last executing test programs: 6m34.427252891s ago: executing program 32 (id=68): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100), 0x0}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5m30.250363464s ago: executing program 33 (id=681): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/30, 0x1e}], 0x2) 4m33.174924568s ago: executing program 34 (id=1197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m8.133908195s ago: executing program 35 (id=1416): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, r0, 0x0) 3m2.893236345s ago: executing program 8 (id=1992): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000006f00)={0x2020}, 0x2020) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) fcntl$notify(r1, 0x402, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') readv(r2, 0x0, 0x0) 3m2.677692766s ago: executing program 8 (id=1995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd67, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0x80, 0x100004}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 3m2.411106499s ago: executing program 8 (id=1999): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) pselect6(0x40, &(0x7f0000000580), 0x0, &(0x7f0000000d00)={0xd0}, 0x0, 0x0) close(r0) 3m1.468343688s ago: executing program 8 (id=2004): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) unshare(0x2c020400) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) 3m1.405689438s ago: executing program 8 (id=2005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x4, 0x1, 0x81}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3m1.228676388s ago: executing program 8 (id=2006): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) truncate(&(0x7f0000000080)='./bus\x00', 0x95a) 3m0.979779902s ago: executing program 36 (id=2006): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) truncate(&(0x7f0000000080)='./bus\x00', 0x95a) 2m43.555898182s ago: executing program 6 (id=2150): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x3}, 0x90) 2m43.414422109s ago: executing program 6 (id=2153): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044) 2m42.670290422s ago: executing program 6 (id=2157): r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020204091000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x393, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffe, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6a69600026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf057bb711116e53eb0b55667f1a28c2d6506cf26422d389b") 2m42.46455216s ago: executing program 6 (id=2160): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 2m41.584984129s ago: executing program 6 (id=2166): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x1}, 0xc) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m41.233914002s ago: executing program 6 (id=2172): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r4 = open(&(0x7f0000000100)='./file0\x00', 0x145bc2, 0xab) copy_file_range(r4, 0x0, r4, &(0x7f0000000000)=0x6e65cea5, 0x5, 0x0) 2m40.879672665s ago: executing program 37 (id=2172): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r4 = open(&(0x7f0000000100)='./file0\x00', 0x145bc2, 0xab) copy_file_range(r4, 0x0, r4, &(0x7f0000000000)=0x6e65cea5, 0x5, 0x0) 2m10.26236789s ago: executing program 3 (id=2421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r3, {0xffff, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40091}, 0x0) 2m9.953753189s ago: executing program 3 (id=2424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 2m8.936883808s ago: executing program 3 (id=2437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) 2m8.236662409s ago: executing program 3 (id=2441): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 2m7.227969012s ago: executing program 3 (id=2453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'veth1\x00', 0x600}) 2m6.94105718s ago: executing program 3 (id=2455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x100000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m6.602680387s ago: executing program 38 (id=2455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x100000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m28.812726498s ago: executing program 7 (id=2766): r0 = socket(0xa, 0x5, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r2, 0x0, 0x0, 0xa2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r2, 0x0, 0x7, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 1m28.596306997s ago: executing program 7 (id=2768): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc491, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef8e, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) 1m27.454064589s ago: executing program 7 (id=2774): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r3, 0x200}, 0x8) 1m27.366772882s ago: executing program 7 (id=2775): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m26.422150884s ago: executing program 7 (id=2782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x3}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x5}, {0x7fff, 0x1, 0x8, 0x0, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m26.171356177s ago: executing program 7 (id=2784): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 1m25.725017014s ago: executing program 39 (id=2784): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 32.028525066s ago: executing program 0 (id=3208): epoll_create1(0x80000) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000000040)=[{r0, 0x8744}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 28.946490534s ago: executing program 0 (id=3231): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000047, r2, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xff, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff8, 0x4, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0x2, 0x7, 0x7, 0x3, 0x2, 0x8, 0xfff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0x39790, 0x6, 0xe, 0x5, 0x400000000008061d, 0x10000003, 0x8, 0x6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x3, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r3 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 28.675918185s ago: executing program 0 (id=3233): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) r1 = dup(r0) r2 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 27.111599525s ago: executing program 0 (id=3240): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000021c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 26.044452102s ago: executing program 0 (id=3249): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000780)="c8ed", 0x2}], 0x1, 0x0, 0x0, 0x48000}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/114, 0x72}], 0x1}, 0x40) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)="83029a268bc91b", 0x7}], 0x1}, 0x10) 25.680893705s ago: executing program 0 (id=3251): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 24.521778657s ago: executing program 40 (id=3251): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 8.677091493s ago: executing program 5 (id=3330): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x5, 0x28, 0xe4d, 0x1, 0x7ff, 0x3861, 0x8, 0xa, 0x44, 0x15, 0x200, 0x2}}, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) 6.054164352s ago: executing program 9 (id=3341): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$cgroup_netprio_ifpriomap(r2, 0x0, 0x0) 6.042958554s ago: executing program 1 (id=3342): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r0, 0xb5d6) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) 5.9040681s ago: executing program 5 (id=3343): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ff"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f00000000c0)={0x2, 0x200, 0x7, 0xfffffffd, 0xffff, 0x200, 0x8a43, 0x6, 0x401, 0xd0, 0xa3, 0x9, 0x82d, 0x7}) 5.811064223s ago: executing program 1 (id=3344): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x103cfa, 0x0, 0x3, 0x69}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4.073393728s ago: executing program 4 (id=3351): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x0, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, 0x0, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+'], 0x2b) syz_fuse_handle_req(r2, &(0x7f0000003d40)="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", 0x2000, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r2, r0, 0x0, 0x4000000053d2) 3.898461782s ago: executing program 4 (id=3352): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x110, 0x1200) read(r1, &(0x7f0000000340)=""/111, 0x6f) 3.063988618s ago: executing program 2 (id=3356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffff00, 0xffffffff, 0xff000000, 0xffffff00]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 2.932517168s ago: executing program 4 (id=3357): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r0, 0x2) flock(r0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.860643063s ago: executing program 2 (id=3358): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0xc000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 2.804773239s ago: executing program 9 (id=3359): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) fadvise64(r0, 0x9154, 0x5, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) 2.659415219s ago: executing program 2 (id=3360): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=""/19, 0x13}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.614816427s ago: executing program 4 (id=3361): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x10000, @local, 0x9}}, 0xe, 0x1}, 0x90) 2.598646668s ago: executing program 5 (id=3362): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) 2.424471163s ago: executing program 1 (id=3363): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x55d0, 0x800, 0x0, 0x1d}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r2, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.39142872s ago: executing program 2 (id=3364): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26040885}, 0x20000040) 2.362871373s ago: executing program 4 (id=3365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @empty, 0x80040}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.140540219s ago: executing program 2 (id=3366): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000100)=[{0x0, 0xc800, 0x3e, &(0x7f0000000200)="dcfbda949f101ac8ba09222655792c905c2bbbcb6fa0f8a81c886bc0965d34f672dbe91def0c7b99809d08cdffa75082757c682b4978b3e2791ee6f97360"}], 0x1}) 2.047368405s ago: executing program 9 (id=3367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007cf000/0x2000)=nil}) 2.024495658s ago: executing program 1 (id=3368): read$FUSE(0xffffffffffffffff, &(0x7f0000003800)={0x2020}, 0xfda3) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000700)=""/212, 0xd4}], 0x1, 0x1fe, 0x12) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400006000008001240000020000500050002000000050004000000000015000300686173683a6970"], 0x64}}, 0x840) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1.740097417s ago: executing program 4 (id=3369): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.670894793s ago: executing program 9 (id=3370): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x1e0) openat$cgroup_int(r0, &(0x7f0000000240)='cpu.max\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="08001f00050000000500110001"], 0x70}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 1.077676826s ago: executing program 5 (id=3371): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r1, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) 868.626821ms ago: executing program 9 (id=3372): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 579.236326ms ago: executing program 9 (id=3373): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 463.309461ms ago: executing program 5 (id=3374): r0 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=0x0, &(0x7f0000000000)=0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r3, 0x402, 0x8000001f) syz_io_uring_submit(r1, r2, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x1733, 0x6323, 0x20, 0x0, 0x0) 376.849606ms ago: executing program 1 (id=3375): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000740)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x2, '\x00', {0xb, 0x6, "8234ed", 0x10, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [], "2d853c53089f4a51"}}}}}}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) 342.804384ms ago: executing program 5 (id=3376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000180)={0x0, r2}) r3 = eventfd(0x7) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) 321.780655ms ago: executing program 2 (id=3377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x30000000}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0x1, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x2, 0x5, 0xde, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8020, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x101, 0x8, 0x10400, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x2, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0x8, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0x3, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0xb, 0x6, 0x2c2], [0x401, 0xc584, 0xffff, 0xcd1, 0x7, 0x23, 0x2, 0x4, 0xb, 0x10, 0x5, 0xd, 0x7, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x44, 0x2, 0x80000003, 0x5, 0x10000000, 0x0, 0x3, 0x8, 0x8001, 0x1000, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0xfffffffe, 0x7d, 0x403, 0x5], [0x1e6a, 0x7fff, 0x4, 0x5, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x1ff, 0x9, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x4d13, 0x6, 0x7fff, 0x2, 0xffffffff, 0x401, 0x9, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=3378): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1}) kernel console output (not intermixed with test programs): read partition table [ 340.294349][T12370] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2281'. [ 340.311678][T12372] loop4: partition table beyond EOD, truncated [ 340.328070][T12370] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2281'. [ 340.341159][T12372] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 340.392713][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 340.420691][ T5869] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 340.454064][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.480318][ T5869] usb 4-1: Product: syz [ 340.501708][ T5869] usb 4-1: Manufacturer: syz [ 340.526683][ T5869] usb 4-1: SerialNumber: syz [ 340.544692][ T5869] usb 4-1: config 0 descriptor?? [ 340.746819][T12390] loop9: detected capacity change from 0 to 7 [ 340.754783][T12390] buffer_io_error: 316 callbacks suppressed [ 340.754798][T12390] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.759839][ T5869] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 340.761613][T12390] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.786208][T12390] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.801718][T12390] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.812082][T12390] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.820767][T12390] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.828966][T12390] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.836965][T12390] ldm_validate_partition_table(): Disk read failed. [ 340.880193][T12395] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.932109][T12390] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.964987][T12390] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.982393][T12390] Dev loop9: unable to read RDB block 0 [ 340.995420][T12390] loop9: unable to read partition table [ 341.014623][ T5869] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 341.016348][T12390] loop9: partition table beyond EOD, [ 341.037362][ T5869] usb 4-1: USB disconnect, device number 3 [ 341.070014][T12390] truncated [ 341.102045][T12390] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 341.102045][T12390] ) failed (rc=-5) [ 341.510691][ T5948] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 341.713159][ T5948] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 341.748324][ T5948] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 341.769220][ T5948] usb 6-1: config 0 interface 0 has no altsetting 0 [ 341.795405][ T5948] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 341.823823][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 341.866647][ T5948] usb 6-1: Product: syz [ 341.902074][ T5948] usb 6-1: Manufacturer: syz [ 341.921978][ T5948] usb 6-1: SerialNumber: syz [ 341.935183][ T5948] usb 6-1: config 0 descriptor?? [ 341.952528][ T5948] hub 6-1:0.0: bad descriptor, ignoring hub [ 341.970988][ T5948] hub 6-1:0.0: probe with driver hub failed with error -5 [ 342.007644][ T5948] usb 6-1: selecting invalid altsetting 0 [ 342.159326][ T5985] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 342.360956][ T5948] usb 6-1: reset high-speed USB device number 25 using dummy_hcd [ 342.378282][ T5985] usb 3-1: Using ep0 maxpacket: 8 [ 342.396375][ T5985] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 342.435911][ T5985] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 342.454322][ T5985] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 342.479223][ T5985] usb 3-1: Product: syz [ 342.486469][ T5985] usb 3-1: Manufacturer: syz [ 342.494229][ T5985] usb 3-1: SerialNumber: syz [ 342.516050][T12439] vivid-001: ================= START STATUS ================= [ 342.542664][T12439] vivid-001: Radio HW Seek Mode: Bounded [ 342.567972][T12439] vivid-001: Radio Programmable HW Seek: false [ 342.597937][T12439] vivid-001: RDS Rx I/O Mode: Block I/O [ 342.636993][T12439] vivid-001: Generate RBDS Instead of RDS: false [ 342.689338][T12439] vivid-001: RDS Reception: true [ 342.709078][ T5985] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 342.717501][T12439] vivid-001: RDS Program Type: 0 inactive [ 342.730046][ T5985] usb 3-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 342.753733][T12439] vivid-001: RDS PS Name: inactive [ 342.762468][ T5985] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 342.809331][ T5985] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 342.838130][T12439] vivid-001: RDS Radio Text: inactive [ 342.856364][T12439] vivid-001: RDS Traffic Announcement: false inactive [ 342.870799][T12439] vivid-001: RDS Traffic Program: false inactive [ 342.877286][T12439] vivid-001: RDS Music: false inactive [ 342.886633][T12439] vivid-001: ================== END STATUS ================== [ 342.918328][ T5985] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 342.959947][ T5985] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 343.010563][ T5985] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 343.054757][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 343.086297][ T5985] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 343.135393][ T5985] usb 3-1: USB disconnect, device number 40 [ 343.172523][ T5869] usb 6-1: USB disconnect, device number 25 [ 343.179765][ T5985] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 343.242581][ T5985] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 343.277236][ T5985] visor 3-1:1.0: device disconnected [ 344.350256][T12488] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2313'. [ 344.539711][T12492] netlink: 'syz.9.2314': attribute type 1 has an invalid length. [ 344.803395][T12492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.961529][T12498] bond1: (slave gretap1): making interface the new active one [ 345.072833][T12498] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 345.144065][T12498] syz.9.2314 (12498) used greatest stack depth: 17840 bytes left [ 345.334785][T12520] netlink: 'syz.5.2321': attribute type 1 has an invalid length. [ 345.515655][T12529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2324'. [ 345.547347][T12529] netlink: 'syz.3.2324': attribute type 7 has an invalid length. [ 345.569096][T12529] netlink: 'syz.3.2324': attribute type 8 has an invalid length. [ 345.578643][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 345.603703][T12520] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.671460][ T5985] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 345.704974][ T5966] IPVS: starting estimator thread 0... [ 345.798486][T12538] IPVS: using max 31 ests per chain, 74400 per kthread [ 345.850335][ T5985] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 345.874903][ T5985] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.892988][ T5985] usb 10-1: config 0 descriptor?? [ 345.917029][ T5985] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 346.378371][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 346.551461][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.581837][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.604262][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.623453][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.632929][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.658406][ T24] usb 3-1: config 0 descriptor?? [ 347.171490][ T5985] usb 10-1: USB disconnect, device number 5 [ 347.277682][ T24] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 347.456630][ T5987] usb 3-1: USB disconnect, device number 41 [ 347.741043][ T5985] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 347.944793][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.977257][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.015561][ T5985] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 348.050387][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.101476][ T5985] usb 4-1: config 0 descriptor?? [ 348.468831][ T5948] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 348.535663][ T5985] hid_parser_main: 7 callbacks suppressed [ 348.535685][ T5985] cm6533_jd 0003:0D8C:0022.002A: unknown main item tag 0x0 [ 348.591762][ T5985] cm6533_jd 0003:0D8C:0022.002A: unknown main item tag 0x0 [ 348.618451][ T5985] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.002A/input/input53 [ 348.656507][ T5948] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 348.669500][ T5948] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.694346][ T5985] cm6533_jd 0003:0D8C:0022.002A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 348.714921][ T5948] usb 10-1: config 0 has no interface number 0 [ 348.725922][ T5948] usb 10-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 348.798599][ T5985] usb 4-1: USB disconnect, device number 4 [ 348.825737][ T5948] usb 10-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 348.898539][ T5948] usb 10-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 348.907702][ T5948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.938390][ T5948] usb 10-1: Product: syz [ 348.942878][ T5948] usb 10-1: Manufacturer: syz [ 348.946217][T12638] fido_id[12638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 348.970961][ T5948] usb 10-1: SerialNumber: syz [ 348.987363][ T5948] usb 10-1: config 0 descriptor?? [ 349.037640][ T5948] HFC-S_USB 10-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 349.236432][ T24] usb 10-1: USB disconnect, device number 6 [ 349.364021][T12651] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 349.527319][T12657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.983330][T12677] loop6: detected capacity change from 0 to 7 [ 350.011067][T12677] Dev loop6: unable to read RDB block 7 [ 350.052757][T12677] loop6: unable to read partition table [ 350.080939][T12677] loop6: partition table beyond EOD, truncated [ 350.104411][T12677] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 350.286493][T12687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.792417][T12703] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2370'. [ 350.803321][T12703] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2370'. [ 351.011888][T12710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2372'. [ 351.369150][ T5948] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 351.561283][ T5948] usb 10-1: Using ep0 maxpacket: 8 [ 351.603317][ T5948] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 351.623262][ T5948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.655988][ T5948] usb 10-1: Product: syz [ 351.683149][ T5948] usb 10-1: Manufacturer: syz [ 351.723437][ T5948] usb 10-1: SerialNumber: syz [ 351.960400][ T5948] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 352.729027][ T5948] usb 10-1: USB disconnect, device number 7 [ 352.755720][ T5948] usblp0: removed [ 353.084095][ T30] audit: type=1326 audit(1758442573.499:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.2.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a63f85be7 code=0x7ffc0000 [ 353.108466][ T5966] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 353.159444][ T30] audit: type=1326 audit(1758442573.499:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.2.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a63f2ae09 code=0x7ffc0000 [ 353.233963][ T30] audit: type=1326 audit(1758442573.499:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.2.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a63f85be7 code=0x7ffc0000 [ 353.298493][ T5966] usb 6-1: Using ep0 maxpacket: 8 [ 353.320428][ T30] audit: type=1326 audit(1758442573.499:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.2.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a63f2ae09 code=0x7ffc0000 [ 353.353939][ T5966] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 353.380534][ T30] audit: type=1326 audit(1758442573.499:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.2.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a63f85be7 code=0x7ffc0000 [ 353.391960][ T5966] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.461024][ T5966] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.495581][ T30] audit: type=1326 audit(1758442573.499:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.2.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a63f2ae09 code=0x7ffc0000 [ 353.508221][ T5966] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.598483][ T30] audit: type=1326 audit(1758442573.499:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.2.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a63f85be7 code=0x7ffc0000 [ 353.608236][ T5966] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.655946][ T30] audit: type=1326 audit(1758442573.499:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.2.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a63f2ae09 code=0x7ffc0000 [ 353.678227][ T5966] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 353.678256][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.736972][ T30] audit: type=1326 audit(1758442573.499:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.2.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a63f85be7 code=0x7ffc0000 [ 353.804010][ T30] audit: type=1326 audit(1758442573.499:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.2.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a63f2ae09 code=0x7ffc0000 [ 353.943681][ T5966] usb 6-1: usb_control_msg returned -32 [ 353.969433][ T5966] usbtmc 6-1:16.0: can't read capabilities [ 354.350571][T12778] loop7: detected capacity change from 0 to 1 [ 354.396872][T12780] IPv4: Oversized IP packet from 172.20.20.24 [ 354.405151][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 354.411951][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 354.453856][ T5876] Dev loop7: unable to read RDB block 1 [ 354.480109][ T5876] loop7: unable to read partition table [ 354.490092][ T5876] loop7: partition table beyond EOD, truncated [ 354.497701][T12778] Dev loop7: unable to read RDB block 1 [ 354.506120][T12778] loop7: unable to read partition table [ 354.513016][T12778] loop7: partition table beyond EOD, truncated [ 354.521934][T12778] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 355.817473][ T5966] usb 6-1: USB disconnect, device number 26 [ 357.973510][T12880] pim6reg1: entered allmulticast mode [ 359.580918][T12918] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2450'. [ 360.059561][T11494] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.165092][T11494] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.346069][T11494] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.496891][T11494] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.054567][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.081145][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.090660][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.107311][T11494] bridge_slave_1: left allmulticast mode [ 361.128596][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.163285][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.182141][T11494] bridge_slave_1: left promiscuous mode [ 361.187965][T11494] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.365659][T11494] bridge_slave_0: left allmulticast mode [ 361.387393][T11494] bridge_slave_0: left promiscuous mode [ 361.405937][T11494] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.498573][ T5966] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 361.723921][ T5966] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.768831][ T5966] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.813060][ T5966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.873891][ T5966] usb 8-1: config 0 descriptor?? [ 362.210657][ T5985] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 362.307781][ T980] usb 8-1: USB disconnect, device number 20 [ 362.369002][ T5985] usb 10-1: Using ep0 maxpacket: 8 [ 362.396620][ T5985] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.415384][ T5985] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.439975][ T5985] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 362.450445][ T5985] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.496275][ T5985] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.538664][ T5985] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.700056][T11494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.712839][T11494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.727464][T11494] bond0 (unregistering): Released all slaves [ 362.752076][ T5985] usb 10-1: GET_CAPABILITIES returned 0 [ 362.788740][ T5985] usbtmc 10-1:16.0: can't read capabilities [ 362.892271][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2479'. [ 362.966638][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.975864][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.985025][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.994171][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.003377][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.021939][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.031156][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.040326][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.070672][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.079884][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.089072][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.098253][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.109024][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.118227][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.127395][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.136559][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.149813][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 