last executing test programs: 13m40.322382195s ago: executing program 2 (id=43): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x60) 13m40.018481252s ago: executing program 2 (id=46): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xffffffff}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendto$inet6(r0, &(0x7f0000000b80)='f', 0x1, 0x4040801, 0x0, 0x0) 13m39.903478131s ago: executing program 2 (id=48): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd700000000000000000000000000000000000030000"], 0x34c}}, 0x0) 13m39.721368629s ago: executing program 2 (id=50): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 13m38.707571676s ago: executing program 2 (id=65): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x61, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 13m38.388997325s ago: executing program 2 (id=69): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x10020, 0x0) 13m37.869663048s ago: executing program 32 (id=69): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x10020, 0x0) 10m27.636224267s ago: executing program 1 (id=2089): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0) 10m26.481629383s ago: executing program 1 (id=2106): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd700000000000000000000000000000000000030000"], 0x34c}}, 0x0) 10m26.349364103s ago: executing program 1 (id=2098): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x2, r2, 0x1}) 10m26.182336171s ago: executing program 1 (id=2102): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 10m25.272121241s ago: executing program 1 (id=2116): r0 = syz_io_uring_setup(0x5cfc, &(0x7f00000000c0)={0x0, 0xf7ff, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004) poll(&(0x7f0000000000)=[{r0, 0xd010}], 0x1, 0x9) 10m25.047692544s ago: executing program 1 (id=2118): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x60) 10m24.910792954s ago: executing program 33 (id=2118): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x60) 5m25.933780534s ago: executing program 5 (id=5376): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0432c50000000000010902240001000000000904000001030001000921001006012207000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "9ecc9008"}, @local=@item_012={0x1, 0x2, 0x2, '|'}]}}, 0x0}, 0x0) 5m24.107347304s ago: executing program 5 (id=5403): write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344], 0xfce) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)=0x9) 5m22.52790504s ago: executing program 5 (id=5418): syz_open_dev$video(&(0x7f0000000000), 0x480, 0x40000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000004240)=ANY=[@ANYBLOB="1c00000052000100000000000000000002d7000008000100", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x10000) 5m22.457708972s ago: executing program 5 (id=5420): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1) 5m22.398689901s ago: executing program 5 (id=5421): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="75016a006d4158"], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x0) 5m22.179803344s ago: executing program 5 (id=5422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xf) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f000024a000/0x1000)=nil, 0x2) 5m21.927376876s ago: executing program 34 (id=5422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xf) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f000024a000/0x1000)=nil, 0x2) 1m8.822357507s ago: executing program 7 (id=8167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x74, 0xda15, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4, 0xfffc, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000006}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "66d2dad153c9d81291e53a1ee96350e0"}, @timestamp={0x8, 0xa, 0xc4, 0x3ff}, @fastopen={0x22, 0xe, "ec876a521cf0162791f002ab"}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x7, "aa8db7f44b"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) 1m8.608196059s ago: executing program 7 (id=8170): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m8.379142523s ago: executing program 7 (id=8177): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xc002, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8253d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f712782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x40a08010, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m7.624244814s ago: executing program 4 (id=8186): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m7.442007663s ago: executing program 7 (id=8187): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 1m7.392146146s ago: executing program 4 (id=8189): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xb0, 0xf6, 0xa7, 0x8, 0x547, 0x2235, 0xa264, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbf, 0xfc, 0x0, 0xd9, 0xcc, 0x84}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "dfa200", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0xac9, {[@window={0x3, 0x3, 0x7}, @fastopen={0x22, 0xd, "dd9b267dfd8d724bd41d21"}]}}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x14, 0x0, &(0x7f0000000240)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) 1m7.256349751s ago: executing program 7 (id=8190): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1m7.050378449s ago: executing program 7 (id=8191): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3ff, 0x100) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1m6.893999007s ago: executing program 35 (id=8191): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3ff, 0x100) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1m4.205926821s ago: executing program 4 (id=8204): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="88e1c2348565bfbd2278819a56c212924e08e243423246cb5bcb5b2c6792e99327e9add331379d96f313f6cf2f6e5eef4207784392a0de6db6ac787c4f726d8e65047fe5bfbf9e90f6ac8e14572ac474636ace", 0x53}], 0x1, 0x0, 0x0, 0x8814}], 0x1, 0x801) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m4.050154522s ago: executing program 4 (id=8207): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 1m3.883352376s ago: executing program 4 (id=8208): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$inet6_sctp(0xa, 0x5, 0x84) pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0x1}], 0xfd, 0x5, 0xb2) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 1m3.800902328s ago: executing program 4 (id=8209): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf3", 0x6}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 1m3.063969863s ago: executing program 36 (id=8209): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf3", 0x6}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 3.775822097s ago: executing program 9 (id=8783): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) io_uring_setup(0x22, &(0x7f0000000040)={0x0, 0x1445e, 0x1d410, 0x0, 0x12e}) 3.652322337s ago: executing program 9 (id=8784): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f00000000c0)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x211, 0x2100039, 0x0, 0x0, 0x1, 0x59, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x10003fffc, {0x7fff, 0x3, 0x0, {0x5, 0xffffffffffffffff, 0x200000006, 0xfffffffffffffff1, 0x400000001b, 0x16729df0, 0x3, 0x3, 0x40, 0x2000, 0xfffffffd, 0x0, 0x0, 0xb, 0xa7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.520580229s ago: executing program 9 (id=8785): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d0493c2000000000001090224000100003000090400000503000000092100000801220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SYMLINKAT={0x26, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000200)='.\x00', 0x0, 0x0, 0x1}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a98aab"], 0x0}, 0x0) 2.906840776s ago: executing program 8 (id=8792): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x2000fb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 2.569141036s ago: executing program 8 (id=8795): fsopen(&(0x7f0000000040)='cifs\x00', 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000200), &(0x7f0000000580)=[r2], &(0x7f0000000040)}) 2.403739061s ago: executing program 8 (id=8797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a040000000000080000000014000200fe8000000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x2, 0x4, 0x1}}, 0x80, 0x0}}], 0x1, 0x20000041) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.343110458s ago: executing program 8 (id=8799): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2, 0xfffff2e7}) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "38462fcf05b44c980ae5f5d3957e3ffd5b3ef7901f0c089a67e3112a227256227b39b2d332853b078400df5b5127c4d3827bb9648b9a25d7e250fcfaabea0e974ad3ea376c75b34180a7e7fbdca7ca79d9d24a57a8821c3227dcd10c49a84e1c176004deecb09640f01f0f6962edf5913f6e0ced9a29b00b4e18e93d20924a28a3643be0f6e178d835ab3dec7960ba6706366074435208784ff093ec2a56c8f724d0d29e8186b25af0eb30ff1a1c757c40c2"}}, 0x0, 0x0}, 0x0) 1.77517127s ago: executing program 9 (id=8801): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x4e21, 0x6, 0x4, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x4}, {0x0, 0x0, 0x2000, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@loopback, 0x4d3, 0x32}, 0x0, @in6=@private2, 0x0, 0x0, 0x0, 0x24, 0x8, 0x0, 0x40000}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.46136414s ago: executing program 6 (id=8806): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x2000fb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 1.402200978s ago: executing program 0 (id=8807): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r0 = gettid() r1 = gettid() tkill(r0, 0x12) tkill(r0, 0x1) tkill(r1, 0x14) 1.384421971s ago: executing program 3 (id=8808): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001000)={r3, 0x9, 0x10, 0xcf8d, 0x7}, &(0x7f0000001080)=0x18) 1.334471475s ago: executing program 0 (id=8809): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000380)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 1.239462882s ago: executing program 3 (id=8810): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2a}, 0x94) r0 = syz_io_uring_setup(0x152a, &(0x7f0000000480)={0x0, 0xe469, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.164125952s ago: executing program 0 (id=8811): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000280)=0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x40000005}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x814) 998.043158ms ago: executing program 0 (id=8812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="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", 0x27e}, {&(0x7f0000000980)="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", 0x4a2}], 0x2, 0x0, 0x0, 0x2c}, 0x40440c4) 945.264989ms ago: executing program 6 (id=8813): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) sendto$packet(r0, &(0x7f00000000c0)='F', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r1, 0x1, 0xe0}, 0x14) 915.352699ms ago: executing program 0 (id=8814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f00000034c0)={{0x1, 0x0, 0x80, {0x2, 0xeeee8000, 0x2}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a65822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5d09cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd2f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92db1fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b91fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf3afae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b789c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152cac51a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b7fedfc583fc702a88ef70dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c386717037348de10420616f0cd22ae000000000000000015cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b68981128a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089d51e0f59d80070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb37021aa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb000065905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e080030243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81b1c0dc73332b7d71cb019f6ace4461cdaa985d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8103e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd40406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766be1e4aad5cfce8255b78af2b9ec65bc83a9c7d12cd63b82cd2b506fd4061d1a16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e02d09c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e485542991d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b56201000000000000544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c9fc0524cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd4cfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, 0x0) 841.711249ms ago: executing program 6 (id=8815): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe90, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x3, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x29}) 818.258447ms ago: executing program 3 (id=8817): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40804) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 813.935031ms ago: executing program 9 (id=8818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xd77, 0x4, 0x1, 0x6, 0x100000000, 0x4, 0x8, 0x0, 0x200, 0x91e, 0x2, 0x7fffffffffffffff, 0x7, 0x100000000, 0x400, 0x567b], 0x60000, 0x200000}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffffffff, 0xb000, 0xf000, 0xd8, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x50000, 0x0, 0x0, 0x8, 0x62, 0x0, 0x6a, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x10b002, 0xe000, 0xc, 0x0, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x80a0000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xe}, {0xeeef0000}, {0x1, 0xff7e}, 0x60000004, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 551.838531ms ago: executing program 0 (id=8819): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688140032000103000aff3f000057fc5ad90200bb6a880000d6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15", 0x65) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 551.301332ms ago: executing program 3 (id=8820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80}, 0x50) r1 = syz_io_uring_setup(0xed0, &(0x7f00000005c0)={0x0, 0x100002, 0x10300, 0x3, 0x20}, &(0x7f0000000680)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f0000000880)="b8b14e68a1a5e727847d3745e7af", 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 550.938691ms ago: executing program 6 (id=8821): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x7, @empty, 0x4002800}}, 0x10, 0x0, 0x1fffc, 0x3, 0x56, 0x0, 0x4}, 0x9c) 524.276584ms ago: executing program 9 (id=8822): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x80}, 0x1c) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) 399.562795ms ago: executing program 3 (id=8823): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x11, 0x4) recvmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x25, 0x0, 0x0, &(0x7f0000000580)=""/29, 0xfffffffffffffee0}, 0x4}], 0x1, 0x0, 0x0) 275.765956ms ago: executing program 6 (id=8824): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 240.849345ms ago: executing program 3 (id=8825): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x2000fb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 160.437217ms ago: executing program 6 (id=8826): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40044149, &(0x7f0000000040)=0x5) 133.641923ms ago: executing program 8 (id=8827): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSACTIVE(r1, 0x4020744f, 0x0) 0s ago: executing program 8 (id=8828): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): 10][ T5907] usb 4-1: config 0 descriptor?? [ 782.577539][ T5907] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 782.830720][ T6068] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 782.975080][ T5907] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 783.001470][ T6068] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 783.020526][ T6068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.037291][ T6068] usb 5-1: Product: syz [ 783.041827][ T6068] usb 5-1: Manufacturer: syz [ 783.046460][ T6068] usb 5-1: SerialNumber: syz [ 783.075143][ T6068] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 783.106352][ T5879] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 783.471063][ T6068] usb 5-1: USB disconnect, device number 5 [ 783.587800][ T5907] gspca_cpia1: usb_control_msg 05, error -71 [ 783.610879][ T5907] cpia1 4-1:0.0: unexpected systemstate: 00 [ 783.641052][ T5907] usb 4-1: USB disconnect, device number 119 [ 784.184465][T24707] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=2846233827 (22769870616 ns) > initial count (14430147192 ns). Using initial count to start timer. [ 784.214054][ T5879] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 784.255916][ T5879] ath9k_htc: Failed to initialize the device [ 784.303940][ T6068] usb 5-1: ath9k_htc: USB layer deinitialized [ 784.475626][T24707] kvm: apic: phys broadcast and lowest prio [ 784.482335][T24707] kvm: Disabled LAPIC found during irq injection [ 784.674610][ T6068] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 784.842443][ T6068] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.872217][ T6068] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.903210][ T6068] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 784.931456][ T6068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.940688][ T6068] usb 4-1: Product: syz [ 784.947588][ T6068] usb 4-1: Manufacturer: syz [ 784.965289][ T6068] usb 4-1: SerialNumber: syz [ 786.067648][T24740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7655'. [ 786.107750][T24740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7655'. [ 786.143129][T24740] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7655'. [ 786.170544][T24740] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7655'. [ 786.454511][T24751] tmpfs: Unknown parameter 'óÐåÝõZåÐmHœSuLVÏŒGÿéUË9ËQ1' [ 786.899865][T24769] loop2: detected capacity change from 0 to 7 [ 786.913437][ T5840] Dev loop2: unable to read RDB block 7 [ 786.925760][ T5840] loop2: unable to read partition table [ 786.935615][ T5840] loop2: partition table beyond EOD, truncated [ 786.946726][T24769] Dev loop2: unable to read RDB block 7 [ 786.961259][T24769] loop2: unable to read partition table [ 786.979790][T24769] loop2: partition table beyond EOD, truncated [ 786.997936][T24769] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 787.034049][ T5198] Dev loop2: unable to read RDB block 7 [ 787.039826][ T5198] loop2: unable to read partition table [ 787.047396][ T5198] loop2: partition table beyond EOD, truncated [ 787.447666][ T6068] usb 4-1: 0:2 : does not exist [ 787.492000][ T6068] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 787.569127][ T6068] usb 4-1: USB disconnect, device number 120 [ 787.644029][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 788.006809][ T30] audit: type=1326 audit(1768564976.731:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24801 comm="syz.4.7684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 788.059769][ T30] audit: type=1326 audit(1768564976.731:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24801 comm="syz.4.7684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13558 code=0x7ffc0000 [ 788.091207][ T6068] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 788.121600][ T30] audit: type=1326 audit(1768564976.731:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24801 comm="syz.4.7684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13558 code=0x7ffc0000 [ 788.149547][ T30] audit: type=1326 audit(1768564976.731:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24801 comm="syz.4.7684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13558 code=0x7ffc0000 [ 788.173609][ T30] audit: type=1326 audit(1768564976.731:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24801 comm="syz.4.7684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13558 code=0x7ffc0000 [ 788.197998][ T30] audit: type=1326 audit(1768564976.731:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24801 comm="syz.4.7684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13558 code=0x7ffc0000 [ 788.223051][ T30] audit: type=1326 audit(1768564976.731:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24801 comm="syz.4.7684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13558 code=0x7ffc0000 [ 788.251161][ T30] audit: type=1326 audit(1768564976.731:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24801 comm="syz.4.7684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13558 code=0x7ffc0000 [ 788.303601][ T6068] usb 4-1: Using ep0 maxpacket: 8 [ 788.342930][ T6068] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 788.351947][ T6068] usb 4-1: config 150 has no interface number 0 [ 788.358315][ T6068] usb 4-1: config 150 interface 204 has no altsetting 0 [ 788.372384][ T6068] usb 4-1: config 150 interface 1 has no altsetting 0 [ 788.379319][ T30] audit: type=1326 audit(1768564976.731:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24801 comm="syz.4.7684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13558 code=0x7ffc0000 [ 788.423739][ T6068] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 788.433556][ T6068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.444214][ T30] audit: type=1326 audit(1768564976.731:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24801 comm="syz.4.7684" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f13558 code=0x7ffc0000 [ 788.466579][ T6068] usb 4-1: Product: syz [ 788.471752][ T6068] usb 4-1: Manufacturer: syz [ 788.476339][ T6068] usb 4-1: SerialNumber: syz [ 788.698397][ T6068] xr_serial 4-1:150.204: xr_serial converter detected [ 788.866650][T24820] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7692'. [ 789.073487][T24824] binder: 24823:24824 ioctl c0306201 800001c0 returned -22 [ 789.102223][ T5909] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 789.138815][T24826] kvm: user requested TSC rate below hardware speed [ 789.180745][T24704] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 789.243712][T24829] kernel read not supported for file /file0 (pid: 24829 comm: syz.7.7696) [ 789.263253][ T5909] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 789.273785][ T5909] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 789.287595][ T5909] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 789.297304][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.305617][ T5909] usb 7-1: Product: syz [ 789.310020][ T5909] usb 7-1: Manufacturer: syz [ 789.316015][ T5909] usb 7-1: SerialNumber: syz [ 789.324636][ T5909] usb 7-1: config 0 descriptor?? [ 789.330392][T24819] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 789.341102][T24819] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 789.345909][T24704] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 789.371102][T24704] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 789.381773][T24704] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 789.391361][T24704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.405954][T24822] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 789.429508][T24704] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 789.517784][ T6068] usb 4-1: xr_serial converter now attached to ttyUSB0 [ 789.560043][T24819] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 789.581376][T24819] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 789.648992][T19195] usb 5-1: USB disconnect, device number 6 [ 789.722976][ T6068] usb 4-1: USB disconnect, device number 121 [ 789.737178][ T6068] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 789.749947][ T6068] xr_serial 4-1:150.204: device disconnected [ 790.615182][ T5909] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 790.679732][ T5909] dm9601 7-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 790.698876][ T5909] usb 7-1: USB disconnect, device number 118 [ 790.709760][ T5909] dm9601 7-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet [ 790.821026][ T6068] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 790.992027][ T6068] usb 4-1: Using ep0 maxpacket: 16 [ 790.999693][ T6068] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.014088][ T6068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 791.025203][ T6068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 791.034903][ T6068] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 791.044703][ T6068] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 791.058962][ T6068] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 791.068254][ T6068] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 791.076358][ T6068] usb 4-1: Manufacturer: syz [ 791.084511][ T6068] usb 4-1: config 0 descriptor?? [ 791.130591][ T5909] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 791.290713][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 791.303997][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.328593][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.339843][ T5909] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 791.350758][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.368123][ T5909] usb 5-1: config 0 descriptor?? [ 791.377506][ T6068] rc_core: IR keymap rc-hauppauge not found [ 791.400380][ T6068] Registered IR keymap rc-empty [ 791.406285][ T6068] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.431705][ T6068] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.464054][ T6068] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 791.493209][ T6068] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input147 [ 791.523522][ T6068] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.550841][ T6068] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.580583][ T6068] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.600574][ T6068] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.630568][ T6068] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.650622][ T6068] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.670584][ T6068] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.690604][ T6068] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.711232][ T6068] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.740887][ T6068] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.758846][T24877] syzkaller1: entered promiscuous mode [ 791.767303][ T6068] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 791.776635][T24877] syzkaller1: entered allmulticast mode [ 791.792328][ T6068] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 791.804062][ T5909] ft260 0003:0403:6030.0091: unknown main item tag 0x7 [ 792.008529][ T5909] ft260 0003:0403:6030.0091: chip code: 6424 8183 [ 792.201399][ T5909] ft260 0003:0403:6030.0091: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 792.479231][T19195] usb 4-1: USB disconnect, device number 122 [ 792.608199][ T5909] ft260 0003:0403:6030.0091: failed to retrieve status: -71 [ 792.618994][ T5909] ft260 0003:0403:6030.0091: failed to reset I2C controller: -71 [ 792.644481][ T5909] usb 5-1: USB disconnect, device number 7 [ 793.151135][ T6068] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 793.204027][T24922] netlink: 'syz.3.7736': attribute type 1 has an invalid length. [ 793.212282][T24922] netlink: 'syz.3.7736': attribute type 6 has an invalid length. [ 793.220156][T24922] netlink: 'syz.3.7736': attribute type 3 has an invalid length. [ 793.319014][ T6068] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 793.328853][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 793.350955][ T6068] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 793.359347][ T6068] usb 7-1: Product: syz [ 793.371362][ T6068] usb 7-1: Manufacturer: syz [ 793.376009][ T6068] usb 7-1: SerialNumber: syz [ 793.384655][ T6068] usb 7-1: config 0 descriptor?? [ 793.393145][ T6068] ch341 7-1:0.0: ch341-uart converter detected [ 794.414956][ T6068] ch341-uart ttyUSB0: break control not supported, using simulated break [ 794.433920][ T6068] usb 7-1: ch341-uart converter now attached to ttyUSB0 [ 794.449185][ T6068] usb 7-1: USB disconnect, device number 119 [ 794.478193][ T6068] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 794.496247][ T6068] ch341 7-1:0.0: device disconnected [ 795.545502][T24989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7764'. [ 795.585973][T24989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7764'. [ 795.616478][T24989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7764'. [ 795.887079][T24997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7767'. [ 795.917376][T24997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7767'. [ 795.938154][T24997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7767'. [ 796.020558][T24704] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 796.211491][T24704] usb 5-1: Using ep0 maxpacket: 8 [ 796.225262][T24704] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 796.240588][T24704] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 796.250996][T24704] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 796.260880][T24704] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 796.272205][T24704] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.293833][T24704] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 796.323836][T24704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.553642][T24704] usb 5-1: usb_control_msg returned -32 [ 796.563826][T24704] usbtmc 5-1:16.0: can't read capabilities [ 797.275054][T25023] usbtmc 5-1:16.0: usb_clear_halt returned -32 [ 797.332711][T25026] netlink: 'syz.6.7778': attribute type 1 has an invalid length. [ 797.444798][T25026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.482876][T24704] usb 5-1: USB disconnect, device number 8 [ 797.844506][T25036] loop2: detected capacity change from 0 to 7 [ 797.864640][T25036] Dev loop2: unable to read RDB block 7 [ 797.870256][T25036] loop2: unable to read partition table [ 797.901064][T25036] loop2: partition table beyond EOD, truncated [ 797.931668][T25036] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 798.756923][T25064] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 798.761467][T25067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7791'. [ 798.778259][T25064] bond1: (slave lo): Enslaving as a backup interface with an up link [ 798.778600][T25064] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 799.658555][T25107] veth1_to_bridge: entered promiscuous mode [ 799.682331][T25107] veth1_to_bridge: left promiscuous mode [ 800.250549][T24704] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 800.260675][ T6068] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 800.312116][T25129] input: syz1 as /devices/virtual/input/input148 [ 800.420616][T24704] usb 7-1: Using ep0 maxpacket: 8 [ 800.432509][ T6068] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 800.445351][ T6068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.456724][T24704] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 800.465135][T24704] usb 7-1: config 0 has no interface number 0 [ 800.471587][ T6068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.487665][T24704] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 800.508123][ T6068] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 800.530519][T24704] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 800.552310][ T6068] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 800.569915][T24704] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 800.581313][ T6068] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 800.589401][ T6068] usb 5-1: Manufacturer: syz [ 800.599137][T24704] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 800.622205][ T6068] usb 5-1: config 0 descriptor?? [ 800.629809][T24704] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 800.639583][T24704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.671186][T24704] usb 7-1: config 0 descriptor?? [ 800.687922][T24704] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 800.850555][ T5879] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 801.010972][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 801.019590][ T5879] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 801.028598][ T5879] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 801.039716][ T5879] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 801.050315][ T5879] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 801.062082][ T5879] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 801.077847][ T6068] appleir 0003:05AC:8243.0092: unknown main item tag 0x0 [ 801.087219][ T5879] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 801.098332][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.107244][ T6068] appleir 0003:05AC:8243.0092: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 801.345422][ T5879] usb 4-1: GET_CAPABILITIES returned 0 [ 801.351481][ T5879] usbtmc 4-1:16.0: can't read capabilities [ 801.608694][ T5879] usb 4-1: USB disconnect, device number 123 [ 803.004329][T24704] usb 7-1: USB disconnect, device number 120 [ 803.010458][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 803.043059][ T6068] usb 5-1: USB disconnect, device number 9 [ 803.049561][T24704] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 803.294641][T25167] binder: 25166:25167 ioctl c0306201 800003c0 returned -14 [ 804.090859][ T24] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 804.261752][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 804.279910][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.292088][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 804.303464][ T24] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 804.330524][ T24] usb 4-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 804.339669][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.348294][ T24] usb 4-1: Product: syz [ 804.352803][ T24] usb 4-1: Manufacturer: syz [ 804.357411][ T24] usb 4-1: SerialNumber: syz [ 804.614813][T25217] netlink: 'syz.6.7855': attribute type 9 has an invalid length. [ 804.620564][ T6068] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 804.622872][T25217] netlink: 'syz.6.7855': attribute type 11 has an invalid length. [ 804.638642][T25217] netlink: 'syz.6.7855': attribute type 12 has an invalid length. [ 804.646508][T25217] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.7855'. [ 