last executing test programs: 5.741740361s ago: executing program 4 (id=1390): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x1, r0, &(0x7f0000000080), 0x0) 5.647499372s ago: executing program 4 (id=1391): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306080003e7e036042a000827020000008304000000"], 0x0}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 4.277288369s ago: executing program 3 (id=1403): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r1, 0x1) lseek(r0, 0x9, 0x0) 3.86700091s ago: executing program 2 (id=1406): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4) 3.638605152s ago: executing program 2 (id=1407): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x6c}, 0x0, @in6=@private0, 0x4, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 3.638053722s ago: executing program 2 (id=1408): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYBLOB], 0x48) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1, 0x4430, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = getpid() ptrace$ARCH_GET_CPUID(0x1e, r2, 0x0, 0x1011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x54, r6, 0x113, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x87}, {0xc}, {0xc}}]}, 0x54}}, 0x0) fsetxattr$trusted_overlay_redirect(r4, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000017000000bca30000000000002403000040feffff6b0af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430000000000007a0a00fe0000001f6114100000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4fffe2158dfb8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb3fa3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5973acc706db6b861b8c10a7cbd0b723906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff6194732827a58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f1000000006eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa555ec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f37382000000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23577949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115553f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5f07918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa61071799e1acb3928143be1c1023a375e528285544d0064b91f00f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aa3f999ce700ffe794e27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a2271d96c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b0200780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000005bae7859839f856e7a397913eec7977f6231c5f11849b3deabc60c5ccf240d16924eb760a969813be02a229c674045b88915518a17b683268f10358e1c0b20cfc2bd105e5e1db7fed951b8faf126267bb38b8d356f63d3433d3dee643503a8ba4968adf6673f720c474ecf324d989235f1b52aac"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40046f01, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="3244918086f5459b"}}) r7 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000c40), 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) 3.407967783s ago: executing program 3 (id=1409): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0xd, 0x60803) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) capget(0x0, &(0x7f0000000180)={0x0, 0x1000005, 0x80000007, 0x0, 0xfffffffe, 0x9}) 3.312562684s ago: executing program 4 (id=1411): socket$inet6(0xa, 0x6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0xb, 0x1, 0xb57, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000030"], 0x84}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 3.226700984s ago: executing program 4 (id=1412): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000002, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.650113777s ago: executing program 2 (id=1413): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgsnd(0x0, 0x0, 0x0, 0x5c0e98538dd202a3) 2.535336327s ago: executing program 0 (id=1414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x2e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000240)={0xeeee8000, 0x1000, 0x1}) 2.256525139s ago: executing program 2 (id=1415): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000500)={0x1}) 2.256176809s ago: executing program 0 (id=1416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 2.173383599s ago: executing program 0 (id=1417): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r2, 0x209, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x18}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.078744499s ago: executing program 4 (id=1418): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x20}, {r1, 0x4190}], 0x2, 0x0, 0x0, 0x0) 2.01647462s ago: executing program 1 (id=1419): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="b3f086fb5420d4fabdb791d169a4cccb3ad2dc9488b923a30c1afd185ded2d736bc4064e04af6fbd2fb10252ec0265144a61e25538f4", 0x36, 0x0, 0x0, 0x0) 2.01623418s ago: executing program 0 (id=1420): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r1, 0x1) lseek(r0, 0x9, 0x0) 1.98463085s ago: executing program 1 (id=1421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='gretap0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.97149398s ago: executing program 2 (id=1422): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306080003e7e036042a000827020000008304000000"], 0x0}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 1.88845837s ago: executing program 4 (id=1423): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) 1.164026534s ago: executing program 0 (id=1424): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYBLOB], 0x48) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1, 0x4430, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = getpid() ptrace$ARCH_GET_CPUID(0x1e, r2, 0x0, 0x1011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x54, r6, 0x113, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x87}, {0xc}, {0xc}}]}, 0x54}}, 0x0) fsetxattr$trusted_overlay_redirect(r4, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40046f01, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="3244918086f5459b"}}) r7 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000c40), 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) 985.786715ms ago: executing program 1 (id=1425): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x61, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x2}, {0x3, 0xf}, {0xfff2, 0x1}}}, 0x24}}, 0x20000811) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 719.680556ms ago: executing program 1 (id=1426): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 612.443567ms ago: executing program 1 (id=1427): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 558.281737ms ago: executing program 1 (id=1428): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) 226.258769ms ago: executing program 3 (id=1429): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40081) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x2}, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 162.756459ms ago: executing program 3 (id=1430): setxattr$system_posix_acl(&(0x7f0000002940)='./file0\x00', &(0x7f0000002980)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 64.36516ms ago: executing program 3 (id=1431): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x3}, 0x18) 34.76707ms ago: executing program 0 (id=1432): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x3, "76af7c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000240)={0x20, 0x16, 0x5, "f5cfd6f5a0"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xb}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 3 (id=1433): mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x2, 0x4, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000500)=0x2, 0x7ff, 0x3) kernel console output (not intermixed with test programs): . [ 264.986291][ T7495] loop0: detected capacity change from 0 to 16 [ 264.997188][ T7495] erofs: (device loop0): mounted with root inode @ nid 36. [ 265.032137][ T4552] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 265.092048][ T1106] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 265.104893][ T1106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.115590][ T7496] attempt to access beyond end of device [ 265.115590][ T7496] loop0: rw=524288, want=312, limit=16 [ 265.126989][ T1106] usb 2-1: Product: syz [ 265.131228][ T1106] usb 2-1: Manufacturer: syz [ 265.132066][ T7496] attempt to access beyond end of device [ 265.132066][ T7496] loop0: rw=524288, want=320, limit=16 [ 265.136708][ T1106] usb 2-1: SerialNumber: syz [ 265.154920][ T7496] attempt to access beyond end of device [ 265.154920][ T7496] loop0: rw=524288, want=1049280, limit=16 [ 265.170017][ T1106] usb 2-1: config 0 descriptor?? [ 265.172076][ T4377] pwc: send_video_command error -71 [ 265.184591][ T4377] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 265.184883][ T7497] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 265.211103][ T4377] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 265.243434][ T4377] usb 4-1: USB disconnect, device number 27 [ 265.271979][ T4552] usb 3-1: Using ep0 maxpacket: 16 [ 265.392071][ T4552] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 265.399602][ T4552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 265.411492][ T4552] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 265.431701][ T4552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.461917][ T4552] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 265.481205][ T4212] usb 2-1: USB disconnect, device number 33 [ 265.611407][ T4216] usb 5-1: USB disconnect, device number 18 [ 265.649684][ T4552] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 265.662837][ T4552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.671040][ T4552] usb 3-1: Product: syz [ 265.675423][ T4552] usb 3-1: Manufacturer: syz [ 265.680690][ T4552] usb 3-1: SerialNumber: syz [ 265.689210][ T4552] usb 3-1: config 0 descriptor?? [ 265.732475][ T7493] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 265.758988][ T4552] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 265.767059][ T4552] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 265.801910][ T4377] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 265.832120][ T4552] mcba_usb: probe of 3-1:0.0 failed with error -90 [ 266.033627][ T4552] usb 3-1: USB disconnect, device number 42 [ 266.211999][ T4377] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.234343][ T4377] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 266.244395][ T4377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.270298][ T4377] usb 4-1: config 0 descriptor?? [ 266.317887][ T4377] pwc: Askey VC010 type 2 USB webcam detected. [ 266.372040][ T13] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 266.701920][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 266.714476][ T7530] netlink: 'syz.2.824': attribute type 6 has an invalid length. [ 266.729020][ T7530] netlink: 'syz.2.824': attribute type 7 has an invalid length. [ 266.737257][ T7530] netlink: 'syz.2.824': attribute type 8 has an invalid length. [ 267.706663][ T7527] sched: RT throttling activated [ 267.741956][ T4377] pwc: recv_control_msg error -32 req 02 val 2b00 [ 267.792038][ T4377] pwc: recv_control_msg error -32 req 02 val 2700 [ 267.871896][ T4212] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 268.002080][ T4216] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 268.082132][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.102237][ T4377] pwc: recv_control_msg error -71 req 04 val 1000 [ 268.110853][ T13] usb 5-1: config 0 has no interfaces? [ 268.125345][ T4377] pwc: recv_control_msg error -71 req 04 val 1300 [ 268.162083][ T4377] pwc: recv_control_msg error -71 req 04 val 1400 [ 268.191961][ T4377] pwc: recv_control_msg error -71 req 02 val 2000 [ 268.211940][ T4377] pwc: recv_control_msg error -71 req 02 val 2100 [ 268.214238][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.231963][ T4377] pwc: recv_control_msg error -71 req 04 val 1500 [ 268.252055][ T4377] pwc: recv_control_msg error -71 req 02 val 2500 [ 268.261003][ T13] usb 5-1: config 0 has no interfaces? [ 268.282365][ T4377] pwc: recv_control_msg error -71 req 02 val 2400 [ 268.322128][ T4377] pwc: recv_control_msg error -71 req 02 val 2600 [ 268.362172][ T4377] pwc: recv_control_msg error -71 req 02 val 2900 [ 268.392053][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.392103][ T4377] pwc: recv_control_msg error -71 req 02 val 2800 [ 268.414167][ T13] usb 5-1: config 0 has no interfaces? [ 268.442076][ T4377] pwc: recv_control_msg error -71 req 04 val 1100 [ 268.472177][ T4377] pwc: recv_control_msg error -71 req 04 val 1200 [ 268.478715][ T4212] usb 1-1: config index 0 descriptor too short (expected 5292, got 77) [ 