363.163208][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2479'. [ 363.173384][ T980] usb 10-1: USB disconnect, device number 8 [ 363.183095][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2480'. [ 363.288625][ T5879] Bluetooth: hci3: command tx timeout [ 363.556796][T11494] hsr_slave_0: left promiscuous mode [ 363.578054][T11494] hsr_slave_1: left promiscuous mode [ 363.596579][T11494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.632664][T11494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.660808][T11494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.687375][T11494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.783700][T11494] veth1_macvtap: left promiscuous mode [ 363.810205][T11494] veth0_macvtap: left promiscuous mode [ 363.831553][T11494] veth1_vlan: left promiscuous mode [ 363.836908][T11494] veth0_vlan: left promiscuous mode [ 363.945635][T13034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.964994][T13034] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 364.588622][ T5985] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 364.746770][T11494] team0 (unregistering): Port device team_slave_1 removed [ 364.753532][ T5985] usb 3-1: Using ep0 maxpacket: 16 [ 364.761098][ T5985] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 364.775383][ T5985] usb 3-1: config 0 has no interface number 0 [ 364.781936][ T5985] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 364.797000][ T5985] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 364.807120][ T5985] usb 3-1: config 0 interface 41 has no altsetting 0 [ 364.814655][T11494] team0 (unregistering): Port device team_slave_0 removed [ 364.828024][ T5985] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 364.844844][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.852922][ T5985] usb 3-1: Product: syz [ 364.857112][ T5985] usb 3-1: Manufacturer: syz [ 364.861949][ T5985] usb 3-1: SerialNumber: syz [ 364.871058][ T5985] usb 3-1: config 0 descriptor?? [ 364.886593][T13044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 364.894523][T13044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 365.122237][T13044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 365.140310][T13044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 365.368538][ T5862] Bluetooth: hci3: command tx timeout [ 365.565045][ T5985] Error reading MAC address [ 365.614014][T13044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 365.638648][T13044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 365.719279][T12962] chnl_net:caif_netlink_parms(): no params data found [ 366.068157][T12962] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.103770][T12962] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.113092][T12962] bridge_slave_0: entered allmulticast mode [ 366.122733][T12962] bridge_slave_0: entered promiscuous mode [ 366.135064][T12962] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.144483][T12962] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.152205][T12962] bridge_slave_1: entered allmulticast mode [ 366.161104][T12962] bridge_slave_1: entered promiscuous mode [ 366.242795][T12962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.267922][T12962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.333424][ T5985] sr9700 3-1:0.41 eth21: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, 8a:78:92:b9:e7:ef [ 366.371923][ T5985] usb 3-1: USB disconnect, device number 42 [ 366.392298][T12962] team0: Port device team_slave_0 added [ 366.413082][ T5985] sr9700 3-1:0.41 eth21: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet [ 366.432039][T12962] team0: Port device team_slave_1 added [ 366.606501][T12962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.632949][T12962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.658893][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.670000][T12962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.683063][T12962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.708968][T12962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.753566][T12962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.948569][ T24] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 367.034148][T12962] hsr_slave_0: entered promiscuous mode [ 367.042147][T12962] hsr_slave_1: entered promiscuous mode [ 367.055119][T12962] debugfs: 'hsr0' already exists in 'hsr' [ 367.072310][T12962] Cannot create hsr debugfs directory [ 367.105512][T13093] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 367.126475][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.137748][ T24] usb 10-1: config 0 has no interfaces? [ 367.150558][ T24] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 367.169704][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.184949][ T24] usb 10-1: Product: syz [ 367.194151][ T24] usb 10-1: Manufacturer: syz [ 367.208470][ T24] usb 10-1: SerialNumber: syz [ 367.225130][ T24] usb 10-1: config 0 descriptor?? [ 367.450679][ T5862] Bluetooth: hci3: command tx timeout [ 367.496526][ T43] usb 10-1: USB disconnect, device number 9 [ 368.193712][T13122] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 368.217037][T13122] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 368.260894][T13122] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 368.284822][T13122] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 368.317537][T13122] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 368.364280][T13122] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 368.405055][T13122] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 368.446704][T13122] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 368.467781][T13122] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 368.515306][T13132] fuse: root generation should be zero [ 368.518685][T13122] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 369.258546][ T5985] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 369.333102][T12962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.392692][T12962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.450409][T12962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.459562][ T5985] usb 3-1: Using ep0 maxpacket: 32 [ 369.492339][T12962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.508784][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.531915][ T5862] Bluetooth: hci3: command tx timeout [ 369.553573][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.596530][ T5985] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 369.634953][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.666339][ T5985] usb 3-1: config 0 descriptor?? [ 369.735774][ T5985] hub 3-1:0.0: USB hub found [ 369.917524][ T5985] hub 3-1:0.0: 1 port detected [ 369.977470][T12962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.087616][T12962] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.153084][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.160289][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.231982][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.239205][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.387214][T12962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.423456][T12962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.557461][T12962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.757521][T12962] veth0_vlan: entered promiscuous mode [ 370.796296][T12962] veth1_vlan: entered promiscuous mode [ 370.866761][ T5987] hub 3-1:0.0: activate --> -90 [ 371.062346][T12962] veth0_macvtap: entered promiscuous mode [ 371.109095][T12962] veth1_macvtap: entered promiscuous mode [ 371.187062][ T5926] usb 3-1: USB disconnect, device number 43 [ 371.212235][T12962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.236395][T13193] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2525'. [ 371.246682][T13193] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2525'. [ 371.278587][T12962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.343418][ T1137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.359020][ T1137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.398370][ T5987] usb 3-1-port1: config error [ 371.413864][ T1137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.501367][ T1137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.734119][ T7716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.788220][ T7716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.956009][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.011412][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.300636][ T5987] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 372.489079][ T5987] usb 8-1: config 0 has no interfaces? [ 372.503588][ T5987] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 372.520707][ T5987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.582473][ T5987] usb 8-1: config 0 descriptor?? [ 372.825287][ T5948] usb 8-1: USB disconnect, device number 21 [ 373.206242][T13263] Failed to get privilege flags for destination (handle=0x0:0x0) [ 373.790933][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2550'. [ 373.884343][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2550'. [ 373.885375][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.026915][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.062797][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.114894][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.498527][ T30] kauditd_printk_skb: 479 callbacks suppressed [ 374.498544][ T30] audit: type=1326 audit(1758442594.919:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13270 comm="syz.1.2546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aa838ec29 code=0x0 [ 374.577799][T13311] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2558'. [ 375.049054][ T5948] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 375.168397][ T5987] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 375.212416][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.238545][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.272588][ T5948] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 375.298302][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.329889][ T5987] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 375.353678][ T5948] usb 3-1: config 0 descriptor?? [ 375.367341][ T5987] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 375.407463][ T5987] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 375.448920][ T5987] usb 10-1: config 220 has no interface number 2 [ 375.458595][ T5987] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 375.502150][ T5987] usb 10-1: config 220 interface 0 has no altsetting 0 [ 375.536289][ T5987] usb 10-1: config 220 interface 76 has no altsetting 0 [ 375.564388][ T5987] usb 10-1: config 220 interface 1 has no altsetting 0 [ 375.597856][ T5987] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 375.629750][ T5987] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.654102][ T5987] usb 10-1: Product: syz [ 375.680267][ T5987] usb 10-1: Manufacturer: syz [ 375.718767][ T5987] usb 10-1: SerialNumber: syz [ 375.929847][T13350] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2569'. [ 375.995278][ T5987] usb 10-1: selecting invalid altsetting 0 [ 376.015109][ T5987] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 376.036279][ T5987] usb 10-1: No valid video chain found. [ 376.082227][ T5987] usb 10-1: selecting invalid altsetting 0 [ 376.095878][ T5987] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 376.114468][ T5987] usb 10-1: USB disconnect, device number 10 [ 376.628011][ T5948] uclogic 0003:256C:006D.002B: v1 frame probing failed: -71 [ 376.655871][ T5948] uclogic 0003:256C:006D.002B: failed probing parameters: -71 [ 376.707985][ T5948] uclogic 0003:256C:006D.002B: probe with driver uclogic failed with error -71 [ 376.781776][ T5948] usb 3-1: USB disconnect, device number 44 [ 377.018280][ T5985] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 377.198297][ T5985] usb 2-1: Using ep0 maxpacket: 8 [ 377.227957][ T5985] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 377.262750][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.303814][ T5985] usb 2-1: Product: syz [ 377.318213][ T5985] usb 2-1: Manufacturer: syz [ 377.323529][ T5985] usb 2-1: SerialNumber: syz [ 377.344378][ T5985] usb 2-1: config 0 descriptor?? [ 377.569036][ T5985] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 377.677706][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2580'. [ 377.756858][T13399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.819861][ T5985] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 377.856833][ T5985] usb 2-1: USB disconnect, device number 9 [ 378.030086][T13410] fanotify_encode_fh: 864 callbacks suppressed [ 378.030106][T13410] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 378.911456][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.917796][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.552523][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2607'. [ 380.579630][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2607'. [ 381.106252][T13461] syz.1.2601 (13461): drop_caches: 2 [ 381.829130][T13522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2619'. [ 382.103587][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2622'. [ 382.341758][T13541] all: renamed from lo (while UP) [ 382.935501][T13556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2631'. [ 382.948814][T13556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2631'. [ 383.091662][T13567] netlink: 'syz.7.2633': attribute type 10 has an invalid length. [ 383.360963][T13567] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.370188][T13567] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.523400][T13567] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.530653][T13567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.538160][T13567] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.545360][T13567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.633510][T13567] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 383.833024][ T30] audit: type=1326 audit(1758442604.239:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.1.2636" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9aa838ec29 code=0x0 [ 384.680706][T13617] netlink: 'syz.1.2649': attribute type 1 has an invalid length. [ 384.920979][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2652'. [ 384.958465][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2652'. [ 384.993936][T13629] netlink: 'syz.1.2652': attribute type 7 has an invalid length. [ 385.088765][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2653'. [ 387.196484][T13689] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2672'. [ 388.224945][T13722] loop2: detected capacity change from 0 to 7 [ 388.270850][T13724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2682'. [ 388.494697][T13732] KVM: debugfs: duplicate directory 13732-4 [ 390.928444][ T5987] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 391.218039][T13803] input: syz0 as /devices/virtual/input/input54 [ 391.266822][T13803] input: failed to attach handler leds to device input54, error: -6 [ 391.269910][ T5987] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.358739][ T5987] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.415712][ T5987] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 391.444985][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 391.506023][ T5987] usb 