last executing test programs: 37.877771833s ago: executing program 3 (id=2311): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r4, 0x0, 0xfffffffffffffff9}, 0x18) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in=@initdev, @in6=@empty}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cc, 0x0) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000091) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x231}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) 34.465220344s ago: executing program 3 (id=2318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 32.591931671s ago: executing program 3 (id=2322): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d7dda4108911930800"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = landlock_create_ruleset(0x0, 0x0, 0x2) landlock_restrict_self(r1, 0x0) ftruncate(0xffffffffffffffff, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0x24004004) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) clock_gettime(0x0, 0x0) read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) 29.086904258s ago: executing program 3 (id=2335): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000000c0)={0xfe, "da40e9044a70415fce6641fd75ff409d746f058b7b22543213c93d6ce45aa95e13c9c6410bf4878961f81db5dd236ff681b54866d4ca438a7a151f7adcb1ef9c"}) close_range(r0, 0xffffffffffffffff, 0x0) 28.833546903s ago: executing program 4 (id=2336): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f0000000380)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) 27.877777408s ago: executing program 4 (id=2337): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x19e, 0x8}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000080)=0xa40, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x11, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 27.572445572s ago: executing program 4 (id=2338): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x800000000}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$tipc(0x1e, 0x5, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0xa0, 0xe000000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 27.439254216s ago: executing program 3 (id=2339): socket$inet6_sctp(0xa, 0x5, 0x84) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 27.230809037s ago: executing program 2 (id=2340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 26.973327395s ago: executing program 2 (id=2342): syz_usb_connect(0x2, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000e24b420df2001006d970102030109023400010000100009047b000076a98700052406000105240002000d240f0101000000217c10000106"], 0x0) 26.345089429s ago: executing program 4 (id=2343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x86a305) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r3, 0x80404518, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x201, 0xd) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') setsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000080)="bc42ccbf5f67d61a5d29ad39752fb318ed27ecf9e2940c1cdb7f03c8e2a496a0", 0x20) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x20000000, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) 26.24815511s ago: executing program 0 (id=2346): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000009a40)='\x00a', 0x2, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x100000000000f7) close_range(r4, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000900)={{}, &(0x7f0000000880), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000000000000000020000000000000900000000"], 0x30}}, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 25.830677698s ago: executing program 4 (id=2347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 25.123872455s ago: executing program 0 (id=2348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r3) ptrace(0x10, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c003}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c21695"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3fd, 0x252c, 0x2000000000000, 0x2, 0x0, 0x9, 0x466}, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2, 0x8001}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) 24.212480078s ago: executing program 4 (id=2349): ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000100)={@null, @null}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) 24.107887168s ago: executing program 3 (id=2350): fsmount(0xffffffffffffffff, 0x0, 0xe0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) mkdir(0x0, 0x21) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x200, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 24.083305383s ago: executing program 2 (id=2351): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x30044011) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') read$FUSE(r4, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140a, 0xd01, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x3}, @sco={0x1f, @none}, @llc={0x1a, 0x205, 0x1, 0x2, 0x1, 0x9, @local}, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x8000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x10) socket$inet6(0xa, 0x2, 0x0) 23.629462874s ago: executing program 0 (id=2352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000600)={0x0, @sdr={0x3032344d, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 23.091232417s ago: executing program 0 (id=2353): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) io_uring_setup(0x2471, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000001b000), 0x18580, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000080)) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) 22.97791354s ago: executing program 0 (id=2354): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x800000000}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$tipc(0x1e, 0x5, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0xa0, 0xe000000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 22.546768367s ago: executing program 2 (id=2355): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x143b) 21.535738124s ago: executing program 2 (id=2358): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 20.404348044s ago: executing program 0 (id=2360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x0, 0x5, 0xfffffff9, 0x5, 0x0, 0x6, 0xfffffffd, 0x27}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xb, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffff001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19.905154839s ago: executing program 1 (id=2361): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) gettid() rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r2, 0x2, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) 19.050141741s ago: executing program 2 (id=2362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r3) ptrace(0x10, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c003}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c21695"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3fd, 0x252c, 0x2000000000000, 0x2, 0x0, 0x9, 0x466}, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2, 0x8001}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) 18.986600343s ago: executing program 1 (id=2363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) setxattr$incfs_id(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18) 17.4093573s ago: executing program 1 (id=2364): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) bind$inet6(r4, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000000c0)={0x7ff, 0x7, 0x6, 0xa5e2}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 17.349562147s ago: executing program 1 (id=2365): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x30044011) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') read$FUSE(r4, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140a, 0xd01, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x3}, @sco={0x1f, @none}, @llc={0x1a, 0x205, 0x1, 0x2, 0x1, 0x9, @local}, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x8000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x10) socket$inet6(0xa, 0x2, 0x0) 16.18308273s ago: executing program 1 (id=2366): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r1, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004480)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)="332b191fd8358fe015359ad59b42b533fe92652d29c1aa99171f8b73f6e4c64bae82d3", 0x23}], 0x1, 0x0, 0x0, 0x8800}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x68, 0x44090}}], 0x2, 0x1d3) 15.194039672s ago: executing program 1 (id=2367): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xa5, 0xf4, 0x3, 0x8, 0x1a0a, 0x102, 0x930, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x17, 0x0, 0xe0, 0x8, [{{0x9, 0x4, 0x47, 0x0, 0x0, 0x77, 0x92, 0x3d}}]}}]}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet(0x2, 0x80001, 0x84) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000002100)={0x3, 0x0, 0x9, 0x1, 0x14, "888da7a91c04792a"}) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, &(0x7f0000000040)={0x3ff, 0x9, 0x2, 0x1, 0x5, 0x6, 0x2, 0x1000, 0x8}) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) 8.511699759s ago: executing program 32 (id=2350): fsmount(0xffffffffffffffff, 0x0, 0xe0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) mkdir(0x0, 0x21) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x200, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 8.290234636s ago: executing program 33 (id=2349): ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000100)={@null, @null}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) 5.007165486s ago: executing program 34 (id=2360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x0, 0x5, 0xfffffff9, 0x5, 0x0, 0x6, 0xfffffffd, 0x27}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xb, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffff001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.003012412s ago: executing program 35 (id=2362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r3) ptrace(0x10, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c003}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c21695"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3fd, 0x252c, 0x2000000000000, 0x2, 0x0, 0x9, 0x466}, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2, 0x8001}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) 0s ago: executing program 36 (id=2367): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xa5, 0xf4, 0x3, 0x8, 0x1a0a, 0x102, 0x930, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x17, 0x0, 0xe0, 0x8, [{{0x9, 0x4, 0x47, 0x0, 0x0, 0x77, 0x92, 0x3d}}]}}]}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet(0x2, 0x80001, 0x84) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000002100)={0x3, 0x0, 0x9, 0x1, 0x14, "888da7a91c04792a"}) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, &(0x7f0000000040)={0x3ff, 0x9, 0x2, 0x1, 0x5, 0x6, 0x2, 0x1000, 0x8}) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) kernel console output (not intermixed with test programs): scuous mode [ 460.447428][T10288] syzkaller0: entered allmulticast mode [ 460.494082][ T5975] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 460.507358][ T5975] usb 3-1: USB disconnect, device number 35 [ 460.528163][T10295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1192'. [ 460.563223][T10292] tipc: Resetting bearer [ 460.602598][T10287] tipc: Resetting bearer [ 460.605109][ T1224] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 460.646425][T10287] tipc: Disabling bearer [ 461.018005][ T1224] usb 4-1: device descriptor read/64, error -71 [ 461.065219][T10304] binder: 10303:10304 ioctl c0306201 0 returned -14 [ 461.156182][ T5975] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 461.263068][ T1224] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 461.325884][ T5975] usb 3-1: Using ep0 maxpacket: 32 [ 461.443280][ T1224] usb 4-1: device descriptor read/64, error -71 [ 461.459933][ T5975] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 461.962523][ T5975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.078419][ T1224] usb usb4-port1: attempt power cycle [ 462.085600][ T5975] usb 3-1: config 0 has no interface number 0 [ 462.091721][ T5975] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.236153][ T5975] usb 3-1: config 0 interface 85 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 462.302309][ T5975] usb 3-1: config 0 interface 85 has no altsetting 0 [ 462.432332][ T1224] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 462.673270][ T5975] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 462.694257][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.723311][ T5975] usb 3-1: Product: syz [ 462.727522][ T5975] usb 3-1: Manufacturer: syz [ 462.742021][ T5975] usb 3-1: SerialNumber: syz [ 463.159590][ T5975] usb 3-1: config 0 descriptor?? [ 463.202974][ T5975] usb 3-1: can't set config #0, error -71 [ 463.215412][ T5975] usb 3-1: USB disconnect, device number 36 [ 463.302351][ T43] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 464.537658][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.548145][ T43] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 464.558702][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.603777][ T1224] usb 4-1: device descriptor read/8, error -71 [ 464.711054][ T43] usb 1-1: config 0 descriptor?? [ 464.723673][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 464.881372][T10343] tipc: Enabled bearer , priority 0 [ 464.903987][T10343] syzkaller0: entered promiscuous mode [ 464.920067][T10343] syzkaller0: entered allmulticast mode [ 464.963952][T10343] tipc: Resetting bearer [ 464.982042][T10341] tipc: Resetting bearer [ 465.028242][T10341] tipc: Disabling bearer [ 465.951256][ T1224] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 466.013116][ T1224] usb 4-1: Using ep0 maxpacket: 16 [ 466.021877][ T1224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.033243][ T1224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.039705][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 466.063013][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 466.070142][ T1224] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 466.078139][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 466.139538][ T1224] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 466.159872][ T1224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.179989][ T1224] usb 4-1: config 0 descriptor?? [ 466.298772][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 466.307227][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 466.314847][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 466.321827][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 466.335265][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 466.347026][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 466.358582][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 466.375976][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 466.390764][ T43] pwc: recv_control_msg error -32 req 02 val 2600 [ 466.402883][ T43] pwc: recv_control_msg error -32 req 02 val 2900 [ 466.629914][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 466.637050][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 466.690901][ T1224] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0008/input/input37 [ 466.717326][ T43] pwc: Registered as video103. [ 466.991982][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 467.121519][ T43] usb 1-1: USB disconnect, device number 34 [ 467.160429][ T1224] appleir 0003:05AC:8241.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 467.320538][ T1224] usb 4-1: USB disconnect, device number 26 [ 467.434646][T10373] fido_id[10373]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 469.474647][T10391] binder: BINDER_SET_CONTEXT_MGR already set [ 469.480663][T10391] binder: 10390:10391 ioctl 4018620d 2000000002c0 returned -16 [ 470.893637][T10406] input: syz1 as /devices/virtual/input/input39 [ 471.412454][ T43] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 471.427963][ T5916] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 472.312331][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 472.324130][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.341413][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.356636][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 472.443653][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 472.476774][ T43] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 472.490119][ T5916] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 472.499582][ T43] usb 5-1: config 0 has no interface number 0 [ 472.507251][ T43] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 472.520663][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.534816][ T43] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 472.553817][ T5916] usb 3-1: config 0 descriptor?? [ 472.566990][ T43] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 472.603181][ T43] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 472.637843][ T43] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.733722][ T43] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 472.752441][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.763481][ T43] usb 5-1: Product: syz [ 472.772981][ T43] usb 5-1: Manufacturer: syz [ 472.777691][ T43] usb 5-1: SerialNumber: syz [ 472.808257][ T43] usb 5-1: config 0 descriptor?? [ 473.071142][ T43] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 473.114032][ T5916] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0009/input/input40 [ 473.346766][ T43] usb 5-1: USB disconnect, device number 46 [ 473.751017][ T5916] appleir 0003:05AC:8241.0009: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 473.860078][ T5916] usb 3-1: USB disconnect, device number 37 [ 473.943623][T10434] fido_id[10434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 478.036321][T10474] ptrace attach of "./syz-executor exec"[5868] was attempted by "./syz-executor exec"[10474] [ 478.383589][T10474] befs: (nbd1): No write support. Marking filesystem read-only [ 478.392371][T10474] befs: (nbd1): unable to read superblock [ 479.415472][T10480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.268448][ T43] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 481.337486][T10493] bridge0: port 3(netdevsim2) entered blocking state [ 481.358335][T10493] bridge0: port 3(netdevsim2) entered disabled state [ 481.386323][T10493] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 481.405110][T10493] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 481.494379][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 481.680142][ T43] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 481.698784][ T43] usb 2-1: config 1 has no interface number 1 [ 481.805944][ T43] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 482.421207][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.495595][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.525701][ T43] usb 2-1: Product: syz [ 482.530867][ T43] usb 2-1: Manufacturer: syz [ 482.557982][ T43] usb 2-1: can't set config #1, error -71 [ 482.591222][ T43] usb 2-1: USB disconnect, device number 32 [ 482.611381][T10518] tipc: Started in network mode [ 482.624420][T10518] tipc: Node identity 3af164f21b, cluster identity 4711 [ 482.631680][T10518] tipc: Enabled bearer , priority 0 [ 482.665486][T10519] syzkaller0: entered promiscuous mode [ 482.670964][T10519] syzkaller0: entered allmulticast mode [ 482.863715][T10516] tipc: Resetting bearer [ 483.001922][T10516] tipc: Disabling bearer [ 483.108574][T10533] input: syz1 as /devices/virtual/input/input41 [ 483.819217][ T5931] tipc: Node number set to 569468146 [ 486.395360][ T5931] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 