804.656734][T25217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7855'. [ 804.781093][ T6068] usb 5-1: Using ep0 maxpacket: 32 [ 804.787841][ T6068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.803572][ T6068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.813418][ T6068] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 804.822508][ T6068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.839903][ T6068] usb 5-1: config 0 descriptor?? [ 805.268733][ T6068] savu 0003:1E7D:2D5A.0093: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 805.545107][ T6068] usb 5-1: USB disconnect, device number 10 [ 805.579175][ T24] cdc_ncm 4-1:1.0: bind() failure [ 805.589527][ T24] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 805.598954][ T24] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 805.609509][ T24] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 805.621246][ T24] usb 4-1: USB disconnect, device number 124 [ 806.456491][T25256] input: syz0 as /devices/virtual/input/input149 [ 806.780692][ T6068] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 806.942703][ T6068] usb 5-1: Using ep0 maxpacket: 16 [ 806.952355][ T6068] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.977736][ T6068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 806.993565][ T6068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 807.003572][ T6068] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 807.013459][ T6068] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.029905][ T6068] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 807.039514][ T6068] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 807.071983][ T6068] usb 5-1: Manufacturer: syz [ 807.138635][ T6068] usb 5-1: config 0 descriptor?? [ 807.384193][T25295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7888'. [ 807.402894][T25300] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7889'. [ 807.435670][T25300] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7889'. [ 807.444950][ T6068] rc_core: IR keymap rc-hauppauge not found [ 807.453876][ T6068] Registered IR keymap rc-empty [ 807.460042][T25300] veth1_macvtap: left promiscuous mode [ 807.467180][ T6068] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 807.480568][T19195] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 807.507440][ T6068] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 807.541434][ T6068] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 807.585503][ T6068] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input150 [ 807.642180][T19195] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 807.669117][T19195] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 807.674417][ T6068] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 807.688436][T19195] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 807.704794][T19195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.723031][T25290] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 807.733265][ T6068] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 807.755531][T19195] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 807.770588][ T6068] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 807.806277][ T6068] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 807.843323][ T6068] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 807.881848][ T6068] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 807.921127][ T6068] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 807.941944][ T6068] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 807.970617][ T6068] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 807.990549][ T6068] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 807.997856][T23538] usb 4-1: USB disconnect, device number 125 [ 808.034165][ T6068] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 808.060717][ T6068] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 808.089875][ T6068] usb 5-1: USB disconnect, device number 11 [ 808.304047][ T30] kauditd_printk_skb: 407 callbacks suppressed [ 808.304063][ T30] audit: type=1326 audit(1768564997.031:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25319 comm="syz.0.7898" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 808.520653][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 808.528612][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 808.540785][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 808.688280][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.695077][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.097599][T25337] netlink: 'syz.6.7904': attribute type 4 has an invalid length. [ 809.155406][T25337] netlink: 'syz.6.7904': attribute type 4 has an invalid length. [ 809.851239][T25374] input: syz1 as /devices/virtual/input/input151 [ 810.169872][T25392] batadv_slave_1: entered promiscuous mode [ 810.177190][T25392] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7927'. [ 810.304726][T25392] batadv_slave_1 (unregistering): left promiscuous mode [ 810.760620][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 810.760620][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 810.766757][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 811.434548][T25431] loop4: detected capacity change from 0 to 7 [ 811.447576][T25431] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 811.459294][T25431] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 811.477504][T25431] loop4: p2 start 4294901760 is beyond EOD, truncated [ 811.488996][T25431] loop4: p3 start 4294836224 is beyond EOD, truncated [ 811.506098][T25431] loop4: p4 size 327680 extends beyond EOD, truncated [ 811.522261][T25431] loop4: p5 size 8323072 extends beyond EOD, truncated [ 811.531840][T25431] loop4: p6 start 8192 is beyond EOD, truncated [ 811.577275][T18927] udevd[18927]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 811.586949][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 811.601038][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 811.953313][T25442] netlink: 'syz.4.7945': attribute type 4 has an invalid length. [ 811.968287][ T30] audit: type=1326 audit(1768565000.691:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25441 comm="syz.6.7955" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f96539 code=0x0 [ 812.001736][T25442] netlink: 'syz.4.7945': attribute type 4 has an invalid length. [ 812.257700][T25450] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 812.412127][ T30] audit: type=1326 audit(1768565001.141:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25457 comm="syz.3.7952" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f06539 code=0x0 [ 812.600711][T23538] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 812.763553][T23538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.774765][T23538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.794973][T23538] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 812.815316][T23538] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 812.824785][T23538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.851699][T23538] usb 5-1: config 0 descriptor?? [ 812.933865][ T30] audit: type=1326 audit(1768565001.661:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.0.7958" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 812.956710][T25467] pim6reg1: entered promiscuous mode [ 812.973334][T25467] pim6reg1: entered allmulticast mode [ 813.286227][T23538] plantronics 0003:047F:FFFF.0094: ignoring exceeding usage max [ 813.357219][T23538] plantronics 0003:047F:FFFF.0094: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 813.511044][T23538] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 813.570556][T19195] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 813.660555][T23538] usb 7-1: Using ep0 maxpacket: 16 [ 813.667200][T23538] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.678516][T23538] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.688396][T23538] usb 7-1: config 0 interface 0 has no altsetting 0 [ 813.695185][T23538] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 813.704751][T23538] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.715850][T23538] usb 7-1: config 0 descriptor?? [ 813.732498][T19195] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.743049][T19195] usb 4-1: config 0 interface 0 has no altsetting 0 [ 813.753468][T19195] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 813.763008][T19195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.771549][T19195] usb 4-1: Product: syz [ 813.775755][T19195] usb 4-1: Manufacturer: syz [ 813.780384][T19195] usb 4-1: SerialNumber: syz [ 813.793396][T19195] usb 4-1: config 0 descriptor?? [ 813.809385][T19195] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 813.837890][T19195] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 813.849782][T19195] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 813.860062][T19195] usb 4-1: media controller created [ 813.881825][T19195] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 813.940786][T19195] DVB: Unable to find symbol tda10046_attach() [ 813.949663][T19195] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 813.972606][T19195] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 814.163917][T23538] cougar 0003:060B:500A.0095: unexpected long global item [ 814.175897][T23538] cougar 0003:060B:500A.0095: parse failed [ 814.181957][T23538] cougar 0003:060B:500A.0095: probe with driver cougar failed with error -22 [ 814.346188][T23538] usb 7-1: USB disconnect, device number 121 [ 814.379667][T25490] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7965'. [ 814.494838][T25492] syzkaller1: entered promiscuous mode [ 814.502672][T25492] syzkaller1: entered allmulticast mode [ 815.033938][T19195] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 815.053697][T19195] usb 4-1: USB disconnect, device number 126 [ 815.401818][T23538] usb 5-1: USB disconnect, device number 12 [ 815.830836][ T6068] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 816.003501][ T6068] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.026359][ T6068] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 816.040044][T25550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7991'. [ 816.041730][ T6068] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 816.068579][ T6068] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.111711][ T6068] usb 7-1: config 0 descriptor?? [ 816.339657][T25562] input: syz1 as /devices/virtual/input/input153 [ 816.577032][ T6068] kovaplus 0003:1E7D:2D50.0096: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 816.636175][T23538] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 816.836696][T23538] usb 4-1: Using ep0 maxpacket: 8 [ 816.872750][T23538] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 816.883293][T23538] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 816.893551][T23538] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 816.903771][T23538] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 816.924783][T23538] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 816.938760][T23538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.159359][T23538] usb 4-1: GET_CAPABILITIES returned 0 [ 817.165118][T23538] usbtmc 4-1:16.0: can't read capabilities [ 817.247800][ T30] audit: type=1326 audit(1768565005.971:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25586 comm="syz.0.8007" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 817.359524][ T6068] kovaplus 0003:1E7D:2D50.0096: couldn't init struct kovaplus_device [ 817.368730][ T6068] kovaplus 0003:1E7D:2D50.0096: couldn't install mouse [ 817.381112][ T6068] kovaplus 0003:1E7D:2D50.0096: probe with driver kovaplus failed with error -71 [ 817.395077][ T6068] usb 7-1: USB disconnect, device number 122 [ 817.399967][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.410200][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.419265][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.428323][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.438021][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.447119][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.456178][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.465246][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.483413][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.492545][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.505235][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.514371][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.523447][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.532514][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.541903][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.550982][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 817.576133][ T5909] usb 4-1: USB disconnect, device number 127 [ 818.390720][ T6068] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 818.576096][ T6068] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 818.595597][ T6068] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 818.621063][ T6068] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 818.690583][ T6068] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 818.734421][ T6068] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 818.758545][ T6068] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 818.769708][ T6068] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 818.801736][ T6068] usb 5-1: Product: syz [ 818.806011][ T6068] usb 5-1: Manufacturer: syz [ 818.820336][ T6068] cdc_wdm 5-1:1.0: skipping garbage [ 818.839557][ T6068] cdc_wdm 5-1:1.0: skipping garbage [ 818.856777][ T6068] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 818.869184][ T6068] cdc_wdm 5-1:1.0: Unknown control protocol [ 819.317909][T25632] input: syz0 as /devices/virtual/input/input154 [ 819.855000][T19195] usb 5-1: USB disconnect, device number 13 [ 820.188309][ T30] audit: type=1326 audit(1768565008.911:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25665 comm="syz.7.8039" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 820.426512][T25674] dvmrp5: entered allmulticast mode [ 820.450081][T25674] syz_tun: entered allmulticast mode [ 820.457161][T25674] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 820.464536][T25674] dvmrp5: left allmulticast mode [ 820.533840][T25673] syz_tun: left allmulticast mode [ 820.774895][T25687] bridge1: entered promiscuous mode [ 820.780230][T25687] bridge1: entered allmulticast mode [ 820.790187][T25687] team0: Port device bridge1 added [ 820.809996][T25687] bridge0: port 3(team0) entered blocking state [ 820.817142][T25687] bridge0: port 3(team0) entered disabled state [ 820.824398][T25687] team0: entered allmulticast mode [ 820.829704][T25687] team_slave_0: entered allmulticast mode [ 820.836656][T25687] team_slave_1: entered allmulticast mode [ 820.847810][T25687] team0: entered promiscuous mode [ 820.854270][T25687] team_slave_0: entered promiscuous mode [ 820.860201][T25687] team_slave_1: entered promiscuous mode [ 821.410732][T24704] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 821.582748][T24704] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.614597][T24704] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 821.639036][T24704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.660164][T24704] usb 7-1: config 0 descriptor?? [ 821.686667][T25713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8059'. [ 821.901868][T24704] usbhid 7-1:0.0: can't add hid device: -71 [ 821.916273][T24704] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 821.944838][T24704] usb 7-1: USB disconnect, device number 123 [ 822.390584][T23538] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 822.550998][T23538] usb 7-1: Using ep0 maxpacket: 32 [ 822.567218][T23538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.585098][T23538] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 822.594875][T23538] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.607848][T23538] usb 7-1: config 0 descriptor?? [ 822.636410][T23538] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 822.662063][T23538] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 822.915532][ C1] ldusb 7-1:0.0: Ring buffer overflow, 8 bytes dropped [ 822.978784][T25750] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8075'. [ 823.078895][T25754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8076'. [ 823.245480][ C0] ldusb 7-1:0.0: Ring buffer overflow, 8 bytes dropped [ 823.810573][T24704] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 823.974330][T24704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 824.010611][T24704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.021066][T24704] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 824.030208][T24704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.048590][T24704] usb 4-1: config 0 descriptor?? [ 824.269659][ T5879] usb 7-1: USB disconnect, device number 124 [ 824.280608][T23538] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 824.286180][ T5879] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 824.449817][T23538] usb 5-1: unable to get BOS descriptor or descriptor