3-1: SerialNumber: syz [ 391.782527][ T5987] usb 3-1: 0:2 : does not exist [ 391.918373][ T5987] usb 3-1: USB disconnect, device number 45 [ 391.995088][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.388484][ T980] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 392.548763][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 392.613946][ T980] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 392.638308][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 392.666692][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.727332][ T980] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.783474][ T980] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 392.826844][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.085578][ T980] usb 2-1: GET_CAPABILITIES returned 0 [ 393.111488][ T980] usbtmc 2-1:16.0: can't read capabilities [ 393.298865][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 393.312217][ T5864] usb 2-1: USB disconnect, device number 10 [ 393.498300][ T5987] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 393.596409][ T30] audit: type=1804 audit(1758442614.009:1157): pid=13862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2729" name="/newroot/120/file0" dev="tmpfs" ino=637 res=1 errno=0 [ 393.665567][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.704516][ T5987] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 393.727087][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.758365][ T5987] usb 3-1: config 0 descriptor?? [ 394.004664][ T5987] usbhid 3-1:0.0: can't add hid device: -71 [ 394.054217][ T5987] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 394.131461][ T5987] usb 3-1: USB disconnect, device number 46 [ 394.594432][ T5987] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 394.768388][T13925] batadv_slave_1: entered allmulticast mode [ 394.888536][ T5987] usb 3-1: Using ep0 maxpacket: 32 [ 394.930712][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.982824][T13920] batadv_slave_1: left allmulticast mode [ 395.038038][ T5987] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 395.125382][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.196783][ T5987] usb 3-1: config 0 descriptor?? [ 395.252837][T13935] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2742'. [ 395.264229][ T5987] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 395.286777][ T5987] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 395.748921][ T980] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 395.846760][ T5864] usb 3-1: USB disconnect, device number 47 [ 395.871100][ T5864] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 395.918478][ T980] usb 8-1: Using ep0 maxpacket: 8 [ 395.937559][ T980] usb 8-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 395.957400][ T980] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.978143][ T980] usb 8-1: Product: syz [ 395.986721][ T980] usb 8-1: Manufacturer: syz [ 395.992013][ T980] usb 8-1: SerialNumber: syz [ 396.002778][ T980] usb 8-1: config 0 descriptor?? [ 396.022736][ T980] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 396.554152][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2754'. [ 396.594897][T13985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.240469][ T5869] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 397.245987][ T980] input: sonixj as /devices/platform/dummy_hcd.7/usb8/8-1/input/input55 [ 397.424479][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.451720][ T5926] usb 8-1: USB disconnect, device number 22 [ 397.480573][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.566202][ T5869] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 397.588363][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.645961][ T5869] usb 3-1: config 0 descriptor?? [ 397.668415][ T980] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 397.866291][ T980] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 397.899169][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.945491][ T980] usb 2-1: Product: syz [ 397.996964][ T980] usb 2-1: Manufacturer: syz [ 398.026553][ T980] usb 2-1: SerialNumber: syz [ 398.128036][T14010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.132167][ T5869] pyra 0003:1E7D:2CF6.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 399.142017][ T5869] pyra 0003:1E7D:2CF6.002C: couldn't init struct pyra_device [ 399.149693][ T5869] pyra 0003:1E7D:2CF6.002C: couldn't install mouse [ 399.183178][ T5869] pyra 0003:1E7D:2CF6.002C: probe with driver pyra failed with error -71 [ 399.222383][ T5869] usb 3-1: USB disconnect, device number 48 [ 399.538660][ T980] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 399.574331][ T980] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 399.594470][ T980] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 399.615480][ T980] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 399.635040][ T980] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 399.657434][ T980] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 399.696432][ T980] usb 2-1: USB disconnect, device number 11 [ 400.807487][ T1170] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.831733][ T1170] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.977176][ T1170] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.008068][ T1170] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.019878][ T5864] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 401.093898][ T1170] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.105401][ T1170] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.193883][ T5864] usb 3-1: config 0 has no interfaces? [ 401.243809][ T5864] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.268066][T14065] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2786'. [ 401.277362][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.308387][ T5864] usb 3-1: Product: syz [ 401.312587][ T5864] usb 3-1: Manufacturer: syz [ 401.317191][ T5864] usb 3-1: SerialNumber: syz [ 401.359295][ T5864] usb 3-1: config 0 descriptor?? [ 401.370602][ T1170] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.408620][ T1170] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.885698][ T5987] usb 3-1: USB disconnect, device number 49 [ 401.891911][ T1170] bridge_slave_1: left allmulticast mode [ 401.897562][ T1170] bridge_slave_1: left promiscuous mode [ 401.932984][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.986860][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.000281][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.009237][ T1170] bridge_slave_0: left allmulticast mode [ 402.015297][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.025908][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.036709][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 402.049258][ T1170] bridge_slave_0: left promiscuous mode [ 402.057653][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.478826][ T1170] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 402.640765][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.652512][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.663817][ T1170] bond0 (unregistering): Released all slaves [ 402.782409][ T1170] bond1 (unregistering): Released all slaves [ 402.966720][ T1170] tipc: Disabling bearer [ 403.010861][ T1170] tipc: Left network mode [ 403.803344][T14134] bond0: entered promiscuous mode [ 403.808526][T14134] bond_slave_0: entered promiscuous mode [ 403.814440][T14134] bond_slave_1: entered promiscuous mode [ 403.826667][T14140] netlink: 'syz.9.2808': attribute type 1 has an invalid length. [ 403.831767][T14134] dummy0: entered promiscuous mode [ 403.851418][T14134] hsr1: entered promiscuous mode [ 403.881293][T14134] hsr1: entered allmulticast mode [ 403.905189][T14134] bond0: entered allmulticast mode [ 403.927364][T14134] bond_slave_0: entered allmulticast mode [ 403.935052][T14134] bond_slave_1: entered allmulticast mode [ 403.945742][T14134] dummy0: entered allmulticast mode [ 404.078474][T14140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.088580][ T5879] Bluetooth: hci2: command tx timeout [ 404.453498][T14089] chnl_net:caif_netlink_parms(): no params data found [ 404.553969][ T1170] hsr_slave_0: left promiscuous mode [ 404.561916][ T1170] hsr_slave_1: left promiscuous mode [ 404.574880][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.614439][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.625680][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.642842][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.708928][ T1170] veth1_macvtap: left promiscuous mode [ 404.715068][ T1170] veth0_macvtap: left promiscuous mode [ 404.723920][ T1170] veth1_vlan: left promiscuous mode [ 404.731249][ T1170] veth0_vlan: left promiscuous mode [ 404.968357][ T5948] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 405.143388][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 405.166480][ T5948] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 405.176764][ T5948] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 405.187704][ T5948] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.202460][ T5948] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 405.211594][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.230153][ T5948] usbtmc 2-1:16.0: bulk endpoints not found [ 405.282277][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 405.329295][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 405.455703][ T5926] usb 2-1: USB disconnect, device number 12 [ 406.170355][ T5879] Bluetooth: hci2: command tx timeout [ 406.599325][T14089] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.624074][T14089] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.668457][T14089] bridge_slave_0: entered allmulticast mode [ 406.676210][T14089] bridge_slave_0: entered promiscuous mode [ 406.727795][T14089] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.752682][T14089] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.761811][T14089] bridge_slave_1: entered allmulticast mode [ 406.769940][T14089] bridge_slave_1: entered promiscuous mode [ 407.061947][T14089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.132309][T14089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.252665][T14089] team0: Port device team_slave_0 added [ 407.267699][ T1170] IPVS: stop unused estimator thread 0... [ 407.278118][T14089] team0: Port device team_slave_1 added [ 407.357441][T14089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.379970][T14089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.424176][T14089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.439935][T14089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.447119][T14089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.474073][T14089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.480735][ T24] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 407.650300][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 407.652681][T14089] hsr_slave_0: entered promiscuous mode [ 407.660244][ T24] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.669167][T14089] hsr_slave_1: entered promiscuous mode [ 407.670788][T14089] debugfs: 'hsr0' already exists in 'hsr' [ 407.694258][T14089] Cannot create hsr debugfs directory [ 407.706100][ T24] usb 10-1: config 0 has no interface number 0 [ 407.722600][ T24] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 407.739051][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.757371][ T24] usb 10-1: Product: syz [ 407.762066][ T24] usb 10-1: Manufacturer: syz [ 407.766765][ T24] usb 10-1: SerialNumber: syz [ 407.795725][ T24] usb 10-1: config 0 descriptor?? [ 407.807210][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 407.841534][ T5926] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 408.003326][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 408.019659][ T5926] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 408.041509][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.083930][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.119884][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.163903][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.214796][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.227233][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.254812][ T5879] Bluetooth: hci2: command tx timeout [ 408.257560][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.283325][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.315485][ T5926] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 408.328308][ T5985] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 408.349325][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 408.371042][ T5926] usb 2-1: SerialNumber: syz [ 408.408006][ T5926] usb 2-1: config 0 descriptor?? [ 408.434478][ T5926] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input56 [ 408.518684][ T5985] usb 6-1: Using ep0 maxpacket: 32 [ 408.534040][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.556392][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.586936][ T5985] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 408.618230][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.638099][T14233] input: syz1 as /devices/virtual/input/input57 [ 408.675038][ T5219] bcm5974 2-1:0.0: could not read from device [ 408.699196][ T5985] usb 6-1: config 0 descriptor?? [ 408.716242][ T5219] bcm5974 2-1:0.0: could not read from device [ 408.725063][ T5926] usb 2-1: USB disconnect, device number 13 [ 408.739813][ T5985] hub 6-1:0.0: USB hub found [ 408.756142][ T5219] bcm5974 2-1:0.0: could not read from device [ 408.789652][ T5219] bcm5974 2-1:0.0: could not read from device [ 408.915432][ T5985] hub 6-1:0.0: 1 port detected [ 409.226952][T14089] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 409.246025][T14089] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 409.265029][ T24] gspca_spca1528: reg_w err -71 [ 409.274735][ T24] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 409.279202][T14089] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.296538][T14089] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 409.324332][ T24] usb 10-1: USB disconnect, device number 11 [ 409.546109][ T5948] hub 6-1:0.0: activate --> -90 [ 409.560350][T14089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.603140][T14089] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.634153][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.641359][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.677216][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.684445][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.757271][ T5948] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 409.771233][ T5948] usb 6-1: USB disconnect, device number 27 [ 409.777505][ T5869] usb 6-1: Failed to suspend device, error -19 [ 409.828140][T14089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.022987][T14089] veth0_vlan: entered promiscuous mode [ 410.064892][T14089] veth1_vlan: entered promiscuous mode [ 410.190749][T14089] veth0_macvtap: entered promiscuous mode [ 410.225485][T14089] veth1_macvtap: entered promiscuous mode [ 410.301248][T14294] loop6: detected capacity change from 0 to 7 [ 410.308100][T14089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.328274][ T5879] Bluetooth: hci2: command tx timeout [ 410.357235][T14294] Dev loop6: unable to read RDB block 7 [ 410.376779][T14089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.399000][T14294] loop6: AHDI p2 p3 [ 410.413041][T14294] loop6: partition table partially beyond EOD, truncated [ 410.481229][T14294] loop6: p2 