][ T1324] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 127.421186][ T23] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 127.431405][ T4237] usbhid 2-1:0.0: can't add hid device: -71 [ 127.437416][ T4237] usbhid: probe of 2-1:0.0 failed with error -71 [ 127.459983][ T4237] usb 2-1: USB disconnect, device number 8 [ 127.501862][ T5255] tipc: Enabled bearer , priority 0 [ 127.509878][ T5255] device syzkaller0 entered promiscuous mode [ 127.530025][ T5255] tipc: Resetting bearer [ 127.539659][ T5254] tipc: Resetting bearer [ 127.555460][ T1108] usb 5-1: USB disconnect, device number 8 [ 127.560268][ T5252] kvm: pic: non byte write [ 127.579498][ T1108] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 127.613431][ T5254] tipc: Disabling bearer [ 127.784343][ T26] audit: type=1804 audit(1778566436.746:18): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.325" name="/newroot/65/file1" dev="fuse" ino=1 res=1 errno=0 [ 127.846700][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 127.929038][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 128.026942][ T23] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 132, changing to 4 [ 128.180462][ T5283] fuse: Unknown parameter '0x0000000000000003' [ 128.231403][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 128.240638][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.249298][ T23] usb 4-1: Product: 㬍꭫䁏缥灟䕷䷃ꈿꝬ彺쑬蝻ᨾ짦ʥ␸돒渘㽧软䏉羒լ׳謼畂植㔶鼶㲇蝘ྈ浇쌙紳݀䀕䰂ꛨ쭍˄䆂꜊뽻똵责璕냈䓩ᡜᜃ尗᜜㦰︴ퟁꪜᶘ⚒봥腒㥨ᜥﷲጹ虻໶빬쐍໹삑䬃ㆣᶨ櫫杅泫饲䯠┈䎔謱濵鶱ᚙ侻늪瘠ⶱ녓驇⭼惂₿ [ 128.281383][ T23] usb 4-1: Manufacturer: Ј [ 128.286017][ T23] usb 4-1: SerialNumber: syz [ 128.491219][ T4234] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.710882][ T5291] tipc: Started in network mode [ 128.716058][ T5291] tipc: Node identity 12ff70ae014c, cluster identity 4711 [ 128.723404][ T5291] tipc: Enabled bearer , priority 0 [ 128.730937][ T5291] device syzkaller0 entered promiscuous mode [ 128.755058][ T5291] tipc: Resetting bearer [ 128.761251][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 128.773001][ T5289] tipc: Resetting bearer [ 128.800625][ T5289] tipc: Disabling bearer [ 128.849153][ T5297] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.921656][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.955994][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.984362][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 129.001592][ T4234] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 129.029199][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.087024][ T5310] __nla_validate_parse: 3 callbacks suppressed [ 129.087041][ T5310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 129.120052][ T5310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.341'. [ 129.141216][ T5310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.341'. [ 129.155335][ T4234] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 129.170228][ T4234] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 129.181370][ T4234] usb 5-1: Manufacturer: syz [ 129.189325][ T4234] usb 5-1: config 0 descriptor?? [ 129.198373][ T23] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 129.217982][ T23] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 129.240692][ T23] usb 4-1: USB disconnect, device number 8 [ 129.411188][ T1108] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 129.485700][ T4305] udevd[4305]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.551332][ T4234] rc_core: IR keymap rc-hauppauge not found [ 129.557634][ T4234] Registered IR keymap rc-empty [ 129.562764][ T4234] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.603335][ T4234] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.641878][ T4234] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 129.661165][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 129.678157][ T4234] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 129.695924][ T4234] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.733128][ T4234] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.901733][ T4234] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.941429][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.952435][ T4234] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.976718][ T1108] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.051237][ T4234] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.101649][ T4234] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.151407][ T4234] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.191382][ T4234] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.232912][ T1108] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.232961][ T4234] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.282147][ T4234] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.310664][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 130.340006][ T4234] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 130.385107][ T4234] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 130.399420][ T1108] usb 1-1: SerialNumber: syz [ 130.639935][ T1108] usb 1-1: bad CDC descriptors [ 130.660925][ T4234] usb 5-1: USB disconnect, device number 9 [ 130.739535][ T5329] fuse: Bad value for 'fd' [ 130.775069][ T5332] netlink: 32 bytes leftover after parsing attributes in process `syz.1.348'. [ 131.050154][ T5340] tipc: Enabling of bearer rejected, failed to enable media [ 131.446909][ T5345] fuse: Bad value for 'group_id' [ 131.929449][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'. [ 131.944089][ T5351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.353'. [ 131.956074][ T5351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.353'. [ 132.021298][ T1108] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 132.746072][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.754964][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.181141][ T4234] usb 1-1: USB disconnect, device number 10 [ 133.209551][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 133.351660][ T1108] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 133.360323][ T1108] usb 2-1: config 0 has no interface number 0 [ 133.370190][ T1108] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 133.413448][ T1108] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 133.691659][ T1108] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 133.700945][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.709450][ T1108] usb 2-1: Product: syz [ 133.713869][ T1108] usb 2-1: Manufacturer: syz [ 133.718625][ T1108] usb 2-1: SerialNumber: syz [ 133.795968][ T1108] usb 2-1: config 0 descriptor?? [ 133.821465][ T5337] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.844323][ T5365] fuse: Unknown parameter '0x0000000000000003' [ 135.331232][ T1108] usb 2-1: can't set config #0, error -71 [ 135.338914][ T1108] usb 2-1: USB disconnect, device number 9 [ 135.342361][ T5370] netlink: 'syz.2.358': attribute type 4 has an invalid length. [ 135.630628][ T26] audit: type=1804 audit(1778566444.586:19): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.361" name="/newroot/68/file1" dev="fuse" ino=1 res=1 errno=0 [ 135.693404][ T5380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.870787][ T4234] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 136.761019][ T5384] tipc: Enabling of bearer rejected, failed to enable media [ 136.801174][ T4234] usb 1-1: Using ep0 maxpacket: 16 [ 136.901326][ T4234] usb 1-1: device descriptor read/all, error -71 [ 137.195939][ T5400] netlink: 32 bytes leftover after parsing attributes in process `syz.3.360'. [ 137.390851][ T5405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 137.672017][ T5405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.369'. [ 137.944572][ T5405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.369'. [ 137.993021][ T5415] netlink: 'syz.2.370': attribute type 11 has an invalid length. [ 138.033204][ T5415] netlink: 140 bytes leftover after parsing attributes in process `syz.2.370'. [ 138.269656][ T5424] netlink: 'syz.0.372': attribute type 4 has an invalid length. [ 138.880481][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 139.114175][ T5434] fuse: Unknown parameter '0x0000000000000003' [ 139.204633][ T5439] tipc: Enabled bearer , priority 0 [ 139.340232][ T5441] device syzkaller0 entered promiscuous mode [ 139.411382][ T4237] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 139.484880][ T5439] tipc: Resetting bearer [ 139.592477][ T5438] tipc: Resetting bearer [ 139.610399][ T26] audit: type=1804 audit(1778566448.566:20): pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.375" name="/newroot/72/file1" dev="fuse" ino=1 res=1 errno=0 [ 139.701298][ T4237] usb 1-1: Using ep0 maxpacket: 16 [ 139.723855][ T5438] tipc: Disabling bearer [ 139.862255][ T4237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.913682][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.011028][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 140.106082][ T4237] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 140.214757][ T4237] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.442042][ T4237] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 140.462393][ T4237] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 140.483800][ T4237] usb 1-1: Manufacturer: syz [ 140.549957][ T4237] usb 1-1: config 0 descriptor?? [ 140.851567][ T2305] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 140.959552][ T5463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'. [ 140.971665][ T4237] rc_core: IR keymap rc-hauppauge not found [ 140.975934][ T5463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'. [ 140.986937][ T4237] Registered IR keymap rc-empty [ 140.992749][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.004267][ T5463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'. [ 141.031198][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.062499][ T4237] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 141.077552][ T4237] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 141.100591][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.146729][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.183405][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.221608][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.241230][ T2305] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.262265][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.310270][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.341406][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.381467][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.388748][ T2305] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 141.406741][ T2305] usb 5-1: can't read configurations, error -71 [ 141.413439][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.451472][ T4237] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 141.502427][ T4237] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 141.530487][ T4237] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 141.568367][ T4237] usb 1-1: USB disconnect, device number 13 [ 141.654834][ T26] audit: type=1804 audit(1778566450.616:21): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.389" name="/newroot/77/file1" dev="fuse" ino=1 res=1 errno=0 [ 142.069306][ T5503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 142.078644][ T5503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.397'. [ 142.141228][ T2305] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 142.161256][ T21] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 142.401287][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 142.521275][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.536597][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.567282][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.971334][ T2305] usb 5-1: not running at top speed; connect to a high speed hub [ 143.078768][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.093371][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.122546][ T5521] fuse: Unknown parameter '0x0000000000000003' [ 143.195878][ T2305] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 132, changing to 4 [ 143.201799][ T21] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 143.235946][ T21] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 143.250530][ T21] usb 1-1: Manufacturer: syz [ 143.268860][ T21] usb 1-1: config 0 descriptor?? [ 144.213558][ T1108] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 144.235174][ T2305] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 144.407215][ T2305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.493628][ T2305] usb 5-1: Product: 㬍꭫䁏缥灟䕷䷃ꈿꝬ彺쑬蝻ᨾ짦ʥ␸돒渘㽧软䏉羒լ׳謼畂植㔶鼶㲇蝘ྈ浇쌙紳݀䀕䰂ꛨ쭍˄䆂꜊뽻똵责璕냈䓩ᡜᜃ尗᜜㦰︴ퟁꪜᶘ⚒봥腒㥨ᜥﷲጹ虻໶빬쐍໹삑䬃ㆣᶨ櫫杅泫饲䯠┈䎔謱濵鶱ᚙ侻늪瘠ⶱ녓驇⭼惂₿ [ 144.551260][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 144.672030][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.691331][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.703048][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.713766][ T1108] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 144.724885][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.761493][ T21] rc_core: IR keymap rc-hauppauge not found [ 144.768744][ T21] Registered IR keymap rc-empty [ 144.799216][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.901384][ T1108] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 144.909681][ T2305] usb 5-1: Manufacturer: Ј [ 144.911381][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 144.926480][ T2305] usb 5-1: SerialNumber: syz [ 144.942773][ T1108] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 144.950869][ T1108] usb 4-1: Manufacturer: syz [ 144.958690][ T5539] __nla_validate_parse: 1 callbacks suppressed [ 144.958705][ T5539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.409'. [ 144.971695][ T2305] usb 5-1: can't set config #1, error -71 [ 144.984280][ T5539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.409'. [ 144.995364][ T1108] usb 4-1: config 0 descriptor?? [ 145.005182][ T5539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.409'. [ 145.015918][ T21] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 145.035167][ T2305] usb 5-1: USB disconnect, device number 11 [ 145.051353][ T21] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 145.204852][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.241412][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.287812][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.331325][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.338651][ T1108] rc_core: IR keymap rc-hauppauge not found [ 146.203079][ T1108] Registered IR keymap rc-empty [ 146.208153][ T1108] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.231172][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.261226][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.362430][ T1108] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.391288][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.399123][ T1108] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 146.421190][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.430109][ T1108] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input17 [ 146.451184][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.459330][ T5550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.412'. [ 146.481377][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.512383][ T21] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 146.521799][ T1108] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.541191][ T21] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 146.551308][ T1108] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.579109][ T21] usb 1-1: USB disconnect, device number 14 [ 146.585382][ T1108] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.631225][ T1108] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.684632][ T1108] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.734435][ T1108] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.784685][ T1108] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.834012][ T1108] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.885523][ T1108] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.920539][ T5572] vcan0: tx address claim with dlc 0 [ 146.926658][ T1108] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 146.972504][ T1108] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 146.989967][ T1108] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 147.019970][ T1108] usb 4-1: USB disconnect, device number 9 [ 148.271522][ T5536] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.579714][ T5588] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.585896][ T5586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'. [ 148.648095][ T5586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.423'. [ 148.697018][ T5536] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.713913][ T5586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.423'. [ 148.727614][ T5536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 148.769350][ T5536] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.840121][ T5536] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 148.888594][ T5536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.942396][ T5536] usb 2-1: config 0 descriptor?? [ 149.087928][ T5600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.426'. [ 149.222374][ T5536] usb 2-1: USB disconnect, device number 10 [ 149.341987][ T5606] fuse: Unknown parameter '0x0000000000000003' [ 151.583664][ T2305] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 151.817631][ T5627] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 152.038165][ T5633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.437'. [ 152.081444][ T2305] usb 1-1: Using ep0 maxpacket: 16 [ 152.106122][ T5635] netlink: 'syz.2.438': attribute type 1 has an invalid length. [ 152.216949][ T2305] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.239331][ T2305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.261323][ T2305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.281307][ T2305] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 152.291760][ T2305] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.341372][ T2305] usb 1-1: string descriptor 0 read error: -71 [ 152.351023][ T2305] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.393679][ T2305] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.422841][ T2305] usb 1-1: config 0 descriptor?? [ 152.560499][ T5650] tipc: Started in network mode [ 152.574971][ T5655] netlink: 'syz.2.445': attribute type 3 has an invalid length. [ 152.585860][ T5650] tipc: Node identity c6e69abfd90c, cluster identity 4711 [ 152.594051][ T5650] tipc: Enabled bearer , priority 0 [ 152.601404][ T2305] usb 1-1: can't set config #0, error -71 [ 152.608019][ T5655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.445'. [ 152.741607][ T5650] device syzkaller0 entered promiscuous mode [ 152.799052][ T5650] tipc: Resetting bearer [ 152.833404][ T5647] tipc: Resetting bearer [ 152.885339][ T5647] tipc: Disabling bearer [ 152.958903][ T5665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.448'. [ 152.997488][ T2305] usb 1-1: USB disconnect, device number 15 [ 154.412082][ T2305] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 154.544523][ T5678] fuse: Unknown parameter '0x0000000000000003' [ 154.801332][ T2305] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.817435][ T2305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 154.842805][ T2305] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.856022][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 154.880865][ T2305] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 154.900986][ T2305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.927065][ T2305] usb 1-1: config 0 descriptor?? [ 155.111280][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 155.134350][ T5692] Cannot find add_set index 65532 as target [ 155.186702][ T4233] usb 1-1: USB disconnect, device number 16 [ 155.241329][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.256115][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.301207][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.331250][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 155.341651][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.441404][ T13] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 155.454131][ T13] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 155.467803][ T13] usb 4-1: Manufacturer: syz [ 155.483611][ T13] usb 4-1: config 0 descriptor?? [ 155.511224][ T4236] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 155.816005][ T5700] tipc: Enabled bearer , priority 0 [ 155.877146][ T5700] device syzkaller0 entered promiscuous mode [ 155.911308][ T4236] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.922557][ T4236] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.932524][ T4236] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.942280][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.981484][ T5692] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 155.999028][ T5700] tipc: Resetting bearer [ 156.011604][ T13] rc_core: IR keymap rc-hauppauge not found [ 156.021922][ T13] Registered IR keymap rc-empty [ 156.038639][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.048457][ T5699] tipc: Resetting bearer [ 156.097098][ T5699] tipc: Disabling bearer [ 156.121374][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.191432][ T13] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 156.289152][ T13] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 156.369574][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.411246][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.438203][ T5710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.462'. [ 156.465458][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.515671][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.561678][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.601192][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.635910][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.684679][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.731241][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.592286][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.636823][ T2305] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 157.656260][ T13] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 157.710816][ T13] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 157.746424][ T13] usb 4-1: USB disconnect, device number 10 [ 158.044285][ T2305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.074059][ T2305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.085593][ T2305] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 158.095023][ T2305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.440063][ T2305] usb 1-1: config 0 descriptor?? [ 159.693645][ T4233] usb 2-1: USB disconnect, device number 11 [ 159.733342][ T5742] netlink: 32 bytes leftover after parsing attributes in process `syz.0.474'. [ 159.755802][ T5743] tipc: Enabling of bearer rejected, failed to enable media [ 159.772860][ T2305] usbhid 1-1:0.0: can't add hid device: -71 [ 159.778882][ T2305] usbhid: probe of 1-1:0.0 failed with error -71 [ 159.789283][ T2305] usb 1-1: USB disconnect, device number 17 [ 159.887247][ T5747] fuse: Unknown parameter '0x0000000000000003' [ 160.961212][ T13] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 161.171786][ T5536] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 161.333505][ T4233] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 161.415655][ T5536] usb 5-1: device descriptor read/64, error -71 [ 161.731109][ T4233] usb 2-1: Using ep0 maxpacket: 16 [ 161.771494][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 162.093271][ T5536] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 162.106002][ T4233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.149427][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.187644][ T1108] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 162.235072][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.294572][ T4233] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 162.351329][ T5536] usb 5-1: device descriptor read/64, error -71 [ 162.641316][ T13] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 162.655492][ T13] usb 1-1: config 254 has no interface number 0 [ 162.667247][ T13] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 162.683145][ T13] usb 1-1: config 254 interface 235 altsetting 2 has an