486.777466][T10572] tipc: Enabled bearer , priority 0 [ 486.785674][T10572] syzkaller0: entered promiscuous mode [ 486.791286][T10572] syzkaller0: entered allmulticast mode [ 486.811370][T10571] tipc: Resetting bearer [ 486.831152][T10571] tipc: Disabling bearer [ 486.950913][ T5931] usb 2-1: not running at top speed; connect to a high speed hub [ 486.969956][ T5931] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 486.980146][ T5931] usb 2-1: config 1 has no interface number 1 [ 487.546198][ T5931] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 487.561256][ T5931] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.657596][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.670639][ T5931] usb 2-1: Product: syz [ 487.674873][ T5931] usb 2-1: Manufacturer: syz [ 487.679751][ T5931] usb 2-1: SerialNumber: syz [ 488.363319][ T5931] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 488.476185][ T5931] usb 2-1: failed to enable PITCH for EP 0x82 [ 489.042326][ T5931] usb 2-1: USB disconnect, device number 33 [ 489.839007][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.878542][T10604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.272132][T10609] tipc: Enabled bearer , priority 0 [ 490.279912][T10609] syzkaller0: entered promiscuous mode [ 490.285781][T10609] syzkaller0: entered allmulticast mode [ 490.362136][T10608] tipc: Resetting bearer [ 490.386089][T10608] tipc: Disabling bearer [ 490.412385][ T5862] Bluetooth: hci3: command 0x0405 tx timeout [ 492.360092][T10635] tipc: Enabled bearer , priority 0 [ 492.379902][T10635] syzkaller0: entered promiscuous mode [ 492.423283][T10635] syzkaller0: entered allmulticast mode [ 493.219322][T10630] tipc: Resetting bearer [ 493.270577][ T1208] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 493.412186][T10630] tipc: Disabling bearer [ 493.523088][ T1208] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.542326][ T1208] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 493.565537][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.765335][T10659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.823361][T10661] bond_slave_0: entered promiscuous mode [ 493.829310][T10661] bond_slave_1: entered promiscuous mode [ 493.854136][T10661] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 493.882239][T10661] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 493.919101][ T1208] usb 4-1: config 0 descriptor?? [ 493.929734][ T1208] pwc: Askey VC010 type 2 USB webcam detected. [ 494.042470][ T5975] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 494.805788][ T1208] pwc: recv_control_msg error -32 req 02 val 2b00 [ 494.939876][ T1208] pwc: recv_control_msg error -32 req 02 val 2700 [ 495.146605][ T1208] pwc: recv_control_msg error -32 req 02 val 2c00 [ 495.160720][ T5975] usb 5-1: not running at top speed; connect to a high speed hub [ 495.205343][ T1208] pwc: recv_control_msg error -32 req 04 val 1000 [ 495.292316][ T5975] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 495.339530][ T5975] usb 5-1: config 1 has no interface number 1 [ 495.347307][ T1208] pwc: recv_control_msg error -32 req 04 val 1300 [ 495.356032][ T1208] pwc: recv_control_msg error -32 req 04 val 1400 [ 495.362600][ T5975] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 495.376131][ T1208] pwc: recv_control_msg error -32 req 02 val 2000 [ 495.393169][ T1208] pwc: recv_control_msg error -32 req 02 val 2100 [ 495.403832][T10678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.416539][ T1208] pwc: recv_control_msg error -32 req 04 val 1500 [ 495.423923][ T1208] pwc: recv_control_msg error -32 req 02 val 2500 [ 495.431030][ T1208] pwc: recv_control_msg error -32 req 02 val 2400 [ 495.438396][ T1208] pwc: recv_control_msg error -32 req 02 val 2600 [ 495.445504][ T1208] pwc: recv_control_msg error -32 req 02 val 2900 [ 495.456254][ T5975] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 495.465692][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.474307][ T5975] usb 5-1: Product: syz [ 495.478506][ T5975] usb 5-1: Manufacturer: syz [ 495.486880][ T5975] usb 5-1: SerialNumber: syz [ 495.681373][ T1208] pwc: recv_control_msg error -71 req 04 val 1100 [ 495.688523][ T1208] pwc: recv_control_msg error -71 req 04 val 1200 [ 495.696285][ T1208] pwc: Registered as video103. [ 495.708629][ T5975] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 495.718246][ T1208] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42 [ 495.737985][ T5975] usb 5-1: failed to enable PITCH for EP 0x82 [ 496.148069][ T1208] usb 4-1: USB disconnect, device number 27 [ 496.227753][ T5975] usb 5-1: USB disconnect, device number 47 [ 496.424226][T10693] tipc: Enabled bearer , priority 0 [ 496.445911][T10693] syzkaller0: entered promiscuous mode [ 496.451401][T10693] syzkaller0: entered allmulticast mode [ 496.613466][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.654354][T10692] tipc: Resetting bearer [ 497.358012][T10692] tipc: Disabling bearer [ 497.392464][T10432] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 497.666421][T10432] usb 4-1: Using ep0 maxpacket: 8 [ 497.674796][T10432] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 497.692411][T10432] usb 4-1: config 0 has no interface number 0 [ 497.737092][T10432] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 497.801113][T10432] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 498.472072][T10432] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 498.487704][T10432] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 498.544918][T10432] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.938877][T10432] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 498.995085][T10432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.099779][T10432] usb 4-1: Product: syz [ 499.109874][T10432] usb 4-1: Manufacturer: syz [ 499.122326][T10432] usb 4-1: SerialNumber: syz [ 499.153275][T10432] usb 4-1: config 0 descriptor?? [ 500.063473][ T5975] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 500.121187][T10432] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 500.152063][T10432] usb 4-1: USB disconnect, device number 28 [ 500.295889][ T5975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.372600][ T5975] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 500.387295][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.399195][ T5975] usb 5-1: config 0 descriptor?? [ 500.409464][ T5975] pwc: Askey VC010 type 2 USB webcam detected. [ 501.512997][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.519708][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.736049][ T5975] pwc: recv_control_msg error -32 req 02 val 2b00 [ 501.751445][ T5975] pwc: recv_control_msg error -32 req 02 val 2700 [ 501.780980][ T5975] pwc: recv_control_msg error -32 req 02 val 2c00 [ 501.791048][T10747] tipc: Enabled bearer , priority 0 [ 501.807695][ T5975] pwc: recv_control_msg error -32 req 04 val 1000 [ 501.816385][T10747] syzkaller0: entered promiscuous mode [ 501.826415][T10747] syzkaller0: entered allmulticast mode [ 501.875269][ T5975] pwc: recv_control_msg error -32 req 04 val 1300 [ 501.882773][ T5975] pwc: recv_control_msg error -32 req 04 val 1400 [ 501.889958][ T5975] pwc: recv_control_msg error -32 req 02 val 2000 [ 501.898325][ T5975] pwc: recv_control_msg error -32 req 02 val 2100 [ 501.907506][ T5975] pwc: recv_control_msg error -32 req 04 val 1500 [ 501.914544][ T5975] pwc: recv_control_msg error -32 req 02 val 2500 [ 501.921572][ T5975] pwc: recv_control_msg error -32 req 02 val 2400 [ 501.928983][ T5975] pwc: recv_control_msg error -32 req 02 val 2600 [ 501.942383][ T5975] pwc: recv_control_msg error -32 req 02 val 2900 [ 501.986581][T10746] tipc: Resetting bearer [ 502.232612][ T5975] pwc: recv_control_msg error -71 req 04 val 1100 [ 502.244937][ T5975] pwc: recv_control_msg error -71 req 04 val 1200 [ 502.294052][ T5975] pwc: Registered as video103. [ 502.310678][ T5975] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 502.325066][ T5975] usb 5-1: USB disconnect, device number 48 [ 502.373659][T10746] tipc: Disabling bearer [ 504.186410][T10783] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1339'. [ 504.498873][T10790] tipc: Enabled bearer , priority 0 [ 504.508177][T10790] syzkaller0: entered promiscuous mode [ 504.526687][T10790] syzkaller0: entered allmulticast mode [ 504.774083][T10799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1343'. [ 504.990005][T10788] tipc: Resetting bearer [ 505.069432][T10788] tipc: Disabling bearer [ 506.494970][T10818] devpts: Unknown parameter 'mPq(-H 鏦bHݶthԭ' [ 506.640655][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 508.302892][T10849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1358'. [ 509.213272][T10857] binder: BINDER_SET_CONTEXT_MGR already set [ 509.235023][T10857] binder: 10856:10857 ioctl 4018620d 200000004a80 returned -16 [ 509.816704][T10870] netlink: 'syz.2.1363': attribute type 2 has an invalid length. [ 509.824687][T10870] netlink: 'syz.2.1363': attribute type 1 has an invalid length. [ 509.834149][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 511.389872][T10886] fuse: Bad value for 'group_id' [ 511.395332][T10886] fuse: Bad value for 'group_id' [ 511.447079][T10885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1370'. [ 512.780493][T10897] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 512.863637][ T7578] Bluetooth: hci5: Frame reassembly failed (-84) [ 514.894199][ T5862] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 516.020243][T10938] fuse: Bad value for 'group_id' [ 516.025313][T10938] fuse: Bad value for 'group_id' [ 520.544101][T10991] fuse: Bad value for 'group_id' [ 520.549183][T10991] fuse: Bad value for 'group_id' [ 520.556349][T10987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1396'. [ 521.363970][T10998] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 521.456601][ T7578] Bluetooth: hci5: Frame reassembly failed (-84) [ 523.709556][T10904] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 523.717211][ T5862] Bluetooth: hci5: command 0x1003 tx timeout [ 526.256574][T11051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1410'. [ 526.733302][T11053] devpts: Unknown parameter 'mPq(-H 鏦bHݶthԭ' [ 527.929614][T11066] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 527.950643][T11066] cramfs: wrong magic [ 528.921770][ T5975] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 531.090803][ T5975] usb 5-1: unable to get BOS descriptor or descriptor too short [ 531.687291][ T5975] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 531.703677][ T5975] usb 5-1: can't read configurations, error -71 [ 531.937310][T11100] befs: (nbd0): No write support. Marking filesystem read-only [ 531.945652][T11100] befs: (nbd0): unable to read superblock [ 540.239526][T11192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1450'. [ 542.153497][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 542.513559][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1460'. [ 543.230726][T11239] NILFS (loop2): device size too small [ 545.810154][T11270] bond_slave_0: entered promiscuous mode [ 545.816145][T11270] bond_slave_1: entered promiscuous mode [ 545.821841][T11270] batadv0: entered promiscuous mode [ 545.830282][T11270] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 545.840554][T11270] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 545.982391][ T5999] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 546.502003][T11280] fuse: Bad value for 'fd' [ 546.986272][ T5999] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 547.015500][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.033977][ T5999] usb 5-1: Product: syz [ 547.052448][ T5999] usb 5-1: Manufacturer: syz [ 547.063656][ T5999] usb 5-1: SerialNumber: syz [ 547.081149][ T5999] usb 5-1: config 0 descriptor?? [ 547.423993][ T5916] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 547.602596][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 547.676193][ T5916] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 547.721897][ T5999] airspy 5-1:0.0: Board ID: 00 [ 547.731689][ T5916] usb 1-1: config 0 has no interface number 0 [ 547.744660][ T5999] airspy 5-1:0.0: Firmware version: [ 547.755296][ T5916] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 547.814502][ T5916] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 547.861697][ T5916] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 547.904063][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 547.913115][ T5916] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 547.943293][ T5916] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.974853][ T5916] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 547.995179][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.012906][ T5916] usb 1-1: Product: syz [ 548.089272][ T5916] usb 1-1: Manufacturer: syz [ 548.107394][ T5916] usb 1-1: SerialNumber: syz [ 548.128417][ T5999] airspy 5-1:0.0: usb_control_msg() failed -32 request 0e [ 548.138860][ T5916] usb 1-1: config 0 descriptor?? [ 548.149462][ T5999] airspy 5-1:0.0: Registered as swradio24 [ 548.162352][ T5999] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 548.319161][T11298] netlink: 755 bytes leftover after parsing attributes in process `syz.2.1473'. [ 548.361359][ T5916] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 548.565903][ T9576] usb 1-1: USB disconnect, device number 35 [ 548.652552][ T5975] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 548.813975][ T5975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.824647][ T5975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 548.835177][ T5975] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 548.852341][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 548.860340][ T5975] usb 4-1: SerialNumber: syz [ 549.703875][ T9576] usb 5-1: USB disconnect, device number 51 [ 550.094725][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'. [ 550.412142][T11323] fuse: Bad value for 'fd' [ 551.235430][ T5975] usb 4-1: invalid UAC_HEADER (v1) [ 551.367016][ T5975] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 551.393163][ T5975] usb 4-1: USB disconnect, device number 29 [ 551.581337][ T6260] udevd[6260]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.002596][ T5975] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 552.303519][ T5975] usb 4-1: not running at top speed; connect to a high speed hub [ 552.327101][ T5975] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 552.362374][ T5975] usb 4-1: config 1 has no interface number 1 [ 552.400598][ T5975] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 552.972973][ T5975] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 552.982042][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.032324][ T5975] usb 4-1: Product: syz [ 553.039000][ T5975] usb 4-1: Manufacturer: syz [ 553.056328][ T5975] usb 4-1: SerialNumber: syz [ 553.245792][T11346] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 553.640602][T11352] ptrace attach of "./syz-executor exec"[5858] was attempted by "./syz-executor exec"[11352] [ 553.760212][ T5975] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 553.771974][ T5975] usb 4-1: failed to enable PITCH for EP 0x82 [ 553.812492][ T5931] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 554.529311][T11359] befs: (nbd0): No write support. Marking filesystem read-only [ 554.550702][ T5975] usb 4-1: USB disconnect, device number 30 [ 554.559575][T11359] befs: (nbd0): unable to read superblock [ 554.835095][ T5931] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 554.906992][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.989235][ T5931] usb 5-1: Product: syz [ 555.012709][ T5931] usb 5-1: Manufacturer: syz [ 555.152105][ T5931] usb 5-1: SerialNumber: syz [ 555.168202][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.176766][ T5931] usb 5-1: config 0 descriptor?? [ 555.259577][ T5916] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 555.436197][ T5916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.470846][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.532599][ T5916] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 555.700775][ T5931] airspy 5-1:0.0: Board ID: 00 [ 555.709919][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 555.718686][ T5931] airspy 5-1:0.0: Firmware version: [ 555.722333][ T5916] usb 2-1: SerialNumber: syz [ 555.942913][ T5999] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 556.093471][ T5999] usb 1-1: device descriptor read/64, error -71 [ 556.295894][ T5931] airspy 5-1:0.0: usb_control_msg() failed -32 request 12 [ 556.304613][ T5931] airspy 5-1:0.0: Registered as swradio24 [ 556.326828][ T5931] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 556.366454][ T5931] usb 5-1: USB disconnect, device number 52 [ 556.382880][ T5999] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 556.570851][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1500'. [ 556.589011][ T5999] usb 1-1: device descriptor read/64, error -71 [ 556.704941][ T5999] usb usb1-port1: attempt power cycle [ 556.862453][ T1208] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 557.032404][ T1208] usb 3-1: Using ep0 maxpacket: 32 [ 557.049161][ T5916] usb 2-1: invalid UAC_HEADER (v1) [ 557.049625][ T1208] usb 3-1: config 0 interface 0 has no altsetting 0 [ 557.059923][ T5999] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 557.064422][ T1208] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 557.078170][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.088194][ T1208] usb 3-1: Product: syz [ 557.123098][ T5999] usb 1-1: device descriptor read/8, error -71 [ 557.134261][ T5916] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 557.146156][ T5916] usb 2-1: USB disconnect, device number 34 [ 557.149241][ T1208] usb 3-1: Manufacturer: syz [ 557.178908][ T6260] udevd[6260]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.192300][ T1208] usb 3-1: SerialNumber: syz [ 557.228826][ T1208] usb 3-1: config 0 descriptor?? [ 557.382608][ T5999] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 557.413067][ T5999] usb 1-1: device descriptor read/8, error -71 [ 557.525147][ T5999] usb usb1-port1: unable to enumerate USB device [ 557.730322][ T1208] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 558.492578][ T1208] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 558.501578][ T1208] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 559.086768][T11411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1508'. [ 559.473221][T11416] devpts: Unknown parameter 'mPq(-H 鏦bHݶthԭ' [ 559.954938][ T5999] usb 3-1: USB disconnect, device number 38 [ 560.802353][ T5999] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 560.872488][ T1208] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 561.013794][ T5999] usb 1-1: Using ep0 maxpacket: 8 [ 561.039190][ T5999] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 561.050685][ T5999] usb 1-1: config 0 has no interface number 0 [ 561.056894][ T5999] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 561.068221][ T5999] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 561.080189][ T5999] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 561.080870][ T1208] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.116564][ T5999] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 561.130102][ T5999] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 561.148073][ T1208] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.162402][ T5999] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 561.170346][ T1208] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 561.181776][ T5999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.198989][ T5999] usb 1-1: Product: syz [ 561.200470][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 