too short [ 824.459314][T23538] usb 5-1: no configurations [ 824.464600][T23538] usb 5-1: can't read configurations, error -22 [ 824.467152][T24704] elan 0003:04F3:0755.0097: unknown main item tag 0x0 [ 824.478121][T24704] elan 0003:04F3:0755.0097: unknown main item tag 0x0 [ 824.488187][T24704] elan 0003:04F3:0755.0097: unknown main item tag 0x0 [ 824.495755][T24704] elan 0003:04F3:0755.0097: unknown main item tag 0x0 [ 824.503267][T24704] elan 0003:04F3:0755.0097: unknown main item tag 0x0 [ 824.511020][T24704] elan 0003:04F3:0755.0097: failed to start in urb: -90 [ 824.519150][T24704] elan 0003:04F3:0755.0097: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 824.672069][T24704] usb 4-1: USB disconnect, device number 2 [ 824.711297][ T5879] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 824.861900][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.884735][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.895818][ T5879] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 824.909362][ T5879] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 824.922895][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.941106][ T5879] usb 7-1: config 0 descriptor?? [ 825.387753][ T5879] plantronics 0003:047F:FFFF.0098: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 826.681092][ C0] plantronics 0003:047F:FFFF.0098: usb_submit_urb(ctrl) failed: -1 [ 827.484945][T23538] usb 7-1: USB disconnect, device number 125 [ 828.180811][T24704] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 828.361659][T24704] usb 5-1: Using ep0 maxpacket: 8 [ 828.369240][T24704] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 828.378752][T24704] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 828.389830][T24704] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 828.400019][T24704] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 828.412407][T24704] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 828.425756][T24704] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 828.434935][T24704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.658662][T24704] usb 5-1: GET_CAPABILITIES returned 0 [ 828.664602][T24704] usbtmc 5-1:16.0: can't read capabilities [ 828.980488][T25912] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 828.985566][T19195] usb 5-1: USB disconnect, device number 16 [ 829.003118][T25932] usb 5-1: usbtmc_ioctl_clear_in_halt returned -19 [ 829.875173][T25971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8161'. [ 829.935837][T25976] netlink: 'syz.6.8163': attribute type 3 has an invalid length. [ 829.944810][T25976] netlink: 'syz.6.8163': attribute type 3 has an invalid length. [ 830.114788][T25981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8164'. [ 830.261265][T25989] gretap0: entered promiscuous mode [ 830.272590][T25989] gretap0: left promiscuous mode [ 830.543812][T26006] loop7: detected capacity change from 0 to 7 [ 830.569293][ C0] blk_print_req_error: 26 callbacks suppressed [ 830.569306][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 830.585221][ C0] buffer_io_error: 120 callbacks suppressed [ 830.585239][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 830.599254][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 830.608900][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 830.627844][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 830.637502][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 830.649952][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 830.659599][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 830.668577][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 830.678202][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 830.690433][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 830.700027][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 830.709283][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 830.718991][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 830.727052][ T5824] ldm_validate_partition_table(): Disk read failed. [ 830.743938][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 830.753656][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 830.762739][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 830.772413][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 830.781216][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 830.790879][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 830.799799][ T5824] Dev loop7: unable to read RDB block 0 [ 830.809639][ T5824] loop7: unable to read partition table [ 830.819324][ T5824] loop7: partition table beyond EOD, truncated [ 830.845527][T26006] ldm_validate_partition_table(): Disk read failed. [ 830.871571][T26006] Dev loop7: unable to read RDB block 0 [ 830.889809][T26006] loop7: unable to read partition table [ 830.899561][T26006] loop7: partition table beyond EOD, truncated [ 830.916466][T26006] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 831.024974][T26022] netlink: 'syz.0.8182': attribute type 11 has an invalid length. [ 831.172695][ T6068] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 831.330622][ T6068] usb 7-1: Using ep0 maxpacket: 8 [ 831.340861][ T6068] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 831.351352][ T6068] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 831.371455][ T6068] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 831.390249][ T6068] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 831.402534][ T6068] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.416590][ T6068] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 831.452121][ T6068] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.729248][ T6068] usb 7-1: usb_control_msg returned -32 [ 831.751730][ T6068] usbtmc 7-1:16.0: can't read capabilities [ 831.810538][ T5879] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 831.840604][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 831.970508][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 831.998937][ T5879] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 832.009471][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.018422][ T5879] usb 4-1: Product: syz [ 832.021264][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 832.023713][ T5879] usb 4-1: Manufacturer: syz [ 832.034038][ T24] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 832.034179][ T5879] usb 4-1: SerialNumber: syz [ 832.047449][ T24] usb 5-1: config 0 has no interface number 0 [ 832.055071][ T5879] usb 4-1: config 0 descriptor?? [ 832.060732][ T24] usb 5-1: config 0 interface 191 has no altsetting 0 [ 832.068998][ T5879] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 832.082201][ T24] usb 5-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice=a2.64 [ 832.091538][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.099537][ T24] usb 5-1: Product: syz [ 832.103917][ T24] usb 5-1: Manufacturer: syz [ 832.108522][ T24] usb 5-1: SerialNumber: syz [ 832.119440][ T24] usb 5-1: config 0 descriptor?? [ 832.131193][ T24] usbtest 5-1:0.191: EZ-USB device [ 832.137725][ T24] usbtest 5-1:0.191: high-speed {control bulk-in bulk-out} tests (+alt) [ 832.147410][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 832.157336][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 832.165849][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 832.176835][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 832.186463][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 832.200048][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 832.208786][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 832.217899][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 832.230314][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 832.240139][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 832.427140][T26040] chnl_net:caif_netlink_parms(): no params data found [ 832.439342][T26044] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 832.517760][T26040] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.525831][T26040] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.533341][T26040] bridge_slave_0: entered allmulticast mode [ 832.541287][T26040] bridge_slave_0: entered promiscuous mode [ 832.549631][T26040] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.557458][T26040] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.565210][T26040] bridge_slave_1: entered allmulticast mode [ 832.572646][T26040] bridge_slave_1: entered promiscuous mode [ 832.607979][T26040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.620219][T26040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.642882][ T6068] usb 7-1: USB disconnect, device number 126 [ 832.682908][T26040] team0: Port device team_slave_0 added [ 832.692101][T26040] team0: Port device team_slave_1 added [ 832.694323][T26048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.708726][T26048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.733090][T26040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.740051][T26040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.769497][T26040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.783680][T26040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.791463][T26040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.817992][T26040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.863934][T26040] hsr_slave_0: entered promiscuous mode [ 832.870655][T26040] hsr_slave_1: entered promiscuous mode [ 832.876978][T26040] debugfs: 'hsr0' already exists in 'hsr' [ 832.883649][T26040] Cannot create hsr debugfs directory [ 833.036933][T26040] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 833.047728][T26040] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 833.058182][T26040] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 833.068790][T26040] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 833.100060][T26040] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.107234][T26040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.114719][T26040] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.121936][T26040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.195999][T26040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.221421][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.232553][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.257442][T26040] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.284835][ T5879] gspca_stk1135: reg_w 0xd err -71 [ 833.297062][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.304138][ T5879] gspca_stk1135: serial bus timeout: status=0x00 [ 833.304157][ T5879] gspca_stk1135: Sensor write failed [ 833.310603][ T6089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.339462][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.346604][ T5947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.356433][ T5879] gspca_stk1135: serial bus timeout: status=0x00 [ 833.365982][ T5879] gspca_stk1135: Sensor write failed [ 833.372031][ T5879] gspca_stk1135: serial bus timeout: status=0x00 [ 833.380767][ T5879] gspca_stk1135: Sensor read failed [ 833.386049][ T5879] gspca_stk1135: serial bus timeout: status=0x00 [ 833.393447][ T5879] gspca_stk1135: Sensor read failed [ 833.398816][ T5879] gspca_stk1135: Detected sensor type unknown (0x0) [ 833.410168][ T5879] gspca_stk1135: serial bus timeout: status=0x00 [ 833.422695][ T5879] gspca_stk1135: Sensor read failed [ 833.431076][ T5879] gspca_stk1135: serial bus timeout: status=0x00 [ 833.440379][ T5879] gspca_stk1135: Sensor read failed [ 833.448096][ T5879] gspca_stk1135: serial bus timeout: status=0x00 [ 833.456838][ T5879] gspca_stk1135: Sensor write failed [ 833.466024][ T5879] gspca_stk1135: serial bus timeout: status=0x00 [ 833.474629][ T5879] gspca_stk1135: Sensor write failed [ 833.483503][ T5879] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 833.503413][ T5879] usb 4-1: USB disconnect, device number 3 [ 833.508782][T26040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.583065][T26040] veth0_vlan: entered promiscuous mode [ 833.602980][T26040] veth1_vlan: entered promiscuous mode [ 833.641594][T26040] veth0_macvtap: entered promiscuous mode [ 833.656817][T26040] veth1_macvtap: entered promiscuous mode [ 833.688932][T26040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.705059][T26040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.718587][T23503] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.728772][T23503] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.738881][T23503] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.757030][T23503] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.880170][T23503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.895599][T23503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.977074][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.996048][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.280656][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 834.292244][ T5832] Bluetooth: hci1: command tx timeout [ 834.480474][ T5909] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 834.639657][ T5909] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 834.642635][T16807] usb 5-1: USB disconnect, device number 17 [ 834.667674][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.700341][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.740767][ T5909] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 834.772486][ T5909] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 834.793089][ T5909] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 834.815795][ T5909] usb 7-1: Manufacturer: syz [ 834.860616][ T5907] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 834.875729][ T5909] usb 7-1: config 0 descriptor?? [ 835.031090][ T5907] usb 9-1: Using ep0 maxpacket: 8 [ 835.048059][ T5907] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 835.072259][ T5907] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 835.110566][ T5907] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 835.130623][ T5907] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 835.161353][ T5907] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.204971][ T5907] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 835.235390][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.333589][ T5909] appleir 0003:05AC:8243.0099: unknown main item tag 0x0 [ 835.377764][ T1106] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.390428][ T5909] appleir 0003:05AC:8243.0099: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 835.483165][ T5907] usb 9-1: usb_control_msg returned -32 [ 835.538557][ T5907] usbtmc 9-1:16.0: can't read capabilities [ 835.639100][ T5909] usb 7-1: USB disconnect, device number 127 [ 835.712382][T26097] fido_id[26097]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 835.766004][ T1106] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.910279][ T1106] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.947513][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 835.958540][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 835.967753][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 835.985283][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 835.994471][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 836.015537][ T1106] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.371172][ T5832] Bluetooth: hci1: command tx timeout [ 837.563459][ T1106] bond1 (unregistering): (slave gretap1): Releasing active interface [ 837.651731][ T5907] usb 9-1: USB disconnect, device number 2 [ 837.908890][T26185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8241'. [ 837.921462][T26185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8241'. [ 838.042654][ T5832] Bluetooth: hci4: command tx timeout [ 838.096170][ T1106] bond1 (unregistering): Released all slaves [ 838.204119][T26195] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8245'. [ 838.217385][T26195] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8245'. [ 838.228524][T26103] chnl_net:caif_netlink_parms(): no params data found [ 838.444914][ T5832] Bluetooth: hci1: command tx timeout [ 838.708389][ T1106] hsr_slave_0: left promiscuous mode [ 838.727997][ T1106] hsr_slave_1: left promiscuous mode [ 838.776925][ T1106] veth1_macvtap: left promiscuous mode [ 838.794224][ T1106] veth0_macvtap: left promiscuous mode [ 839.661798][T26229] input: syz0 as /devices/virtual/input/input155 [ 840.120574][ T5832] Bluetooth: hci4: command tx timeout [ 840.521662][ T5832] Bluetooth: hci1: command tx timeout [ 840.644970][T26103] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.661894][T26103] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.689679][T26103] bridge_slave_0: entered allmulticast mode [ 840.707035][T26103] bridge_slave_0: entered promiscuous mode [ 840.726304][T26103] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.750639][T26103] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.784408][T26103] bridge_slave_1: entered allmulticast mode [ 840.802605][T26103] bridge_slave_1: entered promiscuous mode [ 840.908454][T26246] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.991494][T26246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 