invalid endpoint with address 0xFF, skipping [ 162.698089][ T13] usb 1-1: config 254 interface 235 has no altsetting 0 [ 162.706884][ T5536] usb usb5-port1: attempt power cycle [ 162.712643][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.731276][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 162.817115][ T4233] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 162.826398][ T4233] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 162.834972][ T4233] usb 2-1: Manufacturer: syz [ 162.849505][ T4233] usb 2-1: config 0 descriptor?? [ 162.854762][ T1108] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 162.881408][ T4233] usb 2-1: can't set config #0, error -71 [ 162.890076][ T4233] usb 2-1: USB disconnect, device number 12 [ 162.925553][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 162.937371][ T5784] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 162.949015][ T13] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 162.961131][ T13] usb 1-1: Product: syz [ 162.965343][ T13] usb 1-1: Manufacturer: syz [ 162.970003][ T13] usb 1-1: SerialNumber: syz [ 163.011521][ T5753] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 163.021529][ T1108] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 163.030603][ T5786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.487'. [ 163.046941][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 163.055704][ T1108] usb 4-1: Product: syz [ 163.059982][ T1108] usb 4-1: Manufacturer: syz [ 163.071225][ T1108] usb 4-1: SerialNumber: syz [ 163.075205][ T13] usbtest 1-1:254.235: couldn't get endpoints, -22 [ 163.088010][ T1108] usb 4-1: config 0 descriptor?? [ 163.091310][ T13] usbtest: probe of 1-1:254.235 failed with error -22 [ 163.111788][ T5778] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 163.141717][ T5536] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 163.179204][ T5788] tipc: Enabled bearer , priority 0 [ 163.187169][ T5788] device syzkaller0 entered promiscuous mode [ 163.212954][ T5788] tipc: Resetting bearer [ 163.221915][ T5787] tipc: Resetting bearer [ 163.237545][ T5787] tipc: Disabling bearer [ 163.242263][ T5536] usb 5-1: device descriptor read/8, error -71 [ 163.525146][ T5536] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 163.725473][ T5536] usb 5-1: device descriptor read/8, error -71 [ 164.537244][ T5536] usb usb5-port1: unable to enumerate USB device [ 164.637645][ T13] usb 1-1: USB disconnect, device number 18 [ 164.679486][ T26] audit: type=1804 audit(1778566473.636:22): pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.492" name="/newroot/95/file1" dev="fuse" ino=1 res=1 errno=0 [ 164.760267][ T5536] usb 4-1: USB disconnect, device number 11 [ 164.938812][ T5818] fuse: Unknown parameter '0x0000000000000003' [ 165.019654][ T5823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.498'. [ 166.031161][ T13] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 166.031301][ T4233] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 166.281281][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 166.311236][ T5536] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 166.404265][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.434887][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.450116][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.460283][ T4233] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 166.462200][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.475090][ T4233] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.501261][ T5536] usb 2-1: device descriptor read/64, error -71 [ 166.511294][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 166.532097][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.552594][ T13] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 166.567196][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.572239][ T4233] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 166.587806][ T13] usb 1-1: config 0 descriptor?? [ 166.591284][ T4233] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 166.621639][ T4233] usb 5-1: Manufacturer: syz [ 166.643860][ T4233] usb 5-1: config 0 descriptor?? [ 166.791230][ T5536] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 166.854282][ T26] audit: type=1804 audit(1778566475.806:23): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.506" name="/newroot/110/file1" dev="fuse" ino=1 res=1 errno=0 [ 166.885565][ T4193] usb 1-1: USB disconnect, device number 19 [ 166.971390][ T4233] rc_core: IR keymap rc-hauppauge not found [ 166.977426][ T4233] Registered IR keymap rc-empty [ 166.983036][ T5536] usb 2-1: device descriptor read/64, error -71 [ 166.991987][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.061483][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.104055][ T5536] usb usb2-port1: attempt power cycle [ 167.278750][ T4233] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 167.531379][ T5536] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 167.595101][ T4233] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 167.661337][ T5536] usb 2-1: device descriptor read/8, error -71 [ 167.719146][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.761281][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.922158][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.951280][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.808997][ T5536] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 168.820268][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.861258][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.874387][ T5871] netlink: 32 bytes leftover after parsing attributes in process `syz.2.512'. [ 168.893688][ T5536] usb 2-1: device descriptor read/8, error -71 [ 168.911172][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.954336][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.991163][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.009183][ T5876] kvm: pic: non byte write [ 169.013986][ T5536] usb usb2-port1: unable to enumerate USB device [ 169.021484][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.065868][ T4233] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 169.314430][ T5879] tipc: Enabled bearer , priority 0 [ 169.358316][ T4233] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 169.369637][ T5882] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 169.380537][ T5889] device syzkaller0 entered promiscuous mode [ 169.437220][ T4233] usb 5-1: USB disconnect, device number 16 [ 169.454188][ T5879] tipc: Resetting bearer [ 169.489914][ T5877] tipc: Resetting bearer [ 169.535125][ T5877] tipc: Disabling bearer [ 169.703536][ T26] audit: type=1804 audit(1778566478.666:24): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.517" name="/newroot/87/file1" dev="fuse" ino=1 res=1 errno=0 [ 169.803233][ T5907] binder: 5906:5907 ioctl 4018620d 0 returned -22 [ 170.730264][ T5910] fuse: Unknown parameter '0x0000000000000003' [ 171.131371][ T4233] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 171.551980][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.814802][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 171.831435][ T4233] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.851230][ T4233] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 171.870652][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.897632][ T4233] usb 5-1: config 0 descriptor?? [ 171.917611][ T5623] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 171.967494][ T5926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.526'. [ 172.091905][ T4236] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 172.155383][ T5536] usb 5-1: USB disconnect, device number 17 [ 172.172636][ T5623] usb 1-1: Using ep0 maxpacket: 16 [ 173.094776][ T4236] usb 4-1: device descriptor read/64, error -71 [ 173.161327][ T5623] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.181116][ T5623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.201095][ T5623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.221137][ T5623] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 173.230863][ T5623] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.381377][ T5623] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 