561.212443][ T5999] usb 1-1: Manufacturer: syz [ 561.387767][ T5999] usb 1-1: SerialNumber: syz [ 561.653529][ T5999] usb 1-1: config 0 descriptor?? [ 561.653572][ T1208] usb 3-1: SerialNumber: syz [ 562.933787][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.940231][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.958136][ T5999] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 563.009278][ T5999] usb 1-1: USB disconnect, device number 40 [ 563.073697][ T6260] udevd[6260]: setting mode of /dev/bus/usb/001/040 to 020664 failed: No such file or directory [ 563.089527][ T6260] udevd[6260]: setting owner of /dev/bus/usb/001/040 to uid=0, gid=0 failed: No such file or directory [ 563.269783][T11455] devpts: Unknown parameter 'mPq(-H 鏦bHݶthԭ' [ 563.323842][ T1208] usb 3-1: invalid UAC_HEADER (v1) [ 563.376641][ T1208] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 563.763360][ T1208] usb 3-1: USB disconnect, device number 39 [ 563.888044][T11462] 9pnet_virtio: no channels available for device 127.0.0.1 [ 563.919939][ T6260] udevd[6260]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.479782][ T5931] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 566.817762][ T5999] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 566.914330][ T5931] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.031173][ T5931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.049808][ T5931] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 567.076826][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 567.100871][ T5931] usb 4-1: SerialNumber: syz [ 567.122355][ T5999] usb 1-1: Using ep0 maxpacket: 8 [ 567.254857][T11512] fuse: Invalid rootmode [ 567.985170][ T5999] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 568.016148][ T5999] usb 1-1: config 0 has no interface number 0 [ 568.069370][ T5999] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 568.133335][ T5999] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 568.281902][ T5999] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 568.489707][ T5999] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 568.517783][ T5999] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.564308][ T5999] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 568.582401][ T5999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.590413][ T5999] usb 1-1: Product: syz [ 568.610124][ T5999] usb 1-1: Manufacturer: syz [ 568.620148][ T5999] usb 1-1: SerialNumber: syz [ 568.643855][ T5999] usb 1-1: config 0 descriptor?? [ 569.391381][ T5931] usb 4-1: invalid UAC_HEADER (v1) [ 569.416000][ T5999] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 569.454892][ T5999] usb 1-1: USB disconnect, device number 41 [ 569.578592][ T5931] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 569.620006][ T5931] usb 4-1: USB disconnect, device number 31 [ 569.657034][ T6260] udevd[6260]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.493368][T11565] devpts: Unknown parameter 'mPq(-H 鏦bHݶthԭ' [ 571.884577][ T5916] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 572.336773][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 572.404282][ T5916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.435351][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.602554][ T5916] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 573.289309][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 573.395259][ T5916] usb 1-1: SerialNumber: syz [ 575.125866][ T5916] usb 1-1: invalid UAC_HEADER (v1) [ 575.348917][ T5916] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 575.440954][ T5916] usb 1-1: USB disconnect, device number 42 [ 575.549100][ T6260] udevd[6260]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.338237][T11617] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 578.616288][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 580.197171][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.252556][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.284351][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 580.310939][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 580.326592][ T24] usb 3-1: SerialNumber: syz [ 580.611948][ T24] usb 3-1: invalid UAC_HEADER (v1) [ 581.120807][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 581.159615][ T24] usb 3-1: USB disconnect, device number 40 [ 581.167976][T11676] devpts: Unknown parameter 'mPq(-H 鏦bHݶthԭ' [ 581.247841][ T6260] udevd[6260]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.013217][ T5999] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 583.197993][ T5999] usb 4-1: device descriptor read/64, error -71 [ 584.182442][ T5999] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 584.362447][ T5916] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 584.458033][ T5999] usb 4-1: device descriptor read/64, error -71 [ 584.802876][ T5999] usb usb4-port1: attempt power cycle [ 584.824559][ T5916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.835988][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.859692][ T5916] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 584.869196][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 584.877749][ T5916] usb 1-1: SerialNumber: syz [ 586.083346][T11728] vxcan1 speed is unknown, defaulting to 1000 [ 586.427433][ T5916] usb 1-1: invalid UAC_HEADER (v1) [ 586.527083][ T5916] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 586.538448][ T5916] usb 1-1: USB disconnect, device number 43 [ 586.565847][T11736] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 586.921234][ T6260] udevd[6260]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.741255][T11746] fuse: Unknown parameter 'grou00000000000000000000' [ 589.425980][ T1208] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 589.562516][ T1208] usb 1-1: device descriptor read/64, error -71 [ 589.887714][ T9576] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 589.903509][ T1208] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 590.002797][ T5931] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 590.359428][ T1208] usb 1-1: device descriptor read/64, error -71 [ 590.462443][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.511551][ T1208] usb usb1-port1: attempt power cycle [ 590.562542][T11779] vxcan1 speed is unknown, defaulting to 1000 [ 591.312513][ T5931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 591.392485][ T9576] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 591.596409][ T5931] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 591.783319][ T9576] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 591.814154][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 591.824981][ T9576] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 591.845325][ T5931] usb 5-1: SerialNumber: syz [ 591.990307][ T9576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.052686][ T1208] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 592.542285][ C0] hrtimer: interrupt took 31105 ns [ 592.810799][ T9576] usb 3-1: can't set config #27, error -71 [ 592.829986][ T1208] usb 1-1: device descriptor read/8, error -71 [ 592.890555][ T9576] usb 3-1: USB disconnect, device number 41 [ 593.124236][T11793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.715620][ T5931] usb 5-1: invalid UAC_HEADER (v1) [ 594.586577][T11807] fuse: Unknown parameter 'grou00000000000000000000' [ 595.331003][ T5931] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 595.355679][ T5931] usb 5-1: USB disconnect, device number 53 [ 595.823763][ T6260] udevd[6260]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.504595][T11827] vxcan1 speed is unknown, defaulting to 1000 [ 597.822743][ T5931] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 597.992540][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 598.001090][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.013503][ T5931] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 598.035866][ T5931] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 598.062797][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.375111][ T5931] usb 1-1: config 0 descriptor?? [ 599.022360][ T1224] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 600.112949][ T1208] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 600.126964][ T1224] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 600.140940][ T1224] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 600.239324][ T1224] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 600.264179][ T1224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.294638][ T1208] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.311040][ T1208] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.334980][ T1208] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 600.353510][T11841] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 600.381324][ T1224] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.392147][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 600.402304][ T1208] usb 4-1: SerialNumber: syz [ 600.515522][T11858] fuse: Unknown parameter 'grou00000000000000000000' [ 601.174168][ T5999] usb 3-1: USB disconnect, device number 42 [ 601.295836][ T1224] usb 1-1: USB disconnect, device number 48 [ 602.043639][ T1208] usb 4-1: invalid UAC_HEADER (v1) [ 602.212642][T11868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.342249][ T1208] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 602.364308][ T1208] usb 4-1: USB disconnect, device number 35 [ 602.616418][ T6260] udevd[6260]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.557674][T11899] ptrace attach of "./syz-executor exec"[5863] was attempted by "./syz-executor exec"[11899] [ 604.670622][T11903] befs: (nbd2): No write support. Marking filesystem read-only [ 604.679183][T11903] befs: (nbd2): unable to read superblock [ 605.402714][ T1590] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 605.844696][ T1590] usb 5-1: Using ep0 maxpacket: 16 [ 606.024652][ T1590] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.150179][ T1590] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 606.190238][ T1590] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 606.214808][ T1590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.251452][ T1590] usb 5-1: config 0 descriptor?? [ 607.175774][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'. [ 607.323360][ T5999] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 607.596312][ T5999] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 607.617745][ T5999] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 607.752942][ T5999] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 607.777187][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.407141][T11920] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 608.448949][ T5999] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 608.846791][T11953] fuse: Unknown parameter 'user_i00000000000000000000' [ 609.716900][ T5999] usb 5-1: USB disconnect, device number 54 [ 610.469680][T11859] usb 2-1: USB disconnect, device number 35 [ 613.062456][ T9576] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 613.087952][ T5999] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 613.218806][T12004] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 613.814040][ T5999] usb 2-1: Using ep0 maxpacket: 16 [ 614.132904][ T9576] usb 3-1: Using ep0 maxpacket: 16 [ 614.148449][ T5999] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 614.160562][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 614.198109][ T9576] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.212335][ T5999] usb 2-1: Product: syz [ 614.216515][ T5999] usb 2-1: Manufacturer: syz [ 614.221216][ T9576] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 614.252400][ T9576] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 614.264867][ T9576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.265701][ T5999] usb 2-1: SerialNumber: syz [ 614.313129][ T9576] usb 3-1: config 0 descriptor?? [ 614.340334][ T5999] usb 2-1: config 0 descriptor?? [ 614.502371][ T1208] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 614.564858][ T9576] usb 2-1: USB disconnect, device number 36 [ 614.656696][ T1208] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.666969][T11859] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 614.676917][ T1208] usb 1-1: config 0 has no interfaces? [ 614.683180][ T1208] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 614.694353][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.844223][ T1208] usb 1-1: config 0 descriptor?? [ 615.075751][T11859] usb 5-1: not running at top speed; connect to a high speed hub [ 615.116235][T11859] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 615.126504][T11859] usb 5-1: config 1 has no interface number 1 [ 615.133401][T11859] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 615.151957][T11859] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.166479][T11859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.174841][T11859] usb 5-1: Product: syz [ 615.180198][T11859] usb 5-1: Manufacturer: syz [ 615.184940][T11859] usb 5-1: SerialNumber: syz [ 615.623507][T11859] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 615.648405][T11859] usb 5-1: failed to enable PITCH for EP 0x82 [ 615.712788][T11859] usb 5-1: USB disconnect, device number 55 [ 615.791834][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 615.814974][T12034] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[12034] [ 615.952422][T12039] befs: (nbd3): No write support. Marking filesystem read-only [ 615.961364][T12039] befs: (nbd3): unable to read superblock [ 616.831526][T11859] usb 3-1: USB disconnect, device number 43 [ 617.290268][T12052] fuse: Bad value for 'fd' [ 617.718687][T12056] vxcan1 speed is unknown, defaulting to 1000 [ 618.066459][ T1224] usb 1-1: USB disconnect, device number 49 [ 618.932553][ T5999] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 619.046467][ T1224] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 619.353324][ T1224] usb 1-1: Using ep0 maxpacket: 8 [ 619.364197][ T1224] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 619.382364][ T5999] usb 2-1: Using ep0 maxpacket: 16 [ 619.382707][ T1224] usb 1-1: config 0 has no interface number 0 [ 619.401664][ T5999] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 619.406949][ T1224] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 619.435317][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 619.460586][ T1224] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 619.475404][ T5999] usb 2-1: Product: syz [ 619.488936][ T5999] usb 2-1: Manufacturer: syz [ 619.495628][ T1224] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 619.496009][ T5999] usb 2-1: SerialNumber: syz [ 619.527872][ T5999] usb 2-1: config 0 descriptor?? [ 619.528381][ T1224] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 619.562574][T12083] ptrace attach of "./syz-executor exec"[5867] was attempted by "./syz-executor exec"[12083] [ 619.591365][ T1224] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.595121][ T1224] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 619.595146][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.595164][ T1224] usb 1-1: Product: syz [ 619.595178][ T1224] usb 1-1: Manufacturer: syz [ 619.595191][ T1224] usb 1-1: SerialNumber: syz [ 619.599372][ T1224] usb 1-1: config 0 descriptor?? [ 619.795334][T12083] befs: (nbd4): No write support. Marking filesystem read-only [ 619.807893][T12083] befs: (nbd4): unable to read superblock [ 619.915121][ T1224] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 619.983093][T11859] usb 2-1: USB disconnect, device number 37 [ 620.297557][ T1224] usb 1-1: USB disconnect, device number 50 [ 621.337559][T12104] 9pnet_fd: p9_fd_create_tcp (12104): problem connecting socket to 127.0.0.1 [ 624.351971][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.363592][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.602517][ T9576] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 624.752347][ T9576] usb 1-1: Using ep0 maxpacket: 32 [ 624.760314][ T9576] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 624.793801][ T9576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 624.808373][ T9576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 624.818808][ T9576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 624.830359][ T9576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 624.832366][ T5999] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 624.854144][ T9576] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 624.871197][ T9576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.879643][ T9576] usb 1-1: Product: syz [ 624.887474][ T9576] usb 1-1: Manufacturer: syz [ 624.900147][ T9576] usb 1-1: SerialNumber: syz [ 624.911424][ T9576] usb 1-1: config 0 descriptor?? [ 624.969234][T12152] 9pnet_fd: p9_fd_create_tcp (12152): problem connecting socket to 127.0.0.1 [ 625.012429][ T5999] usb 2-1: Using ep0 maxpacket: 8 [ 625.026711][ T5999] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 625.038337][ T5999] usb 2-1: config 0 has no interface number 0 [ 625.053174][ T5999] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 625.073982][ T5999] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 625.087517][ T5999] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 625.099113][ T5999] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 625.109556][ T5999] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.136829][ T5999] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 625.164786][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.174331][ T5999] usb 2-1: Product: syz [ 625.178563][ T5999] usb 2-1: Manufacturer: syz [ 625.193777][ T5999] usb 2-1: SerialNumber: syz [ 625.208829][ T5999] usb 2-1: config 0 descriptor?? [ 625.334770][ T9576] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 625.340828][ T9576] input input44: Device does not respond to id packet M [ 625.448948][ T5999] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 625.521849][T12161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1712'. [ 625.531614][ T9576] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 625.537985][ T9576] input input44: Device does not respond to id packet P [ 625.549209][ T9576] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 625.552773][T12163] devpts: Unknown parameter 'mPq(-H 鏦bHݶthԭ' [ 625.562385][ T9576] input input44: Device does not respond to id packet B [ 625.632722][ T9576] input input44: Limiting number of effects to 32 (device reports 48) [ 625.664517][T11859] usb 2-1: USB disconnect, device number 38 [ 625.876190][ T9576] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 625.910291][ T9576] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 625.927200][ T9576] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 625.934975][ T9576] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 625.949625][T12167] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 626.143085][ T9576] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input44 [ 626.545416][ T9576] usb 1-1: USB disconnect, device number 51 [ 626.949222][T12179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.095508][T12207] 9pnet_fd: p9_fd_create_tcp (12207): problem connecting socket to 127.0.0.1 [ 630.150341][T12209] devpts: Unknown parameter 'mPq(-H 鏦bHݶthԭ' [ 630.772431][ T1208] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 631.339331][ T1208] usb 4-1: Using ep0 maxpacket: 8 [ 631.374599][ T1208] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 631.383031][ T1208] usb 4-1: config 0 has no interface number 0 [ 631.389144][ T1208] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 631.400706][ T1208] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 