size 46 extends beyond EOD, truncated [ 410.485071][T13923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.537990][T13915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.600480][T13915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.645952][T13915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.646318][ T5876] udevd[5876]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 410.772975][T14305] loop2: detected capacity change from 0 to 7 [ 410.813554][T14305] Dev loop2: unable to read RDB block 7 [ 410.884315][T14305] loop2: unable to read partition table [ 410.918467][T14305] loop2: partition table beyond EOD, truncated [ 410.949091][T14305] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 411.124319][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.146373][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.449741][T13919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.486181][T13919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.568693][ T980] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 411.738784][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 411.746237][ T980] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 411.761250][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.778848][ T980] usb 2-1: config 0 descriptor?? [ 411.791602][ T980] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 412.076923][T14308] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 413.233738][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2878'. [ 413.263575][ T5864] usb 2-1: USB disconnect, device number 14 [ 415.050488][T14450] syzkaller1: entered promiscuous mode [ 415.066163][T14450] syzkaller1: entered allmulticast mode [ 415.474826][T14468] netlink: 'syz.1.2899': attribute type 2 has an invalid length. [ 415.591660][T14470] ipip1: entered promiscuous mode [ 415.632785][T14468] bridge: entered promiscuous mode [ 416.538532][ T5864] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 416.725780][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 416.737509][ T5864] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 416.751168][ T5864] usb 2-1: config 0 has no interface number 0 [ 416.757473][ T5864] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 416.773497][ T5864] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 416.783490][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.805287][ T5864] usb 2-1: config 0 descriptor?? [ 416.834242][ T5864] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 417.033455][ T5864] usb 2-1: USB disconnect, device number 15 [ 417.657122][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079c82c00: rx timeout, send abort [ 417.667383][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079c82c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 420.085677][T13910] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.166432][T13910] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.349432][T13910] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.378691][ T43] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 420.411680][T13910] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.543910][ T43] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 420.577713][ T43] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 420.606532][T13910] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.615375][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 420.666475][T13910] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.668350][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 420.739246][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 420.787493][ T43] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 420.837215][ T43] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 420.859646][ T43] usb 6-1: Product: syz [ 420.885401][ T43] usb 6-1: Manufacturer: syz [ 420.916786][T13910] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.950994][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 420.956233][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 420.993457][T13910] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.024326][ T43] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 421.068357][ T43] cdc_wdm 6-1:1.0: Unknown control protocol [ 421.532059][T13910] bridge_slave_1: left allmulticast mode [ 421.558599][T13910] bridge_slave_1: left promiscuous mode [ 421.588529][T13910] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.597107][ C1] cdc_wdm 6-1:1.0: Unexpected error -71 [ 421.604891][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 421.608718][ T10] usb 6-1: USB disconnect, device number 28 [ 421.611877][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 421.623675][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 421.638703][ T5864] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 421.795027][T13910] bridge_slave_0: left allmulticast mode [ 421.839576][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.857720][T13910] bridge_slave_0: left promiscuous mode [ 421.864493][T13910] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.873066][ T5864] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 421.894581][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.982666][ T5864] usb 3-1: config 0 descriptor?? [ 422.432050][ T5864] holtek 0003:1241:5015.002D: unbalanced collection at end of report description [ 422.483038][ T5864] holtek 0003:1241:5015.002D: parse failed [ 422.524506][ T5864] holtek 0003:1241:5015.002D: probe with driver holtek failed with error -22 [ 422.659077][ T5864] usb 3-1: USB disconnect, device number 50 [ 422.958340][ T43] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 423.001180][T13910] bond1 (unregistering): (slave geneve2): Releasing active interface [ 423.009494][T13910] geneve2 (unregistering): left promiscuous mode [ 423.044193][T13910] geneve2 (unregistering): left allmulticast mode [ 423.149556][ T43] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 423.166444][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 423.210690][ T43] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 423.222508][ T43] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 423.335239][ T43] usb 6-1: Product: syz [ 423.348249][ T43] usb 6-1: Manufacturer: syz [ 423.356654][T13910] batman_adv: batadv0: Interface deactivated: macsec2 [ 423.368648][ T43] usb 6-1: SerialNumber: syz [ 423.406104][ T43] usb 6-1: config 0 descriptor?? [ 423.438092][ T43] usb 6-1: selecting invalid altsetting 0 [ 423.492929][T13910] batman_adv: batadv0: Removing interface: macsec2 [ 423.600481][T14671] loop3: detected capacity change from 0 to 1 [ 423.628765][T14671] loop3: [POWERTEC] p1 p2 p3 p4 p5 [ 423.643400][T14671] loop3: p1 size 16 extends beyond EOD, truncated [ 423.678743][T14671] loop3: p2 start 915031469 is beyond EOD, truncated [ 423.710482][T14671] loop3: p3 start 2932641740 is beyond EOD, truncated [ 423.788250][T14671] loop3: p4 start 3710920044 is beyond EOD, truncated [ 423.807231][T14671] loop3: p5 start 1815049829 is beyond EOD, truncated [ 423.976022][ T10] usb 6-1: USB disconnect, device number 29 [ 424.008821][ T5876] udevd[5876]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 424.154940][T14677] input: syz1 as /devices/virtual/input/input58 [ 424.454960][T13910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.565168][T13910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.622342][T13910] bond0 (unregistering): Released all slaves [ 424.683517][T13910] bond1 (unregistering): Released all slaves [ 425.618762][ T5869] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 425.845301][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 425.891501][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.909487][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.928252][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 425.937307][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.072975][ T5869] usb 3-1: config 0 descriptor?? [ 426.101987][ T5869] hub 3-1:0.0: USB hub found [ 426.270670][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2963'. [ 426.353874][ T5869] hub 3-1:0.0: 1 port detected [ 426.532990][T14715] bridge0: entered promiscuous mode [ 426.540713][T14715] macsec1: entered allmulticast mode [ 426.556299][T14715] bridge0: entered allmulticast mode [ 426.570822][T14715] bridge0: port 3(macsec1) entered blocking state [ 426.594575][T14715] bridge0: port 3(macsec1) entered disabled state [ 426.660503][T14715] bridge0: left allmulticast mode [ 426.686186][T14715] bridge0: left promiscuous mode [ 426.830097][T13910] hsr_slave_0: left promiscuous mode [ 426.845714][T13910] hsr_slave_1: left promiscuous mode [ 426.859851][T13910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.898350][T13910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.950285][T13910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.957703][T13910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.076728][T13910] veth1_macvtap: left promiscuous mode [ 427.105904][T13910] veth0_macvtap: left promiscuous mode [ 427.126387][T13910] veth1_vlan: left promiscuous mode [ 427.170379][T13910] veth0_vlan: left promiscuous mode [ 427.273525][ T10] hub 3-1:0.0: activate --> -90 [ 427.568315][ T10] usb 3-1-port1: config error [ 427.578870][ T10] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 427.586866][ T5864] usb 3-1: USB disconnect, device number 51 [ 428.150778][T14549] Set syz1 is full, maxelem 65536 reached [ 428.528730][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 428.658501][ T43] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 428.670915][T13910] team0 (unregistering): Port device team_slave_1 removed [ 428.706829][ T10] usb 2-1: config index 0 descriptor too short (expected 30768, got 18) [ 428.716782][ T10] usb 2-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 428.727786][ T10] usb 2-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 428.738835][ T10] usb 2-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 428.749056][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 428.758150][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.779800][T13910] team0 (unregistering): Port device team_slave_0 removed [ 428.830022][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.844241][ T43] usb 3-1: config 0 has no interface number 0 [ 428.850556][ T43] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.864759][ T43] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.877380][ T43] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 428.886862][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.903214][ T43] usb 3-1: config 0 descriptor?? [ 429.327608][ T43] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 429.357328][ T43] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 429.404089][ T43] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 429.419892][ T10] usb 2-1: USB disconnect, device number 16 [ 429.439341][ T43] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 429.476257][ T43] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 429.489274][ T43] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 429.498126][ T43] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 429.515369][ T43] prodikeys 0003:041E:2801.002E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 429.562590][T14781] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2974'. [ 429.591004][ T43] hid_prodikeys: hid-prodikeys: failed to find output report [ 429.591004][ T43] [ 429.606681][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2974'. [ 429.639363][T14785] loop2: detected capacity change from 0 to 7 [ 429.667769][ T7342] Dev loop2: unable to read RDB block 7 [ 429.679504][ T43] usb 3-1: USB disconnect, device number 52 [ 429.686941][ T7342] loop2: unable to read partition table [ 429.706635][ T7342] loop2: partition table beyond EOD, truncated [ 429.725599][T14785] Dev loop2: unable to read RDB block 7 [ 429.731747][T14785] loop2: unable to read partition table [ 429.738053][T14785] loop2: partition table beyond EOD, truncated [ 429.755332][T14783] fido_id[14783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 429.795847][T14785] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 430.119907][T14798] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2978'. [ 430.229479][T14798] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2978'. [ 430.232609][T13919] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.303339][T13919] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.324626][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'. [ 430.349734][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'. [ 430.390021][T13919] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.445750][ T12] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.027747][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2992'. [ 432.169720][ T5862] Bluetooth: hci4: command 0x0406 tx timeout [ 432.170674][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3003'. [ 432.248857][ T5869] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 432.483281][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 432.504382][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.536293][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.568230][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 432.611835][ T5869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 432.670378][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.720623][T14888] netlink: 6 bytes leftover after parsing attributes in process `syz.9.3008'. [ 432.737691][ T5869] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 432.780264][ T5869] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 432.798588][T14888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.812266][ T5869] usb 1-1: Manufacturer: syz [ 432.865857][ T5869] usb 1-1: config 0 descriptor?? [ 433.469168][ T5869] rc_core: IR keymap rc-hauppauge not found [ 433.482162][ T5869] Registered IR keymap rc-empty [ 433.507749][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.539105][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.580307][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 433.602191][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 433.644792][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input59 [ 433.677317][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.719552][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.766832][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.791001][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 433.800964][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.824460][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.835724][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.877458][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.888055][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.924579][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.948381][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.969134][ T10] usb 6-1: config 0 descriptor?? [ 434.006725][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.049133][ T10] hub 6-1:0.0: USB hub found [ 434.068458][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.107503][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.158533][ T5869] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.202409][ T10] hub 6-1:0.0: 1 port detected [ 434.219504][ T5869] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 434.245935][ T5869] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 434.293158][ T5869] usb 1-1: USB disconnect, device number 12 [ 434.671791][ T5864] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 434.878278][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 434.893465][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.933542][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.984700][ T5864] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 435.016356][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.066191][ T5864] usb 2-1: config 0 descriptor?? [ 435.094180][ T5864] hub 2-1:0.0: USB hub found [ 435.309170][ T5864] hub 2-1:0.0: 1 port detected [ 435.460542][ T10] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 435.467412][ T10] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 435.510317][ T10] usbhid 6-1:0.0: can't add hid device: -32 [ 435.528302][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 435.589234][ T10] usb 6-1: USB disconnect, device number 30 [ 436.088309][ T10] hub 2-1:0.0: activate --> -90 [ 436.221296][ T10] usb 2-1-port1: config error [ 436.270364][T14981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3035'. [ 436.425400][ T10] usb 2-1: Failed to suspend device, error -71 [ 436.428638][ T43] usb 2-1: USB disconnect, device number 17 [ 438.454705][T15043] syzkaller1: entered promiscuous mode [ 438.474685][T15043] syzkaller1: entered allmulticast mode [ 438.711276][T15051] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 438.788740][ T43] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 439.009215][ T43] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 439.017363][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.032597][T15066] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3061'. [ 439.082167][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 439.146537][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 439.175105][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.216160][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.275152][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.294305][ T5948] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 439.315147][ T43] usb 1-1: config 0 descriptor?? [ 439.340695][T15048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 439.353696][ T5948] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 439.830163][ T43] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xd [ 439.929371][ T43] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 440.103755][ T5966] usb 1-1: USB disconnect, device number 13 [ 440.220022][T15090] fido_id[15090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 440.333766][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.348319][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.945895][T15115] netlink: 'syz.5.3075': attribute type 5 has an invalid length. [ 442.259071][ T5869] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 442.310035][ T5869] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 442.312767][T15177] syzkaller0: entered promiscuous mode [ 444.996359][T15259] netlink: 'syz.9.3112': attribute type 3 has an invalid length. [ 445.017195][T15259] netlink: 240 bytes leftover after parsing attributes in process `syz.9.3112'. [ 445.779114][T15295] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 445.888550][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3125'. [ 446.288557][ T5948] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 446.516709][ T5948] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.613380][ T5948] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.677214][ T5948] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.735409][ T5948] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.770252][ T5948] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.779537][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.790040][ T5948] usb 1-1: Product: syz [ 446.794219][ T5948] usb 1-1: Manufacturer: syz [ 446.809745][ T5948] cdc_wdm 1-1:1.0: skipping garbage [ 446.837129][ T5948] cdc_wdm 1-1:1.0: skipping garbage [ 446.876089][ T5948] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 446.903077][ T5948] cdc_wdm 1-1:1.0: Unknown control protocol [ 447.015830][ T5948] usb 1-1: USB disconnect, device number 14 [ 447.138278][ T5926] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 447.288597][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 447.295436][ T5926] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 447.305446][ T5926] usb 3-1: config 0 has no interface number 0 [ 447.324369][ T5926] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 447.334244][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.342986][ T5926] usb 3-1: Product: syz [ 447.347445][ T5926] usb 3-1: Manufacturer: syz [ 447.357781][ T5926] usb 3-1: SerialNumber: syz [ 447.372521][ T5926] usb 3-1: config 0 descriptor?? [ 447.382143][ T5926] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 447.592088][ T5869] usb 3-1: USB disconnect, device number 53 [ 447.600265][ T5948] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 447.724292][T15345] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3141'. [ 447.761888][ T5948] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 447.780400][ T5948] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.811461][ T5948] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 447.827286][ T5948] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.844335][ T5948] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 447.856925][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 447.869264][ T5948] usb 1-1: Product: syz [ 447.873446][ T5948] usb 1-1: Manufacturer: syz [ 447.917431][ T5948] cdc_wdm 1-1:1.0: skipping garbage [ 447.931100][ T5948] cdc_wdm 1-1:1.0: skipping garbage [ 447.944128][ T5948] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 447.952114][ T5948] cdc_wdm 1-1:1.0: Unknown control protocol [ 448.189474][T15358] kvm: kvm [15352]: vcpu0, guest rIP: 0x1a Unhandled WRMSR(0xc2) = 0x8000 [ 448.636917][T15373] sctp: [Deprecated]: syz.1.3150 (pid 15373) Use of int in max_burst socket option. [ 448.636917][T15373] Use struct sctp_assoc_value instead [ 448.662976][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 448.669610][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 448.676407][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 448.683016][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 448.689314][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 448.695915][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 448.700339][ T5864] usb 1-1: USB disconnect, device number 15 [ 448.701983][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 448.716967][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.278584][ T5926] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 449.357098][T15388] kvm: Disabled LAPIC found during irq injection [ 449.480913][ T5926] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.513957][ T5926] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.542032][ T5926] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 449.562207][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.679069][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3160'. [ 449.813963][ T5926] usb 3-1: usb_control_msg returned -32 [ 449.844551][ T5926] usbtmc 3-1:16.0: can't read capabilities [ 452.098768][ T5864] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 452.111309][ T5926] usb 3-1: USB disconnect, device number 54 [ 452.205842][T15458] loop9: detected capacity change from 0 to 7 [ 452.218538][ T5876] Dev loop9: unable to read RDB block 7 [ 452.225094][ T5876] loop9: AHDI p3 p4 [ 452.254734][ T5876] loop9: partition table partially beyond EOD, truncated [ 452.267171][ T5876] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 452.280382][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.294325][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.301960][T15458] Dev loop9: unable to read RDB block 7 [ 452.311775][T15458] loop9: AHDI p3 p4 [ 452.313855][ T5864] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 452.315693][T15458] loop9: partition table partially beyond EOD, truncated [ 452.316657][T15458] loop9: p3 size 4227858431 extends beyond EOD, [ 452.327106][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.350131][T15458] truncated [ 452.354299][ T5864] usb 2-1: config 0 descriptor?? [ 452.471269][ T5876] udevd[5876]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 452.557388][ T5876] udevd[5876]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 452.670212][T15472] netlink: 'syz.0.3184': attribute type 1 has an invalid length. [ 452.793629][ T5864] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 452.807850][ T5864] cp2112 0003:10C4:EA90.0032: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 452.992725][ T5864] cp2112 0003:10C4:EA90.0032: Part Number: 0x82 Device Version: 0xFE [ 453.023886][ T30] audit: type=1326 audit(1758442673.439:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.5.3189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa03df8ec29 code=0x0 [ 453.051467][ T5947] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 453.222110][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.233267][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.244719][ T5947] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 453.253828][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.265083][ T5947] usb 1-1: config 0 descriptor?? [ 453.609364][T15442] cp2112 0003:10C4:EA90.0032: Multi-message I2C transactions not supported [ 453.619930][ T5864] cp2112 0003:10C4:EA90.0032: error reading lock byte: -71 [ 453.652907][ T5864] usb 2-1: USB disconnect, device number 18 [ 453.708563][ T5947] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 453.732456][ T5947] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0033/input/input61 [ 453.855761][ T5947] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 454.004893][T15506] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3197'. [ 454.007845][ T5947] usb 1-1: USB disconnect, device number 16 [ 454.057284][T15503] fido_id[15503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 455.861189][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3214'. [ 455.908015][T15550] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3214'. [ 456.868739][ T5926] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 457.115531][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.163061][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.210210][ T5926] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 457.271748][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.359609][ T5926] usb 2-1: config 0 descriptor?? [ 457.807843][ T5926] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 457.864575][ T5926] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 457.910355][ T5926] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 458.001521][ T5926] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 458.055053][T15603] loop2: detected capacity change from 0 to 7 [ 458.078720][ T5926] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 458.108861][T15603] Dev loop2: unable to read RDB block 7 [ 458.130656][ T5926] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 458.144620][T15603] loop2: unable to read partition table [ 458.202373][ T5926] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 458.239490][T15603] loop2: partition table beyond EOD, truncated [ 458.294526][T15603] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 458.333017][ T5926] cp2112 0003:10C4:EA90.0034: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 458.504169][ T5926] cp2112 0003:10C4:EA90.0034: Part Number: 0x00 Device Version: 0x00 [ 458.938382][T15572] cp2112 0003:10C4:EA90.0034: Error starting transaction: -38 [ 459.016142][ T5926] cp2112 0003:10C4:EA90.0034: error reading lock byte: -71 [ 459.118591][ T5926] usb 2-1: USB disconnect, device number 19 [ 460.028687][ T5864] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 460.214641][ T5864] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 460.234100][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.269001][ T5864] usb 2-1: Product: syz [ 460.293062][ T5864] usb 2-1: Manufacturer: syz [ 460.313659][ T5864] usb 2-1: SerialNumber: syz [ 460.738272][ T5926] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 460.921998][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 460.952980][ T5926] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 460.998635][ T5926] usb 3-1: config 179 has no interface number 0 [ 461.036119][ T5926] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 461.091440][ T5926] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 461.158263][ T5926] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 461.219067][ T5926] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 461.268049][ T5926] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 461.341170][ T5926] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 461.392275][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.445560][T15659] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 461.490697][T13919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.585880][ T5864] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 461.652408][ T5864] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 461.698260][ T5864] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 461.744845][ T980] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input62 [ 461.777207][ T5864] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 461.822902][T13919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.864375][ T5864] usb 2-1: USB disconnect, device number 20 [ 462.008427][ T5869] usb 3-1: USB disconnect, device number 55 [ 462.008434][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 462.008474][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 462.255363][T13919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.542452][T13919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.973675][T13919] bridge_slave_1: left allmulticast mode [ 463.006575][T13919] bridge_slave_1: left promiscuous mode [ 463.051614][T13919] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.144588][T13919] bridge_slave_0: left allmulticast mode [ 463.176412][T13919] bridge_slave_0: left promiscuous mode [ 463.216909][T13919] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.421292][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 463.431672][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 463.439891][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 463.447998][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 463.456282][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 463.471508][ T43] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 463.643721][ T43] usb 10-1: Using ep0 maxpacket: 8 [ 463.665453][ T43] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 463.682623][ T43] usb 10-1: config 179 has no interface number 0 [ 463.690798][ T43] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 463.702085][ T43] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 463.733716][ T43] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 463.746668][ T43] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 463.788149][ T43] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 463.824265][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.850643][T15708] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 464.124114][ T980] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input63 [ 464.269712][T13919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.283510][T13919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.294571][T13919] bond0 (unregistering): Released all slaves [ 464.317050][ T5864] usb 10-1: USB disconnect, device number 12 [ 464.317098][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 464.338489][ C1] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 464.603521][T15734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3265'. [ 465.253772][T13919] hsr_slave_0: left promiscuous mode [ 465.266903][T13919] hsr_slave_1: left promiscuous mode [ 465.278744][T13919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.287408][T13919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.309792][T13919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.326141][T13919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.386524][T13919] veth1_macvtap: left promiscuous mode [ 465.392905][T13919] veth0_macvtap: left promiscuous mode [ 465.402241][T13919] veth1_vlan: left promiscuous mode [ 465.407693][T13919] veth0_vlan: left promiscuous mode [ 465.531196][ T5862] Bluetooth: hci2: command tx timeout [ 466.754152][T13919] team0 (unregistering): Port device team_slave_1 removed [ 466.829371][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 466.843777][T13919] team0 (unregistering): Port device team_slave_0 removed [ 467.027633][ T9] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 467.041848][ T9] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 467.053241][ T9] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 467.062831][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.079281][ T5926] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 467.094073][T15782] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 467.114152][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 467.252611][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 467.296291][ T5926] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 467.318743][ T5926] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 467.350245][ T5926] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 467.360108][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 467.374396][ T980] usb 10-1: USB disconnect, device number 13 [ 467.385001][ T5926] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 467.432121][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 467.451844][ T5926] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 467.479542][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.507500][ T5926] usb 2-1: config 0 descriptor?? [ 467.612401][ T5862] Bluetooth: hci2: command tx timeout [ 467.736322][ T5926] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 467.818270][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 467.827604][ T5926] usb 2-1: USB disconnect, device number 21 [ 467.891000][ T5926] usblp0: removed [ 467.906039][T15799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 467.913350][T15799] IPv6: NLM_F_CREATE should be set when creating new route [ 467.978224][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 467.993153][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 468.026494][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 468.047541][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.076112][ T9] usb 6-1: Product: syz [ 468.102827][ T9] usb 6-1: Manufacturer: syz [ 468.121584][ T9] usb 6-1: SerialNumber: syz [ 468.144201][ T9] usb 6-1: config 0 descriptor?? [ 468.155379][T15717] chnl_net:caif_netlink_parms(): no params data found [ 468.173084][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 468.185199][ T9] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 468.298607][ T5926] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 468.469486][T15717] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.478152][T15717] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.480980][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 468.486500][T15717] bridge_slave_0: entered allmulticast mode [ 468.500722][T15717] bridge_slave_0: entered promiscuous mode [ 468.511153][T15717] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.520872][ T5926] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 468.536613][ T5926] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 468.536956][T15717] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.555808][ T5926] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 468.565432][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 468.585683][ T5926] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 468.596233][T15717] bridge_slave_1: entered allmulticast mode [ 468.618692][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 468.624869][T15717] bridge_slave_1: entered promiscuous mode [ 468.647092][ T5926] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 468.658062][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.675691][ T5926] usb 2-1: config 0 descriptor?? [ 468.796155][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 468.815392][T15717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.849360][ T5864] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 468.857677][T15717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.887143][ T5926] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 468.973961][T15717] team0: Port device team_slave_0 added [ 468.988690][T15717] team0: Port device team_slave_1 added [ 469.034678][T15717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.044954][T15717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.050130][ T5864] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 469.084627][T15717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.104589][T15717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.118213][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.139070][ T5864] usb 3-1: config 0 descriptor?? [ 469.143404][T15717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.191942][ T980] usb 2-1: USB disconnect, device number 22 [ 469.212650][ T980] usblp0: removed [ 469.227947][T15717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.238584][ T5926] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 469.304627][T15717] hsr_slave_0: entered promiscuous mode [ 469.312840][T15717] hsr_slave_1: entered promiscuous mode [ 469.354079][ T5864] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 469.406689][ T5926] usb 10-1: config 128 has an invalid interface number: 148 but max is 0 [ 469.416318][ T5926] usb 10-1: config 128 has no interface number 0 [ 469.431425][ T5926] usb 10-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 469.446109][ T5926] usb 10-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 469.491775][ T5926] usb 10-1: config 128 interface 148 has no altsetting 0 [ 469.501624][ T5926] usb 10-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 469.525005][ T5926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.535104][ T5926] usb 10-1: Product: syz [ 469.545987][ T5926] usb 10-1: Manufacturer: syz [ 469.551827][ T5926] usb 10-1: SerialNumber: syz [ 469.567806][ T5864] [drm:udl_init] *ERROR* Selecting channel failed [ 469.654307][ T5864] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 469.665778][ T5864] [drm] Initialized udl on minor 2 [ 469.676137][ T9] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 469.699235][ T5862] Bluetooth: hci2: command tx timeout [ 469.703721][ T9] em28xx 6-1:0.0: board has no eeprom [ 469.717859][ T5864] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 469.771853][ T5864] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 469.789207][ T5926] usb 10-1: USB disconnect, device number 14 [ 469.791965][ T5869] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 469.825081][ T9] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 469.844700][ T9] em28xx 6-1:0.0: dvb set to bulk mode. [ 469.887522][ T5869] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 469.899801][ T5985] em28xx 6-1:0.0: Binding DVB extension [ 469.907583][ T5864] usb 3-1: USB disconnect, device number 56 [ 469.919126][ T9] usb 6-1: USB disconnect, device number 31 [ 469.926359][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 469.943246][ T5869] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 470.076024][ T5985] em28xx 6-1:0.0: Registering input extension [ 470.102699][ T9] em28xx 6-1:0.0: Closing input extension [ 470.143386][ T9] em28xx 6-1:0.0: Freeing device [ 470.278454][ T5926] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 470.468240][ T5926] usb 10-1: Using ep0 maxpacket: 8 [ 470.499037][ T5926] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 470.507376][ T5926] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 470.522240][T15864] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 470.522240][T15864] The task syz.5.3294 (15864) triggered the difference, watch for misbehavior. [ 470.540771][ T5926] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 470.574275][ T5926] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 470.626045][ T5926] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.669170][ T5926] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 470.685730][T15717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 470.692706][ T5926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.727203][T15717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 470.783638][T15717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 470.800233][T15717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 470.918728][ T5926] usb 10-1: usb_control_msg returned -32 [ 470.935390][ T5926] usbtmc 10-1:16.0: can't read capabilities [ 471.027749][T15717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.062608][T15717] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.080003][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.087171][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.108941][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.116102][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.363597][T15717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.478091][T15717] veth0_vlan: entered promiscuous mode [ 471.509829][T15717] veth1_vlan: entered promiscuous mode [ 471.616397][T15717] veth0_macvtap: entered promiscuous mode [ 471.653666][T15717] veth1_macvtap: entered promiscuous mode [ 471.726536][T15717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.768431][ T5862] Bluetooth: hci2: command tx timeout [ 471.781862][T15717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.882254][ T5926] usb 10-1: USB disconnect, device number 15 [ 471.970593][ T1170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.004401][ T1170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.052754][ T1170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.132670][ T1170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.297187][T13919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.326840][T13919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.408775][ T5926] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 472.456558][T13910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.474784][T13910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.610127][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 472.636062][ T5926] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 472.665404][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.699254][ T5926] usb 2-1: Product: syz [ 472.703456][ T5926] usb 2-1: Manufacturer: syz [ 472.754996][ T5926] usb 2-1: SerialNumber: syz [ 472.783348][ T5926] usb 2-1: config 0 descriptor?? [ 472.938501][ T5864] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 473.164489][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.225778][ T5864] usb 3-1: config 0 has no interfaces? [ 473.253132][ T5864] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 473.269759][ T5926] airspy 2-1:0.0: Board ID: 00 [ 473.274597][ T5926] airspy 2-1:0.0: Firmware version: [ 473.278212][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.329827][ T5864] usb 3-1: config 0 descriptor?? [ 473.451776][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 473.595404][T15932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.647109][T15932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.663157][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.712927][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.746506][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 473.786436][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.813181][ T9] usb 5-1: config 0 descriptor?? [ 474.289531][ T5926] airspy 2-1:0.0: Registered as swradio24 [ 474.338634][ T5926] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 474.467951][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 474.541807][ T43] usb 2-1: USB disconnect, device number 23 [ 475.104983][ T9] uclogic 0003:256C:006D.0035: failed retrieving string descriptor #100: -71 [ 475.128535][ T9] uclogic 0003:256C:006D.0035: failed retrieving pen parameters: -71 [ 475.154652][ T9] uclogic 0003:256C:006D.0035: failed probing pen v1 parameters: -71 [ 475.179212][ T43] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 475.183778][ T9] uclogic 0003:256C:006D.0035: failed probing parameters: -71 [ 475.218838][ T9] uclogic 0003:256C:006D.0035: probe with driver uclogic failed with error -71 [ 475.247146][ T9] usb 5-1: USB disconnect, device number 18 [ 475.349166][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 475.384569][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.421228][ T43] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 475.474899][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.520181][ T43] usb 6-1: config 0 descriptor?? [ 475.604147][ T43] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 475.778580][ T9] usb 3-1: USB disconnect, device number 57 [ 476.031315][T15999] batadv_slave_1: entered promiscuous mode [ 476.917151][T15996] batadv_slave_1: left promiscuous mode [ 478.172172][ T43] usb 6-1: USB disconnect, device number 32 [ 478.648398][ T43] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 478.821544][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.838318][ T5864] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 478.871896][ T43] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 478.935117][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.968320][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.001790][ T43] usb 6-1: Product: syz [ 479.005992][ T43] usb 6-1: Manufacturer: syz [ 479.045790][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 479.051073][ T43] usb 6-1: SerialNumber: syz [ 479.095753][ T5864] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 479.100993][ T43] cdc_mbim 6-1:1.0: skipping garbage [ 479.149679][ T5864] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 479.238225][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 479.283389][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 479.303476][T16044] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 479.360137][ T5864] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 479.388973][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 479.453262][ T5864] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 479.472475][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.511859][ T5864] usb 5-1: config 0 descriptor?? [ 479.755010][ T5864] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 479.792187][ T5864] usb 5-1: USB disconnect, device number 19 [ 479.821612][ T5864] usblp0: removed [ 479.909204][ T980] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 479.935623][T16044] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 479.990458][ T43] cdc_mbim 