841.261366][T26103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.294848][T26103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.354939][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8268'. [ 841.551567][T26103] team0: Port device team_slave_0 added [ 841.589351][T26103] team0: Port device team_slave_1 added [ 841.710672][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 841.759693][T26103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.768481][T26103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.808168][T26103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.824851][T26103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.832497][T26103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.865653][T26103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.892965][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 841.914236][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 841.937651][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 841.950979][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.967785][T26266] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 841.992636][T26279] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8275'. [ 841.996882][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 842.065057][T26103] hsr_slave_0: entered promiscuous mode [ 842.088029][T26103] hsr_slave_1: entered promiscuous mode [ 842.137275][T26103] debugfs: 'hsr0' already exists in 'hsr' [ 842.160801][T26103] Cannot create hsr debugfs directory [ 842.200690][ T5832] Bluetooth: hci4: command tx timeout [ 842.259823][ T24] usb 7-1: USB disconnect, device number 2 [ 842.470668][ T56] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 842.654458][ T56] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 842.686439][ T56] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 842.721155][ T56] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 842.762891][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 842.804874][ T56] usb 4-1: SerialNumber: syz [ 842.930171][T26103] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 842.996536][T26103] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 843.064638][ T56] usb 4-1: 0:2 : does not exist [ 843.066130][T26103] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 843.090065][ T56] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 843.183934][ T56] usb 4-1: USB disconnect, device number 4 [ 843.185921][T26103] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 843.285176][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.591673][T26103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.649829][T26103] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.695980][T25114] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.703186][T25114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.736330][T25114] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.743529][T25114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.840077][T26103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.923634][T26103] veth0_vlan: entered promiscuous mode [ 843.955424][T26103] veth1_vlan: entered promiscuous mode [ 844.048313][T26103] veth0_macvtap: entered promiscuous mode [ 844.075581][T26103] veth1_macvtap: entered promiscuous mode [ 844.138039][T26103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.210152][T26103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.281254][ T5832] Bluetooth: hci4: command tx timeout [ 844.308060][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.350091][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.386103][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.423989][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.624581][ T5947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.654385][ T5947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.730529][ T5907] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 844.742400][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.768045][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.916521][ T5907] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 844.948140][ T5907] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 844.970846][ T5907] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 844.994800][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.029065][T26356] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 845.046714][ T5907] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 845.269108][ T5907] usb 7-1: USB disconnect, device number 3 [ 846.389177][T26394] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.8300'. [ 847.254656][T26425] vivid-004: disconnect [ 847.259548][T26425] vivid-004: reconnect [ 847.386328][ T30] audit: type=1326 audit(1768565036.111:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26428 comm="syz.9.8314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 847.454594][ T30] audit: type=1326 audit(1768565036.141:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26428 comm="syz.9.8314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 847.544378][ T30] audit: type=1326 audit(1768565036.141:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26428 comm="syz.9.8314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 847.627142][ T30] audit: type=1326 audit(1768565036.141:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26428 comm="syz.9.8314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 847.714503][ T30] audit: type=1326 audit(1768565036.141:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26428 comm="syz.9.8314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 847.776372][ T30] audit: type=1326 audit(1768565036.151:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26428 comm="syz.9.8314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 847.943427][ T30] audit: type=1326 audit(1768565036.151:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26428 comm="syz.9.8314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 848.066944][ T30] audit: type=1326 audit(1768565036.151:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26428 comm="syz.9.8314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 848.123787][ T30] audit: type=1326 audit(1768565036.151:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26428 comm="syz.9.8314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 848.180057][ T30] audit: type=1326 audit(1768565036.151:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26428 comm="syz.9.8314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=446 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 849.026831][T26476] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8335'. [ 849.214874][ T5886] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 849.331561][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 849.372440][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 849.379837][ T5886] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 849.389990][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.402451][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.417747][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.453564][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.495209][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.515825][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.538391][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.562178][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 849.578732][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.591553][ T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 849.601023][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.612059][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 849.620257][ T24] usb 7-1: SerialNumber: syz [ 849.626333][ T5886] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 849.637239][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 849.653490][ T5886] usb 4-1: SerialNumber: syz [ 849.680318][ T5886] usb 4-1: config 0 descriptor?? [ 849.694672][ T5886] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input156 [ 849.860376][ T24] usb 7-1: 0:2 : does not exist [ 849.895895][ T24] usb 7-1: USB disconnect, device number 4 [ 849.918213][ T5183] bcm5974 4-1:0.0: could not read from device [ 849.941903][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.968341][ T5886] usb 4-1: USB disconnect, device number 5 [ 849.987881][ T5183] bcm5974 4-1:0.0: could not read from device [ 850.210609][ T5879] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 850.370557][ T5879] usb 9-1: Using ep0 maxpacket: 16 [ 850.388907][ T5879] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.436808][ T5879] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 850.454942][ T5879] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 850.465801][ T5879] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.503340][ T5879] usb 9-1: config 0 descriptor?? [ 850.930140][ T5879] HID 045e:07da: Invalid code 65791 type 1 [ 850.940149][ T5879] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.009A/input/input157 [ 850.956682][ T5879] microsoft 0003:045E:07DA.009A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 851.660697][ T5879] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 851.744625][ T24] usb 9-1: USB disconnect, device number 3 [ 851.826532][ T5879] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.861230][ T5879] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 851.887271][ T5879] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 851.909742][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.928248][ T5879] usb 10-1: Product: syz [ 851.938387][ T5879] usb 10-1: Manufacturer: syz [ 851.950838][ T5879] usb 10-1: SerialNumber: syz [ 852.025460][T26572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8373'. [ 852.061737][T26572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8373'. [ 852.177427][ T5879] usb 10-1: 0:2 : does not exist [ 852.197766][ T5879] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 852.235817][ T5879] usb 10-1: USB disconnect, device number 2 [ 852.287480][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.884224][ T5879] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 853.052406][ T5879] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 853.070821][ T5879] usb 7-1: config 1 has no interface number 0 [ 853.084387][ T5879] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.101376][ T5886] psmouse serio17: Failed to reset mouse on : -5 [ 853.110859][ T5879] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 853.130665][ T5879] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 853.145663][ T5879] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 853.160545][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.168587][ T5879] usb 7-1: Product: syz [ 853.174369][ T5879] usb 7-1: Manufacturer: syz [ 853.190916][ T5879] usb 7-1: SerialNumber: syz [ 853.300296][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 853.300315][ T30] audit: type=1326 audit(1768565042.021:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.8.8396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 853.369818][ T30] audit: type=1326 audit(1768565042.021:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.8.8396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 853.460477][ T30] audit: type=1326 audit(1768565042.051:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.8.8396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 853.538362][ T30] audit: type=1326 audit(1768565042.061:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.8.8396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 853.617353][ T30] audit: type=1326 audit(1768565042.061:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.8.8396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 853.698055][ T30] audit: type=1326 audit(1768565042.061:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.8.8396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 853.723503][ T30] audit: type=1326 audit(1768565042.061:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.8.8396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 853.770290][ T30] audit: type=1326 audit(1768565042.061:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.8.8396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 853.796787][ T30] audit: type=1326 audit(1768565042.061:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.8.8396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 853.820811][ T30] audit: type=1326 audit(1768565042.061:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26624 comm="syz.8.8396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 854.074476][ T5879] cdc_ncm 7-1:1.1: bind() failure [ 854.277926][ T24] usb 7-1: USB disconnect, device number 5 [ 854.845148][T26661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8412'. [ 854.882114][T26661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8412'. [ 854.901743][T26661] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8412'. [ 854.920759][T26661] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8412'. [ 855.370762][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 855.520608][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 855.527072][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 855.538890][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 855.548119][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.560761][ T24] usb 9-1: Product: syz [ 855.564961][ T24] usb 9-1: Manufacturer: syz [ 855.569578][ T24] usb 9-1: SerialNumber: syz [ 855.578650][ T24] usb 9-1: config 0 descriptor?? [ 855.590902][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 856.555446][T26702] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 856.594263][ T24] gspca_zc3xx: reg_w_i err -71 [ 856.991481][ T5886] misc userio: Buffer overflowed, userio client isn't keeping up [ 857.210560][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 857.221305][ T24] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 857.256989][ T24] usb 9-1: USB disconnect, device number 4 [ 858.099547][ T5886] input: PS/2 Generic Mouse as /devices/serio17/input/input158 [ 858.294842][ T5879] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 858.371013][ T5886] psmouse serio17: Failed to enable mouse on [ 858.454892][ T5879] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 858.503659][ T5879] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 858.537424][ T5879] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 858.570844][ T5879] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.604503][T26754] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 858.652939][ T5879] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 858.730600][ T5886] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 858.936587][ T24] usb 9-1: USB disconnect, device number 5 [ 858.952371][ T5886] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 858.983420][ T5886] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 859.015350][ T5886] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 859.042299][ T5886] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.066027][T26769] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 859.088599][ T5886] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 859.410089][ T5879] usb 10-1: USB disconnect, device number 3 [ 859.436975][T26789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8442'. [ 861.430503][ T5879] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 861.602888][ T5879] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 861.628269][ T5879] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 861.649467][ T5879] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 861.664354][ T5879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.681979][T26830] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 861.700818][ T5879] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 861.850794][T16807] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 861.943714][ T24] usb 10-1: USB disconnect, device number 4 [ 862.004790][T16807] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 862.045008][T16807] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 862.062420][T16807] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 862.074420][T16807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.094817][T26838] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 862.109367][T16807] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 862.325666][T16807] usb 4-1: USB disconnect, device number 6 [ 863.462046][T26878] netlink: 'syz.9.8476': attribute type 1 has an invalid length. [ 863.622204][T26878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 863.737057][T26886] bond1: (slave geneve2): making interface the new active one [ 863.754012][T26886] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 864.971513][T26910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8488'. [ 865.101363][ T5879] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 865.262114][ T5879] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 865.280603][ T5879] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 865.300726][ T5879] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 865.309812][ T5879] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.324007][T26906] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 865.346414][ T5879] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 865.625330][ T24] usb 9-1: USB disconnect, device number 6 [ 865.750565][ T5879] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 865.870599][T16807] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 865.902075][ T5879] usb 7-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 865.913945][ T5879] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 865.925143][ T5879] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 865.942367][ T5879] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 5853, setting to 64 [ 865.953392][ T5879] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 865.965069][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.981989][T26927] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 865.989247][T26927] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 866.001314][ T5879] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 866.009020][ T5879] usb 7-1: invalid MIDI in EP 0 [ 866.027092][T16807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.049975][T16807] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 866.061101][T16807] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.097142][T16807] usb 10-1: config 0 descriptor?? [ 866.117219][ T5879] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 866.259384][ T5879] usb 7-1: USB disconnect, device number 6 [ 866.340979][T16807] usbhid 10-1:0.0: can't add hid device: -71 [ 866.348280][T16807] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 866.359617][T16807] usb 10-1: USB disconnect, device number 5 [ 866.491292][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 866.654520][ T24] usb 4-1: config 0 has no interfaces? [ 866.660064][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 866.675712][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.701051][ T24] usb 4-1: config 0 descriptor?? [ 866.810496][ T5886] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 866.919581][ T24] usb 4-1: USB disconnect, device number 7 [ 866.960524][ T5886] usb 10-1: Using ep0 maxpacket: 32 [ 866.974652][ T5886] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.990710][ T5886] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 867.000145][ T5886] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.026081][ T5886] usb 10-1: config 0 descriptor?? [ 867.043558][ T5886] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 867.082584][ T5886] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 867.193925][T26952] netlink: 'syz.6.8505': attribute type 11 has an invalid length. [ 867.248285][T26952] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8505'. [ 867.316395][ C0] ldusb 10-1:0.0: Ring buffer overflow, 8 bytes dropped [ 867.650943][ C1] ldusb 10-1:0.0: Ring buffer overflow, 8 bytes dropped [ 868.087132][T26995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8523'. [ 868.096338][T26995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8523'. [ 868.688027][ T5879] usb 10-1: USB disconnect, device number 6 [ 868.698267][ T5879] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 868.982388][T27015] input: syz1 as /devices/virtual/input/input159 [ 869.435161][T27024] loop7: detected capacity change from 0 to 7 [ 869.481998][ C0] blk_print_req_error: 25 callbacks suppressed [ 869.482042][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.497897][ C0] buffer_io_error: 25 callbacks suppressed [ 869.497914][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 869.516925][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.526695][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 869.540240][T27024] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.551014][T27024] Buffer I/O error on dev loop7, logical block 0, async page read [ 869.558997][T27024] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.579771][T27024] Buffer I/O error on dev loop7, logical block 0, async page read [ 869.589199][T27024] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.599357][T27024] Buffer I/O error on dev loop7, logical block 0, async page read [ 869.607680][T27024] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.617814][T27024] Buffer I/O error on dev loop7, logical block 0, async page read [ 869.630388][T27024] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.643522][T27024] Buffer I/O error on dev loop7, logical block 0, async page read [ 869.651936][T27024] ldm_validate_partition_table(): Disk read failed. [ 869.659226][T27024] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.686084][T27024] Buffer I/O error on dev loop7, logical block 0, async page read [ 869.735346][T27024] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.756052][T27024] Buffer I/O error on dev loop7, logical block 0, async page read [ 869.768040][T27024] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.779288][T27024] Buffer I/O error on dev loop7, logical block 0, async page read [ 869.787746][T27024] Dev loop7: unable to read RDB block 0 [ 869.794081][T27024] loop7: unable to read partition table [ 869.800028][T27024] loop7: partition table beyond EOD, truncated [ 869.807096][T27024] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 869.980724][T16807] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 870.124693][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.132398][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.144000][T16807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.155133][T16807] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 870.164596][T16807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.176607][T16807] usb 4-1: config 0 descriptor?? [ 870.390004][T16807] usbhid 4-1:0.0: can't add hid device: -71 [ 870.396820][T16807] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 870.408041][T16807] usb 4-1: USB disconnect, device number 8 [ 870.903924][ T5886] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 871.083979][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 871.093730][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.106680][ T5886] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 871.116493][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.126788][ T5886] usb 4-1: config 0 descriptor?? [ 871.135381][ T5886] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 871.146473][ T5886] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 871.260847][T24704] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 871.280605][T16807] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 871.383699][ C1] ldusb 4-1:0.0: Ring buffer overflow, 8 bytes dropped [ 871.418855][T24704] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 871.438374][T24704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.450606][T16807] usb 10-1: Using ep0 maxpacket: 16 [ 871.466075][T24704] usb 7-1: Product: syz [ 871.479656][T24704] usb 7-1: Manufacturer: syz [ 871.486691][T16807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.499747][T24704] usb 7-1: SerialNumber: syz [ 871.506200][T16807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.518589][T24704] usb 7-1: config 0 descriptor?? [ 871.530556][T16807] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 871.546936][T16807] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 871.562536][T16807] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.575232][T16807] usb 10-1: config 0 descriptor?? [ 871.715633][ C0] ldusb 4-1:0.0: Ring buffer overflow, 8 bytes dropped [ 871.849005][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 871.849022][ T30] audit: type=1326 audit(1768565060.571:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27090 comm="syz.8.8565" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc7539 code=0x0 [ 871.993097][T16807] shield 0003:0955:7214.009B: unknown main item tag 0x0 [ 872.000324][T16807] shield 0003:0955:7214.009B: unknown main item tag 0x0 [ 872.007493][T16807] shield 0003:0955:7214.009B: unknown main item tag 0x0 [ 872.014704][T16807] shield 0003:0955:7214.009B: unknown main item tag 0x0 [ 872.022914][T16807] shield 0003:0955:7214.009B: unknown main item tag 0x0 [ 872.033038][T16807] input: HID 0955:7214 Haptics as /devices/virtual/input/input160 [ 872.078723][T16807] shield 0003:0955:7214.009B: Registered Thunderstrike controller [ 872.088330][T16807] shield 0003:0955:7214.009B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 872.227404][T27065] random: crng reseeded on system resumption [ 872.254356][ T6068] shield 0003:0955:7214.009B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 872.254582][ T24] usb 10-1: USB disconnect, device number 7 [ 872.266203][ T6068] shield 0003:0955:7214.009B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 872.289257][ T6068] shield 0003:0955:7214.009B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 872.302577][ T6068] shield 0003:0955:7214.009B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 872.740050][T24704] usb 7-1: f81604_read: reg: 100e failed: -EPROTO [ 872.763358][T24704] usb 7-1: f81604_read: reg: 200f failed: -EPROTO [ 872.774090][ T5886] usb 4-1: USB disconnect, device number 9 [ 872.805085][T24704] usb 7-1: USB disconnect, device number 7 [ 872.812939][ T5886] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 872.873830][T24704] usb 7-1: f81604_read: reg: 100f failed: -ENODEV [ 872.928112][ T5493] usb 7-1: f81604_read: reg: 200f failed: -ENODEV [ 872.996129][ T5493] usb 7-1: f81604_read: reg: 200f failed: -ENODEV [ 873.033224][T24704] usb 7-1: f81604_read: reg: 200f failed: -ENODEV [ 873.269512][T27110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8571'. [ 875.010885][T27164] input: syz0 as /devices/virtual/input/input161 [ 875.390609][ T5886] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 875.556212][ T5886] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 875.583076][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.605993][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.624716][ T5886] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 875.646044][ T5886] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 875.665751][ T5886] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 875.681808][ T5886] usb 9-1: Manufacturer: syz [ 875.699176][ T5886] usb 9-1: config 0 descriptor?? [ 875.881299][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 876.060811][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 876.075822][ T24] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 876.088031][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.109157][ T24] usb 7-1: Product: syz [ 876.113489][ T24] usb 7-1: Manufacturer: syz [ 876.118118][ T24] usb 7-1: SerialNumber: syz [ 876.138261][ T24] usb 7-1: config 0 descriptor?? [ 876.143530][T27190] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 876.144539][ T5886] appleir 0003:05AC:8243.009C: unknown main item tag 0x0 [ 876.159329][T27190] syzkaller1: Linktype set failed because interface is up [ 876.167670][ T6068] syzkaller1: tun_net_xmit 90 [ 876.185454][ T24] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 876.215843][ T5886] appleir 0003:05AC:8243.009C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 876.494779][ T5879] usb 9-1: USB disconnect, device number 7 [ 877.390318][ T24] gspca_topro: reg_w err -71 [ 877.420619][ T24] gspca_topro: Sensor soi763a [ 877.446191][ T24] usb 7-1: USB disconnect, device number 8 [ 877.806816][T27225] batman_adv: batadv0: Adding interface: ip6gretap1 [ 877.814289][T27225] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 877.835443][T27225] batman_adv: batadv0: Interface activated: ip6gretap1 [ 877.989433][T27231] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.023441][T27231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 878.220518][ T5879] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 878.390631][ T5879] usb 7-1: Using ep0 maxpacket: 16 [ 878.399344][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.412333][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.423722][ T5879] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 878.438025][ T5879] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 878.449226][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.460033][ T5879] usb 7-1: config 0 descriptor?? [ 878.560982][ T6068] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 878.733818][ T6068] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.745566][ T6068] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 878.762689][ T6068] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 878.776292][ T6068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 878.846859][ T6068] usb 4-1: SerialNumber: syz [ 878.879113][ T5879] shield 0003:0955:7214.009D: unknown main item tag 0x0 [ 878.889570][ T5879] shield 0003:0955:7214.009D: unknown main item tag 0x0 [ 878.910600][ T5879] shield 0003:0955:7214.009D: unknown main item tag 0x0 [ 878.939758][ T5879] shield 0003:0955:7214.009D: unknown main item tag 0x0 [ 878.955540][ T5879] shield 0003:0955:7214.009D: unknown main item tag 0x0 [ 878.986357][ T5879] input: HID 0955:7214 Haptics as /devices/virtual/input/input162 [ 879.069439][ T6068] usb 4-1: 0:2 : does not exist [ 879.074635][ T5879] shield 0003:0955:7214.009D: Registered Thunderstrike controller [ 879.075155][T27234] random: crng reseeded on system resumption [ 879.087148][ T5879] shield 0003:0955:7214.009D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 879.111793][ T6068] usb 4-1: USB disconnect, device number 10 [ 879.170276][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 879.186630][T16807] shield 0003:0955:7214.009D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 879.205046][ T5879] usb 7-1: USB disconnect, device number 9 [ 879.230697][ T24] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 879.231053][T16807] shield 0003:0955:7214.009D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 879.271745][T16807] shield 0003:0955:7214.009D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 879.307897][T16807] shield 0003:0955:7214.009D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 879.394226][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 879.403037][ T24] usb 10-1: not running at top speed; connect to a high speed hub [ 879.417166][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.428147][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 879.439820][ T24] usb 10-1: string descriptor 0 read error: -22 [ 879.446816][ T24] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 879.456975][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.480247][ T24] usb 10-1: 0:2 : does not exist [ 879.848013][ T30] audit: type=1326 audit(1768565068.571:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27263 comm="syz.0.8635" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 879.935624][T27268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 880.037755][T27273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8638'. [ 880.514373][ T24] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 880.532179][ T24] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 880.546702][ T24] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 880.597248][ T24] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 880.626478][ T24] usb 10-1: USB disconnect, device number 8 [ 880.781832][T27286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8642'. [ 881.192343][T27300] netlink: 'syz.9.8650': attribute type 2 has an invalid length. [ 881.240769][T27300] netlink: 48 bytes leftover after parsing attributes in process `syz.9.8650'. [ 881.398030][T27310] input: syz1 as /devices/virtual/input/input163 [ 881.519145][T27312] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8656'. [ 881.869933][T27324] syzkaller1: entered promiscuous mode [ 881.879882][T27324] syzkaller1: entered allmulticast mode [ 882.021335][ T5909] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 882.081316][ T24] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 882.220574][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 882.228780][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0 [ 882.236234][T27346] netlink: 'syz.8.8671': attribute type 9 has an invalid length. [ 882.236254][T27346] netlink: 'syz.8.8671': attribute type 11 has an invalid length. [ 882.236269][T27346] netlink: 'syz.8.8671': attribute type 12 has an invalid length. [ 882.236286][T27346] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.8671'. [ 882.271149][ T5909] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 882.281290][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.282059][ T24] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 882.313364][ T24] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 882.325589][ T5909] usb 4-1: config 0 descriptor?? [ 882.341024][ T24] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 882.373930][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.392205][T27329] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 