631.412590][ T1208] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 631.429307][ T1208] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 631.440818][ T1208] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.463200][ T1208] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 631.480196][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.533837][ T1208] usb 4-1: Product: syz [ 631.583636][ T1208] usb 4-1: Manufacturer: syz [ 631.627919][ T1208] usb 4-1: SerialNumber: syz [ 631.905033][ T1208] usb 4-1: config 0 descriptor?? [ 632.131262][ T1208] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 633.259998][ T1208] usb 4-1: USB disconnect, device number 36 [ 633.280838][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1731'. [ 634.635299][T12255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.680468][T12270] fuse: Bad value for 'fd' [ 639.848180][T11859] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 639.975667][T12311] fuse: Bad value for 'fd' [ 640.513362][ T1208] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 640.600319][ T5999] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 640.782357][ T1208] usb 4-1: Using ep0 maxpacket: 8 [ 640.912379][ T5999] usb 3-1: Using ep0 maxpacket: 32 [ 640.927719][ T5999] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 640.955528][ T1208] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 640.969270][ T1208] usb 4-1: config 0 has no interface number 0 [ 640.971438][ T5999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 640.976041][ T1208] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 640.990177][ T5999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 640.997561][ T1208] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 640.997588][ T1208] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 640.997611][ T1208] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 640.997631][ T1208] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.000581][ T1208] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 641.032876][ T5999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 641.662556][ T5999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 641.896318][ T5999] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 641.899578][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.927591][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.938278][ T1208] usb 4-1: Product: syz [ 641.945893][ T5999] usb 3-1: Product: syz [ 641.951234][ T5999] usb 3-1: Manufacturer: syz [ 641.958378][ T5999] usb 3-1: SerialNumber: syz [ 641.964147][T12318] vxcan1 speed is unknown, defaulting to 1000 [ 642.052888][ T1208] usb 4-1: Manufacturer: syz [ 642.063306][ T1208] usb 4-1: SerialNumber: syz [ 642.071911][ T5999] usb 3-1: config 0 descriptor?? [ 642.102820][ T1208] usb 4-1: config 0 descriptor?? [ 642.491389][ T1208] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 643.217711][ T5999] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 643.224195][ T5999] input input45: Device does not respond to id packet M [ 643.235908][ T5999] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 643.258040][ T5999] input input45: Device does not respond to id packet P [ 643.308002][ T5999] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 643.313019][ T1208] usb 4-1: USB disconnect, device number 37 [ 643.340650][ T5999] input input45: Device does not respond to id packet B [ 643.342126][T11859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 643.379397][T11859] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 643.379598][ T5999] input input45: Limiting number of effects to 32 (device reports 48) [ 643.426753][T11859] usb 5-1: can't read configurations, error -71 [ 643.623836][ T5999] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 643.639926][ T5999] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 643.688202][ T5999] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 643.748019][ T5999] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 643.914398][ T5999] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input45 [ 643.957005][ T5999] usb 3-1: USB disconnect, device number 44 [ 645.782580][ T24] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 646.095653][T12360] netlink: 755 bytes leftover after parsing attributes in process `syz.4.1758'. [ 646.263432][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 646.285521][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 646.300086][ T24] usb 4-1: config 1 has no interface number 1 [ 646.322084][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 646.372787][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 646.381985][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.412436][ T24] usb 4-1: Product: syz [ 646.429209][ T24] usb 4-1: Manufacturer: syz [ 646.546968][ T24] usb 4-1: SerialNumber: syz [ 647.519141][ T24] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 647.540890][ T24] usb 4-1: failed to enable PITCH for EP 0x82 [ 648.889002][ T24] usb 4-1: USB disconnect, device number 38 [ 649.339786][T12297] udevd[12297]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 649.382344][ T1590] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 649.632907][ T1590] usb 3-1: Using ep0 maxpacket: 16 [ 649.752555][ T1590] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 649.796731][ T1590] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 649.865414][ T1590] usb 3-1: Product: syz [ 650.000590][ T1590] usb 3-1: Manufacturer: syz [ 650.005251][ T1590] usb 3-1: SerialNumber: syz [ 650.018228][ T1590] usb 3-1: config 0 descriptor?? [ 650.216375][T12399] fuse: Bad value for 'fd' [ 651.557905][ T1590] usb 3-1: USB disconnect, device number 45 [ 651.911623][T12409] fuse: Invalid rootmode [ 652.482051][T12411] fuse: Bad value for 'fd' [ 652.829199][T12415] fuse: Bad value for 'fd' [ 655.836851][T12451] fuse: Invalid rootmode [ 656.640730][ T5862] Bluetooth: hci4: command 0x0406 tx timeout [ 656.722367][ T1590] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 657.078269][ T1590] usb 4-1: Using ep0 maxpacket: 16 [ 657.226471][ T1590] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 657.333362][ T1590] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 657.358886][ T1590] usb 4-1: Product: syz [ 657.388202][ T1590] usb 4-1: Manufacturer: syz [ 657.414570][ T1590] usb 4-1: SerialNumber: syz [ 657.707459][ T1590] usb 4-1: config 0 descriptor?? [ 658.115809][T12467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1796'. [ 658.407605][ T1208] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 658.437527][ T43] usb 4-1: USB disconnect, device number 39 [ 658.558530][T12296] udevd[12296]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.792395][ T1208] usb 5-1: device descriptor read/64, error -71 [ 658.840505][T12478] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 659.154585][ T1208] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 660.044373][T12489] fuse: Invalid rootmode [ 661.930586][T12508] vxcan1 speed is unknown, defaulting to 1000 [ 662.179126][T12511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1811'. [ 663.054025][T12525] fuse: Bad value for 'rootmode' [ 663.998548][ T9576] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 664.583519][ T9576] usb 5-1: Using ep0 maxpacket: 16 [ 664.870945][ T9576] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 664.891784][ T9576] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 665.033217][ T9576] usb 5-1: Product: syz [ 665.047594][ T9576] usb 5-1: Manufacturer: syz [ 665.059802][ T9576] usb 5-1: SerialNumber: syz [ 665.598405][T12543] ptrace attach of "./syz-executor exec"[5868] was attempted by "./syz-executor exec"[12543] [ 665.610124][ T9576] usb 5-1: config 0 descriptor?? [ 665.750752][T12545] befs: (nbd1): No write support. Marking filesystem read-only [ 665.759451][T12545] befs: (nbd1): unable to read superblock [ 666.480978][T12550] fuse: Unknown parameter 'fd0x0000000000000003' [ 666.517915][T12551] vxcan1 speed is unknown, defaulting to 1000 [ 666.962156][ T9576] usb 5-1: USB disconnect, device number 60 [ 668.333620][T12578] fuse: Bad value for 'rootmode' [ 670.421518][T12599] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 671.388174][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 671.572489][ T24] usb 1-1: device descriptor read/64, error -71 [ 671.986419][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 672.142373][ T24] usb 1-1: device descriptor read/64, error -71 [ 672.322219][ T24] usb usb1-port1: attempt power cycle [ 673.858406][T12631] fuse: Bad value for 'rootmode' [ 674.690462][T12634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.392486][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 675.422982][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 677.454076][T12667] fuse: Bad value for 'fd' [ 678.492798][ T9576] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 678.562353][ T5999] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 678.639037][ T9576] usb 4-1: device descriptor read/64, error -71 [ 678.748548][T11859] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 678.752585][ T5999] usb 2-1: not running at top speed; connect to a high speed hub [ 678.759375][T12692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.922347][ T5999] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 678.933891][ T5999] usb 2-1: config 1 has no interface number 1 [ 678.940030][ T5999] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 679.065353][ T9576] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 679.072868][ T5999] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 679.141782][T11859] usb 3-1: Using ep0 maxpacket: 32 [ 679.149466][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.182429][ T5999] usb 2-1: Product: syz [ 679.211771][T11859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 679.223482][ T5999] usb 2-1: Manufacturer: syz [ 679.228641][ T5999] usb 2-1: SerialNumber: syz [ 679.235339][T11859] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 679.244590][T11859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.264825][T11859] usb 3-1: Product: syz [ 679.269074][T11859] usb 3-1: Manufacturer: syz [ 679.273780][ T9576] usb 4-1: device descriptor read/64, error -71 [ 679.280219][T11859] usb 3-1: SerialNumber: syz [ 679.560773][ T9576] usb usb4-port1: attempt power cycle [ 679.571506][T11859] usb 3-1: config 0 descriptor?? [ 679.781684][ T5999] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 679.807146][ T5999] usb 2-1: failed to enable PITCH for EP 0x82 [ 680.035989][ T5999] usb 2-1: USB disconnect, device number 39 [ 680.507354][T11859] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 680.519839][ T9576] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 680.937761][T11859] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 680.948412][ T9576] usb 4-1: device descriptor read/8, error -71 [ 680.956471][T11859] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 681.253655][ T9576] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 681.489613][ T9576] usb 4-1: device descriptor read/8, error -71 [ 681.499858][T12297] udevd[12297]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.700677][ T9576] usb usb4-port1: unable to enumerate USB device [ 682.901034][ T9576] usb 3-1: USB disconnect, device number 46 [ 682.982526][T12731] fuse: Invalid rootmode [ 684.462038][T12746] vxcan1 speed is unknown, defaulting to 1000 [ 684.662363][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 684.900979][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.121824][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 685.131492][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.212601][T12759] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 685.698510][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.706576][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.793396][ T24] usb 4-1: config 0 descriptor?? [ 685.814878][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 686.790573][ T24] pwc: send_video_command error -71 [ 686.798282][ T24] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 686.806016][ T24] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 686.844618][ T24] usb 4-1: USB disconnect, device number 44 [ 687.061810][T12773] kvm: pic: non byte write [ 687.072527][T12775] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 687.162637][T11859] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 687.452369][T11859] usb 3-1: device descriptor read/64, error -71 [ 687.834329][T11859] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 688.772736][T11859] usb 3-1: device descriptor read/64, error -71 [ 688.912890][T11859] usb usb3-port1: attempt power cycle [ 689.082597][ T1224] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 689.272029][ T1224] usb 5-1: Using ep0 maxpacket: 32 [ 689.294807][T11859] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 689.673627][ T1224] usb 5-1: config 0 interface 0 has no altsetting 0 [ 689.725619][T11859] usb 3-1: device descriptor read/8, error -71 [ 689.754653][ T1224] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 689.823288][ T1224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.843651][ T1224] usb 5-1: Product: syz [ 689.855260][ T1224] usb 5-1: Manufacturer: syz [ 689.867219][ T1224] usb 5-1: SerialNumber: syz [ 689.880977][ T1224] usb 5-1: config 0 descriptor?? [ 690.972775][ T1224] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 690.980551][ T1224] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 691.893332][T11859] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 692.194480][T11859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.207502][T11859] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 692.216708][T11859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.621938][T11859] usb 2-1: config 0 descriptor?? [ 692.635738][ T1224] usb 5-1: USB disconnect, device number 61 [ 692.646965][T11859] pwc: Askey VC010 type 2 USB webcam detected. [ 693.173040][T11859] pwc: recv_control_msg error -32 req 02 val 2b00 [ 693.184510][T11859] pwc: recv_control_msg error -32 req 02 val 2700 [ 693.193727][T11859] pwc: recv_control_msg error -32 req 02 val 2c00 [ 693.263409][T12835] fuse: Unknown parameter 'fd0x0000000000000006' [ 693.415274][T11859] pwc: recv_control_msg error -32 req 04 val 1000 [ 693.445257][T11859] pwc: recv_control_msg error -32 req 04 val 1300 [ 693.479550][T11859] pwc: recv_control_msg error -32 req 04 val 1400 [ 693.953066][T11859] pwc: recv_control_msg error -32 req 02 val 2000 [ 693.960185][T11859] pwc: recv_control_msg error -32 req 02 val 2100 [ 693.973263][T11859] pwc: recv_control_msg error -32 req 04 val 1500 [ 693.981135][T11859] pwc: recv_control_msg error -32 req 02 val 2500 [ 694.008437][T11859] pwc: recv_control_msg error -32 req 02 val 2400 [ 694.031554][T11859] pwc: recv_control_msg error -32 req 02 val 2600 [ 694.047405][T11859] pwc: recv_control_msg error -32 req 02 val 2900 [ 694.056346][T11859] pwc: recv_control_msg error -32 req 02 val 2800 [ 694.068403][T11859] pwc: recv_control_msg error -32 req 04 val 1100 [ 694.087169][T11859] pwc: recv_control_msg error -71 req 04 val 1200 [ 694.310756][T11859] pwc: Registered as video103. [ 694.333199][T11859] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46 [ 696.573780][T11859] usb 2-1: USB disconnect, device number 40 [ 704.742578][T12938] fuse: Unknown parameter 'user_i00000000000000000000' [ 705.779364][T10904] Bluetooth: hci0: command 0x0406 tx timeout [ 706.023384][T12947] fuse: Unknown parameter 'fd0x0000000000000003' [ 706.506098][T12947] serio: Serial port ptm0 [ 707.207454][ T1590] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 707.463402][ T1590] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 707.496049][ T1590] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 707.654035][ T1590] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 708.221711][ T1590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.283699][T12960] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 708.299944][ T1590] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 709.070501][T12975] fuse: Bad value for 'rootmode' [ 710.787708][ T1224] usb 5-1: USB disconnect, device number 62 [ 711.405441][T12988] fuse: Unknown parameter 'user_id00000000000000000000' [ 716.275366][T13033] serio: Serial port ptm0 [ 716.578831][T10904] Bluetooth: hci1: command 0x0406 tx timeout [ 716.993015][T13049] netlink: 'syz.4.1948': attribute type 4 has an invalid length. [ 720.162469][T10432] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 720.200429][T13082] ======================================================= [ 720.200429][T13082] WARNING: The mand mount option has been deprecated and [ 720.200429][T13082] and is ignored by this kernel. Remove the mand [ 720.200429][T13082] option from the mount to silence this warning. [ 720.200429][T13082] ======================================================= [ 720.410508][T11859] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 720.449715][T10432] usb 5-1: config 0 has an invalid interface number: 123 but max is 0 [ 720.468048][T10432] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 722.420448][T11859] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 722.480483][T10432] usb 5-1: config 0 has no interface number 0 [ 723.529212][ C1] sched: DL replenish lagged too much [ 723.617468][T10432] usb 5-1: string descriptor 0 read error: -71 [ 723.669803][T10432] usb 5-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 723.708090][T10432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.750493][T13097] fido_id[13097]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 723.767231][T10432] usb 5-1: config 0 descriptor?? [ 723.784601][T10432] usb 5-1: can't set config #0, error -71 [ 723.808877][T10432] usb 5-1: USB disconnect, device number 63 [ 727.647186][T13146] serio: Serial port ptm0 [ 728.655195][ T30] audit: type=1326 audit(2000000513.010:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfb8eec9 code=0x7ffc0000 [ 728.832599][ T1590] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 728.847718][ T30] audit: type=1326 audit(2000000513.060:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe9dfb8eec9 code=0x7ffc0000 [ 729.013364][ T1590] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 729.067688][ T1590] usb 2-1: config 0 has no interface number 0 [ 729.110740][ T30] audit: type=1326 audit(2000000513.060:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfb8eec9 code=0x7ffc0000 [ 729.143359][ T1590] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 729.279060][ T30] audit: type=1326 audit(2000000513.060:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfb8eec9 code=0x7ffc0000 [ 729.302782][ T30] audit: type=1326 audit(2000000513.070:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe9dfb8eec9 code=0x7ffc0000 [ 730.014044][ T1590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.022074][ T1590] usb 2-1: Product: syz [ 730.023060][ T30] audit: type=1326 audit(2000000513.070:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfb8eec9 code=0x7ffc0000 [ 730.053429][ T30] audit: type=1326 audit(2000000513.070:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfb8eec9 code=0x7ffc0000 [ 730.061122][ T1590] usb 2-1: Manufacturer: syz [ 730.079539][ T30] audit: type=1326 audit(2000000513.070:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9dfb8eec9 code=0x7ffc0000 [ 730.199714][ T1590] usb 2-1: SerialNumber: syz [ 730.486197][T13170] tipc: Enabled bearer , priority 0 [ 730.500007][T13170] tipc: Resetting bearer [ 730.508022][ T30] audit: type=1326 audit(2000000513.070:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfb8eec9 code=0x7ffc0000 [ 730.521730][ T1590] usb 