173.400781][ T5623] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 173.408952][ T4236] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 173.421100][ T5623] usb 1-1: Manufacturer: syz [ 173.445740][ T5623] usb 1-1: config 0 descriptor?? [ 173.631129][ T4236] usb 4-1: device descriptor read/64, error -71 [ 173.639472][ T26] audit: type=1804 audit(1778566482.596:25): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.531" name="/newroot/99/file1" dev="fuse" ino=1 res=1 errno=0 [ 173.792519][ T4236] usb usb4-port1: attempt power cycle [ 175.274857][ T5948] binder: BINDER_SET_CONTEXT_MGR already set [ 175.280995][ T5948] binder: 5945:5948 ioctl 4018620d 200000001000 returned -16 [ 175.331178][ T5623] rc_core: IR keymap rc-hauppauge not found [ 175.337177][ T5623] Registered IR keymap rc-empty [ 175.353076][ T5623] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.394944][ T5623] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.441973][ T5623] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 175.452824][ T5955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.537'. [ 175.479331][ T5623] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 175.600838][ T5623] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.661277][ T5623] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.720074][ T5623] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.781266][ T5623] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 175.831218][ T5623] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 176.722577][ T5623] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 176.761208][ T5623] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 176.801222][ T5623] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 176.842385][ T5623] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 176.891505][ T5623] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 176.903445][ T26] audit: type=1326 audit(1778566485.866:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.0.541" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e2c4dd9 code=0x7ffc0000 [ 176.940768][ T5623] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 176.982721][ T5623] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 177.011349][ T26] audit: type=1326 audit(1778566485.876:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.0.541" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e2c4dd9 code=0x7ffc0000 [ 177.050911][ T5623] usb 1-1: USB disconnect, device number 20 [ 177.151630][ T26] audit: type=1326 audit(1778566485.876:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.0.541" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e2c4dd9 code=0x7ffc0000 [ 177.221156][ T26] audit: type=1326 audit(1778566485.876:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.0.541" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd50e2c4dd9 code=0x7ffc0000 [ 177.291224][ T26] audit: type=1326 audit(1778566485.876:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.0.541" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e2c4dd9 code=0x7ffc0000 [ 177.374253][ T26] audit: type=1326 audit(1778566485.876:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.0.541" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd50e2c4dd9 code=0x7ffc0000 [ 177.470531][ T26] audit: type=1326 audit(1778566485.876:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.0.541" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd50e2c4dd9 code=0x7ffc0000 [ 177.651989][ T26] audit: type=1804 audit(1778566486.206:33): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.543" name="/newroot/93/file1" dev="fuse" ino=1 res=1 errno=0 [ 178.795733][ T5989] fuse: Unknown parameter '0xffffffffffffffff' [ 178.819662][ T5991] binder: BINDER_SET_CONTEXT_MGR already set [ 178.837595][ T5991] binder: 5990:5991 ioctl 4018620d 200000001000 returned -16 [ 178.915778][ T5623] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 179.088363][ T5993] netlink: 32 bytes leftover after parsing attributes in process `syz.3.549'. [ 179.131120][ T5623] usb 5-1: device descriptor read/64, error -71 [ 179.411150][ T5623] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 180.401163][ T5623] usb 5-1: device descriptor read/64, error -71 [ 180.521452][ T5623] usb usb5-port1: attempt power cycle [ 180.951335][ T5623] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 181.301538][ T1108] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 181.673052][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 181.803941][ T6027] netlink: 32 bytes leftover after parsing attributes in process `syz.3.560'. [ 181.891442][ T1108] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 181.901166][ T5623] usb 5-1: device descriptor read/8, error -71 [ 182.061353][ T1108] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 182.107654][ T6039] binder: BINDER_SET_CONTEXT_MGR already set [ 182.113864][ T6039] binder: 6038:6039 ioctl 4018620d 200000001000 returned -16 [ 182.119453][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.136729][ T1108] usb 1-1: Product: syz [ 183.698121][ T1108] usb 1-1: Manufacturer: syz [ 183.716175][ T1108] usb 1-1: SerialNumber: syz [ 183.749724][ T1108] usb 1-1: config 0 descriptor?? [ 183.793897][ T1108] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 183.811202][ T1108] usb 1-1: setting power ON [ 183.846658][ T1108] dvb-usb: bulk message failed: -22 (2/0) [ 183.864435][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.911367][ T1108] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 183.919881][ T1108] usb 1-1: media controller created [ 183.942575][ T6048] fuse: Bad value for 'fd' [ 183.970381][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.001888][ T1108] usb 1-1: selecting invalid altsetting 6 [ 184.010624][ T1108] usb 1-1: digital interface selection failed (-22) [ 184.018022][ T1108] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 184.061675][ T1108] usb 1-1: setting power OFF [ 184.067760][ T1108] dvb-usb: bulk message failed: -22 (2/0) [ 184.099819][ T1108] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 184.151245][ T1108] (NULL device *): no alternate interface [ 184.178420][ T1108] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 184.205846][ T1108] usb 1-1: USB disconnect, device number 21 [ 185.459045][ T6071] netlink: 32 bytes leftover after parsing attributes in process `syz.0.574'. [ 186.375533][ T6081] binder: 6080:6081 ioctl c0306201 0 returned -14 [ 186.792110][ T6091] Cannot find add_set index 2 as target [ 188.275360][ T6101] fuse: Unknown parameter 'group_id00000000000000000000' [ 190.153746][ T6128] APIC base relocation is unsupported by KVM [ 190.891207][ T1324] Bluetooth: hci0: command 0x0401 tx timeout [ 191.114428][ T6139] batman_adv: batadv0: Adding interface: gretap1 [ 191.120979][ T6139] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.147366][ T6139] batman_adv: batadv0: Interface activated: gretap1 [ 191.151757][ T1324] Bluetooth: hci2: command 0x0406 tx timeout [ 191.165897][ T1324] Bluetooth: hci4: command 0x0406 tx timeout [ 191.177440][ T1324] Bluetooth: hci3: command 0x0406 tx timeout [ 191.183910][ T1324] Bluetooth: hci1: command 0x0406 tx timeout [ 191.393226][ T6106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.537622][ T6144] fuse: Unknown parameter '0x0000000000000003' [ 191.547037][ T6146] fuse: Bad value for 'fd' [ 193.073282][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.145294][ T4235] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 193.404784][ T6167] fuse: Bad value for 'fd' [ 193.611556][ T4235] usb 1-1: Using ep0 maxpacket: 16 [ 193.847503][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.607'. [ 193.856738][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.607'. [ 193.911200][ T4193] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 193.989534][ T6174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.610'. [ 194.026851][ T4235] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.051199][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.084391][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 194.125488][ T4235] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 194.161425][ T4193] usb 5-1: Using ep0 maxpacket: 8 [ 194.215541][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.251150][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.391474][ T4193] usb 5-1: unable to get BOS descriptor or descriptor too short [ 194.702932][ T4235] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.771254][ T4193] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 194.813492][ T4193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.850467][ T4193] usb 5-1: Product: syz [ 194.879720][ T4193] usb 5-1: Manufacturer: syz [ 194.911284][ T4235] usb 1-1: string descriptor 0 read error: -71 [ 194.916638][ T4193] usb 5-1: SerialNumber: syz [ 194.920214][ T4235] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 194.941567][ T4235] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 194.987428][ T4235] usb 1-1: config 0 descriptor?? [ 195.041234][ T4235] usb 1-1: can't set config #0, error -71 [ 195.067630][ T4235] usb 1-1: USB disconnect, device number 22 [ 195.453121][ T6197] fuse: Bad value for 'fd' [ 195.491426][ T4193] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 195.511214][ T4193] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 195.549093][ T4193] usb 5-1: USB disconnect, device number 22 [ 196.711670][ T4305] udevd[4305]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.743765][ T6204] binder: 6203:6204 ioctl c0306201 0 returned -14 [ 196.790719][ T6204] binder: BINDER_SET_CONTEXT_MGR already set [ 196.811341][ T6204] binder: 6203:6204 ioctl 4018620d 200000000040 returned -16 [ 196.881800][ T13] libceph: connect (1)[c::]:6789 error -101 [ 196.888391][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 196.900966][ T13] libceph: connect (1)[c::]:6789 error -101 [ 196.918522][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 197.109948][ T6221] fuse: Unknown parameter '0x0000000000000003' [ 197.195550][ T6212] ceph: No mds server is up or the cluster is laggy [ 197.213160][ T13] libceph: connect (1)[c::]:6789 error -101 [ 197.213279][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 197.491177][ T4233] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 197.911155][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 198.018365][ T6247] fuse: Bad value for 'fd' [ 198.031323][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.042188][ T5536] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 198.061401][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.078177][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 198.088604][ T4233] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 198.104603][ T4233] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.192439][ T4233] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 198.212429][ T4233] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 198.226043][ T4233] usb 5-1: Manufacturer: syz [ 198.237892][ T4233] usb 5-1: config 0 descriptor?? [ 198.283321][ T5536] usb 4-1: Using ep0 maxpacket: 32 [ 198.411751][ T6256] binder: 6255:6256 ioctl c0306201 0 returned -14 [ 198.418577][ T5536] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.444168][ T6256] binder: BINDER_SET_CONTEXT_MGR already set [ 198.450415][ T5536] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 198.472640][ T6256] binder: 6255:6256 ioctl 4018620d 200000000040 returned -16 [ 198.552193][ T5536] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.573391][ T5536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 198.607358][ T5536] usb 4-1: SerialNumber: syz [ 198.714385][ T5536] usb 4-1: bad CDC descriptors [ 199.181174][ T4233] rc_core: IR keymap rc-hauppauge not found [ 199.191274][ T4233] Registered IR keymap rc-empty [ 199.196257][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 199.301570][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 200.188390][ T4233] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 200.455566][ T4233] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 200.499817][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 200.531165][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 200.561334][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 200.601757][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 200.642096][ T6282] Unsupported ieee802154 address type: 0 [ 201.442393][ T1324] usb 4-1: USB disconnect, device number 15 [ 201.651469][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 201.884343][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.169564][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.281338][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.401761][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.511532][ T4233] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.635850][ T4233] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 202.794288][ T4233] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 203.037250][ T4233] usb 5-1: USB disconnect, device number 23 [ 203.266917][ T6296] binder: 6295:6296 ioctl c0306201 0 returned -14 [ 203.316563][ T6300] fuse: Bad value for 'user_id' [ 203.453758][ T6307] fuse: Unknown parameter '0xffffffffffffffff' [ 205.123862][ T4233] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 205.372212][ T1108] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 205.631178][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 205.751396][ T4233] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.794346][ T4233] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 205.812467][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.661'. [ 205.921396][ T4233] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.935251][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.952620][ T4233] usb 5-1: SerialNumber: syz [ 206.012260][ T4233] usb 5-1: bad CDC descriptors [ 206.151629][ T6355] [ 206.154027][ T6355] ====================================================== [ 206.161145][ T6355] WARNING: possible circular locking dependency detected [ 206.168279][ T6355] syzkaller #0 Not tainted [ 206.172710][ T6355] ------------------------------------------------------ [ 206.179836][ T6355] syz.0.664/6355 is trying to acquire lock: [ 206.185736][ T6355] ffff88801fc4a5e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0 [ 206.195360][ T6355] [ 206.195360][ T6355] but task is already holding lock: [ 206.202735][ T6355] ffffc9000188f448 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 206.212318][ T6355] [ 206.212318][ T6355] which lock already depends on the new lock. [ 206.212318][ T6355] [ 206.222902][ T6355] [ 206.222902][ T6355] the existing dependency chain (in reverse order) is: [ 206.231937][ T6355] [ 206.231937][ T6355] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 206.239873][ T6355] _raw_spin_lock+0x2a/0x40 [ 206.245020][ T6355] __inet_hash+0xe3/0x960 [ 206.249894][ T6355] inet_csk_listen_start+0x22f/0x320 [ 206.255717][ T6355] inet_listen+0x2e1/0x590 [ 206.260670][ T6355] __sys_listen+0x19d/0x220 [ 206.265816][ T6355] __x64_sys_listen+0x56/0x60 [ 206.271028][ T6355] do_syscall_64+0x4c/0xa0 [ 206.275982][ T6355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.282587][ T6355] [ 206.282587][ T6355] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 206.290354][ T6355] __lock_acquire+0x2c42/0x7d10 [ 206.296112][ T6355] lock_acquire+0x19e/0x400 [ 206.301154][ T6355] mptcp_diag_get_info+0x1f2/0x9e0 [ 206.306801][ T6355] inet_sk_diag_fill+0xf5e/0x1ca0 [ 206.312363][ T6355] mptcp_diag_dump+0xce6/0x12b0 [ 206.317750][ T6355] __inet_diag_dump+0x1f6/0x380 [ 206.323142][ T6355] netlink_dump+0x694/0xcf0 [ 206.328177][ T6355] __netlink_dump_start+0x523/0x700 [ 206.333906][ T6355] inet_diag_handler_cmd+0x1d3/0x2b0 [ 206.339729][ T6355] sock_diag_rcv_msg+0x164/0x3e0 [ 206.345207][ T6355] netlink_rcv_skb+0x1f5/0x440 [ 206.350506][ T6355] sock_diag_rcv+0x26/0x40 [ 206.355456][ T6355] netlink_unicast+0x774/0x920 [ 206.360840][ T6355] netlink_sendmsg+0x8ba/0xbe0 [ 206.366142][ T6355] sock_write_iter+0x2a6/0x3a0 [ 206.371445][ T6355] do_iter_readv_writev+0x47e/0x5f0 [ 206.377194][ T6355] do_iter_write+0x205/0x7b0 [ 206.382328][ T6355] do_writev+0x281/0x480 [ 206.387111][ T6355] do_syscall_64+0x4c/0xa0 [ 206.392074][ T6355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.398502][ T6355] [ 206.398502][ T6355] other info that might help us debug this: [ 206.398502][ T6355] [ 206.408742][ T6355] Possible unsafe locking scenario: [ 206.408742][ T6355] [ 206.416202][ T6355] CPU0 CPU1 [ 206.421583][ T6355] ---- ---- [ 206.430185][ T6355] lock(&h->lhash2[i].lock); [ 206.434889][ T6355] lock(sk_lock-AF_INET6); [ 206.441927][ T6355] lock(&h->lhash2[i].lock); [ 206.449316][ T6355] lock(sk_lock-AF_INET6); [ 206.453858][ T6355] [ 206.453858][ T6355] *** DEADLOCK *** [ 206.453858][ T6355] [ 206.462117][ T6355] 6 locks held by syz.0.664/6355: [ 206.467177][ T6355] #0: ffffffff8d446f68 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 206.476530][ T6355] #1: ffffffff8d446e28 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 206.486927][ T6355] #2: ffff8880612f8698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 206.497667][ T6355] #3: ffffffff8d521028 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 206.508083][ T6355] #4: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 206.517456][ T6355] #5: ffffc9000188f448 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 206.527490][ T6355] [ 206.527490][ T6355] stack backtrace: [ 206.533584][ T6355] CPU: 1 PID: 6355 Comm: syz.0.664 Not tainted syzkaller #0 [ 206.540887][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.550974][ T6355] Call Trace: [ 206.554282][ T6355] [ 206.557230][ T6355] dump_stack_lvl+0x188/0x250 [ 206.562011][ T6355] ? load_image+0x400/0x400 [ 206.566553][ T6355] ? show_regs_print_info+0x20/0x20 [ 206.571787][ T6355] ? print_circular_bug+0x12b/0x1a0 [ 206.577020][ T6355] check_noncircular+0x296/0x330 [ 206.581994][ T6355] ? add_chain_block+0x940/0x940 [ 206.586954][ T6355] ? lockdep_lock+0xf1/0x1f0 [ 206.591572][ T6355] ? mark_lock+0x94/0x320 [ 206.595920][ T6355] ? mark_lock+0x94/0x320 [ 206.600268][ T6355] __lock_acquire+0x2c42/0x7d10 [ 206.605153][ T6355] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 206.611156][ T6355] ? verify_lock_unused+0x140/0x140 [ 206.616373][ T6355] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 206.622370][ T6355] ? verify_lock_unused+0x140/0x140 [ 206.627584][ T6355] ? __local_bh_enable_ip+0xd7/0x1c0 [ 206.632892][ T6355] ? __local_bh_enable_ip+0x136/0x1c0 [ 206.638286][ T6355] ? lockdep_hardirqs_on+0x94/0x140 [ 206.643507][ T6355] ? __local_bh_enable_ip+0x136/0x1c0 [ 206.648888][ T6355] ? _local_bh_enable+0xa0/0xa0 [ 206.653757][ T6355] ? nla_put+0x130/0x1e0 [ 206.658027][ T6355] lock_acquire+0x19e/0x400 [ 206.662555][ T6355] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 206.667779][ T6355] ? read_lock_is_recursive+0x10/0x10 [ 206.673167][ T6355] ? rcu_lock_release+0x5/0x20 [ 206.677943][ T6355] ? __lock_acquire+0x7d10/0x7d10 [ 206.682983][ T6355] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 206.688204][ T6355] mptcp_diag_get_info+0x1f2/0x9e0 [ 206.693338][ T6355] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 206.698559][ T6355] inet_sk_diag_fill+0xf5e/0x1ca0 [ 206.703707][ T6355] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 206.709447][ T6355] ? do_raw_spin_lock+0x128/0x2f0 [ 206.714489][ T6355] ? __rwlock_init+0x140/0x140 [ 206.719267][ T6355] ? inet_diag_bc_sk+0x18b/0x1120 [ 206.724310][ T6355] mptcp_diag_dump+0xce6/0x12b0 [ 206.729184][ T6355] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 206.735792][ T6355] __inet_diag_dump+0x1f6/0x380 [ 206.740667][ T6355] netlink_dump+0x694/0xcf0 [ 206.745190][ T6355] ? netlink_lookup+0x1d0/0x1d0 [ 206.750092][ T6355] ? __inet_diag_dump_start+0x805/0x970 [ 206.755939][ T6355] __netlink_dump_start+0x523/0x700 [ 206.761157][ T6355] inet_diag_handler_cmd+0x1d3/0x2b0 [ 206.766464][ T6355] ? rcu_lock_release+0x20/0x20 [ 206.771415][ T6355] ? inet_diag_handler_get_info+0xb90/0xb90 [ 206.777481][ T6355] ? inet_diag_dump_start+0x20/0x20 [ 206.782712][ T6355] ? inet_diag_dump+0x50/0x50 [ 206.787508][ T6355] ? rcu_lock_release+0x20/0x20 [ 206.792395][ T6355] sock_diag_rcv_msg+0x164/0x3e0 [ 206.797371][ T6355] netlink_rcv_skb+0x1f5/0x440 [ 206.802161][ T6355] ? sock_diag_bind+0xa0/0xa0 [ 206.806854][ T6355] ? netlink_ack+0xb50/0xb50 [ 206.811551][ T6355] ? __lock_acquire+0x7d10/0x7d10 [ 206.816613][ T6355] sock_diag_rcv+0x26/0x40 [ 206.821046][ T6355] netlink_unicast+0x774/0x920 [ 206.825845][ T6355] netlink_sendmsg+0x8ba/0xbe0 [ 206.830635][ T6355] ? netlink_getsockopt+0x570/0x570 [ 206.836043][ T6355] ? aa_sock_msg_perm+0x94/0x150 [ 206.841083][ T6355] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 206.846391][ T6355] ? security_socket_sendmsg+0x7c/0xa0 [ 206.851872][ T6355] sock_write_iter+0x2a6/0x3a0 [ 206.856657][ T6355] ? sock_read_iter+0x380/0x380 [ 206.861525][ T6355] do_iter_readv_writev+0x47e/0x5f0 [ 206.866750][ T6355] ? aa_path_link+0x880/0x880 [ 206.871453][ T6355] ? generic_file_rw_checks+0x280/0x280 [ 206.877025][ T6355] ? common_file_perm+0x171/0x1c0 [ 206.882071][ T6355] ? fsnotify_perm+0x5d/0x560 [ 206.886772][ T6355] ? security_file_permission+0x75/0xa0 [ 206.892341][ T6355] do_iter_write+0x205/0x7b0 [ 206.896952][ T6355] ? import_iovec+0x6f/0xa0 [ 206.901476][ T6355] do_writev+0x281/0x480 [ 206.905752][ T6355] ? do_readv+0x460/0x460 [ 206.910102][ T6355] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 206.916110][ T6355] ? lock_chain_count+0x20/0x20 [ 206.921153][ T6355] ? vtime_user_exit+0x2c8/0x3e0 [ 206.926111][ T6355] ? lockdep_hardirqs_on+0x94/0x140 [ 206.931506][ T6355] do_syscall_64+0x4c/0xa0 [ 206.935980][ T6355] ? clear_bhb_loop+0x30/0x80 [ 206.940683][ T6355] ? clear_bhb_loop+0x30/0x80 [ 206.945376][ T6355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.951308][ T6355] RIP: 0033:0x7fd50e2c4dd9 [ 206.955843][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.975500][ T6355] RSP: 002b:00007fd50c51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 206.983949][ T6355] RAX: ffffffffffffffda RBX: 00007fd50e53dfa0 RCX: 00007fd50e2c4dd9 [ 206.991945][ T6355] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 206.999932][ T6355] RBP: 00007fd50e35ad69 R08: 0000000000000000 R09: 0000000000000000 [ 207.007926][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.015908][ T6355] R13: 00007fd50e53e038 R14: 00007fd50e53dfa0 R15: 00007ffceb98b418 [ 207.023897][ T6355] [ 207.028459][ T6355] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 207.037941][ T6355] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6355, name: syz.0.664 [ 207.046956][ T6355] INFO: lockdep is turned off. [ 207.051772][ T6355] Preemption disabled at: [ 207.051782][ T6355] [<0000000000000000>] 0x0 [ 207.060576][ T6355] CPU: 1 PID: 6355 Comm: syz.0.664 Not tainted syzkaller #0 [ 207.067978][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.078237][ T6355] Call Trace: [ 207.081544][ T6355] [ 207.084510][ T6355] dump_stack_lvl+0x188/0x250 [ 207.089236][ T6355] ? show_regs_print_info+0x20/0x20 [ 207.094475][ T6355] ? load_image+0x400/0x400 [ 207.099013][ T6355] ___might_sleep+0x493/0x610 [ 207.103720][ T6355] ? __might_sleep+0xf0/0xf0 [ 207.108333][ T6355] ? read_lock_is_recursive+0x10/0x10 [ 207.113749][ T6355] ? rcu_lock_release+0x5/0x20 [ 207.118639][ T6355] __lock_sock_fast+0x2f/0xe0 [ 207.123355][ T6355] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 207.128585][ T6355] mptcp_diag_get_info+0x1fe/0x9e0 [ 207.133742][ T6355] inet_sk_diag_fill+0xf5e/0x1ca0 [ 207.138817][ T6355] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 207.144572][ T6355] ? do_raw_spin_lock+0x128/0x2f0 [ 207.149640][ T6355] ? __rwlock_init+0x140/0x140 [ 207.154594][ T6355] ? inet_diag_bc_sk+0x18b/0x1120 [ 207.159672][ T6355] mptcp_diag_dump+0xce6/0x12b0 [ 207.164562][ T6355] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 207.171387][ T6355] __inet_diag_dump+0x1f6/0x380 [ 207.176296][ T6355] netlink_dump+0x694/0xcf0 [ 207.180840][ T6355] ? netlink_lookup+0x1d0/0x1d0 [ 207.185729][ T6355] ? __inet_diag_dump_start+0x805/0x970 [ 207.191422][ T6355] __netlink_dump_start+0x523/0x700 [ 207.196662][ T6355] inet_diag_handler_cmd+0x1d3/0x2b0 [ 207.201982][ T6355] ? rcu_lock_release+0x20/0x20 [ 207.206863][ T6355] ? inet_diag_handler_get_info+0xb90/0xb90 [ 207.212788][ T6355] ? inet_diag_dump_start+0x20/0x20 [ 207.218019][ T6355] ? inet_diag_dump+0x50/0x50 [ 207.222739][ T6355] ? rcu_lock_release+0x20/0x20 [ 207.227622][ T6355] sock_diag_rcv_msg+0x164/0x3e0 [ 207.232608][ T6355] netlink_rcv_skb+0x1f5/0x440 [ 207.237421][ T6355] ? sock_diag_bind+0xa0/0xa0 [ 207.242150][ T6355] ? netlink_ack+0xb50/0xb50 [ 207.246873][ T6355] ? __lock_acquire+0x7d10/0x7d10 [ 207.252093][ T6355] sock_diag_rcv+0x26/0x40 [ 207.256520][ T6355] netlink_unicast+0x774/0x920 [ 207.261301][ T6355] netlink_sendmsg+0x8ba/0xbe0 [ 207.266081][ T6355] ? netlink_getsockopt+0x570/0x570 [ 207.271297][ T6355] ? aa_sock_msg_perm+0x94/0x150 [ 207.276249][ T6355] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 207.281655][ T6355] ? security_socket_sendmsg+0x7c/0xa0 [ 207.287127][ T6355] sock_write_iter+0x2a6/0x3a0 [ 207.291905][ T6355] ? sock_read_iter+0x380/0x380 [ 207.296769][ T6355] do_iter_readv_writev+0x47e/0x5f0 [ 207.302196][ T6355] ? aa_path_link+0x880/0x880 [ 207.306909][ T6355] ? generic_file_rw_checks+0x280/0x280 [ 207.312476][ T6355] ? common_file_perm+0x171/0x1c0 [ 207.317608][ T6355] ? fsnotify_perm+0x5d/0x560 [ 207.322295][ T6355] ? security_file_permission+0x75/0xa0 [ 207.327865][ T6355] do_iter_write+0x205/0x7b0 [ 207.332481][ T6355] ? import_iovec+0x6f/0xa0 [ 207.336999][ T6355] do_writev+0x281/0x480 [ 207.341268][ T6355] ? do_readv+0x460/0x460 [ 207.345712][ T6355] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 207.351716][ T6355] ? lock_chain_count+0x20/0x20 [ 207.356583][ T6355] ? vtime_user_exit+0x2c8/0x3e0 [ 207.361539][ T6355] ? lockdep_hardirqs_on+0x94/0x140 [ 207.366758][ T6355] do_syscall_64+0x4c/0xa0 [ 207.371186][ T6355] ? clear_bhb_loop+0x30/0x80 [ 207.375878][ T6355] ? clear_bhb_loop+0x30/0x80 [ 207.380564][ T6355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.386463][ T6355] RIP: 0033:0x7fd50e2c4dd9 [ 207.390888][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.410809][ T6355] RSP: 002b:00007fd50c51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 207.419234][ T6355] RAX: ffffffffffffffda RBX: 00007fd50e53dfa0 RCX: 00007fd50e2c4dd9 [ 207.427208][ T6355] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 207.435189][ T6355] RBP: 00007fd50e35ad69 R08: 0000000000000000 R09: 0000000000000000 [ 207.443184][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.451167][ T6355] R13: 00007fd50e53e038 R14: 00007fd50e53dfa0 R15: 00007ffceb98b418 [ 207.459155][ T6355] [ 207.462235][ T6355] BUG: scheduling while atomic: syz.0.664/6355/0x00000002 [ 207.469629][ T6355] INFO: lockdep is turned off. [ 207.474427][ T6355] Modules linked in: [ 207.478340][ T6355] Preemption disabled at: [ 207.478346][ T6355] [<0000000000000000>] 0x0 [ 207.487116][ T6355] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 207.495959][ T6355] CPU: 1 PID: 6355 Comm: syz.0.664 Tainted: G W syzkaller #0 [ 207.504825][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.514934][ T6355] Call Trace: [ 207.518225][ T6355] [ 207.521173][ T6355] dump_stack_lvl+0x188/0x250 [ 207.525874][ T6355] ? show_regs_print_info+0x20/0x20 [ 207.531088][ T6355] ? load_image+0x400/0x400 [ 207.535615][ T6355] panic+0x2e5/0x810 [ 207.539524][ T6355] ? bpf_jit_dump+0xd0/0xd0 [ 207.544040][ T6355] ? vprintk_emit+0xf9/0x150 [ 207.548641][ T6355] ? _printk+0xda/0x130 [ 207.552807][ T6355] check_panic_on_warn+0x80/0xa0 [ 207.557760][ T6355] __schedule_bug+0x193/0x1f0 [ 207.562461][ T6355] ? raw_spin_rq_unlock_irq+0x90/0x90 [ 207.567849][ T6355] ? 0xffffffffa0016000 [ 207.572008][ T6355] __schedule+0x1324/0x43c0 [ 207.576558][ T6355] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 207.582307][ T6355] ? prepare_to_wait_exclusive+0xc5/0x220 [ 207.588044][ T6355] ? do_raw_spin_lock+0x128/0x2f0 [ 207.593078][ T6355] ? __kthread_should_park+0xa2/0xe0 [ 207.598373][ T6355] ? lock_chain_count+0x20/0x20 [ 207.603230][ T6355] ? lock_release+0xb5/0x8a0 [ 207.607834][ T6355] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 207.614083][ T6355] ? __lock_sock+0x159/0x2b0 [ 207.618685][ T6355] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 207.624758][ T6355] ? release_firmware_map_entry+0x190/0x190 [ 207.630664][ T6355] ? __lock_sock+0x159/0x2b0 [ 207.635256][ T6355] ? __local_bh_enable_ip+0x136/0x1c0 [ 207.640637][ T6355] ? _local_bh_enable+0xa0/0xa0 [ 207.645499][ T6355] schedule+0x11b/0x1e0 [ 207.649670][ T6355] __lock_sock+0x15e/0x2b0 [ 207.654096][ T6355] ? sk_page_frag_refill+0x200/0x200 [ 207.659418][ T6355] ? do_raw_spin_lock+0x128/0x2f0 [ 207.664539][ T6355] ? init_wait_entry+0xd0/0xd0 [ 207.669324][ T6355] ? __rwlock_init+0x140/0x140 [ 207.674090][ T6355] ? rcu_lock_release+0x5/0x20 [ 207.678864][ T6355] ? __lock_sock_fast+0x43/0xe0 [ 207.683722][ T6355] __lock_sock_fast+0x78/0xe0 [ 207.688425][ T6355] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 207.693628][ T6355] mptcp_diag_get_info+0x1fe/0x9e0 [ 207.698757][ T6355] inet_sk_diag_fill+0xf5e/0x1ca0 [ 207.703800][ T6355] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 207.709531][ T6355] ? do_raw_spin_lock+0x128/0x2f0 [ 207.714564][ T6355] ? __rwlock_init+0x140/0x140 [ 207.719340][ T6355] ? inet_diag_bc_sk+0x18b/0x1120 [ 207.724390][ T6355] mptcp_diag_dump+0xce6/0x12b0 [ 207.729261][ T6355] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 207.735866][ T6355] __inet_diag_dump+0x1f6/0x380 [ 207.740749][ T6355] netlink_dump+0x694/0xcf0 [ 207.745349][ T6355] ? netlink_lookup+0x1d0/0x1d0 [ 207.750230][ T6355] ? __inet_diag_dump_start+0x805/0x970 [ 207.755787][ T6355] __netlink_dump_start+0x523/0x700 [ 207.760999][ T6355] inet_diag_handler_cmd+0x1d3/0x2b0 [ 207.766329][ T6355] ? rcu_lock_release+0x20/0x20 [ 207.771194][ T6355] ? inet_diag_handler_get_info+0xb90/0xb90 [ 207.777098][ T6355] ? inet_diag_dump_start+0x20/0x20 [ 207.782303][ T6355] ? inet_diag_dump+0x50/0x50 [ 207.786992][ T6355] ? rcu_lock_release+0x20/0x20 [ 207.791849][ T6355] sock_diag_rcv_msg+0x164/0x3e0 [ 207.796804][ T6355] netlink_rcv_skb+0x1f5/0x440 [ 207.801584][ T6355] ? sock_diag_bind+0xa0/0xa0 [ 207.806360][ T6355] ? netlink_ack+0xb50/0xb50 [ 207.810960][ T6355] ? __lock_acquire+0x7d10/0x7d10 [ 207.816025][ T6355] sock_diag_rcv+0x26/0x40 [ 207.820462][ T6355] netlink_unicast+0x774/0x920 [ 207.825229][ T6355] netlink_sendmsg+0x8ba/0xbe0 [ 207.830008][ T6355] ? netlink_getsockopt+0x570/0x570 [ 207.835215][ T6355] ? aa_sock_msg_perm+0x94/0x150 [ 207.840164][ T6355] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 207.845452][ T6355] ? security_socket_sendmsg+0x7c/0xa0 [ 207.850922][ T6355] sock_write_iter+0x2a6/0x3a0 [ 207.855692][ T6355] ? sock_read_iter+0x380/0x380 [ 207.860555][ T6355] do_iter_readv_writev+0x47e/0x5f0 [ 207.865763][ T6355] ? aa_path_link+0x880/0x880 [ 207.870452][ T6355] ? generic_file_rw_checks+0x280/0x280 [ 207.876007][ T6355] ? common_file_perm+0x171/0x1c0 [ 207.881065][ T6355] ? fsnotify_perm+0x5d/0x560 [ 207.885757][ T6355] ? security_file_permission+0x75/0xa0 [ 207.891326][ T6355] do_iter_write+0x205/0x7b0 [ 207.895952][ T6355] ? import_iovec+0x6f/0xa0 [ 207.900466][ T6355] do_writev+0x281/0x480 [ 207.904718][ T6355] ? do_readv+0x460/0x460 [ 207.909060][ T6355] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 207.915045][ T6355] ? lock_chain_count+0x20/0x20 [ 207.919907][ T6355] ? vtime_user_exit+0x2c8/0x3e0 [ 207.924855][ T6355] ? lockdep_hardirqs_on+0x94/0x140 [ 207.930064][ T6355] do_syscall_64+0x4c/0xa0 [ 207.934485][ T6355] ? clear_bhb_loop+0x30/0x80 [ 207.939173][ T6355] ? clear_bhb_loop+0x30/0x80 [ 207.943861][ T6355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.949760][ T6355] RIP: 0033:0x7fd50e2c4dd9 [ 207.954182][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.973806][ T6355] RSP: 002b:00007fd50c51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 207.982236][ T6355] RAX: ffffffffffffffda RBX: 00007fd50e53dfa0 RCX: 00007fd50e2c4dd9 [ 207.990218][ T6355] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 207.998186][ T6355] RBP: 00007fd50e35ad69 R08: 0000000000000000 R09: 0000000000000000 [ 208.006160][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.014150][ T6355] R13: 00007fd50e53e038 R14: 00007fd50e53dfa0 R15: 00007ffceb98b418 [ 208.022146][ T6355] [ 208.025418][ T6355] Kernel Offset: disabled [ 208.029756][ T6355] Rebooting in 86400 seconds..