268.494632][ T4377] pwc: Registered as video103. [ 268.500902][ T4212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.513284][ T4377] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 268.523549][ T4212] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 20 [ 268.543760][ T4377] usb 4-1: USB disconnect, device number 28 [ 268.582057][ T13] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 268.610527][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.654062][ T13] usb 5-1: Product: syz [ 268.658277][ T13] usb 5-1: Manufacturer: syz [ 268.664242][ T13] usb 5-1: SerialNumber: syz [ 268.675036][ T4216] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 268.691867][ T4216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.700681][ T13] usb 5-1: config 0 descriptor?? [ 268.714706][ T4216] usb 2-1: Product: syz [ 268.722170][ T4216] usb 2-1: Manufacturer: syz [ 268.726781][ T4216] usb 2-1: SerialNumber: syz [ 268.742089][ T4212] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 268.755662][ T4216] usb 2-1: config 0 descriptor?? [ 268.765529][ T4212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.779824][ T4212] usb 1-1: Product: syz [ 268.784096][ T4212] usb 1-1: Manufacturer: syz [ 268.788688][ T4212] usb 1-1: SerialNumber: syz [ 268.814477][ T4216] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 268.822490][ T4212] usb 1-1: config 0 descriptor?? [ 268.830219][ T4216] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 269.093626][ T13] usb 5-1: USB disconnect, device number 19 [ 269.423680][ T7553] loop3: detected capacity change from 0 to 16 [ 269.465832][ T7553] erofs: (device loop3): mounted with root inode @ nid 36. [ 269.558073][ T7554] handle_bad_sector: 4 callbacks suppressed [ 269.558102][ T7554] attempt to access beyond end of device [ 269.558102][ T7554] loop3: rw=524288, want=312, limit=16 [ 269.590306][ T7554] attempt to access beyond end of device [ 269.590306][ T7554] loop3: rw=524288, want=320, limit=16 [ 269.602355][ T7554] attempt to access beyond end of device [ 269.602355][ T7554] loop3: rw=524288, want=1049280, limit=16 [ 269.616745][ T7554] attempt to access beyond end of device [ 269.616745][ T7554] loop3: rw=524288, want=1049288, limit=16 [ 269.630499][ T7554] attempt to access beyond end of device [ 269.630499][ T7554] loop3: rw=524288, want=24, limit=16 [ 269.648472][ T7554] attempt to access beyond end of device [ 269.648472][ T7554] loop3: rw=524288, want=32, limit=16 [ 269.661062][ T7554] attempt to access beyond end of device [ 269.661062][ T7554] loop3: rw=524288, want=392, limit=16 [ 269.769232][ T7555] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 270.082690][ T4377] usb 2-1: USB disconnect, device number 34 [ 270.586165][ T4377] usb 1-1: USB disconnect, device number 20 [ 271.381988][ T4377] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 271.997103][ T7580] loop4: detected capacity change from 0 to 32768 [ 272.003742][ T13] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 272.159628][ T7580] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 272.280873][ T4377] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 272.297703][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.316397][ T4377] usb 1-1: Product: syz [ 272.320556][ T4377] usb 1-1: Manufacturer: syz [ 272.322021][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 272.325310][ T4377] usb 1-1: SerialNumber: syz [ 272.363923][ T4377] usb 1-1: config 0 descriptor?? [ 272.414059][ T4377] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 272.424906][ T4377] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 272.442090][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.489683][ T13] usb 2-1: config 0 has no interfaces? [ 272.534277][ T4167] ocfs2: Unmounting device (7,4) on (node local) [ 272.572048][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.591403][ T13] usb 2-1: config 0 has no interfaces? [ 272.682097][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.695651][ T13] usb 2-1: config 0 has no interfaces? [ 272.862114][ T13] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 272.872571][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.880691][ T13] usb 2-1: Product: syz [ 272.885257][ T13] usb 2-1: Manufacturer: syz [ 272.890117][ T13] usb 2-1: SerialNumber: syz [ 272.900779][ T13] usb 2-1: config 0 descriptor?? [ 272.911784][ T7615] ptrace attach of ""[7617] was attempted by "./syz-executor exec"[7615] [ 273.002827][ T7621] loop4: detected capacity change from 0 to 16 [ 273.038857][ T7621] erofs: (device loop4): mounted with root inode @ nid 36. [ 273.248799][ T7624] attempt to access beyond end of device [ 273.248799][ T7624] loop4: rw=524288, want=312, limit=16 [ 273.266234][ T7624] attempt to access beyond end of device [ 273.266234][ T7624] loop4: rw=524288, want=320, limit=16 [ 273.280860][ T7624] attempt to access beyond end of device [ 273.280860][ T7624] loop4: rw=524288, want=1049280, limit=16 [ 273.298825][ T4430] usb 2-1: USB disconnect, device number 35 [ 273.308535][ T7622] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 273.904280][ T4430] usb 1-1: USB disconnect, device number 21 [ 274.639422][ T7628] loop3: detected capacity change from 0 to 32768 [ 274.826869][ T7645] kvm: emulating exchange as write [ 274.917025][ T7628] XFS (loop3): Mounting V5 Filesystem [ 275.031090][ T7628] XFS (loop3): Ending clean mount [ 275.504584][ T4165] XFS (loop3): Unmounting Filesystem [ 276.318772][ T7687] kvm [7686]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000 [ 276.671977][ T4430] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 277.161980][ T4504] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 277.289972][ T7685] loop2: detected capacity change from 0 to 32768 [ 277.392912][ T7685] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 277.412291][ T4430] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 277.421348][ T4430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.432034][ T4430] usb 4-1: Product: syz [ 277.432067][ T4504] usb 1-1: Using ep0 maxpacket: 8 [ 277.523835][ T4430] usb 4-1: Manufacturer: syz [ 277.528796][ T4430] usb 4-1: SerialNumber: syz [ 277.546423][ T4430] usb 4-1: config 0 descriptor?? [ 277.574981][ T4504] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.583844][ T4430] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 277.585783][ T4377] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 277.592925][ T4430] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 277.599391][ T4216] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 277.648511][ T4504] usb 1-1: config 0 has no interfaces? [ 277.742010][ T4504] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.752478][ T4504] usb 1-1: config 0 has no interfaces? [ 277.781407][ T4166] ocfs2: Unmounting device (7,2) on (node local) [ 277.862052][ T4504] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.879844][ T4504] usb 1-1: config 0 has no interfaces? [ 277.942143][ T4377] usb 2-1: Using ep0 maxpacket: 32 [ 278.062215][ T4504] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 278.071352][ T4504] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.079467][ T4504] usb 1-1: Product: syz [ 278.084344][ T4216] usb 5-1: config index 0 descriptor too short (expected 5292, got 77) [ 278.092990][ T4504] usb 1-1: Manufacturer: syz [ 278.098761][ T4216] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.108924][ T4504] usb 1-1: SerialNumber: syz [ 278.114620][ T4216] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 20 [ 278.125260][ T4504] usb 1-1: config 0 descriptor?? [ 278.272010][ T4377] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 278.287665][ T4377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.295886][ T4216] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 278.307625][ T4216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.319404][ T4377] usb 2-1: Product: syz [ 278.329570][ T4216] usb 5-1: Product: syz [ 278.333853][ T4377] usb 2-1: Manufacturer: syz [ 278.338492][ T4216] usb 5-1: Manufacturer: syz [ 278.343395][ T4377] usb 2-1: SerialNumber: syz [ 278.348071][ T4216] usb 5-1: SerialNumber: syz [ 278.354916][ T4377] usb 2-1: config 0 descriptor?? [ 278.362823][ T4216] usb 5-1: config 0 descriptor?? [ 278.528797][ T4430] usb 1-1: USB disconnect, device number 22 [ 279.111963][ T4377] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 279.186652][ T4430] usb 4-1: USB disconnect, device number 29 [ 279.209486][ T7716] loop2: detected capacity change from 0 to 32768 [ 279.216097][ T4377] peak_usb: probe of 2-1:0.0 failed with error -71 [ 279.225855][ T4377] usb 2-1: USB disconnect, device number 36 [ 279.361395][ T7716] XFS (loop2): Mounting V5 Filesystem [ 279.423762][ T7716] XFS (loop2): Ending clean mount [ 279.801646][ T4166] XFS (loop2): Unmounting Filesystem [ 280.773902][ T4377] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 281.162301][ T4430] usb 5-1: USB disconnect, device number 20 [ 281.702095][ T4377] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 281.711975][ T4377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.720108][ T4377] usb 4-1: Product: syz [ 281.725248][ T4377] usb 4-1: Manufacturer: syz [ 281.729987][ T4377] usb 4-1: SerialNumber: syz [ 281.737189][ T4377] usb 4-1: config 0 descriptor?? [ 281.793242][ T4377] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 281.803293][ T4377] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40 [ 281.873635][ T7744] loop1: detected capacity change from 0 to 32768 [ 282.002148][ T7744] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 282.190824][ T25] audit: type=1326 audit(1731787100.945:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2687f719 code=0x7fc00000 [ 282.258006][ T25] audit: type=1326 audit(1731787100.975:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e2687f719 code=0x7fc00000 [ 282.296895][ T25] audit: type=1326 audit(1731787100.975:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2687f719 code=0x7fc00000 [ 282.381017][ T7768] loop2: detected capacity change from 0 to 32768 [ 282.418286][ T4164] ocfs2: Unmounting device (7,1) on (node local) [ 282.419551][ T25] audit: type=1326 audit(1731787100.975:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2687f719 code=0x7fc00000 [ 282.482358][ T25] audit: type=1326 audit(1731787100.975:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2687f719 code=0x7fc00000 [ 282.508979][ T25] audit: type=1326 audit(1731787100.975:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2687f719 code=0x7fc00000 [ 282.543603][ T25] audit: type=1326 audit(1731787100.975:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2687f719 code=0x7fc00000 [ 282.599721][ T25] audit: type=1326 audit(1731787100.975:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2687f719 code=0x7fc00000 [ 282.621916][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.622876][ T7768] XFS (loop2): Mounting V5 Filesystem [ 282.629835][ T25] audit: type=1326 audit(1731787100.975:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2687f719 code=0x7fc00000 [ 282.656043][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.662369][ T25] audit: type=1326 audit(1731787100.975:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2687f719 code=0x7fc00000 [ 282.701951][ T4430] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 282.735249][ T7768] XFS (loop2): Ending clean mount [ 282.941976][ T4430] usb 5-1: Using ep0 maxpacket: 8 [ 282.962181][ T4552] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 283.013447][ T4166] XFS (loop2): Unmounting Filesystem [ 283.070234][ T4430] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.086213][ T4430] usb 5-1: config 0 has no interfaces? [ 283.172031][ T4430] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.187863][ T4430] usb 5-1: config 0 has no interfaces? [ 283.272268][ T4430] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.286909][ T4430] usb 5-1: config 0 has no interfaces? [ 283.332081][ T4552] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 283.356775][ T4212] usb 4-1: USB disconnect, device number 30 [ 283.362102][ T4552] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 283.399726][ T4552] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.461347][ T7797] fuse: root generation should be zero [ 283.472215][ T4430] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 283.495149][ T4430] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.508817][ T4430] usb 5-1: Product: syz [ 283.516016][ T4430] usb 5-1: Manufacturer: syz [ 283.522941][ T4430] usb 5-1: SerialNumber: syz [ 283.572473][ T4430] usb 5-1: config 0 descriptor?? [ 283.577800][ T4552] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 283.614435][ T4552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.638113][ T4552] usb 2-1: Product: syz [ 283.642995][ T4552] usb 2-1: Manufacturer: syz [ 283.647788][ T4552] usb 2-1: SerialNumber: syz [ 283.737790][ T4552] usb 2-1: config 0 descriptor?? [ 283.762225][ T7792] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 283.783661][ T4552] imon_raw 2-1:0.0: IR endpoint missing [ 283.975113][ T7812] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 283.983092][ T7812] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 284.006202][ T4178] Bluetooth: hci1: Received unexpected HCI Event 00000000 [ 284.020676][ T4377] usb 2-1: USB disconnect, device number 37 [ 284.028774][ T13] usb 5-1: USB disconnect, device number 21 [ 284.152057][ T4212] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 284.261274][ T7818] loop0: detected capacity change from 0 to 32768 [ 284.359702][ T7818] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 284.855987][ T4174] ocfs2: Unmounting device (7,0) on (node local) [ 285.202067][ T4212] usb 4-1: Using ep0 maxpacket: 8 [ 285.350839][ T7831] kvm [7830]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000 [ 285.369988][ T7831] kvm [7830]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x250000f7ff [ 285.383724][ T7831] kvm [7830]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x250000ffff [ 285.451961][ T4504] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 285.562089][ T4212] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 285.577448][ T4212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.595679][ T4212] usb 4-1: Product: syz [ 285.600440][ T4212] usb 4-1: Manufacturer: syz [ 285.690334][ T4212] usb 4-1: SerialNumber: syz [ 285.740335][ T4212] usb 4-1: config 0 descriptor?? [ 285.770424][ T7847] netlink: 'syz.1.913': attribute type 1 has an invalid length. [ 285.779495][ T7847] netlink: 'syz.1.913': attribute type 4 has an invalid length. [ 285.800016][ T7847] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.913'. [ 285.811609][ T4212] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 286.112110][ T4504] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 286.131570][ T4504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.151865][ T4504] usb 3-1: Product: syz [ 286.159795][ T4504] usb 3-1: Manufacturer: syz [ 286.174769][ T4504] usb 3-1: SerialNumber: syz [ 286.203795][ T4504] usb 3-1: config 0 descriptor?? [ 286.276202][ T4504] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 286.308086][ T4504] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 286.405093][ T7855] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 286.449839][ T7855] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 286.860538][ T7866] loop4: detected capacity change from 0 to 32768 [ 286.901313][ T7866] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 287.034733][ T4504] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 287.092063][ T4212] gspca_sonixj: reg_w1 err -71 [ 287.221923][ T13] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 287.221986][ T4212] sonixj: probe of 4-1:0.0 failed with error -71 [ 287.239238][ T4212] usb 4-1: USB disconnect, device number 31 [ 287.311976][ T4504] usb 2-1: Using ep0 maxpacket: 8 [ 287.452273][ T4504] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.461963][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 287.464530][ T4504] usb 2-1: config 0 has no interfaces? [ 287.563213][ T4552] usb 3-1: USB disconnect, device number 43 [ 287.564951][ T4167] ocfs2: Unmounting device (7,4) on (node local) [ 287.642146][ T13] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 287.647280][ T4504] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.695564][ T4504] usb 2-1: config 0 has no interfaces? [ 287.711455][ T7880] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 287.719710][ T7880] netlink: 'syz.3.927': attribute type 4 has an invalid length. [ 287.727620][ T7880] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.927'. [ 287.772110][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.791152][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 287.807145][ T4504] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.815576][ T13] usb 1-1: SerialNumber: syz [ 287.837971][ T4504] usb 2-1: config 0 has no interfaces? [ 287.873293][ T13] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 288.032221][ T4504] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 288.047662][ T4504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.061490][ T4504] usb 2-1: Product: syz [ 288.066464][ T4504] usb 2-1: Manufacturer: syz [ 288.071148][ T4504] usb 2-1: SerialNumber: syz [ 288.077733][ T13] usb 1-1: USB disconnect, device number 23 [ 288.081963][ T4504] usb 2-1: config 0 descriptor?? [ 288.265643][ T7898] [U] [ 288.304343][ T7898] [U] [ 288.307646][ T7898] [U] ŒB˜-LRJ[ÉÍĆÈÍÑœ6Š}Ä%Ü4̾ ­¦H‚ÐÛ@K„Ì-Y•LE‹÷U¾Ÿ¡–ÏÚÁ@‡ŸF´¡§%PEZE,™ÍŽ9FË*À [ 288.330632][ T7898] [U] CW¯™ÇÇ* Þ9JÁQØ#EØËSWÐÁÔC±ÏV·1žÂÛÏ!È žGPœX [ 288.337942][ T7898] [U] N%Ì9ÙÞÖC…_¹ÁNÊ…ÇBC‰…$ÞÔ4Þ(²ž [ 288.491236][ T4504] usb 2-1: USB disconnect, device number 38 [ 288.502351][ T7898] [U] Hª QÄØ›Tµ¦OÂR‚I#ıËTNBS_RЬ‰¡¾Æ«°:‰Ø€–ɦT‘ȯ ËÙ0¿™’ÚÃËŒÃWÚ™_[HN% [ 288.531129][ T7898] [U] Ï £ÜÙÛ4‡RЛŸÛŠ<)Ü6JG؃¬ÍKÉ^R\ [ 288.537880][ T7898] [U] 7¼R:€J37Ø [ 288.543983][ T7898] [U] YÛPÜ<ÅÔ…ÚU’“H¦3 Æ°-Î̤„Ø\PQBXÕ!Q6ÃÜÆSO'}­Ï[ÉÛÀP5OÉ>€DÊÅÖŽYÞJ>|H0=ÖÔ·TžXÈÒZÔY֦ʢÄš4ª‡IÇ¢À5AZËÑ~ZAÂ~ÝKÝ^TGžSÍJ‹I:Á¶¬Ž¥OD!M2KÃW§¬R>ƈΗKC?X…8 ¥HÇÒ*©@QEÛ»ÚU ½À.J9È“~´{—Á`²ÍÃ'R)Ó-ÀǬŸÎ=5­ÝÖJLY ÉCÄBˆØ;+LP°,FØN‡‚ÁÁYÎ%¿3†P¨ÈÕ&Ç)­Ó][œÈ‹4ÃL»Ã¶£„!’J> ÔÎ [ 288.578938][ T7898] [U] Ø.”CšÖ¯·ÏEJÓJÛ@œK’JÁ605RXUÑTTµO‹&XÐOºÖ•§\®‹&…¬°¡ÙN%Y‹‘ÁÐ17¿6`¬ÌI‚W [ 288.632146][ T7887] loop3: detected capacity change from 0 to 32768 [ 288.801760][ T7887] XFS (loop3): Mounting V5 Filesystem [ 288.929683][ T7887] XFS (loop3): Ending clean mount [ 289.191383][ T7897] [U] ÏØÇM<@NºÙKJ(ÝÂ6)Ô)ÎVÌÕLR¢ [ 289.394178][ T4165] XFS (loop3): Unmounting Filesystem [ 290.152108][ T26] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 290.276067][ T7925] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 290.285256][ T7925] netlink: 'syz.4.939': attribute type 4 has an invalid length. [ 290.296906][ T7925] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.939'. [ 290.488454][ T7919] loop0: detected capacity change from 0 to 32768 [ 290.511916][ T4504] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 290.583157][ T7919] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 290.802009][ T26] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 290.811341][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.819402][ T26] usb 3-1: Product: syz [ 290.823683][ T26] usb 3-1: Manufacturer: syz [ 290.828343][ T26] usb 3-1: SerialNumber: syz [ 290.836308][ T26] usb 3-1: config 0 descriptor?? [ 290.873882][ T26] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 290.881202][ T26] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input42 [ 290.915649][ T4377] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 291.003813][ T4174] ocfs2: Unmounting device (7,0) on (node local) [ 291.022020][ T13] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 291.032072][ T4504] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 291.041217][ T4504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.052070][ T4504] usb 2-1: config 0 descriptor?? [ 291.095448][ T4504] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 291.191947][ T4377] usb 4-1: Using ep0 maxpacket: 16 [ 291.312131][ T4377] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 291.321489][ T4377] usb 4-1: config 0 has no interface number 0 [ 291.331644][ T4377] usb 4-1: config 0 interface 161 has no altsetting 0 [ 291.423123][ T13] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 291.434791][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.450001][ T13] usb 5-1: config 0 descriptor?? [ 291.495293][ T13] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 291.501979][ T4377] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 291.513172][ T4377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.522043][ T4377] usb 4-1: Product: syz [ 291.526272][ T4377] usb 4-1: Manufacturer: syz [ 291.531225][ T4377] usb 4-1: SerialNumber: syz [ 291.546783][ T4377] usb 4-1: config 0 descriptor?? [ 291.592935][ T4377] ums-jumpshot 4-1:0.161: USB Mass Storage device detected [ 291.610736][ T4377] ums-jumpshot 4-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 291.819837][ T7933] udc-core: couldn't find an available UDC or it's busy [ 291.836584][ T7933] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 291.856884][ T4178] Bluetooth: hci0: Unknown advertising packet type: 0x14 [ 291.856960][ T4178] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 291.865369][ T4178] Bluetooth: hci0: Unknown advertising packet type: 0x32 [ 291.872597][ T4178] Bluetooth: hci0: Unknown advertising packet type: 0x38 [ 291.898575][ T4552] usb 4-1: USB disconnect, device number 32 [ 291.922377][ T13] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 292.069511][ T25] kauditd_printk_skb: 10 callbacks suppressed [ 292.069526][ T25] audit: type=1326 audit(1731787110.825:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 292.107799][ T25] audit: type=1326 audit(1731787110.845:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 292.130268][ T25] audit: type=1326 audit(1731787110.845:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 292.152325][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.164028][ T25] audit: type=1326 audit(1731787110.845:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 292.186076][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.192408][ T25] audit: type=1326 audit(1731787110.845:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 292.214447][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.387092][ T4377] usb 3-1: USB disconnect, device number 44 [ 292.401987][ T4212] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 292.442526][ T7958] netlink: 'syz.3.950': attribute type 1 has an invalid length. [ 292.451491][ T7958] netlink: 'syz.3.950': attribute type 4 has an invalid length. [ 292.465834][ T7958] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.950'. [ 292.482716][ T4504] gspca_stv06xx: I2C: Read error writing address: -71 [ 292.515837][ T4504] usb 2-1: USB disconnect, device number 39 [ 292.661885][ T4212] usb 1-1: Using ep0 maxpacket: 8 [ 292.792068][ T4212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.803078][ T13] gspca_cpia1: usb_control_msg 03, error -71 [ 292.809072][ T13] cpia1 5-1:0.0: unexpected systemstate: 00 [ 292.811874][ T4212] usb 1-1: config 0 has no interfaces? [ 292.837046][ T13] usb 5-1: USB disconnect, device number 22 [ 292.892084][ T4212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.902377][ T4377] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 292.915527][ T4212] usb 1-1: config 0 has no interfaces? [ 293.011945][ T4212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.031167][ T4212] usb 1-1: config 0 has no interfaces? [ 293.202237][ T4212] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 293.221496][ T4212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.238816][ T4212] usb 1-1: Product: syz [ 293.248098][ T4212] usb 1-1: Manufacturer: syz [ 293.261966][ T4377] usb 3-1: config 0 has no interfaces? [ 293.267799][ T4377] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=64.46 [ 293.282060][ T4212] usb 1-1: SerialNumber: syz [ 293.291283][ T4212] usb 1-1: config 0 descriptor?? [ 293.296702][ T4377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.307597][ T4377] usb 3-1: config 0 descriptor?? [ 293.687656][ T4504] usb 1-1: USB disconnect, device number 24 [ 293.754328][ T7983] device syzkaller0 entered promiscuous mode [ 294.172014][ T4552] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 294.961234][ T7992] loop1: detected capacity change from 0 to 32768 [ 294.992473][ T4552] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 295.001604][ T4552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.010337][ T4552] usb 5-1: Product: syz [ 295.014639][ T4552] usb 5-1: Manufacturer: syz [ 295.019231][ T4552] usb 5-1: SerialNumber: syz [ 295.027103][ T4552] usb 5-1: config 0 descriptor?? [ 295.051760][ T7992] XFS (loop1): Mounting V5 Filesystem [ 295.073834][ T4552] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 295.083165][ T4552] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 295.106625][ T8001] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 295.118510][ T8001] netlink: 'syz.3.962': attribute type 4 has an invalid length. [ 295.130760][ T8001] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.962'. [ 295.172908][ T7992] XFS (loop1): Ending clean mount [ 295.339118][ T8009] [U] [ 295.353944][ T8009] [U] [ 295.360581][ T8009] [U] ŒB˜-LRJ[ÉÍĆÈÍÑœ6Š}Ä%Ü4̾ ­¦H‚ÐÛ@K„Ì-Y•LE‹÷U¾Ÿ¡–ÏÚÁ@‡ŸF´¡§%PEZE,™ÍŽ9FË*À [ 295.412795][ T8009] [U] CW¯™ÇÇ* Þ9JÁQØ#EØËSWÐÁÔC±ÏV·1žÂÛÏ!