2-1: config 0 descriptor?? [ 730.693368][T13165] tipc: Disabling bearer [ 730.716656][ T30] audit: type=1326 audit(2000000513.070:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfb8eec9 code=0x7ffc0000 [ 730.931884][ T1590] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 730.980627][ T1590] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 731.074014][ T1590] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 731.107810][ T1590] usb 2-1: media controller created [ 731.424901][ T1590] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 732.053273][ T1590] usb 2-1: USB disconnect, device number 41 [ 733.033508][T13202] serio: Serial port ptm0 [ 734.392508][ T1224] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 735.604173][ T1224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 735.616584][ T1224] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 735.630325][ T1224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.672328][ T1224] usb 4-1: Product: syz [ 735.676526][ T1224] usb 4-1: Manufacturer: syz [ 735.704882][ T1224] usb 4-1: SerialNumber: syz [ 736.525292][ T1224] usb 4-1: config 0 descriptor?? [ 736.807957][T13235] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 737.061535][ T5999] usb 4-1: USB disconnect, device number 45 [ 738.466007][T13255] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 738.536902][T13255] block device autoloading is deprecated and will be removed. [ 741.377906][ T5999] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 741.554164][ T5999] usb 5-1: unable to get BOS descriptor or descriptor too short [ 741.577736][ T5999] usb 5-1: config 1 has an invalid interface number: 48 but max is 0 [ 741.600708][ T5999] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 741.613307][ T5999] usb 5-1: config 1 has no interface number 0 [ 741.631503][ T5999] usb 5-1: config 1 interface 48 altsetting 3 has an invalid endpoint descriptor of length 5, skipping [ 741.652440][ T5999] usb 5-1: config 1 interface 48 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 741.673617][ T5999] usb 5-1: config 1 interface 48 has no altsetting 0 [ 741.691032][ T5999] usb 5-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice=52.dd [ 741.712579][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.713492][T13285] binder: BINDER_SET_CONTEXT_MGR already set [ 741.723591][ T5999] usb 5-1: Product: syz [ 741.731872][ T5999] usb 5-1: Manufacturer: syz [ 741.737066][ T5999] usb 5-1: SerialNumber: syz [ 741.762463][T13285] binder: 13284:13285 ioctl 4018620d 200000004a80 returned -16 [ 741.769064][T13289] binder: 13284:13289 ioctl c0306201 0 returned -14 [ 741.832498][ T1208] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 742.314364][T13296] bridge0: port 3(team0) entered blocking state [ 742.321744][T13296] bridge0: port 3(team0) entered disabled state [ 742.329486][T13296] team0: entered allmulticast mode [ 742.335021][T13296] team_slave_0: entered allmulticast mode [ 742.341060][T13296] team_slave_1: entered allmulticast mode [ 742.362583][T13296] team0: entered promiscuous mode [ 742.367681][T13296] team_slave_0: entered promiscuous mode [ 742.375003][T13296] team_slave_1: entered promiscuous mode [ 742.545354][T10904] Bluetooth: hci3: command 0x0405 tx timeout [ 742.566006][ T1208] usb 1-1: config 0 has an invalid interface number: 123 but max is 0 [ 742.574722][ T1208] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 742.582113][ T1208] usb 1-1: config 0 has no interface number 0 [ 742.591416][ T1208] usb 1-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 742.600890][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.609109][ T1208] usb 1-1: Product: syz [ 742.613544][ T1208] usb 1-1: Manufacturer: syz [ 742.618363][ T1208] usb 1-1: SerialNumber: syz [ 742.631259][ T1208] usb 1-1: config 0 descriptor?? [ 742.984838][ T24] usb 1-1: USB disconnect, device number 55 [ 743.084650][ T5999] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 743.268744][ T5999] snd-usb-audio 5-1:1.48: probe with driver snd-usb-audio failed with error -2 [ 743.388424][ T1208] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 743.796152][ T5999] usb 5-1: USB disconnect, device number 64 [ 743.850781][T12327] udevd[12327]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.48/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.952399][ T1208] usb 2-1: device descriptor read/64, error -71 [ 744.892567][ T1208] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 745.208327][ T1208] usb 2-1: device descriptor read/64, error -71 [ 745.342411][ T1208] usb usb2-port1: attempt power cycle [ 745.535672][T13325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.243814][T13330] ptrace attach of "./syz-executor exec"[5868] was attempted by "./syz-executor exec"[13330] [ 746.400367][T13331] befs: (nbd1): No write support. Marking filesystem read-only [ 746.408730][T13331] befs: (nbd1): unable to read superblock [ 747.213047][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.219899][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.042647][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 748.059374][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 748.210148][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 748.227450][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 748.834668][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 748.866642][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 748.972600][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 748.993001][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 749.137502][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 749.750170][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 750.002679][ T24] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 752.950275][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 753.134704][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 753.169303][ T24] usb 2-1: can't read configurations, error -71 [ 753.243593][T13417] fuse: Unknown parameter 'user_id00000000000000000000' [ 756.325677][ T1208] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 756.480928][ T1208] usb 1-1: device descriptor read/64, error -71 [ 756.772430][ T1208] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 756.842389][T11859] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 756.913930][ T1208] usb 1-1: device descriptor read/64, error -71 [ 757.487552][ T1208] usb usb1-port1: attempt power cycle [ 757.962393][ T1208] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 758.146634][T13464] fuse: Unknown parameter '0x0000000000000006' [ 759.234252][ T1208] usb 1-1: device descriptor read/8, error -71 [ 759.646813][T11859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 759.665727][T11859] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 759.817318][T13475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.824817][T13475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.852673][T11859] usb 5-1: can't read configurations, error -71 [ 763.830489][T13509] fuse: Unknown parameter '0x0000000000000006' [ 764.972366][ T1208] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 765.592764][T11859] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 765.692452][ T1208] usb 3-1: device descriptor read/64, error -71 [ 766.012602][ T1208] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 767.072669][ T1208] usb 3-1: device descriptor read/64, error -71 [ 767.469066][T13537] tipc: Enabled bearer , priority 0 [ 767.487234][T13537] syzkaller0: entered promiscuous mode [ 767.496098][ T1208] usb usb3-port1: attempt power cycle [ 767.502620][T13537] syzkaller0: entered allmulticast mode [ 767.529696][T13537] tipc: Resetting bearer [ 767.744745][T13536] tipc: Resetting bearer [ 767.974430][T13536] tipc: Disabling bearer [ 768.060583][T13547] fuse: Unknown parameter '0x0000000000000006' [ 769.530590][T11859] usb 2-1: unable to get BOS descriptor or descriptor too short [ 769.578432][T11859] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 769.975405][T11859] usb 2-1: can't read configurations, error -71 [ 770.647197][T13566] bpq0: entered allmulticast mode [ 771.253236][ T9576] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 771.989840][ T9576] usb 4-1: not running at top speed; connect to a high speed hub [ 772.336009][ T9576] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 772.346512][ T9576] usb 4-1: config 1 has no interface number 1 [ 772.447395][ T9576] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 772.462744][ T9576] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 772.471952][ T9576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.563894][ T9576] usb 4-1: Product: syz [ 772.666435][T13593] fuse: Unknown parameter 'fd0x0000000000000006' [ 773.129696][ T9576] usb 4-1: Manufacturer: syz [ 773.134410][ T9576] usb 4-1: SerialNumber: syz [ 773.192708][ T9576] usb 4-1: can't set config #1, error -71 [ 773.204189][ T9576] usb 4-1: USB disconnect, device number 46 [ 774.203412][T10432] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 774.454295][T10432] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 774.487594][T10432] usb 2-1: config 8 has no interface number 0 [ 774.512631][T10432] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 774.532200][T10432] usb 2-1: config 8 interface 177 has no altsetting 0 [ 774.550772][T10432] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 774.562549][T10432] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.597058][T13597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 774.742368][ T9576] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 774.802121][T13626] block nbd2: not configured, cannot reconfigure [ 774.906438][ T9576] usb 1-1: Using ep0 maxpacket: 8 [ 774.927880][ T9576] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 775.015689][ T9576] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.814656][T13631] __nla_validate_parse: 42 callbacks suppressed [ 775.814731][T13631] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2103'. [ 775.881808][ T1224] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 775.919956][ T9576] usb 1-1: config 0 has no interface number 0 [ 776.030481][ T9576] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 776.073965][ T9576] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 776.088556][ T9576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.122413][ T1224] usb 3-1: device descriptor read/64, error -71 [ 776.783827][ T9576] usb 1-1: Product: syz [ 776.788013][ T9576] usb 1-1: Manufacturer: syz [ 776.794062][ T9576] usb 1-1: SerialNumber: syz [ 776.914362][ T1224] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 776.976753][ T9576] usb 1-1: config 0 descriptor?? [ 777.028307][ T9576] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 777.064542][T10432] usb 2-1: string descriptor 0 read error: -71 [ 777.081433][ C1] ir_toy 2-1:8.177: out urb status: -71 [ 777.099398][ T1224] usb 3-1: device descriptor read/64, error -71 [ 777.182452][T11859] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 777.234970][ T1224] usb usb3-port1: attempt power cycle [ 777.373323][T11859] usb 5-1: Using ep0 maxpacket: 8 [ 777.396539][T11859] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 777.507241][T11859] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 777.533198][T11859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.566912][T11859] usb 5-1: Product: syz [ 777.576596][T11859] usb 5-1: Manufacturer: syz [ 777.581285][T11859] usb 5-1: SerialNumber: syz [ 777.602403][T10432] ir_toy 2-1:8.177: could not write reset command: -110 [ 777.612460][T10432] ir_toy 2-1:8.177: probe with driver ir_toy failed with error -110 [ 777.778940][ T1224] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 777.808053][T11859] usb 5-1: config 0 descriptor?? [ 777.821606][T11859] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 777.831938][ T1224] usb 3-1: device descriptor read/8, error -71 [ 777.849718][T10432] usb 2-1: USB disconnect, device number 49 [ 778.892577][T10904] Bluetooth: hci3: command 0x0405 tx timeout [ 778.921901][ T5916] usb 1-1: USB disconnect, device number 60 [ 779.035068][T10432] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 779.778359][T10432] usb 4-1: Using ep0 maxpacket: 16 [ 779.836242][T10432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.856472][T10432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.957780][T10432] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 779.974279][T10432] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 779.989849][T10432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.858666][T10432] usb 4-1: config 0 descriptor?? [ 780.978730][T11859] gspca_zc3xx: reg_w_i err -71 [ 781.706135][T13688] loop5: detected capacity change from 0 to 7 [ 781.724581][T13688] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.734525][T13688] Buffer I/O error on dev loop5, logical block 0, async page read [ 781.744701][T13688] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.754172][T13688] Buffer I/O error on dev loop5, logical block 0, async page read [ 781.769940][T11859] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 781.777355][T13688] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.787393][T13688] Buffer I/O error on dev loop5, logical block 0, async page read [ 781.798804][T13688] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.812157][T13688] Buffer I/O error on dev loop5, logical block 0, async page read [ 781.827085][T13688] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.836646][T13688] Buffer I/O error on dev loop5, logical block 0, async page read [ 781.852017][T13688] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.864931][T13688] Buffer I/O error on dev loop5, logical block 0, async page read [ 781.876054][T13688] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.887240][T13688] Buffer I/O error on dev loop5, logical block 0, async page read [ 781.898040][T13688] ldm_validate_partition_table(): Disk read failed. [ 781.910907][T13688] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.922023][T13688] Buffer I/O error on dev loop5, logical block 0, async page read [ 781.940239][T13688] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.950824][T13688] Buffer I/O error on dev loop5, logical block 0, async page read [ 781.962206][T11859] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 781.985956][T13688] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.989316][T10432] usbhid 4-1:0.0: can't add hid device: -71 [ 782.001861][T13688] Buffer I/O error on dev loop5, logical block 0, async page read [ 782.027897][T10432] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 782.052464][T13688] Dev loop5: unable to read RDB block 0 [ 782.108907][T10432] usb 4-1: USB disconnect, device number 47 [ 782.112374][T11859] usb 5-1: USB disconnect, device number 67 [ 782.115558][T13688] loop5: unable to read partition table [ 782.230774][T13688] loop5: partition table beyond EOD, truncated [ 782.251527][T13688] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 784.842607][T10432] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 785.101836][T10432] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 785.130875][T10432] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.307216][T10432] usb 3-1: config 0 descriptor?? [ 786.360477][T13742] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2146'. [ 786.854856][T10432] ath6kl: Failed to read usb control message: -71 [ 786.861692][T10432] ath6kl: Unable to read the bmi data from the device: -71 [ 786.986536][T10432] ath6kl: Unable to recv target info: -71 [ 787.013813][T10432] ath6kl: Failed to init ath6kl core: -71 [ 787.020125][T10432] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 787.063828][T10432] usb 3-1: USB disconnect, device number 58 [ 787.242582][T13755] ubi31: attaching mtd0 [ 787.263115][T13755] ubi31: scanning is finished [ 787.267881][T13755] ubi31: empty MTD device detected [ 787.511661][T13753] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 787.615644][T13754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2149'. [ 787.624677][T13754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2149'. [ 787.770721][T13760] tipc: Enabled bearer , priority 0 [ 787.794247][T13760] syzkaller0: entered promiscuous mode [ 787.810336][T13755] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 787.817965][T13755] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 787.825349][T13755] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 787.832464][T13755] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 787.839919][T13755] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 787.846824][T13755] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 787.855060][T13755] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2145496461 [ 787.865319][T13755] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 787.912026][T13765] ubi31: background thread "ubi_bgt31d" started, PID 13765 [ 788.505645][T13760] syzkaller0: entered allmulticast mode [ 788.757932][T13760] tipc: Resetting bearer [ 788.774784][T13758] tipc: Resetting bearer [ 789.249271][T11859] tipc: Node number set to 1302791187 [ 789.644526][T13758] tipc: Disabling bearer [ 790.140973][T13788] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2160'. [ 790.710920][T11859] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 790.853315][T10432] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 790.874949][T11859] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 790.928777][T11859] usb 3-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 790.970395][T11859] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 790.993862][T10432] usb 1-1: device descriptor read/64, error -71 [ 791.000766][T11859] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 791.022488][T11859] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.035888][T11859] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 791.045277][T11859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.205229][T13796] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 791.227357][T11859] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 791.325184][T10432] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 791.779437][T11859] usb 3-1: invalid MIDI in EP 0 [ 791.867041][T10432] usb 1-1: device descriptor read/64, error -71 [ 791.982794][T10432] usb usb1-port1: attempt power cycle [ 792.008195][T11859] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 792.070026][T11859] usb 3-1: USB disconnect, device number 59 [ 792.382391][T10432] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 792.403090][T10432] usb 1-1: device descriptor read/8, error -71 [ 793.740650][T13830] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2173'. [ 793.878097][T13831] tipc: Enabled bearer , priority 0 [ 793.900719][T13843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2177'. [ 794.024872][T13831] tipc: Resetting bearer [ 794.032121][T13827] tipc: Disabling bearer [ 795.176835][ T1590] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 795.840926][ T1590] usb 3-1: not running at top speed; connect to a high speed hub [ 795.860817][ T1590] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 795.985238][ T1590] usb 3-1: config 1 has no interface number 1 [ 796.038858][ T1590] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 796.204893][ T1590] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 796.225210][ T1590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.258708][ T1590] usb 3-1: Product: syz [ 796.270776][ T1590] usb 3-1: Manufacturer: syz [ 796.281023][ T1590] usb 3-1: SerialNumber: syz [ 796.309034][T13871] binder: 13870:13871 ioctl c0306201 200000000440 returned -11 [ 