882.424181][ T24] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 882.654653][ T24] usb 10-1: USB disconnect, device number 9 [ 882.770693][ T5909] hid (null): nested delimiters [ 882.777821][ T5909] hid (null): report_id 24797 is invalid [ 882.785075][ T5909] hid (null): bogus close delimiter [ 882.861593][T16807] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 882.963463][ T24] usb 4-1: USB disconnect, device number 11 [ 883.032154][T16807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.050588][T16807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.070549][T16807] usb 7-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 883.079789][T16807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.091196][T16807] usb 7-1: config 0 descriptor?? [ 883.501786][T27370] netlink: 'syz.8.8682': attribute type 1 has an invalid length. [ 883.535647][T16807] thrustmaster 0003:044F:B320.009F: unknown main item tag 0x0 [ 883.573315][T16807] thrustmaster 0003:044F:B320.009F: unknown main item tag 0x0 [ 883.607162][T16807] thrustmaster 0003:044F:B320.009F: unknown main item tag 0x0 [ 883.632709][T16807] thrustmaster 0003:044F:B320.009F: unbalanced collection at end of report description [ 883.686116][T16807] thrustmaster 0003:044F:B320.009F: parse failed [ 883.701680][T16807] thrustmaster 0003:044F:B320.009F: probe with driver thrustmaster failed with error -22 [ 883.717343][T27370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 883.776933][T16807] usb 7-1: USB disconnect, device number 10 [ 883.951062][ T6068] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 884.114888][ T6068] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 884.124222][ T6068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.132506][ T6068] usb 4-1: Product: syz [ 884.136743][ T6068] usb 4-1: Manufacturer: syz [ 884.141519][ T6068] usb 4-1: SerialNumber: syz [ 884.148931][ T6068] usb 4-1: config 0 descriptor?? [ 884.170562][ T5909] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 884.190562][ T24] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 884.322134][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.333666][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.344039][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 884.349443][ T5909] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 884.370169][ T5909] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 884.380260][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.388828][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 884.403892][ T5909] usb 9-1: config 0 descriptor?? [ 884.411443][ T24] usb 10-1: config 4 interface 0 has no altsetting 0 [ 884.438965][ T24] usb 10-1: string descriptor 0 read error: -22 [ 884.445685][ T24] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 884.454965][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.479631][ T24] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 884.502814][ T24] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 884.519231][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 884.540310][ T24] usb 10-1: media controller created [ 884.564772][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 884.840740][ T5909] plantronics 0003:047F:FFFF.00A0: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 884.892852][T16807] usb 10-1: USB disconnect, device number 10 [ 884.980510][ T5879] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 885.141845][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 885.148905][ T5879] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.159392][ T5879] usb 7-1: config 0 has no interfaces? [ 885.168065][ T5879] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 885.177713][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.186321][ T5879] usb 7-1: Product: syz [ 885.190879][ T5879] usb 7-1: Manufacturer: syz [ 885.195484][ T5879] usb 7-1: SerialNumber: syz [ 885.203478][ T5879] usb 7-1: config 0 descriptor?? [ 885.386521][ T6068] usb 4-1: f81604_read: reg: 100e failed: -EPROTO [ 885.405956][ T6068] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 885.415902][ T6068] usb 4-1: USB disconnect, device number 12 [ 885.436656][ T6068] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 885.494029][ T6068] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 885.720817][ T5879] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 885.870682][ T5879] usb 10-1: Using ep0 maxpacket: 32 [ 885.877278][ T5879] usb 10-1: config 0 has an invalid interface number: 146 but max is 0 [ 885.886434][ T5879] usb 10-1: config 0 has no interface number 0 [ 885.892997][ T5879] usb 10-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 885.905050][ T5879] usb 10-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 885.916943][ T5879] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 885.928465][ T5879] usb 10-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 885.938963][ T5879] usb 10-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 885.951187][ T5879] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 885.963059][ T5879] usb 10-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 885.984087][ T5879] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 886.015344][ T5879] usb 10-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 886.025855][ T5879] usb 10-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 886.044177][ T5879] usb 10-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 886.054816][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.064451][ T5879] usb 10-1: Product: syz [ 886.068879][ T5879] usb 10-1: Manufacturer: syz [ 886.073837][ T5879] usb 10-1: SerialNumber: syz [ 886.084864][ T5879] usb 10-1: config 0 descriptor?? [ 886.095213][T27395] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 886.102790][T27395] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 886.113843][ T5879] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 886.123833][ T5879] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 886.136752][ T5879] scsi host1: microtekX6 [ 886.369071][ T5879] usb 10-1: USB disconnect, device number 11 [ 886.752603][T27411] veth1_to_bridge: entered allmulticast mode [ 886.759038][T27411] veth1_to_bridge: left allmulticast mode [ 886.912710][ T24] usb 9-1: USB disconnect, device number 8 [ 887.121091][ T5909] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 887.292459][ T5909] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 887.309964][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.334271][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.360520][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 887.381865][ T5909] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 887.400619][ T5909] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 887.408736][ T5909] usb 4-1: Manufacturer: syz [ 887.418433][ T5909] usb 4-1: config 0 descriptor?? [ 887.432206][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 887.580637][ T5879] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 887.593085][ T24] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 887.604290][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.616926][ T24] usb 9-1: config 0 descriptor?? [ 887.734970][ T5879] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 887.759433][ T5879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.780210][ T6068] usb 7-1: USB disconnect, device number 11 [ 887.794042][ T5879] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 887.817054][ T5879] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 887.826476][ T5879] usb 10-1: Manufacturer: syz [ 887.842711][ T5879] usb 10-1: config 0 descriptor?? [ 887.844733][ T5909] appleir 0003:05AC:8243.00A1: unknown main item tag 0x0 [ 887.917835][ T5909] appleir 0003:05AC:8243.00A1: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 887.931388][ T5879] rc_core: IR keymap rc-hauppauge not found [ 887.944455][ T5879] Registered IR keymap rc-empty [ 887.971728][ T5879] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 888.013615][ T5879] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input164 [ 888.070035][ C0] igorplugusb 10-1:0.0: Error: urb status = -32 [ 888.136681][ T5879] usb 10-1: USB disconnect, device number 12 [ 888.363515][T27451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8712'. [ 888.897923][ T24] usb 9-1: Cannot set autoneg [ 888.907681][ T24] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 888.955405][ T24] usb 9-1: USB disconnect, device number 9 [ 889.108039][T27483] gretap0: entered promiscuous mode [ 889.114265][T27483] vlan3: entered promiscuous mode [ 889.271149][ T5879] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 889.440758][ T5879] usb 10-1: Using ep0 maxpacket: 32 [ 889.447584][ T5879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.459053][ T5879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.478315][ T5879] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 889.500336][ T5879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.514085][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 889.519276][ T5879] usb 10-1: config 0 descriptor?? [ 889.534221][ T5879] hub 10-1:0.0: USB hub found [ 889.670609][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 889.677610][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 889.703403][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 889.714595][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 889.726637][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 889.738711][ T5879] hub 10-1:0.0: 1 port detected [ 889.741488][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 889.756926][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.840894][ T6068] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 889.951814][T16807] usb 4-1: USB disconnect, device number 13 [ 889.979115][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 889.993982][ T24] usbtmc 7-1:16.0: can't read capabilities [ 890.014619][ T6068] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 890.037427][ T6068] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 890.059770][ T6068] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 890.070072][ T6068] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.112340][T27492] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 890.137287][ T6068] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 890.307636][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.319198][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.328292][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.368944][ T6068] hub 10-1:0.0: activate --> -90 [ 890.369044][ T24] usb 9-1: USB disconnect, device number 10 [ 890.374863][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.389437][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.398524][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.432534][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.441671][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.450793][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.459898][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.472003][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.481210][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.490321][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.500668][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.509775][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.518847][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 890.563717][ T6068] usb 7-1: USB disconnect, device number 12 [ 890.785350][ T6068] usb 10-1: USB disconnect, device number 13 [ 891.610661][T16807] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 891.772653][T16807] usb 9-1: config 4 has an invalid interface number: 28 but max is 0 [ 891.780917][T16807] usb 9-1: config 4 has no interface number 0 [ 891.789063][T16807] usb 9-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 891.798481][T16807] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.806965][T16807] usb 9-1: Product: syz [ 891.811265][T16807] usb 9-1: Manufacturer: syz [ 891.815863][T16807] usb 9-1: SerialNumber: syz [ 891.828254][T16807] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:4.28/input/input165 [ 892.039984][ T5183] bcm5974 9-1:4.28: could not read from device [ 892.052146][T16807] bcm5974 9-1:4.28: could not read from device [ 892.062031][ T5183] bcm5974 9-1:4.28: could not read from device [ 892.070206][T16807] input: failed to attach handler mousedev to device input165, error: -5 [ 892.084331][ T5183] bcm5974 9-1:4.28: could not read from device [ 892.095326][T16807] usb 9-1: USB disconnect, device number 11 [ 893.173734][ T5909] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 893.344205][ T5909] usb 9-1: unable to get BOS descriptor or descriptor too short [ 893.360147][ T5909] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 893.379924][T27556] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8755'. [ 893.389167][ T5909] usb 9-1: can't read configurations, error -71 [ 893.401513][T27556] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8755'. [ 894.376233][T27594] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8771'. [ 894.385749][T27594] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8771'. [ 894.395570][T27594] macvlan0: entered allmulticast mode [ 894.402804][T27594] veth1_vlan: entered allmulticast mode [ 895.050562][T16807] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 895.210557][T16807] usb 4-1: Using ep0 maxpacket: 16 [ 895.226586][T16807] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 895.245206][T16807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.257510][T16807] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 895.271068][T16807] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 895.280608][T16807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.288839][T16807] usb 4-1: Product: syz [ 895.293909][T16807] usb 4-1: Manufacturer: syz [ 895.298610][T16807] usb 4-1: SerialNumber: syz [ 895.670575][T19195] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 895.726156][T16807] usb 4-1: 0:2 : does not exist [ 895.830626][T19195] usb 10-1: Using ep0 maxpacket: 8 [ 895.844791][T19195] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.868746][T19195] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.879211][T19195] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 895.892508][T19195] usb 10-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 895.902138][T19195] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.913468][T19195] usb 10-1: config 0 descriptor?? [ 896.348293][T19195] logitech 0003:046D:C293.00A2: nested delimiters [ 896.390464][T19195] logitech 0003:046D:C293.00A2: item 0 4 2 10 parsing failed [ 896.405505][T19195] logitech 0003:046D:C293.00A2: parse failed [ 896.424923][T19195] logitech 0003:046D:C293.00A2: probe with driver logitech failed with error -22 [ 896.496600][T27654] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8797'. [ 896.557896][ T5879] usb 10-1: USB disconnect, device number 14 [ 896.597469][T19195] usb 4-1: USB disconnect, device number 14 [ 896.735746][ T30] audit: type=1326 audit(1768565085.461:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27655 comm="syz.6.8798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7fc00000 [ 896.820499][ T5909] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 896.984621][ T5909] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 896.995734][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.008366][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.018627][ T5909] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 897.039195][ T5909] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 897.048937][ T5909] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 897.058831][ T5909] usb 9-1: Manufacturer: syz [ 897.069536][ T5909] usb 9-1: config 0 descriptor?? [ 897.361192][ T30] audit: type=1326 audit(1768565086.091:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27655 comm="syz.6.8798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96539 code=0x7fc00000 [ 897.490108][ T5909] appleir 0003:05AC:8243.00A3: unknown main item tag 0x0 [ 897.525178][ T5909] appleir 0003:05AC:8243.00A3: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 898.113384][ T5879] usb 9-1: USB disconnect, device number 14 [ 898.940397][T27727] [ 898.942784][T27727] ===================================================== [ 898.949718][T27727] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 898.957190][T27727] syzkaller #0 Tainted: G L [ 898.963170][T27727] ----------------------------------------------------- [ 898.970108][T27727] syz.8.8828/27727 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 898.977837][T27727] ffff88802ed02be8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 898.986742][T27727] [ 898.986742][T27727] and this task is already holding: [ 898.994113][T27727] ffff888054e50028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 899.003882][T27727] which would create a new lock dependency: [ 899.009782][T27727] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 899.017906][T27727] [ 899.017906][T27727] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 899.027360][T27727] (&client->buffer_lock){..