È žGPœX [ 295.436549][ T8009] [U] N%Ì9ÙÞÖC…_¹ÁNÊ…ÇBC‰…$ÞÔ4Þ(²ž [ 295.451516][ T4212] usb 3-1: USB disconnect, device number 45 [ 295.571509][ T4164] XFS (loop1): Unmounting Filesystem [ 295.580061][ T8009] [U] Hª QÄØ›Tµ¦OÂR‚I#ıËTNBS_RЬ‰¡¾Æ«°:‰Ø€–ɦT‘ȯ ËÙ0¿™’ÚÃËŒÃWÚ™_[HN% [ 295.592466][ T8009] [U] Ï £ÜÙÛ4‡RЛŸÛŠ<)Ü6JG؃¬ÍKÉ^R\ [ 295.604950][ T8009] [U] 7¼R:€J37Ø [ 295.711329][ T8009] [U] YÛPÜ<ÅÔ…ÚU’“H¦3 Æ°-Î̤„Ø\PQBXÕ!Q6ÃÜÆSO'}­Ï[ÉÛÀP5OÉ>€DÊÅÖŽYÞJ>|H0=ÖÔ·TžXÈÒZÔY֦ʢÄš4ª‡IÇ¢À5AZËÑ~ZAÂ~ÝKÝ^TGžSÍJ‹I:Á¶¬Ž¥OD!M2KÃW§¬R>ƈΗKC?X…8 ¥HÇÒ*©@QEÛ»ÚU ½À.J9È“~´{—Á`²ÍÃ'R)Ó-ÀǬŸÎ=5­ÝÖJLY ÉCÄBˆØ;+LP°,FØN‡‚ÁÁYÎ%¿3†P¨ÈÕ&Ç)­Ó][œÈ‹4ÃL»Ã¶£„!’J> ÔÎ [ 295.737550][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.766607][ T8009] [U] Ø.”CšÖ¯·ÏEJÓJÛ@œK’JÁ605RXUÑTTµO‹&XÐOºÖ•§\®‹&…¬°¡ÙN%Y‹‘ÁÐ17¿6`¬ÌI‚W [ 295.931916][ T4212] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 296.173042][ T8022] netlink: 116 bytes leftover after parsing attributes in process `syz.1.964'. [ 296.213166][ T8007] [U] ÏØÇM<@NºÙKJ(ÝÂ6)Ô)ÎVÌÕLR¢ [ 296.431868][ T25] audit: type=1326 audit(1731787115.175:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed2e68719 code=0x7ffc0000 [ 296.462163][ T4212] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 296.472232][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.480329][ T4212] usb 3-1: Product: syz [ 296.488472][ T4212] usb 3-1: Manufacturer: syz [ 296.493530][ T4212] usb 3-1: SerialNumber: syz [ 296.500025][ T4212] usb 3-1: config 0 descriptor?? [ 296.581182][ T4212] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 296.651969][ T4377] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 296.666994][ T1106] usb 5-1: USB disconnect, device number 23 [ 296.727785][ T25] audit: type=1326 audit(1731787115.185:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7faed2e68719 code=0x7ffc0000 [ 296.752362][ T25] audit: type=1326 audit(1731787115.185:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed2e68719 code=0x7ffc0000 [ 296.774849][ T4212] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 296.788081][ T4212] sq905c 3-1:0.0: Get version command failed [ 296.794422][ T25] audit: type=1326 audit(1731787115.185:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed2e68719 code=0x7ffc0000 [ 296.798500][ T4212] sq905c: probe of 3-1:0.0 failed with error -71 [ 296.816736][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.861489][ T4212] usb 3-1: USB disconnect, device number 46 [ 296.947758][ T8044] device syzkaller0 entered promiscuous mode [ 296.975655][ T25] audit: type=1326 audit(1731787115.185:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faed2e68719 code=0x7ffc0000 [ 297.093147][ T4377] usb 4-1: config index 0 descriptor too short (expected 5292, got 77) [ 297.105922][ T4377] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.132226][ T4377] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 20 [ 297.341669][ T8040] loop1: detected capacity change from 0 to 32768 [ 297.342161][ T4377] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 297.362081][ T4377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.370471][ T4377] usb 4-1: Product: syz [ 297.378123][ T4377] usb 4-1: Manufacturer: syz [ 297.385812][ T4377] usb 4-1: SerialNumber: syz [ 297.392592][ T4377] usb 4-1: config 0 descriptor?? [ 297.490776][ T8040] XFS (loop1): Mounting V5 Filesystem [ 297.540082][ T8040] XFS (loop1): Ending clean mount [ 297.705014][ T4377] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 297.816066][ T4164] XFS (loop1): Unmounting Filesystem [ 297.951969][ T4377] usb 3-1: Using ep0 maxpacket: 16 [ 298.083766][ T4377] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 298.108294][ T4377] usb 3-1: config 0 has no interface number 0 [ 298.148929][ T4377] usb 3-1: config 0 interface 161 has no altsetting 0 [ 298.332104][ T4377] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 298.354185][ T4377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.390562][ T4377] usb 3-1: Product: syz [ 298.412785][ T4377] usb 3-1: Manufacturer: syz [ 298.437126][ T4377] usb 3-1: SerialNumber: syz [ 298.466305][ T4377] usb 3-1: config 0 descriptor?? [ 298.533857][ T4377] ums-jumpshot 3-1:0.161: USB Mass Storage device detected [ 298.577266][ T4377] ums-jumpshot 3-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 298.595024][ T25] kauditd_printk_skb: 7 callbacks suppressed [ 298.595033][ T25] audit: type=1326 audit(1731787117.355:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 298.730289][ T25] audit: type=1326 audit(1731787117.385:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 298.766477][ T8051] udc-core: couldn't find an available UDC or it's busy [ 298.776599][ T8051] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 298.806468][ T25] audit: type=1326 audit(1731787117.385:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 298.832060][ T4178] Bluetooth: hci2: Unknown advertising packet type: 0x14 [ 298.832125][ T4178] Bluetooth: hci2: Unknown advertising packet type: 0x20 [ 298.839545][ T4178] Bluetooth: hci2: Unknown advertising packet type: 0x32 [ 298.848058][ T4178] Bluetooth: hci2: Unknown advertising packet type: 0x38 [ 298.882365][ T4377] usb 3-1: USB disconnect, device number 47 [ 298.941118][ T25] audit: type=1326 audit(1731787117.385:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 299.047664][ T25] audit: type=1326 audit(1731787117.425:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 299.224590][ T25] audit: type=1326 audit(1731787117.425:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 299.246577][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.274207][ T25] audit: type=1326 audit(1731787117.425:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 299.296281][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.462944][ T8084] loop0: detected capacity change from 0 to 32768 [ 299.487393][ T25] audit: type=1326 audit(1731787117.425:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 299.510302][ T25] audit: type=1326 audit(1731787117.425:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 299.545854][ T25] audit: type=1326 audit(1731787117.425:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b46aa719 code=0x7ffc0000 [ 299.601457][ T8084] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 299.950746][ T4174] ocfs2: Unmounting device (7,0) on (node local) [ 300.154428][ T4552] usb 4-1: USB disconnect, device number 33 [ 300.387671][ T8127] loop0: detected capacity change from 0 to 16 [ 300.503913][ T8094] loop2: detected capacity change from 0 to 32768 [ 300.520569][ T8137] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1004'. [ 300.539449][ T8127] erofs: (device loop0): mounted with root inode @ nid 36. [ 300.638931][ T8094] XFS (loop2): Mounting V5 Filesystem [ 300.718426][ T8149] handle_bad_sector: 4 callbacks suppressed [ 300.718438][ T8149] attempt to access beyond end of device [ 300.718438][ T8149] loop0: rw=524288, want=312, limit=16 [ 300.769103][ T8149] attempt to access beyond end of device [ 300.769103][ T8149] loop0: rw=524288, want=320, limit=16 [ 300.811284][ T8150] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 300.825682][ T8149] attempt to access beyond end of device [ 300.825682][ T8149] loop0: rw=524288, want=1049280, limit=16 [ 300.874366][ T8149] attempt to access beyond end of device [ 300.874366][ T8149] loop0: rw=524288, want=1049288, limit=16 [ 300.994783][ T8149] attempt to access beyond end of device [ 300.994783][ T8149] loop0: rw=524288, want=24, limit=16 [ 301.006911][ T8094] XFS (loop2): Ending clean mount [ 301.036643][ T8149] attempt to access beyond end of device [ 301.036643][ T8149] loop0: rw=524288, want=32, limit=16 [ 301.076025][ T8149] attempt to access beyond end of device [ 301.076025][ T8149] loop0: rw=524288, want=392, limit=16 [ 301.274132][ T4166] XFS (loop2): Unmounting Filesystem [ 301.289575][ T8136] loop4: detected capacity change from 0 to 32768 [ 301.409897][ T8136] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 301.864627][ T4167] ocfs2: Unmounting device (7,4) on (node local) [ 301.991989][ T4552] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 302.352106][ T13] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 302.402245][ T4552] usb 2-1: config 201 has an invalid interface number: 249 but max is 0 [ 302.420976][ T4552] usb 2-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 302.467117][ T4552] usb 2-1: config 201 has no interface number 0 [ 302.482377][ T4552] usb 2-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 302.513775][ T4552] usb 2-1: config 201 interface 249 has no altsetting 0 [ 303.012012][ T4377] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 303.334667][ T13] usb 4-1: config 0 has no interfaces? [ 303.341997][ T4552] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 303.356071][ T13] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=64.46 [ 303.366075][ T4552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.374440][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.386443][ T4552] usb 2-1: Product: syz [ 303.416779][ T4552] usb 2-1: Manufacturer: syz [ 303.444343][ T13] usb 4-1: config 0 descriptor?? [ 303.464825][ T4552] usb 2-1: SerialNumber: syz [ 303.748588][ T8185] loop2: detected capacity change from 0 to 32768 [ 303.810474][ T8195] netlink: 'syz.0.1022': attribute type 1 has an invalid length. [ 303.827148][ T8185] XFS (loop2): Mounting V5 Filesystem [ 303.831920][ T8195] netlink: 'syz.0.1022': attribute type 4 has an invalid length. [ 303.850342][ T4552] usb 2-1: USB disconnect, device number 40 [ 303.887798][ T8195] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1022'. [ 303.892573][ T8185] XFS (loop2): Ending clean mount [ 303.902547][ T4377] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 303.912944][ T4377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.921321][ T4377] usb 5-1: Product: syz [ 303.925814][ T4377] usb 5-1: Manufacturer: syz [ 303.930490][ T4377] usb 5-1: SerialNumber: syz [ 303.938364][ T4377] usb 5-1: config 0 descriptor?? [ 303.983724][ T4377] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 303.991688][ T4377] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input44 [ 304.205289][ T4166] XFS (loop2): Unmounting Filesystem [ 304.271930][ T13] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 304.522017][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 304.642267][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.661676][ T13] usb 1-1: config 0 has no interfaces? [ 304.752108][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.762478][ T13] usb 1-1: config 0 has no interfaces? [ 304.841998][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.857604][ T13] usb 1-1: config 0 has no interfaces? [ 304.940590][ T4552] usb 4-1: USB disconnect, device number 34 [ 305.007823][ T8228] program syz.3.1031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.022480][ T13] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 305.052215][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.072016][ T13] usb 1-1: Product: syz [ 305.076269][ T13] usb 1-1: Manufacturer: syz [ 305.088566][ T13] usb 1-1: SerialNumber: syz [ 305.095393][ T13] usb 1-1: config 0 descriptor?? [ 305.465639][ T4552] usb 5-1: USB disconnect, device number 24 [ 305.591154][ T4504] usb 1-1: USB disconnect, device number 25 [ 306.659927][ T8239] loop1: detected capacity change from 0 to 32768 [ 306.780841][ T8239] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 307.047325][ T8264] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 307.092660][ T8264] netlink: 'syz.4.1041': attribute type 4 has an invalid length. [ 307.100428][ T8264] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1041'. [ 307.631998][ T4504] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 307.797883][ T4164] ocfs2: Unmounting device (7,1) on (node local) [ 307.993205][ T4504] usb 5-1: config 0 has no interfaces? [ 308.010029][ T4504] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=64.46 [ 308.046693][ T4504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.087105][ T4504] usb 5-1: config 0 descriptor?? [ 308.236340][ T8301] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 308.246911][ T8301] netlink: 'syz.0.1054': attribute type 4 has an invalid length. [ 308.259270][ T8301] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1054'. [ 308.431943][ T4504] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 308.575297][ T4377] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 308.746104][ T4504] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 308.833418][ T4377] usb 1-1: Using ep0 maxpacket: 8 [ 308.846122][ T4504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.866090][ T4504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.887288][ T4504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.952084][ T4377] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.972540][ T4377] usb 1-1: config 0 has no interfaces? [ 308.987117][ T4504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.002011][ T4504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.022025][ T4504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.082046][ T4377] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.101877][ T4377] usb 1-1: config 0 has no interfaces? [ 309.112062][ T4504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.121168][ T4504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.152109][ T4504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.197093][ T4377] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.211125][ T4377] usb 1-1: config 0 has no interfaces? [ 309.242172][ T4504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.251377][ T4504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.262800][ T4504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.342259][ T4504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.366924][ T4504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.382064][ T4377] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 309.397746][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.413877][ T4504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.420709][ T4377] usb 1-1: Product: syz [ 309.425302][ T4377] usb 1-1: Manufacturer: syz [ 309.430005][ T4377] usb 1-1: SerialNumber: syz [ 309.447355][ T4377] usb 1-1: config 0 descriptor?? [ 309.502120][ T4504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.516043][ T4504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.529059][ T4504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.615225][ T4504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.626728][ T4504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.641679][ T4504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.853843][ T4504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.863511][ T4504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.875305][ T4504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.985655][ T4377] usb 1-1: USB disconnect, device number 26 [ 310.062217][ T4504] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 310.072717][ T4504] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 310.081272][ T4504] usb 2-1: Product: syz [ 310.089416][ T4504] usb 2-1: Manufacturer: syz [ 310.095623][ T4504] usb 2-1: SerialNumber: syz [ 310.168875][ T4504] usb 2-1: config 0 descriptor?? [ 310.274972][ T4504] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 310.520055][ T26] usb 5-1: USB disconnect, device number 25 [ 310.681565][ T1106] usb 2-1: USB disconnect, device number 41 [ 310.719946][ T1106] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 311.510992][ T13] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 311.807255][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 311.952102][ T13] usb 3-1: config index 0 descriptor too short (expected 53, got 36) [ 311.962198][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 312.242128][ T13] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.40 [ 312.256848][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.273297][ T13] usb 3-1: Product: syz [ 312.282206][ T13] usb 3-1: Manufacturer: syz [ 312.292201][ T13] usb 3-1: SerialNumber: syz [ 312.344819][ T13] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input45 [ 312.433567][ T4377] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 312.554118][ T8369] netlink: 'syz.4.1078': attribute type 1 has an invalid length. [ 312.572009][ T8369] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1078'. [ 312.595704][ T13] usb 3-1: USB disconnect, device number 48 [ 313.002281][ T4377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.073531][ T4377] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 313.210688][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.425255][ T4377] usb 1-1: config 0 descriptor?? [ 313.741999][ T1106] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 313.864173][ T4377] usbhid 1-1:0.0: can't add hid device: -71 [ 313.870320][ T4377] usbhid: probe of 1-1:0.0 failed with error -71 [ 313.915507][ T4377] usb 1-1: USB disconnect, device number 27 [ 314.072148][ T1106] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 314.092056][ T26] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 314.182130][ T1106] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.219509][ T1106] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.290461][ T1106] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.344282][ T4377] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 314.432062][ T1106] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.440989][ T1106] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.462143][ T26] usb 5-1: config index 0 descriptor too short (expected 5292, got 77) [ 314.481107][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.507912][ T26] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 20 [ 314.569613][ T1106] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.601902][ T4377] usb 1-1: Using ep0 maxpacket: 16 [ 314.656906][ T8389] loop1: detected capacity change from 0 to 32768 [ 314.702192][ T1106] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.719741][ T1106] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.723113][ T4377] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.741374][ T1106] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.761698][ T4377] usb 1-1: config 0 interface 0 has no altsetting 0 [ 314.769043][ T4377] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 314.778732][ T26] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 314.790958][ T8389] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 314.800236][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.808396][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.819288][ T26] usb 5-1: Product: syz [ 314.832046][ T1106] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.843534][ T26] usb 5-1: Manufacturer: syz [ 314.848150][ T26] usb 5-1: SerialNumber: syz [ 314.856416][ T4377] usb 1-1: config 0 descriptor?? [ 314.861359][ T1106] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.883053][ T26] usb 5-1: config 0 descriptor?? [ 314.914417][ T1106] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.003205][ T1106] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.014824][ T1106] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.036038][ T1106] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.132175][ T1106] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.146660][ T1106] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.177548][ T1106] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.272114][ T1106] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.284121][ T1106] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.300735][ T1106] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.358127][ T4377] hid-generic 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 315.392082][ T1106] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.425498][ T1106] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.454612][ T1106] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.582807][ T4164] ocfs2: Unmounting device (7,1) on (node local) [ 315.682266][ T1106] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 315.693777][ T1106] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 315.715612][ T1106] usb 4-1: Product: syz [ 315.724944][ T1106] usb 4-1: Manufacturer: syz [ 315.742134][ T1106] usb 4-1: SerialNumber: syz [ 315.762097][ T8412] netlink: 'syz.3.1091': attribute type 1 has an invalid length. [ 315.777088][ T4552] usb 1-1: USB disconnect, device number 28 [ 315.786838][ T1106] usb 4-1: config 0 descriptor?? [ 315.805257][ T8412] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1091'. [ 315.814916][ T1106] usb 4-1: can't set config #0, error -71 [ 315.852364][ T1106] usb 4-1: USB disconnect, device number 35 [ 316.022897][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 316.411929][ T1106] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 317.207175][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.211456][ T4430] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 317.213666][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.414141][ T1106] usb 2-1: Using ep0 maxpacket: 16 [ 317.463464][ T4552] usb 5-1: USB disconnect, device number 26 [ 317.522161][ T4430] usb 1-1: Using ep0 maxpacket: 32 [ 317.552333][ T1106] usb 2-1: config index 0 descriptor too short (expected 53, got 36) [ 317.567012][ T1106] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 317.611964][ T4504] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 317.853681][ T1106] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.40 [ 317.863600][ T1106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.871581][ T1106] usb 2-1: Product: syz [ 317.876251][ T1106] usb 2-1: Manufacturer: syz [ 317.880852][ T1106] usb 2-1: SerialNumber: syz [ 317.891996][ T4504] usb 3-1: Using ep0 maxpacket: 16 [ 317.912107][ T4430] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 318.372523][ T4504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.622862][ T1106] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input46 [ 318.632107][ T4504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.648330][ T4430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.652345][ T4504] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 318.675348][ T4430] usb 1-1: Product: syz [ 318.679419][ T4504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.685928][ T4430] usb 1-1: Manufacturer: syz [ 318.690978][ T4504] usb 3-1: config 0 descriptor?? [ 318.692706][ T4430] usb 1-1: SerialNumber: syz [ 318.712214][ T4430] usb 1-1: config 0 descriptor?? [ 318.719332][ T1106] usb 2-1: USB disconnect, device number 42 [ 318.774094][ T4430] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 318.971919][ T4212] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 318.971976][ T4552] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 319.184583][ T4504] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 319.188289][ T8446] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 319.191303][ T4504] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 319.191328][ T4504] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 319.203357][ T8446] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1103'. [ 319.207133][ T4504] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 319.229009][ T4504] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 319.237990][ T4504] kye 0003:0458:5015.000D: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 319.262002][ T4212] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 319.270249][ T4504] kye 0003:0458:5015.000D: tablet-enabling feature report not found [ 319.278780][ T4504] kye 0003:0458:5015.000D: tablet enabling failed [ 319.342103][ T4212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.351266][ T4212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.362480][ T4212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 319.388487][ T4432] usb 3-1: USB disconnect, device number 49 [ 319.442169][ T4212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.451053][ T4212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.465002][ T4212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 319.541994][ T4212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.550990][ T4212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.561944][ T4212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 319.592111][ T4552] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 319.601362][ T4552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.609424][ T4552] usb 4-1: Product: syz [ 319.613720][ T4552] usb 4-1: Manufacturer: syz [ 319.618303][ T4552] usb 4-1: SerialNumber: syz [ 319.626445][ T4552] usb 4-1: config 0 descriptor?? [ 319.641963][ T4212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.650920][ T4212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.661931][ T4212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 319.664150][ T4552] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 319.675942][ T4552] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input47 [ 319.742148][ T4212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.751421][ T4212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.763007][ T4212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 319.843146][ T4212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.852172][ T4212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.869500][ T4212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 319.952071][ T4212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.961075][ T4212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.972767][ T4212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 320.052166][ T4212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.065357][ T8458] kernel read not supported for file / œ7³ÏëÇ-ë: (pid: 8458 comm: syz.2.1108) [ 320.066901][ T4212] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.086822][ T4212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 320.087168][ T25] kauditd_printk_skb: 24 callbacks suppressed [ 320.087178][ T25] audit: type=1800 audit(1731787138.855:83): pid=8458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1108" name=20019C1437B3CFEBC72DEB3A dev="mqueue" ino=50634 res=0 errno=0 [ 320.403697][ T4212] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 320.427658][ T4212] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 320.476994][ T4212] usb 5-1: Product: syz [ 320.502069][ T4212] usb 5-1: Manufacturer: syz [ 320.535407][ T4212] usb 5-1: SerialNumber: syz [ 320.625210][ T4212] usb 5-1: config 0 descriptor?? [ 320.734059][ T4212] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 320.973351][ T4506] usb 4-1: USB disconnect, device number 36 [ 321.058695][ T4552] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 321.145972][ T4212] usb 5-1: USB disconnect, device number 27 [ 321.171279][ T4212] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 321.312258][ T4552] usb 2-1: Using ep0 maxpacket: 32 [ 321.352091][ T4430] gspca_ov534_9: reg_r err -71 [ 321.424955][ T8486] loop0: detected capacity change from 0 to 16 [ 321.432405][ T4552] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 321.452511][ T4552] usb 2-1: config 0 has no interface number 0 [ 321.464578][ T8481] nvme_fabrics: missing parameter 'transport=%s' [ 321.471035][ T8481] nvme_fabrics: missing parameter 'nqn=%s' [ 321.521072][ T8486] erofs: (device loop0): mounted with root inode @ nid 36. [ 321.618986][ T8477] loop3: detected capacity change from 0 to 32768 [ 321.643397][ T4552] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 321.668202][ T4552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.670984][ T8490] attempt to access beyond end of device [ 321.670984][ T8490] loop0: rw=524288, want=312, limit=16 [ 321.683246][ T4552] usb 2-1: Product: syz [ 321.695032][ T4430] gspca_ov534_9: Unknown sensor 0000 [ 321.695069][ T4430] ov534_9: probe of 1-1:0.0 failed with error -22 [ 321.708101][ T4552] usb 2-1: Manufacturer: syz [ 321.710927][ T8490] attempt to access beyond end of device [ 321.710927][ T8490] loop0: rw=524288, want=320, limit=16 [ 321.718540][ T4552] usb 2-1: SerialNumber: syz [ 321.743086][ T8490] attempt to access beyond end of device [ 321.743086][ T8490] loop0: rw=524288, want=1049280, limit=16 [ 321.744119][ T8495] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 321.771743][ T8490] attempt to access beyond end of device [ 321.771743][ T8490] loop0: rw=524288, want=1049288, limit=16 [ 321.785289][ T4430] usb 1-1: USB disconnect, device number 29 [ 321.807867][ T4552] usb 2-1: config 0 descriptor?? [ 321.816158][ T8490] attempt to access beyond end of device [ 321.816158][ T8490] loop0: rw=524288, want=24, limit=16 [ 321.829620][ T8477] XFS (loop3): Mounting V5 Filesystem [ 321.832030][ T4212] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 321.850831][ T8490] attempt to access beyond end of device [ 321.850831][ T8490] loop0: rw=524288, want=32, limit=16 [ 321.862860][ T4552] smsc95xx v2.0.0 [ 321.878859][ T8490] attempt to access beyond end of device [ 321.878859][ T8490] loop0: rw=524288, want=392, limit=16 [ 321.898733][ T8477] XFS (loop3): Ending clean mount [ 322.102153][ T1106] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 322.191391][ T4165] XFS (loop3): Unmounting Filesystem [ 322.201995][ T4212] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 322.211426][ T4212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.240351][ T4212] usb 3-1: config 0 descriptor?? [ 322.316069][ T4212] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 322.392169][ T1106] usb 5-1: Using ep0 maxpacket: 16 [ 322.602084][ T1106] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 322.677627][ T1106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.792643][ T4552] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 322.823237][ T4552] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 322.902458][ T4552] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 322.935102][ T4552] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 323.017678][ T1106] usb 5-1: config 0 descriptor?? [ 323.106125][ T4552] usb 2-1: USB disconnect, device number 43 [ 323.568273][ T4212] usb 3-1: USB disconnect, device number 50 [ 323.584538][ T1106] apple 0003:05AC:026C.000E: unknown main item tag 0x1 [ 323.597151][ T1106] apple 0003:05AC:026C.000E: item fetching failed at offset 5/7 [ 323.623305][ T1106] apple 0003:05AC:026C.000E: parse failed [ 323.645627][ T1106] apple: probe of 0003:05AC:026C.000E failed with error -22 [ 323.839628][ T4552] usb 5-1: USB disconnect, device number 28 [ 324.037144][ T1106] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 324.133180][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 324.251939][ T4432] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 324.302016][ T1106] usb 2-1: Using ep0 maxpacket: 16 [ 324.328787][ T8546] loop2: detected capacity change from 0 to 32768 [ 324.415436][ T8546] XFS (loop2): Mounting V5 Filesystem [ 324.452173][ T1106] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.472297][ T1106] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFC, skipping [ 324.480338][ T8546] XFS (loop2): Ending clean mount [ 324.505172][ T1106] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.518435][ T4432] usb 4-1: Using ep0 maxpacket: 32 [ 324.692475][ T1106] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 324.711490][ T1106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.728340][ T1106] usb 2-1: Product: syz [ 324.733266][ T1106] usb 2-1: Manufacturer: syz [ 324.737958][ T1106] usb 2-1: SerialNumber: syz [ 324.750435][ T1106] usb 2-1: config 0 descriptor?? [ 324.822119][ T4432] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 324.827395][ T4166] XFS (loop2): Unmounting Filesystem [ 324.835690][ T4432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.847320][ T4432] usb 4-1: Product: syz [ 324.851562][ T4432] usb 4-1: Manufacturer: syz [ 324.856851][ T4432] usb 4-1: SerialNumber: syz [ 324.871097][ T4432] usb 4-1: config 0 descriptor?? [ 324.892749][ T8564] loop4: detected capacity change from 0 to 32768 [ 324.915507][ T4432] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 324.971449][ T8564] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 325.040306][ T4552] usb 2-1: USB disconnect, device number 44 [ 325.142820][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1139'. [ 325.253305][ T8576] loop0: detected capacity change from 0 to 16 [ 325.295119][ T8580] netlink: 'syz.2.1142': attribute type 29 has an invalid length. [ 325.305423][ T8580] netlink: 'syz.2.1142': attribute type 29 has an invalid length. [ 325.309735][ T8576] erofs: (device loop0): mounted with root inode @ nid 36. [ 325.464376][ T8583] attempt to access beyond end of device [ 325.464376][ T8583] loop0: rw=524288, want=312, limit=16 [ 325.483534][ T8583] attempt to access beyond end of device [ 325.483534][ T8583] loop0: rw=524288, want=320, limit=16 [ 325.505124][ T8583] attempt to access beyond end of device [ 325.505124][ T8583] loop0: rw=524288, want=1049280, limit=16 [ 325.515720][ T8584] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 325.608669][ T4167] ocfs2: Unmounting device (7,4) on (node local) [ 325.881960][ T4322] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 326.123011][ T4322] usb 3-1: Using ep0 maxpacket: 16 [ 326.292021][ T4322] usb 3-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 326.622067][ T4430] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 326.914917][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.946071][ T4322] usb 3-1: config 0 descriptor?? [ 327.035062][ T8593] loop1: detected capacity change from 0 to 32768 [ 327.162080][ T8593] XFS (loop1): Mounting V5 Filesystem [ 327.214661][ T8593] XFS (loop1): Ending clean mount [ 327.252131][ T4430] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 327.265083][ T4430] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.274339][ T4430] usb 5-1: Product: syz [ 327.278631][ T4430] usb 5-1: Manufacturer: syz [ 327.290833][ T4430] usb 5-1: SerialNumber: syz [ 327.307392][ T4430] usb 5-1: config 0 descriptor?? [ 327.383541][ T4430] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 327.412885][ T4430] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input48 [ 327.426088][ T4322] apple 0003:05AC:026C.000F: unknown main item tag 0x1 [ 327.433830][ T4322] apple 0003:05AC:026C.000F: item fetching failed at offset 5/7 [ 327.444727][ T4322] apple 0003:05AC:026C.000F: parse failed [ 327.450578][ T4322] apple: probe of 0003:05AC:026C.000F failed with error -22 [ 327.552049][ T4432] gspca_ov534_9: reg_r err -71 [ 327.610880][ T4164] XFS (loop1): Unmounting Filesystem [ 327.654429][ T1106] usb 3-1: USB disconnect, device number 51 [ 327.827492][ T4432] gspca_ov534_9: Unknown sensor 0000 [ 327.827581][ T4432] ov534_9: probe of 4-1:0.0 failed with error -22 [ 327.847954][ T4432] usb 4-1: USB disconnect, device number 37 [ 327.930229][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1150'. [ 328.032929][ T8623] netlink: 'syz.0.1154': attribute type 29 has an invalid length. [ 328.041166][ T8623] netlink: 'syz.0.1154': attribute type 29 has an invalid length. [ 328.108917][ T8625] Cannot find add_set index 0 as target [ 328.177999][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 328.205092][ T8631] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 328.840939][ T8654] netlink: 'syz.3.1167': attribute type 29 has an invalid length. [ 328.849460][ T8654] netlink: 'syz.3.1167': attribute type 29 has an invalid length. [ 328.921933][ T4432] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 328.974045][ T1106] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 329.041330][ T8643] syz.0.1163 (8643): drop_caches: 2 [ 329.145432][ T8665] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 329.273766][ T1106] usb 3-1: Using ep0 maxpacket: 32 [ 329.282673][ T4549] usb 5-1: USB disconnect, device number 29 [ 329.362345][ T4432] usb 2-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 329.399616][ T4432] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 329.405853][ T8673] netlink: 'syz.3.1175': attribute type 1 has an invalid length. [ 329.416730][ T4432] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.440384][ T8673] netlink: 15366 bytes leftover after parsing attributes in process `syz.3.1175'. [ 329.462212][ T8650] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 329.493650][ T4432] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 329.612236][ T1106] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 329.621308][ T1106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.632294][ T1106] usb 3-1: Product: syz [ 329.642181][ T1106] usb 3-1: Manufacturer: syz [ 329.652963][ T1106] usb 3-1: SerialNumber: syz [ 329.668782][ T1106] usb 3-1: config 0 descriptor?? [ 329.713619][ T1106] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 330.300194][ T8686] loop4: detected capacity change from 0 to 32768 [ 330.446683][ T8686] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 330.811081][ T8704] loop0: detected capacity change from 0 to 32768 [ 330.881476][ T8704] XFS (loop0): Mounting V5 Filesystem [ 330.902046][ T4549] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 330.936938][ T4167] ocfs2: Unmounting device (7,4) on (node local) [ 330.939068][ T8704] XFS (loop0): Ending clean mount [ 331.150373][ T4174] XFS (loop0): Unmounting Filesystem [ 331.253219][ T8718] netlink: 'syz.4.1188': attribute type 1 has an