796.569616][T10432] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 796.590823][ T1590] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 796.615288][ T1590] usb 3-1: failed to enable PITCH for EP 0x82 [ 797.322405][T10432] usb 4-1: Using ep0 maxpacket: 8 [ 797.382388][T11859] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 797.401855][T10432] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 797.420285][ T1590] usb 3-1: USB disconnect, device number 60 [ 797.426862][T10432] usb 4-1: config 0 has no interface number 0 [ 797.473830][T10432] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 797.492326][T10432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.500403][T10432] usb 4-1: Product: syz [ 797.510582][T10432] usb 4-1: Manufacturer: syz [ 797.520724][T10432] usb 4-1: SerialNumber: syz [ 797.539520][T10432] usb 4-1: config 0 descriptor?? [ 797.576872][T12295] udevd[12295]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.623008][T11859] usb 5-1: Using ep0 maxpacket: 8 [ 797.629725][T11859] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 797.648857][T11859] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.661015][T11859] usb 5-1: config 0 has no interface number 0 [ 797.667865][T11859] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 797.689124][T11859] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 797.698842][ T5931] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 797.711676][T11859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.720432][T11859] usb 5-1: Product: syz [ 797.724309][T10432] msi2500 4-1:0.246: Registered as swradio24 [ 797.742048][T10432] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 797.746251][T11859] usb 5-1: Manufacturer: syz [ 797.776812][T11859] usb 5-1: SerialNumber: syz [ 797.779036][T10432] usb 4-1: USB disconnect, device number 48 [ 797.826216][T11859] usb 5-1: config 0 descriptor?? [ 797.849166][T11859] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 799.059465][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 800.383001][T10432] usb 5-1: USB disconnect, device number 68 [ 800.416352][T13913] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 800.447343][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short [ 800.492897][T13914] sch_tbf: burst 14 is lower than device lo mtu (65550) ! [ 800.507804][ T5931] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 800.522451][ T5931] usb 1-1: can't read configurations, error -71 [ 800.785519][T13923] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 802.227123][T13943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 802.963089][ T5931] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 803.142854][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 803.150615][ T5931] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 803.158913][ T5931] usb 5-1: config 0 has no interface number 0 [ 803.167045][ T5931] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 803.178143][ T5931] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 803.189137][ T5931] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 803.206128][ T5931] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 803.227815][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.246717][ T5931] usb 5-1: Product: syz [ 803.255322][ T5931] usb 5-1: Manufacturer: syz [ 803.265544][ T5931] usb 5-1: SerialNumber: syz [ 803.279560][ T5931] usb 5-1: config 0 descriptor?? [ 803.299894][ T5931] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 803.342894][ T1224] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 804.072342][ T5931] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 804.991909][ T5931] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 805.340090][ T5931] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 805.418736][ T5931] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 805.428220][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.445016][T13967] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 805.466236][ T5931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 806.489643][ T5931] usb 5-1: USB disconnect, device number 69 [ 806.542580][ T1224] usb 3-1: unable to get BOS descriptor or descriptor too short [ 806.573636][ T1224] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 806.589717][ T1224] usb 3-1: can't read configurations, error -71 [ 806.654754][T13987] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 806.665656][T13983] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[13983] [ 806.712391][ T5916] usb 1-1: USB disconnect, device number 67 [ 806.719294][T13990] syzkaller1: entered promiscuous mode [ 806.740926][T13990] syzkaller1: entered allmulticast mode [ 806.790968][T13992] befs: (nbd3): No write support. Marking filesystem read-only [ 806.799870][T13992] befs: (nbd3): unable to read superblock [ 807.507220][T14001] binder: 13996:14001 ioctl c0306201 0 returned -14 [ 808.785061][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.791766][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.481738][T14036] binder: BINDER_SET_CONTEXT_MGR already set [ 810.491205][T14036] binder: 14031:14036 ioctl 4018620d 2000000002c0 returned -16 [ 810.523670][T14043] block nbd4: not configured, cannot reconfigure [ 810.667182][T14036] binder: 14031:14036 ioctl c0306201 200000000440 returned -11 [ 811.482373][ T1224] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 811.759772][ T1224] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 811.788445][ T1224] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 811.802473][ T5999] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 811.831779][ T1224] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 811.872407][ T1224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.974569][ T5999] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 811.976796][T14049] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 811.983149][ T5999] usb 2-1: config 8 has no interface number 0 [ 811.996240][ T5999] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 812.009442][ T1224] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 812.070269][T14059] mmap: syz.4.2234 (14059) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 812.139398][ T5999] usb 2-1: config 8 interface 177 has no altsetting 0 [ 812.155278][ T5999] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 812.248545][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.773123][T14058] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 812.840634][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 812.849620][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 812.858541][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 812.867461][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 812.876350][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 812.885223][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 812.894545][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 812.903462][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 812.912367][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 812.921230][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 812.986212][ T5999] usb 2-1: string descriptor 0 read error: -71 [ 813.000154][ C1] ir_toy 2-1:8.177: out urb status: -71 [ 813.506243][ T5999] ir_toy 2-1:8.177: could not write reset command: -110 [ 813.518071][ T5999] ir_toy 2-1:8.177: probe with driver ir_toy failed with error -110 [ 813.554975][ T5999] usb 2-1: USB disconnect, device number 50 [ 813.717278][ T5916] usb 4-1: USB disconnect, device number 49 [ 814.523198][T14072] CUSE: info not properly terminated [ 814.537895][T14072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.188307][ T1224] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 818.360621][ T1224] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 818.842583][ T1224] usb 3-1: config 8 has no interface number 0 [ 818.971690][ T1224] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 819.037740][ T1224] usb 3-1: config 8 interface 177 has no altsetting 0 [ 819.058055][ T1224] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 819.193139][ T1224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.215507][T14119] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 820.234962][ T1224] usb 3-1: string descriptor 0 read error: -71 [ 820.243902][ C0] ir_toy 3-1:8.177: out urb status: -71 [ 821.746040][ T1224] ir_toy 3-1:8.177: could not write reset command: -110 [ 821.783859][ T1224] ir_toy 3-1:8.177: probe with driver ir_toy failed with error -110 [ 821.803851][ T1224] usb 3-1: USB disconnect, device number 63 [ 823.127161][T14167] ubi: mtd0 is already attached to ubi31 [ 824.794306][T14192] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 825.732442][T14204] veth0_to_bond: entered allmulticast mode [ 826.956149][T14222] __nla_validate_parse: 42 callbacks suppressed [ 826.956162][T14222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2279'. [ 826.971965][T14222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2279'. [ 826.983320][T14222] ubi: mtd0 is already attached to ubi31 [ 830.643255][ T1224] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 830.835579][ T1224] usb 5-1: device descriptor read/64, error -71 [ 831.122477][ T1224] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 832.332688][ T1224] usb 5-1: device descriptor read/64, error -71 [ 832.543643][ T1224] usb usb5-port1: attempt power cycle [ 832.711861][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 832.922687][ T1224] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 832.942021][T14304] syzkaller1: entered promiscuous mode [ 832.951910][ T1224] usb 5-1: device descriptor read/8, error -71 [ 832.976959][T14304] syzkaller1: entered allmulticast mode [ 833.212437][ T1224] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 833.299117][ T1224] usb 5-1: device descriptor read/8, error -71 [ 833.312354][T10432] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 833.475475][ T1224] usb usb5-port1: unable to enumerate USB device [ 834.046150][T10432] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 834.065925][T10432] usb 4-1: config 8 has no interface number 0 [ 834.079213][T10432] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 834.107679][T10432] usb 4-1: config 8 interface 177 has no altsetting 0 [ 834.120535][T10432] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 834.139766][T10432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.168521][T14306] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 834.688161][T10432] usb 4-1: string descriptor 0 read error: -71 [ 835.193793][ C1] ir_toy 4-1:8.177: out urb status: -71 [ 835.880215][T10432] ir_toy 4-1:8.177: could not write reset command: -110 [ 835.895650][T10432] ir_toy 4-1:8.177: probe with driver ir_toy failed with error -110 [ 836.689562][T10432] usb 4-1: USB disconnect, device number 50 [ 839.042353][T10432] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 839.219313][T14388] sch_tbf: burst 14 is lower than device lo mtu (65550) ! [ 839.245800][T10432] usb 4-1: device descriptor read/64, error -71 [ 839.512635][T10432] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 839.702406][T10432] usb 4-1: device descriptor read/64, error -71 [ 840.329564][T10432] usb usb4-port1: attempt power cycle [ 841.832500][ T1224] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 842.395846][ T1224] usb 1-1: Using ep0 maxpacket: 16 [ 842.422536][ T1224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.477506][T14412] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 842.483447][ T1224] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 842.522497][ T1224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.540618][ T1224] usb 1-1: config 0 descriptor?? [ 842.665536][ T1590] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 842.932367][ T1590] usb 4-1: Using ep0 maxpacket: 16 [ 842.938447][ T1590] usb 4-1: no configurations [ 842.943090][ T1590] usb 4-1: can't read configurations, error -22 [ 843.081210][ T1224] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 843.092383][ T1590] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 843.284169][ T1224] usb 1-1: USB disconnect, device number 68 [ 843.292365][ T1590] usb 4-1: Using ep0 maxpacket: 16 [ 843.309393][ T1590] usb 4-1: no configurations [ 843.320191][ T1590] usb 4-1: can't read configurations, error -22 [ 843.347162][ T1590] usb usb4-port1: attempt power cycle [ 843.772538][ T1590] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 843.803532][ T1590] usb 4-1: Using ep0 maxpacket: 16 [ 843.818306][ T1590] usb 4-1: no configurations [ 843.829358][ T1590] usb 4-1: can't read configurations, error -22 [ 844.054664][ T1590] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 844.083310][ T1590] usb 4-1: Using ep0 maxpacket: 16 [ 844.088955][ T1590] usb 4-1: no configurations [ 844.096599][ T1590] usb 4-1: can't read configurations, error -22 [ 844.807127][ T1590] usb usb4-port1: unable to enumerate USB device [ 845.282485][ T5999] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 845.505869][ T5999] usb 3-1: Using ep0 maxpacket: 16 [ 845.542067][ T5999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.561827][ T5999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.585812][ T1224] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 845.587550][ T5999] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 845.608443][ T5999] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 845.618165][ T1224] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 845.651209][ T5999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.689944][ T5999] usb 3-1: config 0 descriptor?? [ 846.563719][ T5999] appleir 0003:05AC:8241.000D: unknown main item tag 0x0 [ 846.570818][ T5999] appleir 0003:05AC:8241.000D: unknown main item tag 0x0 [ 846.589509][ T5999] appleir 0003:05AC:8241.000D: unknown main item tag 0x0 [ 846.597477][ T5999] appleir 0003:05AC:8241.000D: unknown main item tag 0x0 [ 846.613215][ T5999] appleir 0003:05AC:8241.000D: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 846.789943][ T5999] usb 3-1: USB disconnect, device number 64 [ 846.974601][T14471] fido_id[14471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 848.352812][ T1224] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 848.520063][T14492] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 848.545190][ T1224] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 848.566454][ T1224] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.305765][ T9576] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 849.314332][ T1224] usb 3-1: config 0 has no interface number 0 [ 849.323438][ T1224] usb 3-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 849.332639][ T1224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.343346][ T1224] usb 3-1: Product: syz [ 849.347523][ T1224] usb 3-1: Manufacturer: syz [ 849.352213][ T1224] usb 3-1: SerialNumber: syz [ 849.364341][ T1224] usb 3-1: config 0 descriptor?? [ 849.376352][ T1224] cdc_acm 3-1:0.123: skipping garbage [ 849.675174][ T9576] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 849.692093][T14508] ptrace attach of "./syz-executor exec"[5858] was attempted by "./syz-executor exec"[14508] [ 849.756810][ T1224] usb 3-1: USB disconnect, device number 65 [ 849.906353][T14508] befs: (nbd0): No write support. Marking filesystem read-only [ 849.914900][T14508] befs: (nbd0): unable to read superblock [ 850.056988][ T9576] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 850.088437][ T9576] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 850.105187][ T9576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.448814][T14496] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 850.952997][ T9576] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 851.071763][T14524] input: syz0 as /devices/virtual/input/input53 [ 851.656189][T10432] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 851.843824][T10432] usb 4-1: Using ep0 maxpacket: 16 [ 851.851082][T10432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.866158][T10432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.876260][T10432] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 851.893141][T10432] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 851.903293][T10432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.971099][T10432] usb 4-1: config 0 descriptor?? [ 852.080600][ T1224] usb 2-1: USB disconnect, device number 51 [ 853.112143][T10432] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 853.142447][T10432] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 853.149520][T10432] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 853.193762][T10432] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 853.391030][T14554] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 853.422539][T10432] appleir 0003:05AC:8241.