-.}-{3:3} [ 899.027390][T27727] [ 899.027390][T27727] ... which became SOFTIRQ-irq-safe at: [ 899.040438][T27727] lock_acquire+0x107/0x340 [ 899.045026][T27727] _raw_spin_lock+0x2e/0x40 [ 899.049605][T27727] evdev_pass_values+0xb9/0xbd0 [ 899.054624][T27727] evdev_events+0x1e6/0x340 [ 899.059200][T27727] input_pass_values+0x288/0x890 [ 899.064213][T27727] input_event_dispose+0x3e5/0x6b0 [ 899.069412][T27727] input_event+0x89/0xe0 [ 899.073728][T27727] hidinput_hid_event+0x145e/0x1e50 [ 899.079002][T27727] hid_process_event+0x4be/0x620 [ 899.084012][T27727] hid_report_raw_event+0xe91/0x1720 [ 899.089394][T27727] hid_input_report+0x44b/0x580 [ 899.094337][T27727] hid_irq_in+0x47e/0x6d0 [ 899.098844][T27727] __usb_hcd_giveback_urb+0x376/0x540 [ 899.104295][T27727] dummy_timer+0x85f/0x45b0 [ 899.108869][T27727] __hrtimer_run_queues+0x51c/0xc30 [ 899.114146][T27727] hrtimer_run_softirq+0x187/0x2b0 [ 899.119348][T27727] handle_softirqs+0x22b/0x7c0 [ 899.124192][T27727] __irq_exit_rcu+0x60/0x150 [ 899.128867][T27727] irq_exit_rcu+0x9/0x30 [ 899.133187][T27727] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 899.138907][T27727] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 899.144969][T27727] unwind_next_frame+0xc89/0x23d0 [ 899.150073][T27727] arch_stack_walk+0x11c/0x150 [ 899.154911][T27727] stack_trace_save+0x9c/0xe0 [ 899.159669][T27727] kasan_save_track+0x3e/0x80 [ 899.164419][T27727] __kasan_slab_alloc+0x6c/0x80 [ 899.169341][T27727] kmem_cache_alloc_noprof+0x37d/0x710 [ 899.174877][T27727] security_file_alloc+0x34/0x330 [ 899.179971][T27727] init_file+0x93/0x2f0 [ 899.184199][T27727] alloc_empty_file+0x6e/0x1d0 [ 899.189032][T27727] path_openat+0x108/0x3dd0 [ 899.193605][T27727] do_filp_open+0x1fa/0x410 [ 899.198186][T27727] do_sys_openat2+0x121/0x200 [ 899.202934][T27727] __x64_sys_openat+0x138/0x170 [ 899.207855][T27727] do_syscall_64+0xec/0xf80 [ 899.212431][T27727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.218395][T27727] [ 899.218395][T27727] to a SOFTIRQ-irq-unsafe lock: [ 899.225397][T27727] (tasklist_lock){.+.+}-{3:3} [ 899.225423][T27727] [ 899.225423][T27727] ... which became SOFTIRQ-irq-unsafe at: [ 899.238014][T27727] ... [ 899.238021][T27727] lock_acquire+0x107/0x340 [ 899.245159][T27727] _raw_read_lock+0x36/0x50 [ 899.249734][T27727] __do_wait+0xde/0x740 [ 899.253970][T27727] do_wait+0x1e8/0x4f0 [ 899.258575][T27727] kernel_wait+0xab/0x170 [ 899.262981][T27727] call_usermodehelper_exec_work+0xbe/0x230 [ 899.268944][T27727] process_scheduled_works+0xad1/0x1770 [ 899.274571][T27727] worker_thread+0x8a0/0xda0 [ 899.279250][T27727] kthread+0x711/0x8a0 [ 899.283416][T27727] ret_from_fork+0x510/0xa50 [ 899.288087][T27727] ret_from_fork_asm+0x1a/0x30 [ 899.292936][T27727] [ 899.292936][T27727] other info that might help us debug this: [ 899.292936][T27727] [ 899.303150][T27727] Chain exists of: [ 899.303150][T27727] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 899.303150][T27727] [ 899.316267][T27727] Possible interrupt unsafe locking scenario: [ 899.316267][T27727] [ 899.324573][T27727] CPU0 CPU1 [ 899.329922][T27727] ---- ---- [ 899.335267][T27727] lock(tasklist_lock); [ 899.339502][T27727] local_irq_disable(); [ 899.346238][T27727] lock(&client->buffer_lock); [ 899.353595][T27727] lock(&new->fa_lock); [ 899.360344][T27727] [ 899.363788][T27727] lock(&client->buffer_lock); [ 899.368798][T27727] [ 899.368798][T27727] *** DEADLOCK *** [ 899.368798][T27727] [ 899.376924][T27727] 7 locks held by syz.8.8828/27727: [ 899.382100][T27727] #0: ffff88814538e118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 899.391225][T27727] #1: ffff88801bff2230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 899.401313][T27727] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 899.410959][T27727] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 899.420520][T27727] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 899.429662][T27727] #5: ffff888054e50028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 899.440276][T27727] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 899.449342][T27727] [ 899.449342][T27727] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 899.459742][T27727] -> (&client->buffer_lock){..-.}-{3:3} { [ 899.465488][T27727] IN-SOFTIRQ-W at: [ 899.469460][T27727] lock_acquire+0x107/0x340 [ 899.475610][T27727] _raw_spin_lock+0x2e/0x40 [ 899.481753][T27727] evdev_pass_values+0xb9/0xbd0 [ 899.488328][T27727] evdev_events+0x1e6/0x340 [ 899.494472][T27727] input_pass_values+0x288/0x890 [ 899.501048][T27727] input_event_dispose+0x3e5/0x6b0 [ 899.507805][T27727] input_event+0x89/0xe0 [ 899.513693][T27727] hidinput_hid_event+0x145e/0x1e50 [ 899.520535][T27727] hid_process_event+0x4be/0x620 [ 899.527127][T27727] hid_report_raw_event+0xe91/0x1720 [ 899.534051][T27727] hid_input_report+0x44b/0x580 [ 899.540552][T27727] hid_irq_in+0x47e/0x6d0 [ 899.546542][T27727] __usb_hcd_giveback_urb+0x376/0x540 [ 899.553577][T27727] dummy_timer+0x85f/0x45b0 [ 899.559723][T27727] __hrtimer_run_queues+0x51c/0xc30 [ 899.566569][T27727] hrtimer_run_softirq+0x187/0x2b0 [ 899.573320][T27727] handle_softirqs+0x22b/0x7c0 [ 899.579721][T27727] __irq_exit_rcu+0x60/0x150 [ 899.585950][T27727] irq_exit_rcu+0x9/0x30 [ 899.591828][T27727] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 899.599098][T27727] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 899.606717][T27727] unwind_next_frame+0xc89/0x23d0 [ 899.613381][T27727] arch_stack_walk+0x11c/0x150 [ 899.619780][T27727] stack_trace_save+0x9c/0xe0 [ 899.626095][T27727] kasan_save_track+0x3e/0x80 [ 899.632408][T27727] __kasan_slab_alloc+0x6c/0x80 [ 899.638894][T27727] kmem_cache_alloc_noprof+0x37d/0x710 [ 899.646092][T27727] security_file_alloc+0x34/0x330 [ 899.652776][T27727] init_file+0x93/0x2f0 [ 899.658578][T27727] alloc_empty_file+0x6e/0x1d0 [ 899.664981][T27727] path_openat+0x108/0x3dd0 [ 899.671120][T27727] do_filp_open+0x1fa/0x410 [ 899.677437][T27727] do_sys_openat2+0x121/0x200 [ 899.683767][T27727] __x64_sys_openat+0x138/0x170 [ 899.690270][T27727] do_syscall_64+0xec/0xf80 [ 899.696410][T27727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.703940][T27727] INITIAL USE at: [ 899.707825][T27727] lock_acquire+0x107/0x340 [ 899.713881][T27727] _raw_spin_lock_irqsave+0x40/0x60 [ 899.720627][T27727] evdev_ioctl_handler+0x1095/0x1f10 [ 899.727463][T27727] __ia32_compat_sys_ioctl+0x543/0x840 [ 899.734475][T27727] __do_fast_syscall_32+0x1dc/0x570 [ 899.741232][T27727] do_fast_syscall_32+0x34/0x80 [ 899.747649][T27727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 899.755551][T27727] } [ 899.758043][T27727] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 899.766189][T27727] [ 899.766189][T27727] the dependencies between the lock to be acquired [ 899.766200][T27727] and SOFTIRQ-irq-unsafe lock: [ 899.779690][T27727] -> (tasklist_lock){.+.+}-{3:3} { [ 899.784980][T27727] HARDIRQ-ON-R at: [ 899.789126][T27727] lock_acquire+0x107/0x340 [ 899.795629][T27727] _raw_read_lock+0x36/0x50 [ 899.802129][T27727] __do_wait+0xde/0x740 [ 899.808320][T27727] do_wait+0x1e8/0x4f0 [ 899.814380][T27727] kernel_wait+0xab/0x170 [ 899.820700][T27727] call_usermodehelper_exec_work+0xbe/0x230 [ 899.828579][T27727] process_scheduled_works+0xad1/0x1770 [ 899.836124][T27727] worker_thread+0x8a0/0xda0 [ 899.842723][T27727] kthread+0x711/0x8a0 [ 899.848793][T27727] ret_from_fork+0x510/0xa50 [ 899.855369][T27727] ret_from_fork_asm+0x1a/0x30 [ 899.862134][T27727] SOFTIRQ-ON-R at: [ 899.866279][T27727] lock_acquire+0x107/0x340 [ 899.872769][T27727] _raw_read_lock+0x36/0x50 [ 899.879253][T27727] __do_wait+0xde/0x740 [ 899.885391][T27727] do_wait+0x1e8/0x4f0 [ 899.891445][T27727] kernel_wait+0xab/0x170 [ 899.897767][T27727] call_usermodehelper_exec_work+0xbe/0x230 [ 899.905639][T27727] process_scheduled_works+0xad1/0x1770 [ 899.913169][T27727] worker_thread+0x8a0/0xda0 [ 899.919743][T27727] kthread+0x711/0x8a0 [ 899.925797][T27727] ret_from_fork+0x510/0xa50 [ 899.932387][T27727] ret_from_fork_asm+0x1a/0x30 [ 899.939146][T27727] INITIAL USE at: [ 899.943252][T27727] lock_acquire+0x107/0x340 [ 899.949650][T27727] _raw_write_lock_irq+0x3d/0x50 [ 899.956487][T27727] copy_process+0x2185/0x3950 [ 899.963061][T27727] kernel_clone+0x21e/0x820 [ 899.969465][T27727] user_mode_thread+0xdd/0x140 [ 899.976122][T27727] rest_init+0x23/0x300 [ 899.982180][T27727] start_kernel+0x381/0x3d0 [ 899.988578][T27727] x86_64_start_reservations+0x24/0x30 [ 899.995939][T27727] x86_64_start_kernel+0x143/0x1c0 [ 900.002956][T27727] common_startup_64+0x13e/0x147 [ 900.009796][T27727] INITIAL READ USE at: [ 900.014286][T27727] lock_acquire+0x107/0x340 [ 900.021117][T27727] _raw_read_lock+0x36/0x50 [ 900.027949][T27727] __do_wait+0xde/0x740 [ 900.034437][T27727] do_wait+0x1e8/0x4f0 [ 900.040844][T27727] kernel_wait+0xab/0x170 [ 900.047509][T27727] call_usermodehelper_exec_work+0xbe/0x230 [ 900.055755][T27727] process_scheduled_works+0xad1/0x1770 [ 900.063629][T27727] worker_thread+0x8a0/0xda0 [ 900.070549][T27727] kthread+0x711/0x8a0 [ 900.076969][T27727] ret_from_fork+0x510/0xa50 [ 900.083888][T27727] ret_from_fork_asm+0x1a/0x30 [ 900.091017][T27727] } [ 900.093672][T27727] ... key at: [] tasklist_lock+0x18/0x40 [ 900.101721][T27727] ... acquired at: [ 900.105682][T27727] _raw_read_lock+0x36/0x50 [ 900.110340][T27727] send_sigurg+0x12b/0x420 [ 900.114918][T27727] sk_send_sigurg+0x6c/0x2e0 [ 900.119673][T27727] queue_oob+0x420/0x4f0 [ 900.124072][T27727] unix_stream_sendmsg+0xc32/0xde0 [ 900.129340][T27727] __sock_sendmsg+0x21c/0x270 [ 900.134180][T27727] ____sys_sendmsg+0x52d/0x820 [ 900.139104][T27727] ___sys_sendmsg+0x21f/0x2a0 [ 900.143944][T27727] __sys_sendmmsg+0x28e/0x430 [ 900.148788][T27727] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 900.154497][T27727] __do_fast_syscall_32+0x1dc/0x570 [ 900.159869][T27727] do_fast_syscall_32+0x34/0x80 [ 900.164879][T27727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 900.171368][T27727] [ 900.173674][T27727] -> (&f_owner->lock){....}-{3:3} { [ 900.178971][T27727] INITIAL USE at: [ 900.182997][T27727] lock_acquire+0x107/0x340 [ 900.189226][T27727] _raw_write_lock_irq+0x3d/0x50 [ 900.195885][T27727] __f_setown+0x67/0x370 [ 900.201860][T27727] fcntl_dirnotify+0x3fa/0x6a0 [ 900.208343][T27727] do_fcntl+0x745/0x1a50 [ 900.214311][T27727] do_compat_fcntl64+0x477/0x720 [ 900.220974][T27727] __do_fast_syscall_32+0x1dc/0x570 [ 900.227952][T27727] do_fast_syscall_32+0x34/0x80 [ 900.234527][T27727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 900.242581][T27727] INITIAL READ USE at: [ 900.247032][T27727] lock_acquire+0x107/0x340 [ 900.253693][T27727] _raw_read_lock_irqsave+0x48/0x60 [ 900.261050][T27727] send_sigio+0x38/0x370 [ 900.267452][T27727] dnotify_handle_event+0x169/0x440 [ 900.274808][T27727] fsnotify+0x180b/0x1ab0 [ 900.281382][T27727] fsnotify_mkdir+0x122/0x180 [ 900.288215][T27727] vfs_mkdir+0x54e/0x5b0 [ 900.294614][T27727] do_mkdirat+0x276/0x4b0 [ 900.301097][T27727] __ia32_sys_mkdirat+0x87/0xa0 [ 900.308104][T27727] __do_fast_syscall_32+0x1dc/0x570 [ 900.315461][T27727] do_fast_syscall_32+0x34/0x80 [ 900.322470][T27727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 900.330953][T27727] } [ 900.333521][T27727] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 900.342442][T27727] ... acquired at: [ 900.346332][T27727] _raw_read_lock_irqsave+0x48/0x60 [ 900.351689][T27727] send_sigio+0x38/0x370 [ 900.356098][T27727] kill_fasync+0x24d/0x4d0 [ 900.360682][T27727] sock_wake_async+0x137/0x160 [ 900.365606][T27727] sock_def_readable+0x3c1/0x530 [ 900.370705][T27727] queue_oob+0x452/0x4f0 [ 900.375108][T27727] unix_stream_sendmsg+0xc32/0xde0 [ 900.380373][T27727] __sock_sendmsg+0x21c/0x270 [ 900.385220][T27727] ____sys_sendmsg+0x52d/0x820 [ 900.390142][T27727] ___sys_sendmsg+0x21f/0x2a0 [ 900.394982][T27727] __sys_sendmmsg+0x28e/0x430 [ 900.399816][T27727] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 900.405530][T27727] __do_fast_syscall_32+0x1dc/0x570 [ 900.410889][T27727] do_fast_syscall_32+0x34/0x80 [ 900.415896][T27727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 900.422378][T27727] [ 900.424686][T27727] -> (&new->fa_lock){....}-{3:3} { [ 900.429805][T27727] INITIAL USE at: [ 900.433679][T27727] lock_acquire+0x107/0x340 [ 900.439735][T27727] _raw_write_lock_irq+0x3d/0x50 [ 900.446219][T27727] fasync_remove_entry+0xf1/0x1c0 [ 900.452798][T27727] lease_modify+0x1ca/0x3c0 [ 900.458849][T27727] locks_remove_file+0x4bf/0xe20 [ 900.465335][T27727] __fput+0x3ab/0xa70 [ 900.470868][T27727] task_work_run+0x1d4/0x260 [ 900.477008][T27727] exit_to_user_mode_loop+0xef/0x4e0 [ 900.483843][T27727] __do_fast_syscall_32+0x398/0x570 [ 900.490594][T27727] do_fast_syscall_32+0x34/0x80 [ 900.496993][T27727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 900.504866][T27727] INITIAL READ USE at: [ 900.509182][T27727] lock_acquire+0x107/0x340 [ 900.515663][T27727] _raw_read_lock_irqsave+0x48/0x60 [ 900.522844][T27727] kill_fasync+0x199/0x4d0 [ 900.529246][T27727] anon_pipe_read+0xf06/0x1040 [ 900.535992][T27727] vfs_read+0x55a/0xa30 [ 900.542129][T27727] ksys_read+0x145/0x250 [ 900.548353][T27727] __do_fast_syscall_32+0x1dc/0x570 [ 900.555538][T27727] do_fast_syscall_32+0x34/0x80 [ 900.562373][T27727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 900.570686][T27727] } [ 900.573176][T27727] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 900.581838][T27727] ... acquired at: [ 900.585621][T27727] _raw_read_lock_irqsave+0x48/0x60 [ 900.590974][T27727] kill_fasync+0x199/0x4d0 [ 900.595553][T27727] evdev_pass_values+0x627/0xbd0 [ 900.600648][T27727] evdev_events+0x1e6/0x340 [ 900.605305][T27727] input_pass_values+0x288/0x890 [ 900.610426][T27727] input_event_dispose+0x330/0x6b0 [ 900.615702][T27727] input_inject_event+0x1dd/0x340 [ 900.620886][T27727] evdev_write+0x2fc/0x480 [ 900.625458][T27727] vfs_write+0x27e/0xb30 [ 900.629856][T27727] ksys_write+0x145/0x250 [ 900.634338][T27727] __do_fast_syscall_32+0x1dc/0x570 [ 900.639699][T27727] do_fast_syscall_32+0x34/0x80 [ 900.644711][T27727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 900.651198][T27727] [ 900.653507][T27727] [ 900.653507][T27727] stack backtrace: [ 900.659380][T27727] CPU: 0 UID: 0 PID: 27727 Comm: syz.8.8828 Tainted: G L syzkaller #0 PREEMPT(full) [ 900.659401][T27727] Tainted: [L]=SOFTLOCKUP [ 900.659407][T27727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 900.659418][T27727] Call Trace: [ 900.659424][T27727] [ 900.659431][T27727] dump_stack_lvl+0xe8/0x150 [ 900.659453][T27727] __lock_acquire+0x2a95/0x2cf0 [ 900.659476][T27727] ? kill_fasync+0x199/0x4d0 [ 900.659495][T27727] lock_acquire+0x107/0x340 [ 900.659508][T27727] ? kill_fasync+0x199/0x4d0 [ 900.659529][T27727] ? do_raw_spin_lock+0x121/0x290 [ 900.659547][T27727] ? evdev_pass_values+0xb9/0xbd0 [ 900.659564][T27727] _raw_read_lock_irqsave+0x48/0x60 [ 900.659579][T27727] ? kill_fasync+0x199/0x4d0 [ 900.659598][T27727] kill_fasync+0x199/0x4d0 [ 900.659617][T27727] ? kill_fasync+0x53/0x4d0 [ 900.659637][T27727] evdev_pass_values+0x627/0xbd0 [ 900.659654][T27727] ? evdev_pass_values+0x681/0xbd0 [ 900.659671][T27727] evdev_events+0x1e6/0x340 [ 900.659689][T27727] ? evdev_events+0x79/0x340 [ 900.659704][T27727] ? input_pass_values+0x8d/0x890 [ 900.659718][T27727] input_pass_values+0x288/0x890 [ 900.659734][T27727] ? input_handle_event+0x70c/0xf30 [ 900.659754][T27727] input_event_dispose+0x330/0x6b0 [ 900.659774][T27727] input_inject_event+0x1dd/0x340 [ 900.659793][T27727] ? input_inject_event+0xb6/0x340 [ 900.659812][T27727] evdev_write+0x2fc/0x480 [ 900.659830][T27727] ? __pfx_evdev_write+0x10/0x10 [ 900.659845][T27727] ? bpf_lsm_file_permission+0x9/0x20 [ 900.659861][T27727] ? security_file_permission+0x75/0x290 [ 900.659876][T27727] ? rw_verify_area+0x255/0x4d0 [ 900.659897][T27727] ? __pfx_evdev_write+0x10/0x10 [ 900.659913][T27727] vfs_write+0x27e/0xb30 [ 900.659929][T27727] ? __pfx_vfs_write+0x10/0x10 [ 900.659942][T27727] ? __fget_files+0x2a/0x420 [ 900.659961][T27727] ? __fget_files+0x2a/0x420 [ 900.659976][T27727] ? __fget_files+0x3a0/0x420 [ 900.659992][T27727] ? __fget_files+0x2a/0x420 [ 900.660012][T27727] ksys_write+0x145/0x250 [ 900.660026][T27727] ? __pfx_ksys_write+0x10/0x10 [ 900.660042][T27727] __do_fast_syscall_32+0x1dc/0x570 [ 900.660060][T27727] ? lockdep_hardirqs_on+0x7b/0x110 [ 900.660075][T27727] ? do_fast_syscall_32+0x34/0x80 [ 900.660091][T27727] ? irqentry_exit+0x10f/0x670 [ 900.660107][T27727] do_fast_syscall_32+0x34/0x80 [ 900.660123][T27727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 900.660141][T27727] RIP: 0023:0xf7fc7539 [ 900.660155][T27727] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 900.660168][T27727] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 900.660185][T27727] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 900.660196][T27727] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 900.660205][T27727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 900.660214][T27727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 900.660223][T27727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 900.660237][T27727]