6-1:1.0: setting tx_max = 32 [ 480.016718][ T43] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 480.078338][ T43] wwan wwan0: port wwan0mbim0 attached [ 480.114324][ T43] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 92:ea:a3:36:9b:66 [ 480.124918][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 480.162478][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.203197][ T980] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.249237][ T980] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 480.265150][ T43] usb 6-1: USB disconnect, device number 33 [ 480.292361][ T43] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 480.309322][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.328555][ T5864] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 480.356642][ T980] usb 3-1: config 0 descriptor?? [ 480.462756][ T43] wwan wwan0: port wwan0mbim0 disconnected [ 480.498297][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 480.511410][ T5864] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 480.538238][ T5864] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 480.599289][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 480.641261][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 480.666996][ T980] usbhid 3-1:0.0: can't add hid device: -71 [ 480.677200][ T980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 480.698587][ T980] usb 3-1: USB disconnect, device number 58 [ 480.702485][ T5864] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 480.734950][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 480.818606][ T5864] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 480.827684][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.893299][ T5864] usb 5-1: config 0 descriptor?? [ 481.138627][ T5864] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 481.348728][ T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 481.377713][ T980] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 481.413968][ T5926] usb 5-1: USB disconnect, device number 20 [ 481.428864][ T5926] usblp0: removed [ 481.450342][T16111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3345'. [ 481.558954][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 481.566165][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.592674][ T43] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 481.607632][ T43] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 481.628295][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.639365][ T43] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 481.651274][ T980] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 481.660571][ T43] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 481.674108][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.691572][ T980] usb 6-1: config 0 descriptor?? [ 481.707626][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 481.743618][ T43] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 481.756457][ T43] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 481.765651][ T43] usb 2-1: Product: syz [ 481.770111][ T43] usb 2-1: Manufacturer: syz [ 481.774733][ T43] usb 2-1: SerialNumber: syz [ 481.791166][ T43] usb 2-1: config 0 descriptor?? [ 481.802717][ T43] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 481.815957][ T43] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 481.918500][ T5966] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 481.944298][ T980] usbhid 6-1:0.0: can't add hid device: -71 [ 481.959286][ T980] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 482.008611][ T980] usb 6-1: USB disconnect, device number 34 [ 482.113518][ T5966] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.145060][ T5966] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.174317][ T5966] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 482.194214][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 482.206058][ T5966] usb 3-1: SerialNumber: syz [ 482.430278][ T5966] usb 3-1: 0:2 : does not exist [ 482.474029][ T980] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 482.516498][ T5966] usb 3-1: USB disconnect, device number 59 [ 482.618148][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.672898][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.714864][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.750786][ T980] usb 6-1: New USB device found, idVendor=047f, idProduct=33ff, bcdDevice= 0.40 [ 482.794484][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.836874][ T980] usb 6-1: config 0 descriptor?? [ 483.065480][T16150] netlink: 'syz.2.3353': attribute type 1 has an invalid length. [ 483.132346][T16150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.201362][T16153] bond2: (slave veth9): Enslaving as an active interface with a down link [ 483.284673][T16150] bond2: (slave dummy0): making interface the new active one [ 483.301648][ T980] plantronics 0003:047F:33FF.0036: unknown main item tag 0x0 [ 483.329888][T16150] dummy0: entered promiscuous mode [ 483.353538][T16150] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 483.368959][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 483.373789][ T980] plantronics 0003:047F:33FF.0036: hiddev1,hidraw0: USB HID v0.00 Device [HID 047f:33ff] on usb-dummy_hcd.5-1/input0 [ 483.541745][ T5864] usb 6-1: USB disconnect, device number 35 [ 483.590541][T16155] fido_id[16155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 484.206908][ T9] usb 2-1: USB disconnect, device number 24 [ 484.206964][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 484.268426][ T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 485.048939][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 485.158513][ T980] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 485.219224][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 485.226984][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 485.243754][T16214] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3370'. [ 485.253106][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.275894][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 485.298400][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3370'. [ 485.316494][ T9] pvrusb2: ********** [ 485.321387][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 485.331772][ T9] pvrusb2: Important functionality might not be entirely working. [ 485.336089][ T980] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 485.340233][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 485.368876][ T980] usb 2-1: config 0 has no interface number 0 [ 485.378906][ T5966] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 485.388315][ T980] usb 2-1: config 0 interface 98 has no altsetting 0 [ 485.409376][ T980] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 485.426024][ T9] pvrusb2: ********** [ 485.428862][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.439687][ T980] usb 2-1: Product: syz [ 485.443965][ T980] usb 2-1: Manufacturer: syz [ 485.452587][ T980] usb 2-1: SerialNumber: syz [ 485.470793][ T980] usb 2-1: config 0 descriptor?? [ 485.490776][ T2346] pvrusb2: Invalid write control endpoint [ 485.558589][ T5966] usb 5-1: Using ep0 maxpacket: 32 [ 485.569962][ T5966] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 485.580826][ T2346] pvrusb2: Invalid write control endpoint [ 485.599821][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.623134][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 485.629645][ T5966] usb 5-1: config 0 descriptor?? [ 485.636335][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 485.663562][ T5966] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 485.668687][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 485.684514][ T2346] pvrusb2: Device being rendered inoperable [ 485.705802][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 485.712362][ T980] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 485.722318][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 485.788690][ T2346] pvrusb2: Attached sub-driver cx25840 [ 485.794236][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 485.798067][T16203] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 485.819020][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 485.858009][ T5947] usb 3-1: USB disconnect, device number 60 [ 486.588460][ T980] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 486.625310][ T980] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 486.644223][ T5947] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 486.707858][ T5947] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 486.716364][T16244] input: syz0 as /devices/virtual/input/input65 [ 486.723324][ T980] usb 2-1: USB disconnect, device number 25 [ 486.801267][ T5947] ------------[ cut here ]------------ [ 486.807347][ T5947] WARNING: CPU: 1 PID: 5947 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90 [ 486.816050][ T5947] Modules linked in: [ 486.820555][ T5947] CPU: 1 UID: 0 PID: 5947 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 486.831033][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 486.841873][ T5947] Workqueue: events request_firmware_work_func [ 486.848607][ T5947] RIP: 0010:kernfs_get+0x72/0x90 [ 486.854513][ T5947] Code: e8 53 48 62 ff 48 89 df be 04 00 00 00 e8 56 c8 c5 ff f0 ff 03 eb 05 e8 3c 48 62 ff 5b 5d e9 c5 d6 1f 09 cc e8 2f 48 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 55 [ 486.874239][ T5947] RSP: 0018:ffffc9000454f5e0 EFLAGS: 00010293 [ 486.880551][ T5947] RAX: ffffffff825d6561 RBX: ffff888061a990f0 RCX: ffff888056fa9e00 [ 486.888831][ T5947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.896858][ T5947] RBP: 0000000000000000 R08: ffff888061a990f3 R09: 1ffff1100c35321e [ 486.905384][ T5947] R10: dffffc0000000000 R11: ffffed100c35321f R12: ffff888027bff5a8 [ 486.913547][ T5947] R13: 1ffff11004f7feb6 R14: ffff888027bff5b0 R15: 1ffff11004f7feb5 [ 486.921601][ T5947] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 486.931921][ T5947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.939213][ T5947] CR2: 00007f6b07dfff44 CR3: 00000000316d2000 CR4: 00000000003526f0 [ 486.947253][ T5947] Call Trace: [ 486.950629][ T5947] [ 486.953605][ T5947] kobject_add_internal+0x632/0xb40 [ 486.958918][ T5947] kobject_add+0x155/0x220 [ 486.963377][ T5947] ? __pfx_kobject_add+0x10/0x10 [ 486.968419][ T5947] ? kobject_init+0x83/0x1e0 [ 486.973059][ T5947] get_device_parent+0x316/0x3a0 [ 486.978047][ T5947] device_add+0x2e1/0xb50 [ 486.982498][ T5947] firmware_fallback_sysfs+0x2e4/0x9b0 [ 486.988004][ T5947] ? _request_firmware+0xf69/0x15b0 [ 486.993768][ T5947] _request_firmware+0xf83/0x15b0 [ 486.999103][ T5947] ? __pfx__request_firmware+0x10/0x10 [ 487.004612][ T5947] ? process_scheduled_works+0x9ef/0x17b0 [ 487.010928][ T5947] request_firmware_work_func+0xaf/0x1c0 [ 487.016586][ T5947] ? process_scheduled_works+0x9ef/0x17b0 [ 487.022818][ T5947] process_scheduled_works+0xae1/0x17b0 [ 487.028945][ T5947] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.036213][ T5947] worker_thread+0x8a0/0xda0 [ 487.041854][ T5947] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 487.048455][ T5947] ? __kthread_parkme+0x7b/0x200 [ 487.053538][ T5947] kthread+0x70e/0x8a0 [ 487.057658][ T5947] ? __pfx_worker_thread+0x10/0x10 [ 487.062860][ T5947] ? __pfx_kthread+0x10/0x10 [ 487.067492][ T5947] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.072818][ T5947] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.078051][ T5947] ? __pfx_kthread+0x10/0x10 [ 487.082758][ T5947] ret_from_fork+0x439/0x7d0 [ 487.087406][ T5947] ? __pfx_ret_from_fork+0x10/0x10 [ 487.093034][ T5947] ? __switch_to_asm+0x39/0x70 [ 487.097825][ T5947] ? __switch_to_asm+0x33/0x70 [ 487.102676][ T5947] ? __pfx_kthread+0x10/0x10 [ 487.107380][ T5947] ret_from_fork_asm+0x1a/0x30 [ 487.112325][ T5947] [ 487.115357][ T5947] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 487.122637][ T5947] CPU: 1 UID: 0 PID: 5947 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 487.132009][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 487.142070][ T5947] Workqueue: events request_firmware_work_func [ 487.148261][ T5947] Call Trace: [ 487.151554][ T5947] [ 487.154492][ T5947] dump_stack_lvl+0x99/0x250 [ 487.159096][ T5947] ? __asan_memcpy+0x40/0x70 [ 487.163702][ T5947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.168911][ T5947] ? __pfx__printk+0x10/0x10 [ 487.173518][ T5947] vpanic+0x281/0x750 [ 487.177494][ T5947] ? __pfx__printk+0x10/0x10 [ 487.182086][ T5947] ? __pfx_vpanic+0x10/0x10 [ 487.186578][ T5947] ? is_bpf_text_address+0x26/0x2b0 [ 487.191776][ T5947] panic+0xb9/0xc0 [ 487.195488][ T5947] ? __pfx_panic+0x10/0x10 [ 487.199904][ T5947] __warn+0x31b/0x4b0 [ 487.203873][ T5947] ? kernfs_get+0x72/0x90 [ 487.208190][ T5947] ? kernfs_get+0x72/0x90 [ 487.212503][ T5947] report_bug+0x2be/0x4f0 [ 487.216816][ T5947] ? kernfs_get+0x72/0x90 [ 487.221130][ T5947] ? kernfs_get+0x72/0x90 [ 487.225478][ T5947] ? kernfs_get+0x74/0x90 [ 487.229791][ T5947] handle_bug+0x84/0x160 [ 487.234147][ T5947] exc_invalid_op+0x1a/0x50 [ 487.238662][ T5947] asm_exc_invalid_op+0x1a/0x20 [ 487.243518][ T5947] RIP: 0010:kernfs_get+0x72/0x90 [ 487.248448][ T5947] Code: e8 53 48 62 ff 48 89 df be 04 00 00 00 e8 56 c8 c5 ff f0 ff 03 eb 05 e8 3c 48 62 ff 5b 5d e9 c5 d6 1f 09 cc e8 2f 48 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 55 [ 487.268046][ T5947] RSP: 0018:ffffc9000454f5e0 EFLAGS: 00010293 [ 487.274105][ T5947] RAX: ffffffff825d6561 RBX: ffff888061a990f0 RCX: ffff888056fa9e00 [ 487.282065][ T5947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.290021][ T5947] RBP: 0000000000000000 R08: ffff888061a990f3 R09: 1ffff1100c35321e [ 487.297979][ T5947] R10: dffffc0000000000 R11: ffffed100c35321f R12: ffff888027bff5a8 [ 487.305938][ T5947] R13: 1ffff11004f7feb6 R14: ffff888027bff5b0 R15: 1ffff11004f7feb5 [ 487.313903][ T5947] ? kernfs_get+0x71/0x90 [ 487.318230][ T5947] kobject_add_internal+0x632/0xb40 [ 487.323428][ T5947] kobject_add+0x155/0x220 [ 487.327838][ T5947] ? __pfx_kobject_add+0x10/0x10 [ 487.332771][ T5947] ? kobject_init+0x83/0x1e0 [ 487.337357][ T5947] get_device_parent+0x316/0x3a0 [ 487.342296][ T5947] device_add+0x2e1/0xb50 [ 487.346624][ T5947] firmware_fallback_sysfs+0x2e4/0x9b0 [ 487.352077][ T5947] ? _request_firmware+0xf69/0x15b0 [ 487.357274][ T5947] _request_firmware+0xf83/0x15b0 [ 487.362309][ T5947] ? __pfx__request_firmware+0x10/0x10 [ 487.367785][ T5947] ? process_scheduled_works+0x9ef/0x17b0 [ 487.373499][ T5947] request_firmware_work_func+0xaf/0x1c0 [ 487.379120][ T5947] ? process_scheduled_works+0x9ef/0x17b0 [ 487.384841][ T5947] process_scheduled_works+0xae1/0x17b0 [ 487.390396][ T5947] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.396374][ T5947] worker_thread+0x8a0/0xda0 [ 487.400959][ T5947] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 487.407283][ T5947] ? __kthread_parkme+0x7b/0x200 [ 487.412213][ T5947] kthread+0x70e/0x8a0 [ 487.416273][ T5947] ? __pfx_worker_thread+0x10/0x10 [ 487.421374][ T5947] ? __pfx_kthread+0x10/0x10 [ 487.425954][ T5947] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.431155][ T5947] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.436337][ T5947] ? __pfx_kthread+0x10/0x10 [ 487.440915][ T5947] ret_from_fork+0x439/0x7d0 [ 487.445507][ T5947] ? __pfx_ret_from_fork+0x10/0x10 [ 487.450611][ T5947] ? __switch_to_asm+0x39/0x70 [ 487.455369][ T5947] ? __switch_to_asm+0x33/0x70 [ 487.460121][ T5947] ? __pfx_kthread+0x10/0x10 [ 487.464701][ T5947] ret_from_fork_asm+0x1a/0x30 [ 487.469467][ T5947] [ 487.472623][ T5947] Kernel Offset: disabled [ 487.476953][ T5947] Rebooting in 86400 seconds..