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 853.772796][T10904] Bluetooth: hci0: command 0x0406 tx timeout [ 853.781098][ T1590] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 853.810645][ T1590] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 854.989104][T14603] loop5: detected capacity change from 0 to 7 [ 855.511341][T14603] Dev loop5: unable to read RDB block 7 [ 855.517178][T14603] loop5: unable to read partition table [ 855.532490][T14603] loop5: partition table beyond EOD, truncated [ 855.548459][T14603] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 855.694043][T14618] ptrace attach of "./syz-executor exec"[5863] was attempted by "./syz-executor exec"[14618] [ 855.782689][T14620] befs: (nbd2): No write support. Marking filesystem read-only [ 855.794519][T14620] befs: (nbd2): unable to read superblock [ 856.100187][ T1590] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 856.107055][T10904] Bluetooth: hci1: command 0x0406 tx timeout [ 857.226792][ T1590] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 859.292652][T10904] Bluetooth: hci2: command 0x0406 tx timeout [ 859.298760][ T1590] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 859.309897][ T1590] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 861.373208][T10904] Bluetooth: hci3: command 0x0405 tx timeout [ 861.378811][ T1590] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 861.385500][ T1590] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 863.454156][T10904] Bluetooth: hci4: command 0x0406 tx timeout [ 863.461278][ T1590] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 863.470603][ T1590] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 870.016670][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.023020][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.456131][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.462502][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.895912][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.902232][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1011.452537][ T31] INFO: task kworker/1:2:1590 blocked for more than 143 seconds. [ 1011.460340][ T31] Not tainted syzkaller #0 [ 1011.465340][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1011.474087][ T31] task:kworker/1:2 state:D stack:21784 pid:1590 tgid:1590 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1011.487000][ T31] Workqueue: events rfkill_op_handler [ 1011.492779][ T31] Call Trace: [ 1011.496063][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1011.498977][ T31] __schedule+0x1798/0x4cc0 [ 1011.503549][ T31] ? __pfx___schedule+0x10/0x10 [ 1011.508529][ T31] ? schedule+0x91/0x360 [ 1011.512840][ T31] schedule+0x165/0x360 [ 1011.517003][ T31] schedule_preempt_disabled+0x13/0x30 [ 1011.522531][ T31] __mutex_lock+0x7e6/0x1350 [ 1011.527146][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1011.542543][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1011.547864][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1011.559706][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1011.565175][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1011.571075][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1011.592411][ T31] ? kobject_uevent_env+0x36b/0x8c0 [ 1011.597642][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1011.606729][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1011.611864][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1011.617954][ T31] rfkill_set_block+0x1d2/0x440 [ 1011.622881][ T31] rfkill_epo+0x7e/0x180 [ 1011.627126][ T31] rfkill_op_handler+0x84/0x240 [ 1011.631958][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1011.637752][ T31] process_scheduled_works+0xae1/0x17b0 [ 1011.643355][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1011.649330][ T31] worker_thread+0x8a0/0xda0 [ 1011.653993][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1011.660326][ T31] ? __kthread_parkme+0x7b/0x200 [ 1011.665310][ T31] kthread+0x711/0x8a0 [ 1011.669379][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1011.674562][ T31] ? __pfx_kthread+0x10/0x10 [ 1011.679154][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1011.684387][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1011.689592][ T31] ? __pfx_kthread+0x10/0x10 [ 1011.694374][ T31] ret_from_fork+0x4bc/0x870 [ 1011.698980][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1011.704144][ T31] ? __switch_to_asm+0x39/0x70 [ 1011.708906][ T31] ? __switch_to_asm+0x33/0x70 [ 1011.713770][ T31] ? __pfx_kthread+0x10/0x10 [ 1011.718393][ T31] ret_from_fork_asm+0x1a/0x30 [ 1011.723230][ T31] [ 1011.726403][ T31] INFO: task kworker/1:7:5999 blocked for more than 143 seconds. [ 1011.734166][ T31] Not tainted syzkaller #0 [ 1011.739085][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1011.752121][ T31] task:kworker/1:7 state:D stack:21800 pid:5999 tgid:5999 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1011.764178][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1011.770869][ T31] Call Trace: [ 1011.774196][ T31] [ 1011.777125][ T31] __schedule+0x1798/0x4cc0 [ 1011.781618][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1011.788027][ T31] ? __pfx___schedule+0x10/0x10 [ 1011.793011][ T31] ? schedule+0x91/0x360 [ 1011.797236][ T31] schedule+0x165/0x360 [ 1011.801372][ T31] schedule_preempt_disabled+0x13/0x30 [ 1011.806854][ T31] __mutex_lock+0x7e6/0x1350 [ 1011.811448][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1011.816237][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1011.822544][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1011.827575][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1011.833350][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1011.839074][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1011.845248][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1011.850985][ T31] process_scheduled_works+0xae1/0x17b0 [ 1011.856644][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1011.862699][ T31] worker_thread+0x8a0/0xda0 [ 1011.867313][ T31] kthread+0x711/0x8a0 [ 1011.871360][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1011.876502][ T31] ? __pfx_kthread+0x10/0x10 [ 1011.881090][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1011.886348][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1011.891547][ T31] ? __pfx_kthread+0x10/0x10 [ 1011.896177][ T31] ret_from_fork+0x4bc/0x870 [ 1011.900771][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1011.905923][ T31] ? __switch_to_asm+0x39/0x70 [ 1011.910685][ T31] ? __switch_to_asm+0x33/0x70 [ 1011.915465][ T31] ? __pfx_kthread+0x10/0x10 [ 1011.920052][ T31] ret_from_fork_asm+0x1a/0x30 [ 1011.924861][ T31] [ 1011.927895][ T31] INFO: task syz.4.2349:14511 blocked for more than 143 seconds. [ 1011.935816][ T31] Not tainted syzkaller #0 [ 1011.940746][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1011.949457][ T31] task:syz.4.2349 state:D stack:25608 pid:14511 tgid:14511 ppid:5867 task_flags:0x400040 flags:0x00080003 [ 1011.961394][ T31] Call Trace: [ 1011.964707][ T31] [ 1011.967638][ T31] __schedule+0x1798/0x4cc0 [ 1011.972140][ T31] ? __pfx___schedule+0x10/0x10 [ 1011.977060][ T31] ? schedule+0x91/0x360 [ 1011.981312][ T31] schedule+0x165/0x360 [ 1011.985543][ T31] schedule_preempt_disabled+0x13/0x30 [ 1011.991014][ T31] __mutex_lock+0x7e6/0x1350 [ 1011.995655][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1012.000413][ T31] ? rfkill_unregister+0xc8/0x220 [ 1012.005505][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1012.010547][ T31] ? __pfx_device_del+0x10/0x10 [ 1012.015581][ T31] rfkill_unregister+0xc8/0x220 [ 1012.020531][ T31] nfc_unregister_device+0x96/0x2a0 [ 1012.025786][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1012.031512][ T31] virtual_ncidev_close+0x56/0x90 [ 1012.036570][ T31] __fput+0x44c/0xa70 [ 1012.040562][ T31] task_work_run+0x1d4/0x260 [ 1012.045191][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1012.050309][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 1012.055807][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 1012.061094][ T31] do_syscall_64+0x2bd/0xfa0 [ 1012.065738][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.071805][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1012.078033][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1012.082752][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.088629][ T31] RIP: 0033:0x7fd58718eec9 [ 1012.093090][ T31] RSP: 002b:00007ffe964c8238 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1012.101503][ T31] RAX: 0000000000000000 RBX: 00007fd5873e7da0 RCX: 00007fd58718eec9 [ 1012.109559][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1012.117588][ T31] RBP: 00007fd5873e7da0 R08: 0000000000000df4 R09: 0000000f964c852f [ 1012.125680][ T31] R10: 00007fd5873e7cb0 R11: 0000000000000246 R12: 00000000000cfd5b [ 1012.133779][ T31] R13: 00007ffe964c8330 R14: ffffffffffffffff R15: 00007ffe964c8350 [ 1012.141763][ T31] [ 1012.144842][ T31] INFO: task syz.3.2350:14520 blocked for more than 144 seconds. [ 1012.152774][ T31] Not tainted syzkaller #0 [ 1012.157706][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1012.166409][ T31] task:syz.3.2350 state:D stack:26280 pid:14520 tgid:14519 ppid:5859 task_flags:0x400140 flags:0x00080002 [ 1012.178371][ T31] Call Trace: [ 1012.181645][ T31] [ 1012.184602][ T31] __schedule+0x1798/0x4cc0 [ 1012.189122][ T31] ? __pfx___schedule+0x10/0x10 [ 1012.194036][ T31] ? schedule+0x91/0x360 [ 1012.198278][ T31] schedule+0x165/0x360 [ 1012.202562][ T31] schedule_preempt_disabled+0x13/0x30 [ 1012.208021][ T31] __mutex_lock+0x7e6/0x1350 [ 1012.212639][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1012.217402][ T31] ? rfkill_register+0x37/0x8e0 [ 1012.222234][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1012.227308][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1012.232727][ T31] ? device_initialize+0x24b/0x440 [ 1012.237851][ T31] rfkill_register+0x37/0x8e0 [ 1012.242583][ T31] nfc_register_device+0x14a/0x320 [ 1012.247721][ T31] nci_register_device+0x87f/0x9d0 [ 1012.253323][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 1012.258974][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1012.264453][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1012.269827][ T31] virtual_ncidev_open+0x129/0x1a0 [ 1012.274976][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1012.280610][ T31] misc_open+0x2d5/0x350 [ 1012.284879][ T31] chrdev_open+0x4cc/0x5e0 [ 1012.289300][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1012.294278][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1012.300611][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1012.305559][ T31] do_dentry_open+0x953/0x13f0 [ 1012.310357][ T31] vfs_open+0x3b/0x340 [ 1012.314471][ T31] ? path_openat+0x2ecd/0x3830 [ 1012.319242][ T31] path_openat+0x2ee5/0x3830 [ 1012.323902][ T31] ? __pfx_path_openat+0x10/0x10 [ 1012.328849][ T31] do_filp_open+0x1fa/0x410 [ 1012.333954][ T31] ? __lock_acquire+0xab9/0xd20 [ 1012.338826][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1012.343915][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1012.348767][ T31] ? alloc_fd+0x64c/0x6c0 [ 1012.353139][ T31] do_sys_openat2+0x121/0x1c0 [ 1012.357821][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1012.363054][ T31] ? rcu_is_watching+0x15/0xb0 [ 1012.367835][ T31] __x64_sys_openat+0x138/0x170 [ 1012.372919][ T31] do_syscall_64+0xfa/0xfa0 [ 1012.377430][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.383527][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1012.389155][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1012.393970][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.399886][ T31] RIP: 0033:0x7fb75cf8eec9 [ 1012.404435][ T31] RSP: 002b:00007fb75dd43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1012.412880][ T31] RAX: ffffffffffffffda RBX: 00007fb75d1e5fa0 RCX: 00007fb75cf8eec9 [ 1012.420833][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1012.428833][ T31] RBP: 00007fb75d011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1012.436837][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.444864][ T31] R13: 00007fb75d1e6038 R14: 00007fb75d1e5fa0 R15: 00007ffc2db2f4d8 [ 1012.452866][ T31] [ 1012.455881][ T31] INFO: task syz.0.2360:14581 blocked for more than 144 seconds. [ 1012.463622][ T31] Not tainted syzkaller #0 [ 1012.468549][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1012.477298][ T31] task:syz.0.2360 state:D stack:28296 pid:14581 tgid:14580 ppid:5858 task_flags:0x400040 flags:0x00080002 [ 1012.489426][ T31] Call Trace: [ 1012.496160][ T31] [ 1012.499107][ T31] __schedule+0x1798/0x4cc0 [ 1012.503709][ T31] ? security_file_open+0xb1/0x270 [ 1012.508838][ T31] ? __pfx___schedule+0x10/0x10 [ 1012.513766][ T31] ? schedule+0x91/0x360 [ 1012.518038][ T31] schedule+0x165/0x360 [ 1012.522197][ T31] schedule_preempt_disabled+0x13/0x30 [ 1012.527720][ T31] __mutex_lock+0x7e6/0x1350 [ 1012.532354][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1012.537127][ T31] ? misc_open+0x51/0x350 [ 1012.541453][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1012.546535][ T31] misc_open+0x51/0x350 [ 1012.550699][ T31] chrdev_open+0x4cc/0x5e0 [ 1012.555141][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1012.560086][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1012.566449][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1012.571383][ T31] do_dentry_open+0x953/0x13f0 [ 1012.576220][ T31] vfs_open+0x3b/0x340 [ 1012.580316][ T31] ? path_openat+0x2ecd/0x3830 [ 1012.585183][ T31] path_openat+0x2ee5/0x3830 [ 1012.589798][ T31] ? __pfx_path_openat+0x10/0x10 [ 1012.595035][ T31] do_filp_open+0x1fa/0x410 [ 1012.599526][ T31] ? __lock_acquire+0xab9/0xd20 [ 1012.604421][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1012.609465][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1012.614350][ T31] ? alloc_fd+0x64c/0x6c0 [ 1012.618695][ T31] do_sys_openat2+0x121/0x1c0 [ 1012.623404][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1012.628615][ T31] ? exc_page_fault+0x82/0x100 [ 1012.633428][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1012.638716][ T31] __x64_sys_openat+0x138/0x170 [ 1012.643653][ T31] do_syscall_64+0xfa/0xfa0 [ 1012.648170][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1012.653622][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.659726][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1012.664458][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.670353][ T31] RIP: 0033:0x7fe9dfb8eec9 [ 1012.674830][ T31] RSP: 002b:00007fe9e09db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1012.683361][ T31] RAX: ffffffffffffffda RBX: 00007fe9dfde5fa0 RCX: 00007fe9dfb8eec9 [ 1012.691346][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1012.699410][ T31] RBP: 00007fe9dfc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1012.707477][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.715559][ T31] R13: 00007fe9dfde6038 R14: 00007fe9dfde5fa0 R15: 00007ffd3ee0d6d8 [ 1012.723650][ T31] [ 1012.726735][ T31] INFO: task syz.0.2360:14586 blocked for more than 144 seconds. [ 1012.734663][ T31] Not tainted syzkaller #0 [ 1012.739600][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1012.748342][ T31] task:syz.0.2360 state:D stack:27840 pid:14586 tgid:14580 ppid:5858 task_flags:0x400040 flags:0x00080002 [ 1012.761060][ T31] Call Trace: [ 1012.764476][ T31] [ 1012.767412][ T31] __schedule+0x1798/0x4cc0 [ 1012.771927][ T31] ? security_file_open+0xb1/0x270 [ 1012.777098][ T31] ? __pfx___schedule+0x10/0x10 [ 1012.781959][ T31] ? schedule+0x91/0x360 [ 1012.786228][ T31] schedule+0x165/0x360 [ 1012.790393][ T31] schedule_preempt_disabled+0x13/0x30 [ 1012.795947][ T31] __mutex_lock+0x7e6/0x1350 [ 1012.800544][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1012.805337][ T31] ? misc_open+0x51/0x350 [ 1012.809668][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1012.814959][ T31] misc_open+0x51/0x350 [ 1012.819125][ T31] chrdev_open+0x4cc/0x5e0 [ 1012.823671][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1012.828612][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1012.835022][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1012.840096][ T31] do_dentry_open+0x953/0x13f0 [ 1012.844935][ T31] vfs_open+0x3b/0x340 [ 1012.849004][ T31] ? path_openat+0x2ecd/0x3830 [ 1012.853801][ T31] path_openat+0x2ee5/0x3830 [ 1012.858436][ T31] ? __pfx_path_openat+0x10/0x10 [ 1012.863470][ T31] do_filp_open+0x1fa/0x410 [ 1012.867974][ T31] ? __lock_acquire+0xab9/0xd20 [ 1012.872899][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1012.877933][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1012.882816][ T31] ? alloc_fd+0x64c/0x6c0 [ 1012.887153][ T31] do_sys_openat2+0x121/0x1c0 [ 1012.891840][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1012.897082][ T31] ? rcu_is_watching+0x15/0xb0 [ 1012.901846][ T31] __x64_sys_openat+0x138/0x170 [ 1012.906729][ T31] do_syscall_64+0xfa/0xfa0 [ 1012.911239][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1012.916474][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.922586][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1012.927265][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.933356][ T31] RIP: 0033:0x7fe9dfb8eec9 [ 1012.937773][ T31] RSP: 002b:00007fe9e09ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1012.946246][ T31] RAX: ffffffffffffffda RBX: 00007fe9dfde6090 RCX: 00007fe9dfb8eec9 [ 1012.954255][ T31] RDX: 0000000000000102 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1012.962220][ T31] RBP: 00007fe9dfc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1012.970225][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.978372][ T31] R13: 00007fe9dfde6128 R14: 00007fe9dfde6090 R15: 00007ffd3ee0d6d8 [ 1012.986428][ T31] [ 1012.989464][ T31] INFO: task syz.0.2360:14588 blocked for more than 144 seconds. [ 1012.997266][ T31] Not tainted syzkaller #0 [ 1013.002197][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1013.010913][ T31] task:syz.0.2360 state:D stack:26824 pid:14588 tgid:14580 ppid:5858 task_flags:0x400040 flags:0x00080002 [ 1013.022853][ T31] Call Trace: [ 1013.026118][ T31] [ 1013.029034][ T31] __schedule+0x1798/0x4cc0 [ 1013.033574][ T31] ? security_file_open+0xb1/0x270 [ 1013.038696][ T31] ? __pfx___schedule+0x10/0x10 [ 1013.043755][ T31] ? schedule+0x91/0x360 [ 1013.047995][ T31] schedule+0x165/0x360 [ 1013.052130][ T31] schedule_preempt_disabled+0x13/0x30 [ 1013.057838][ T31] __mutex_lock+0x7e6/0x1350 [ 1013.062491][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1013.067244][ T31] ? misc_open+0x51/0x350 [ 1013.071555][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1013.076630][ T31] misc_open+0x51/0x350 [ 1013.080787][ T31] chrdev_open+0x4cc/0x5e0 [ 1013.085243][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1013.090181][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1013.096565][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1013.101504][ T31] do_dentry_open+0x953/0x13f0 [ 1013.106321][ T31] vfs_open+0x3b/0x340 [ 1013.110391][ T31] ? path_openat+0x2ecd/0x3830 [ 1013.115217][ T31] path_openat+0x2ee5/0x3830 [ 1013.119844][ T31] ? __pfx_path_openat+0x10/0x10 [ 1013.124837][ T31] do_filp_open+0x1fa/0x410 [ 1013.129338][ T31] ? __lock_acquire+0xab9/0xd20 [ 1013.134251][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1013.139285][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1013.144146][ T31] ? alloc_fd+0x64c/0x6c0 [ 1013.148481][ T31] do_sys_openat2+0x121/0x1c0 [ 1013.153398][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1013.158606][ T31] ? rcu_is_watching+0x15/0xb0 [ 1013.163400][ T31] __x64_sys_openat+0x138/0x170 [ 1013.168256][ T31] do_syscall_64+0xfa/0xfa0 [ 1013.172803][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1013.178001][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.184083][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1013.188759][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.194681][ T31] RIP: 0033:0x7fe9dfb8eec9 [ 1013.199092][ T31] RSP: 002b:00007fe9e0999038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1013.207531][ T31] RAX: ffffffffffffffda RBX: 00007fe9dfde6180 RCX: 00007fe9dfb8eec9 [ 1013.215535][ T31] RDX: 0000000000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1013.223518][ T31] RBP: 00007fe9dfc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1013.231484][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.239468][ T31] R13: 00007fe9dfde6218 R14: 00007fe9dfde6180 R15: 00007ffd3ee0d6d8 [ 1013.247533][ T31] [ 1013.250550][ T31] INFO: task syz.2.2362:14613 blocked for more than 145 seconds. [ 1013.258287][ T31] Not tainted syzkaller #0 [ 1013.263429][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1013.272097][ T31] task:syz.2.2362 state:D stack:28296 pid:14613 tgid:14612 ppid:5863 task_flags:0x400040 flags:0x00080002 [ 1013.284104][ T31] Call Trace: [ 1013.287390][ T31] [ 1013.290307][ T31] __schedule+0x1798/0x4cc0 [ 1013.295280][ T31] ? security_file_open+0xb1/0x270 [ 1013.300415][ T31] ? __pfx___schedule+0x10/0x10 [ 1013.305371][ T31] ? schedule+0x91/0x360 [ 1013.309617][ T31] schedule+0x165/0x360 [ 1013.313828][ T31] schedule_preempt_disabled+0x13/0x30 [ 1013.319290][ T31] __mutex_lock+0x7e6/0x1350 [ 1013.323919][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1013.328687][ T31] ? misc_open+0x51/0x350 [ 1013.333035][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1013.338072][ T31] misc_open+0x51/0x350 [ 1013.342210][ T31] chrdev_open+0x4cc/0x5e0 [ 1013.346659][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1013.351602][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1013.357984][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1013.362957][ T31] do_dentry_open+0x953/0x13f0 [ 1013.367721][ T31] vfs_open+0x3b/0x340 [ 1013.371770][ T31] ? path_openat+0x2ecd/0x3830 [ 1013.378582][ T31] path_openat+0x2ee5/0x3830 [ 1013.383282][ T31] ? __pfx_path_openat+0x10/0x10 [ 1013.388247][ T31] do_filp_open+0x1fa/0x410 [ 1013.392802][ T31] ? __lock_acquire+0xab9/0xd20 [ 1013.397664][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1013.402752][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1013.407602][ T31] ? alloc_fd+0x64c/0x6c0 [ 1013.411917][ T31] do_sys_openat2+0x121/0x1c0 [ 1013.416635][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1013.421836][ T31] ? exc_page_fault+0x82/0x100 [ 1013.426655][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1013.431947][ T31] __x64_sys_openat+0x138/0x170 [ 1013.436865][ T31] do_syscall_64+0xfa/0xfa0 [ 1013.441372][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1013.446601][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.452690][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1013.457356][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.463269][ T31] RIP: 0033:0x7fd9c1b8eec9 [ 1013.467681][ T31] RSP: 002b:00007fd9c2a4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1013.476133][ T31] RAX: ffffffffffffffda RBX: 00007fd9c1de5fa0 RCX: 00007fd9c1b8eec9 [ 1013.484257][ T31] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 1013.492238][ T31] RBP: 00007fd9c1c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1013.500238][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.508246][ T31] R13: 00007fd9c1de6038 R14: 00007fd9c1de5fa0 R15: 00007ffc8b6b75f8 [ 1013.516285][ T31] [ 1013.519300][ T31] INFO: task syz.1.2367:14665 blocked for more than 145 seconds. [ 1013.527083][ T31] Not tainted syzkaller #0 [ 1013.532017][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1013.540743][ T31] task:syz.1.2367 state:D stack:28296 pid:14665 tgid:14664 ppid:5868 task_flags:0x400040 flags:0x00080002 [ 1013.552737][ T31] Call Trace: [ 1013.556015][ T31] [ 1013.559056][ T31] __schedule+0x1798/0x4cc0 [ 1013.563643][ T31] ? __pfx___schedule+0x10/0x10 [ 1013.568504][ T31] ? schedule+0x91/0x360 [ 1013.572781][ T31] schedule+0x165/0x360 [ 1013.576939][ T31] schedule_preempt_disabled+0x13/0x30 [ 1013.582455][ T31] __mutex_lock+0x7e6/0x1350 [ 1013.587052][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1013.591797][ T31] ? misc_open+0x51/0x350 [ 1013.596336][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1013.601385][ T31] misc_open+0x51/0x350 [ 1013.605592][ T31] chrdev_open+0x4cc/0x5e0 [ 1013.610014][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1013.615000][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1013.621340][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1013.626321][ T31] do_dentry_open+0x953/0x13f0 [ 1013.631102][ T31] vfs_open+0x3b/0x340 [ 1013.635239][ T31] ? path_openat+0x2ecd/0x3830 [ 1013.640001][ T31] path_openat+0x2ee5/0x3830 [ 1013.644664][ T31] ? __pfx_path_openat+0x10/0x10 [ 1013.649614][ T31] do_filp_open+0x1fa/0x410 [ 1013.654149][ T31] ? __lock_acquire+0xab9/0xd20 [ 1013.659011][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1013.664068][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1013.668917][ T31] ? alloc_fd+0x64c/0x6c0 [ 1013.673292][ T31] do_sys_openat2+0x121/0x1c0 [ 1013.677988][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1013.683245][ T31] ? exc_page_fault+0x82/0x100 [ 1013.688009][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1013.693351][ T31] __x64_sys_openat+0x138/0x170 [ 1013.698209][ T31] do_syscall_64+0xfa/0xfa0 [ 1013.702913][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1013.708106][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.714209][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1013.718884][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.724788][ T31] RIP: 0033:0x7ff62358d710 [ 1013.729200][ T31] RSP: 002b:00007ff62440fef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1013.737628][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff62358d710 [ 1013.745631][ T31] RDX: 0000000000000002 RSI: 00007ff623611c6c RDI: 00000000ffffff9c [ 1013.753633][ T31] RBP: 00007ff623611c6c R08: 0000000000000000 R09: 0000000000000000 [ 1013.761600][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1013.769637][ T31] R13: 0000000000000024 R14: 0000200000000100 R15: 00007ffeb28777e8 [ 1013.777723][ T31] [ 1013.780736][ T31] INFO: task syz-executor:14669 blocked for more than 145 seconds. [ 1013.788686][ T31] Not tainted syzkaller #0 [ 1013.793638][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1013.802352][ T31] task:syz-executor state:D stack:28008 pid:14669 tgid:14669 ppid:1 task_flags:0x400040 flags:0x00080000 [ 1013.814487][ T31] Call Trace: [ 1013.817770][ T31] [ 1013.820701][ T31] __schedule+0x1798/0x4cc0 [ 1013.825265][ T31] ? security_file_open+0xb1/0x270 [ 1013.830405][ T31] ? __pfx___schedule+0x10/0x10 [ 1013.835487][ T31] ? schedule+0x91/0x360 [ 1013.839726][ T31] schedule+0x165/0x360 [ 1013.843912][ T31] schedule_preempt_disabled+0x13/0x30 [ 1013.849371][ T31] __mutex_lock+0x7e6/0x1350 [ 1013.854006][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1013.858772][ T31] ? misc_open+0x51/0x350 [ 1013.863159][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1013.868197][ T31] misc_open+0x51/0x350 [ 1013.872381][ T31] chrdev_open+0x4cc/0x5e0 [ 1013.876800][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1013.881724][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1013.888101][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1013.893072][ T31] do_dentry_open+0x953/0x13f0 [ 1013.897846][ T31] vfs_open+0x3b/0x340 [ 1013.901893][ T31] ? path_openat+0x2ecd/0x3830 [ 1013.906670][ T31] path_openat+0x2ee5/0x3830 [ 1013.911258][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1013.916741][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1013.922032][ T31] ? __pfx_path_openat+0x10/0x10 [ 1013.927197][ T31] ? __pfx___up_read+0x10/0x10 [ 1013.931962][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 1013.937525][ T31] do_filp_open+0x1fa/0x410 [ 1013.942365][ T31] ? __lock_acquire+0xab9/0xd20 [ 1013.947228][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1013.952245][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1013.957141][ T31] ? alloc_fd+0x64c/0x6c0 [ 1013.961479][ T31] do_sys_openat2+0x121/0x1c0 [ 1013.966223][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1013.971428][ T31] ? fd_install+0x97/0x540 [ 1013.975890][ T31] ? fd_install+0x30d/0x540 [ 1013.980394][ T31] __x64_sys_openat+0x138/0x170 [ 1013.985293][ T31] do_syscall_64+0xfa/0xfa0 [ 1013.989803][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1013.995041][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.001120][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1014.005849][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.011743][ T31] RIP: 0033:0x7f0ffcd8d691 [ 1014.016220][ T31] RSP: 002b:00007ffdc565ac30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1014.024744][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0ffcd8d691 [ 1014.032945][ T31] RDX: 0000000000000002 RSI: 00007f0ffce1299a RDI: 00000000ffffff9c [ 1014.040924][ T31] RBP: 00007f0ffce1299a R08: 0000000000000000 R09: 00007f0ffdb1d6c0 [ 1014.049039][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1014.057055][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1014.065094][ T31] [ 1014.068119][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1014.077197][ T31] INFO: task syz-executor:14670 blocked for more than 145 seconds. [ 1014.085154][ T31] Not tainted syzkaller #0 [ 1014.090114][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1014.098979][ T31] task:syz-executor state:D stack:27736 pid:14670 tgid:14670 ppid:1 task_flags:0x400040 flags:0x00080000 [ 1014.110923][ T31] Call Trace: [ 1014.114242][ T31] [ 1014.117180][ T31] __schedule+0x1798/0x4cc0 [ 1014.121669][ T31] ? security_file_open+0xb1/0x270 [ 1014.126870][ T31] ? __pfx___schedule+0x10/0x10 [ 1014.131725][ T31] ? schedule+0x91/0x360 [ 1014.136016][ T31] schedule+0x165/0x360 [ 1014.140169][ T31] schedule_preempt_disabled+0x13/0x30 [ 1014.145836][ T31] __mutex_lock+0x7e6/0x1350 [ 1014.150428][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1014.155223][ T31] ? misc_open+0x51/0x350 [ 1014.159554][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1014.164641][ T31] misc_open+0x51/0x350 [ 1014.168835][ T31] chrdev_open+0x4cc/0x5e0 [ 1014.173297][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1014.178238][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1014.184609][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1014.189546][ T31] do_dentry_open+0x953/0x13f0 [ 1014.194359][ T31] vfs_open+0x3b/0x340 [ 1014.198429][ T31] ? path_openat+0x2ecd/0x3830 [ 1014.203246][ T31] path_openat+0x2ee5/0x3830 [ 1014.207848][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1014.213361][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1014.218661][ T31] ? __pfx_path_openat+0x10/0x10 [ 1014.223642][ T31] ? __pfx___up_read+0x10/0x10 [ 1014.228403][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 1014.233741][ T31] do_filp_open+0x1fa/0x410 [ 1014.238242][ T31] ? __lock_acquire+0xab9/0xd20 [ 1014.243134][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1014.248165][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1014.253230][ T31] ? alloc_fd+0x64c/0x6c0 [ 1014.257570][ T31] do_sys_openat2+0x121/0x1c0 [ 1014.262234][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1014.267894][ T31] ? fd_install+0x97/0x540 [ 1014.272381][ T31] ? fd_install+0x30d/0x540 [ 1014.276885][ T31] __x64_sys_openat+0x138/0x170 [ 1014.281721][ T31] do_syscall_64+0xfa/0xfa0 [ 1014.286237][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1014.291433][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.297569][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1014.302254][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.308219][ T31] RIP: 0033:0x7fb6af78d691 [ 1014.312677][ T31] RSP: 002b:00007ffd8b5353a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1014.321092][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb6af78d691 [ 1014.329105][ T31] RDX: 0000000000000002 RSI: 00007fb6af81299a RDI: 00000000ffffff9c [ 1014.337222][ T31] RBP: 00007fb6af81299a R08: 0000000000000000 R09: 00007fb6b051d6c0 [ 1014.345513][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1014.353594][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1014.361585][ T31] [ 1014.364816][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1014.373914][ T31] [ 1014.373914][ T31] Showing all locks held in the system: [ 1014.381620][ T31] 1 lock held by khungtaskd/31: [ 1014.386493][ T31] #0: ffffffff8e33d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1014.396387][ T31] 4 locks held by kworker/1:2/1590: [ 1014.401560][ T31] #0: ffff88813fe59948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1014.412589][ T31] #1: ffffc90004c0fba0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1014.423592][ T31] #2: ffffffff8fa0f448 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 1014.433120][ T31] #3: ffff88807cc1b100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1014.442873][ T31] 4 locks held by kworker/u8:6/2987: [ 1014.448149][ T31] #0: ffff8880b863a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1014.458123][ T31] #1: ffff8880b8724048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1014.467032][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 1014.476205][ T31] #3: ffffffff99f735d8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 1014.486552][ T31] 2 locks held by getty/5621: [ 1014.491220][ T31] #0: ffff88814d8900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1014.501020][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1014.511177][ T31] 3 locks held by kworker/1:7/5999: [ 1014.516421][ T31] #0: ffff88813fe59948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1014.527457][ T31] #1: ffffc90004b0fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1014.541174][ T31] #2: ffffffff8fa0f448 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1014.552540][ T31] 2 locks held by syz.4.2349/14511: [ 1014.557728][ T31] #0: ffff88807cc1b100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1014.567510][ T31] #1: ffffffff8fa0f448 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1014.577774][ T31] 3 locks held by syz.3.2350/14520: [ 1014.583249][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.591710][ T31] #1: ffff8880311e8100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 1014.601305][ T31] #2: ffffffff8fa0f448 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1014.611271][ T31] 1 lock held by syz.0.2360/14581: [ 1014.616414][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.624890][ T31] 1 lock held by syz.0.2360/14586: [ 1014.629974][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.638453][ T31] 1 lock held by syz.0.2360/14588: [ 1014.643575][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.651996][ T31] 1 lock held by syz.2.2362/14613: [ 1014.657274][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.665774][ T31] 1 lock held by syz.1.2367/14665: [ 1014.670881][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.679389][ T31] 1 lock held by syz-executor/14669: [ 1014.684697][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.693331][ T31] 1 lock held by syz-executor/14670: [ 1014.698610][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.707106][ T31] 1 lock held by syz-executor/14672: [ 1014.712414][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.720830][ T31] 1 lock held by syz-executor/14674: [ 1014.726116][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.734598][ T31] 1 lock held by syz-executor/14678: [ 1014.739855][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.748364][ T31] 1 lock held by syz-executor/14682: [ 1014.753667][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.762091][ T31] 1 lock held by syz-executor/14684: [ 1014.767397][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.775906][ T31] 1 lock held by syz-executor/14686: [ 1014.781171][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.789662][ T31] 1 lock held by syz-executor/14688: [ 1014.794983][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.803685][ T31] 1 lock held by syz-executor/14690: [ 1014.808975][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.817580][ T31] 1 lock held by syz-executor/14696: [ 1014.822891][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.831316][ T31] 1 lock held by syz-executor/14698: [ 1014.836796][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.845313][ T31] 1 lock held by syz-executor/14700: [ 1014.850577][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.859068][ T31] 1 lock held by syz-executor/14702: [ 1014.864389][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.872841][ T31] 1 lock held by syz-executor/14704: [ 1014.878114][ T31] #0: ffffffff8ebcef08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1014.886600][ T31] [ 1014.888917][ T31] ============================================= [ 1014.888917][ T31] [ 1014.897372][ T31] NMI backtrace for cpu 0 [ 1014.897394][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1014.897411][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1014.897421][ T31] Call Trace: [ 1014.897427][ T31] [ 1014.897434][ T31] dump_stack_lvl+0x189/0x250 [ 1014.897457][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1014.897476][ T31] ? __pfx__printk+0x10/0x10 [ 1014.897505][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1014.897532][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1014.897558][ T31] ? __pfx__printk+0x10/0x10 [ 1014.897582][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1014.897606][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1014.897632][ T31] watchdog+0xf60/0xfa0 [ 1014.897658][ T31] ? watchdog+0x1e2/0xfa0 [ 1014.897685][ T31] kthread+0x711/0x8a0 [ 1014.897707][ T31] ? __pfx_watchdog+0x10/0x10 [ 1014.897728][ T31] ? __pfx_kthread+0x10/0x10 [ 1014.897748][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1014.897767][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1014.897785][ T31] ? __pfx_kthread+0x10/0x10 [ 1014.897803][ T31] ret_from_fork+0x4bc/0x870 [ 1014.897827][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1014.897856][ T31] ? __switch_to_asm+0x39/0x70 [ 1014.897873][ T31] ? __switch_to_asm+0x33/0x70 [ 1014.897890][ T31] ? __pfx_kthread+0x10/0x10 [ 1014.897909][ T31] ret_from_fork_asm+0x1a/0x30 [ 1014.897943][ T31] [ 1014.897950][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1015.042354][ C1] NMI backtrace for cpu 1 [ 1015.042368][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1015.042386][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1015.042397][ C1] RIP: 0010:__lock_acquire+0x29e/0xd20 [ 1015.042423][ C1] Code: 00 4c 89 6c 24 28 4a 8d 04 ad 00 00 00 00 4c 01 e8 89 f1 81 e1 ff 1f 00 00 ba 00 e0 ff ff 41 23 54 c7 20 09 ca 41 89 54 c7 20 <4d> 89 4c c7 08 49 89 5c c7 10 4c 8b 6c 24 68 4d 89 6c c7 18 65 8b [ 1015.042437][ C1] RSP: 0018:ffffc90000197a38 EFLAGS: 00000006 [ 1015.042451][ C1] RAX: 0000000000000000 RBX: ffff8880b863a018 RCX: 0000000000000042 [ 1015.042462][ C1] RDX: 0000000000022042 RSI: 0000000000000042 RDI: ffff88801d695ac0 [ 1015.042472][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81909a3d [ 1015.042482][ C1] R10: dffffc0000000000 R11: fffffbfff1f86aef R12: 0000000000000000 [ 1015.042493][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801d6965f0 [ 1015.042503][ C1] FS: 0000000000000000(0000) GS:ffff888125afc000(0000) knlGS:0000000000000000 [ 1015.042516][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1015.042526][ C1] CR2: 000055891e93c000 CR3: 000000000e138000 CR4: 00000000003526f0 [ 1015.042540][ C1] Call Trace: [ 1015.042547][ C1] [ 1015.042558][ C1] ? raw_spin_rq_lock_nested+0xad/0x140 [ 1015.042579][ C1] lock_acquire+0x120/0x360 [ 1015.042598][ C1] ? raw_spin_rq_lock_nested+0xad/0x140 [ 1015.042624][ C1] _raw_spin_lock_nested+0x32/0x50 [ 1015.042642][ C1] ? raw_spin_rq_lock_nested+0xad/0x140 [ 1015.042662][ C1] raw_spin_rq_lock_nested+0xad/0x140 [ 1015.042683][ C1] __schedule+0x36b/0x4cc0 [ 1015.042700][ C1] ? tick_nohz_next_event+0x47/0x3e0 [ 1015.042716][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 1015.042731][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1015.042748][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1015.042766][ C1] ? rcu_needs_cpu+0x6a/0xb0 [ 1015.042780][ C1] ? __pfx___schedule+0x10/0x10 [ 1015.042799][ C1] ? flush_smp_call_function_queue+0x116/0x250 [ 1015.042823][ C1] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 1015.042841][ C1] schedule_idle+0x52/0x90 [ 1015.042857][ C1] do_idle+0x4a7/0x510 [ 1015.042880][ C1] ? __pfx_do_idle+0x10/0x10 [ 1015.042907][ C1] cpu_startup_entry+0x44/0x60 [ 1015.042928][ C1] start_secondary+0x101/0x110 [ 1015.042947][ C1] common_startup_64+0x13e/0x147 [ 1015.042969][ C1] [ 1015.043402][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1015.284178][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1015.293274][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1015.304359][ T31] Call Trace: [ 1015.307636][ T31] [ 1015.310556][ T31] dump_stack_lvl+0x99/0x250 [ 1015.315140][ T31] ? __asan_memcpy+0x40/0x70 [ 1015.319715][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1015.324899][ T31] ? __pfx__printk+0x10/0x10 [ 1015.329483][ T31] vpanic+0x237/0x6d0 [ 1015.333450][ T31] ? __pfx_vpanic+0x10/0x10 [ 1015.337938][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1015.343391][ T31] panic+0xb9/0xc0 [ 1015.347101][ T31] ? __pfx_panic+0x10/0x10 [ 1015.351505][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1015.356870][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1015.363021][ T31] watchdog+0xf9f/0xfa0 [ 1015.367166][ T31] ? watchdog+0x1e2/0xfa0 [ 1015.371483][ T31] kthread+0x711/0x8a0 [ 1015.375540][ T31] ? __pfx_watchdog+0x10/0x10 [ 1015.380202][ T31] ? __pfx_kthread+0x10/0x10 [ 1015.384778][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1015.389959][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1015.395144][ T31] ? __pfx_kthread+0x10/0x10 [ 1015.399719][ T31] ret_from_fork+0x4bc/0x870 [ 1015.404298][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1015.409403][ T31] ? __switch_to_asm+0x39/0x70 [ 1015.414152][ T31] ? __switch_to_asm+0x33/0x70 [ 1015.418902][ T31] ? __pfx_kthread+0x10/0x10 [ 1015.423476][ T31] ret_from_fork_asm+0x1a/0x30 [ 1015.428240][ T31] [ 1015.431503][ T31] Kernel Offset: disabled [ 1015.435815][ T31] Rebooting in 86400 seconds..