invalid length. [ 331.261400][ T8718] netlink: 15366 bytes leftover after parsing attributes in process `syz.4.1188'. [ 331.502257][ T4549] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 331.519004][ T4549] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.531956][ T4549] usb 4-1: Product: syz [ 331.536144][ T4549] usb 4-1: Manufacturer: syz [ 331.549588][ T4549] usb 4-1: SerialNumber: syz [ 331.557845][ T4549] usb 4-1: config 0 descriptor?? [ 331.591987][ T26] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 331.607274][ T4549] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 331.623018][ T4549] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input50 [ 331.651779][ T4322] usb 2-1: USB disconnect, device number 45 [ 331.831955][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 331.952201][ T26] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 331.960320][ T26] usb 5-1: config 0 has no interface number 0 [ 332.122086][ T26] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 332.135855][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.145927][ T26] usb 5-1: Product: syz [ 332.148282][ T8744] loop0: detected capacity change from 0 to 32768 [ 332.150154][ T26] usb 5-1: Manufacturer: syz [ 332.168844][ T26] usb 5-1: SerialNumber: syz [ 332.176221][ T26] usb 5-1: config 0 descriptor?? [ 332.196258][ T8744] XFS (loop0): Mounting V5 Filesystem [ 332.212899][ T26] smsc95xx v2.0.0 [ 332.229906][ T8744] XFS (loop0): Ending clean mount [ 332.231983][ T4322] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 332.281489][ T4174] XFS (loop0): Unmounting Filesystem [ 332.402986][ T1106] gspca_ov534_9: reg_r err -71 [ 332.602001][ T4322] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 332.610651][ T4322] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 332.621021][ T4322] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 332.630232][ T4322] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 332.641778][ T4322] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 332.661934][ T1106] gspca_ov534_9: Unknown sensor 0000 [ 332.661989][ T1106] ov534_9: probe of 3-1:0.0 failed with error -22 [ 332.683391][ T1106] usb 3-1: USB disconnect, device number 52 [ 332.771995][ T4322] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 332.781134][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.789190][ T4322] usb 2-1: Product: syz [ 332.793451][ T4322] usb 2-1: Manufacturer: syz [ 332.801935][ T4506] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 332.832887][ T4322] cdc_wdm 2-1:1.0: skipping garbage [ 332.838086][ T4322] cdc_wdm 2-1:1.0: skipping garbage [ 332.846964][ T4322] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 332.852950][ T4322] cdc_wdm 2-1:1.0: Unknown control protocol [ 333.049176][ T4322] usb 2-1: USB disconnect, device number 46 [ 333.092477][ T26] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 333.104256][ T26] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 333.142775][ T4506] usb 1-1: Using ep0 maxpacket: 32 [ 333.150743][ T26] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 333.244692][ T26] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 333.302308][ T4506] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 333.336299][ T4506] usb 1-1: config 0 has no interface number 0 [ 333.449098][ T26] usb 5-1: USB disconnect, device number 30 [ 333.602594][ T4506] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 333.661928][ T4506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.674277][ T4552] usb 4-1: USB disconnect, device number 38 [ 333.706822][ T4506] usb 1-1: Product: syz [ 333.725439][ T4506] usb 1-1: Manufacturer: syz [ 333.730170][ T4506] usb 1-1: SerialNumber: syz [ 333.837354][ T4506] usb 1-1: config 0 descriptor?? [ 333.910057][ T8765] syz.2.1203 (8765): drop_caches: 2 [ 333.916339][ T4506] smsc95xx v2.0.0 [ 334.352091][ T4506] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 334.369374][ T4506] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 334.759262][ T8785] loop2: detected capacity change from 0 to 32768 [ 334.915554][ T8785] XFS (loop2): Mounting V5 Filesystem [ 335.035745][ T8785] XFS (loop2): Ending clean mount [ 335.567222][ T4506] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 335.583612][ T4506] smsc95xx: probe of 1-1:0.67 failed with error -32 [ 335.728271][ T8816] syz.3.1216 (8816): drop_caches: 2 [ 335.846466][ T4166] XFS (loop2): Unmounting Filesystem [ 336.127494][ T4549] usb 1-1: USB disconnect, device number 30 [ 336.215867][ T8824] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 336.247517][ T8824] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 336.531940][ T4504] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 336.911959][ T4504] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.928427][ T4504] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 336.941093][ T4504] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.957611][ T4504] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 336.969997][ T4504] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 337.061905][ T4549] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 337.102159][ T4504] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 337.131729][ T4504] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 337.157368][ T4504] usb 3-1: Product: syz [ 337.179573][ T4504] usb 3-1: Manufacturer: syz [ 337.262491][ T4504] cdc_wdm 3-1:1.0: skipping garbage [ 337.268553][ T4504] cdc_wdm 3-1:1.0: skipping garbage [ 337.303418][ T4504] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 337.318147][ T4504] cdc_wdm 3-1:1.0: Unknown control protocol [ 337.332017][ T4549] usb 4-1: Using ep0 maxpacket: 32 [ 337.352111][ T1106] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 337.463314][ T4549] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 337.478015][ T4549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.500540][ T4549] usb 4-1: config 0 descriptor?? [ 337.512132][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 337.517335][ T4552] usb 3-1: USB disconnect, device number 53 [ 337.519007][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 337.530747][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 337.540360][ T4506] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 337.553103][ T4549] gspca_main: sunplus-2.14.0 probing 041e:400b [ 337.781918][ T4506] usb 2-1: Using ep0 maxpacket: 8 [ 337.856698][ T8854] loop0: detected capacity change from 0 to 32768 [ 337.923127][ T1106] usb 5-1: config 0 has no interfaces? [ 337.962881][ T8854] XFS (loop0): Mounting V5 Filesystem [ 337.991168][ T8854] XFS (loop0): Ending clean mount [ 338.062148][ T4506] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 338.083628][ T4506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.107588][ T4506] usb 2-1: Product: syz [ 338.140286][ T4506] usb 2-1: Manufacturer: syz [ 338.141981][ T1106] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 338.164152][ T1106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.180923][ T1106] usb 5-1: Product: syz [ 338.185412][ T4506] usb 2-1: SerialNumber: syz [ 338.189711][ T1106] usb 5-1: Manufacturer: syz [ 338.193811][ T4506] usb 2-1: config 0 descriptor?? [ 338.217535][ T1106] usb 5-1: SerialNumber: syz [ 338.233802][ T4506] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 338.243845][ T1106] usb 5-1: config 0 descriptor?? [ 338.652148][ T4549] gspca_sunplus: reg_w_riv err -71 [ 338.657951][ T4549] sunplus: probe of 4-1:0.0 failed with error -71 [ 339.151953][ T4506] gspca_vc032x: reg_w err -110 [ 339.156782][ T4506] vc032x: probe of 2-1:0.0 failed with error -110 [ 339.222561][ T4549] usb 4-1: USB disconnect, device number 39 [ 339.289554][ T4174] XFS (loop0): Unmounting Filesystem [ 339.292762][ T8869] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 339.330425][ T8869] netlink: 15366 bytes leftover after parsing attributes in process `syz.2.1232'. [ 339.749447][ T4549] usb 5-1: USB disconnect, device number 31 [ 340.101948][ T4430] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 340.188961][ T8881] syz.4.1233 (8881): drop_caches: 2 [ 340.219373][ T8878] loop3: detected capacity change from 0 to 32768 [ 340.231079][ T4552] usb 2-1: USB disconnect, device number 47 [ 340.353264][ T8878] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 340.369942][ T8895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1238'. [ 340.572138][ T4549] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 340.606389][ T4165] ocfs2: Unmounting device (7,3) on (node local) [ 340.620349][ T4430] usb 1-1: config index 0 descriptor too short (expected 5292, got 77) [ 340.647043][ T4430] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.693258][ T4430] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 20 [ 340.837642][ T8906] netlink: 'syz.1.1244': attribute type 1 has an invalid length. [ 340.878218][ T8906] netlink: 15366 bytes leftover after parsing attributes in process `syz.1.1244'. [ 340.952042][ T4549] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 340.972051][ T4430] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 341.003124][ T4430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.011139][ T4430] usb 1-1: Product: syz [ 341.016185][ T4549] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.037971][ T4549] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.047236][ T4430] usb 1-1: Manufacturer: syz [ 341.051890][ T4430] usb 1-1: SerialNumber: syz [ 341.057462][ T4549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.073706][ T4430] usb 1-1: config 0 descriptor?? [ 341.102232][ T8889] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 341.253361][ T26] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 341.452013][ T4504] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 341.502082][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 341.622070][ T26] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 341.640815][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.671518][ T26] usb 5-1: config 0 descriptor?? [ 341.723959][ T26] gspca_main: sunplus-2.14.0 probing 041e:400b [ 341.735406][ T25] audit: type=1326 audit(1731787160.495:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.3.1249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe53ad82719 code=0x0 [ 341.822191][ T4504] usb 2-1: config 0 has no interfaces? [ 341.982279][ T4504] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 342.003820][ T4504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.038859][ T4504] usb 2-1: Product: syz [ 342.058933][ T4504] usb 2-1: Manufacturer: syz [ 342.081338][ T4504] usb 2-1: SerialNumber: syz [ 342.119468][ T4504] usb 2-1: config 0 descriptor?? [ 342.812025][ T26] gspca_sunplus: reg_w_riv err -71 [ 342.817360][ T26] sunplus: probe of 5-1:0.0 failed with error -71 [ 342.857910][ T26] usb 5-1: USB disconnect, device number 32 [ 343.110771][ T4506] usb 1-1: USB disconnect, device number 31 [ 343.131915][ T4430] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 343.218060][ T4549] usb 3-1: USB disconnect, device number 54 [ 343.411998][ T4430] usb 4-1: Using ep0 maxpacket: 32 [ 343.496085][ T8937] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 343.526343][ T8937] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 343.572060][ T4430] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 343.589870][ T4430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.616323][ T4430] usb 4-1: config 0 descriptor?? [ 343.673838][ T4430] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 343.745100][ T8935] loop0: detected capacity change from 0 to 32768 [ 343.850720][ T8935] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 344.266465][ T4174] ocfs2: Unmounting device (7,0) on (node local) [ 344.488220][ T8952] loop2: detected capacity change from 0 to 16 [ 344.532938][ T8952] erofs: (device loop2): mounted with root inode @ nid 36. [ 344.548265][ T4432] usb 2-1: USB disconnect, device number 48 [ 344.640383][ T8959] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 344.661956][ T8959] netlink: 15366 bytes leftover after parsing attributes in process `syz.0.1257'. [ 344.706518][ T8961] handle_bad_sector: 4 callbacks suppressed [ 344.706553][ T8961] attempt to access beyond end of device [ 344.706553][ T8961] loop2: rw=524288, want=312, limit=16 [ 344.731972][ T8961] attempt to access beyond end of device [ 344.731972][ T8961] loop2: rw=524288, want=320, limit=16 [ 344.759085][ T8961] attempt to access beyond end of device [ 344.759085][ T8961] loop2: rw=524288, want=1049280, limit=16 [ 344.759354][ T8962] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 344.828696][ T8964] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 344.850311][ T8961] attempt to access beyond end of device [ 344.850311][ T8961] loop2: rw=524288, want=1049288, limit=16 [ 344.869382][ T8966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1263'. [ 344.878707][ T8961] attempt to access beyond end of device [ 344.878707][ T8961] loop2: rw=524288, want=24, limit=16 [ 344.895829][ T8961] attempt to access beyond end of device [ 344.895829][ T8961] loop2: rw=524288, want=32, limit=16 [ 345.002064][ T4430] gspca_vc032x: reg_w err -71 [ 345.009607][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.015377][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.020990][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.029570][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.036149][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.042236][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.048298][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.056547][ T8961] attempt to access beyond end of device [ 345.056547][ T8961] loop2: rw=524288, want=392, limit=16 [ 345.060459][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.088216][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.094171][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.103843][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.115590][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.121299][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.131778][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.141534][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.168220][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.200128][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.208007][ T4430] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.218487][ T4430] gspca_vc032x: Unknown sensor... [ 345.230613][ T4430] vc032x: probe of 4-1:0.0 failed with error -22 [ 345.246390][ T4430] usb 4-1: USB disconnect, device number 40 [ 346.221990][ T26] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 347.272010][ T4504] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 347.322258][ T26] usb 4-1: config 0 has no interfaces? [ 347.423398][ T8985] loop1: detected capacity change from 0 to 32768 [ 347.482235][ T26] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 347.526420][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.542022][ T4504] usb 5-1: Using ep0 maxpacket: 32 [ 347.577619][ T8985] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 347.712455][ T26] usb 4-1: Product: syz [ 347.754688][ T26] usb 4-1: Manufacturer: syz [ 347.776413][ T26] usb 4-1: SerialNumber: syz [ 347.807857][ T26] usb 4-1: config 0 descriptor?? [ 347.832146][ T4504] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 347.842057][ T4504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.850431][ T4504] usb 5-1: Product: syz [ 347.896639][ T4504] usb 5-1: Manufacturer: syz [ 347.901528][ T4504] usb 5-1: SerialNumber: syz [ 347.927710][ T4504] usb 5-1: config 0 descriptor?? [ 347.949685][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 347.981634][ T4164] ocfs2: Unmounting device (7,1) on (node local) [ 348.048639][ T9027] device erspan0 entered promiscuous mode [ 348.054832][ T4430] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 348.071053][ T9027] device macvtap1 entered promiscuous mode [ 348.208131][ T26] usb 5-1: USB disconnect, device number 33 [ 348.331919][ T4430] usb 1-1: Using ep0 maxpacket: 8 [ 349.332193][ T4430] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 349.352578][ T9046] loop1: detected capacity change from 0 to 16 [ 349.353640][ T4430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.375993][ T4430] usb 1-1: Product: syz [ 349.380515][ T4430] usb 1-1: Manufacturer: syz [ 349.386354][ T4430] usb 1-1: SerialNumber: syz [ 349.392546][ T4430] usb 1-1: config 0 descriptor?? [ 349.407010][ T9046] erofs: (device loop1): mounted with root inode @ nid 36. [ 349.433784][ T4430] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 349.560948][ T9049] attempt to access beyond end of device [ 349.560948][ T9049] loop1: rw=524288, want=312, limit=16 [ 349.591051][ T9049] attempt to access beyond end of device [ 349.591051][ T9049] loop1: rw=524288, want=320, limit=16 [ 349.604821][ T9049] attempt to access beyond end of device [ 349.604821][ T9049] loop1: rw=524288, want=1049280, limit=16 [ 349.717101][ T9049] handle_bad_sector: 3 callbacks suppressed [ 349.717142][ T9049] attempt to access beyond end of device [ 349.717142][ T9049] loop1: rw=524288, want=392, limit=16 [ 349.735670][ T9050] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 350.203827][ T4549] usb 4-1: USB disconnect, device number 41 [ 350.226087][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1294'. [ 350.301578][ T9059] device erspan0 entered promiscuous mode [ 350.342082][ T9059] device macvtap2 entered promiscuous mode [ 350.480696][ T9062] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 350.498393][ T9062] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 350.871968][ T26] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 350.943731][ T4552] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 351.122055][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 351.212244][ T4430] gspca_vc032x: reg_w err -71 [ 351.216975][ T4430] vc032x: probe of 1-1:0.0 failed with error -71 [ 351.242087][ T26] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 351.250758][ T4430] usb 1-1: USB disconnect, device number 32 [ 351.269878][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.291967][ T4504] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 351.364629][ T26] usb 5-1: config 0 descriptor?? [ 351.406895][ T26] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 351.532070][ T4552] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 351.544705][ T4552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.552079][ T4504] usb 4-1: Using ep0 maxpacket: 16 [ 351.563322][ T4552] usb 3-1: Product: syz [ 351.572206][ T4552] usb 3-1: Manufacturer: syz [ 351.577204][ T4552] usb 3-1: SerialNumber: syz [ 351.600536][ T4552] usb 3-1: config 0 descriptor?? [ 351.653739][ T4552] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 351.674831][ T4504] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.674904][ T4552] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input51 [ 351.697308][ T4504] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.747419][ T4504] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 351.776155][ T4504] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 351.832142][ T4504] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.952552][ T4504] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 351.971063][ T4504] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 351.981712][ T4504] usb 4-1: Manufacturer: syz [ 352.004678][ T4504] usb 4-1: config 0 descriptor?? [ 352.341873][ T4504] rc_core: IR keymap rc-hauppauge not found [ 352.347891][ T4504] Registered IR keymap rc-empty [ 352.359565][ T4504] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.393068][ T4504] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.434663][ T4504] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 352.448398][ T4504] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input52 [ 352.464324][ T4504] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.492075][ T4504] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.524780][ T4504] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.561994][ T4504] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.591958][ T4504] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.621983][ T4504] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.652733][ T4504] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.681998][ T4504] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.712066][ T4504] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.742032][ T4504] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.772748][ T4504] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 352.782041][ T4504] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 353.372022][ T26] gspca_vc032x: reg_r err -71 [ 353.377392][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.382930][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.388330][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.393695][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.399073][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.404571][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.404585][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.404595][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.420481][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.425952][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.431541][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.436905][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.442573][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.447856][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.453173][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.458566][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.466564][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.469683][ T4430] usb 3-1: USB disconnect, device number 55 [ 353.471964][ T26] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.471977][ T26] gspca_vc032x: Unknown sensor... [ 353.488921][ T26] vc032x: probe of 5-1:0.0 failed with error -22 [ 353.507093][ T26] usb 5-1: USB disconnect, device number 34 [ 354.003377][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1306'. [ 354.016891][ T9095] device macvtap2 entered promiscuous mode [ 354.040467][ T26] usb 4-1: USB disconnect, device number 42 [ 354.129650][ T9101] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 354.150081][ T9101] netlink: 15366 bytes leftover after parsing attributes in process `syz.4.1309'. [ 354.197411][ T4430] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 354.382257][ T4552] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 354.473787][ T9090] loop1: detected capacity change from 0 to 32768 [ 354.555996][ T9090] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 354.742996][ T4430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 354.754557][ T4430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 256, setting to 64 [ 354.766944][ T4430] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 354.776596][ T4430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.787270][ T4430] usb 1-1: config 0 descriptor?? [ 354.879902][ T4164] ocfs2: Unmounting device (7,1) on (node local) [ 354.957445][ T4552] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 354.965791][ T4552] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.976018][ T4552] usb 3-1: config 0 has no interface number 0 [ 354.982382][ T4552] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 354.993154][ T4552] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.142024][ T4430] ath6kl: Failed to submit usb control message: -71 [ 355.148727][ T4430] ath6kl: unable to send the bmi data to the device: -71 [ 355.161879][ T4430] ath6kl: Unable to send get target info: -71 [ 355.170045][ T4430] ath6kl: Failed to init ath6kl core: -71 [ 355.188615][ T4430] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 355.195655][ T4552] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 355.208265][ T4552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.216725][ T4430] usb 1-1: USB disconnect, device number 33 [ 355.224222][ T4552] usb 3-1: Product: syz [ 355.235536][ T4552] usb 3-1: Manufacturer: syz [ 355.240180][ T4552] usb 3-1: SerialNumber: syz [ 355.258734][ T4552] usb 3-1: config 0 descriptor?? [ 355.331993][ T4432] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 355.408124][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'. [ 355.419966][ T9129] device erspan0 entered promiscuous mode [ 355.427534][ T9129] device macvtap2 entered promiscuous mode [ 355.525294][ T4552] usbtouchscreen: probe of 3-1:0.117 failed with error -71 [ 355.544819][ T4552] usb 3-1: USB disconnect, device number 56 [ 355.555022][ T25] audit: type=1326 audit(1731787174.315:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53ad82719 code=0x7ffc0000 [ 355.581977][ T4432] usb 2-1: Using ep0 maxpacket: 32 [ 355.599993][ T9137] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 355.608626][ T25] audit: type=1326 audit(1731787174.315:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe53ad82719 code=0x7ffc0000 [ 355.628293][ T9137] netlink: 15366 bytes leftover after parsing attributes in process `syz.3.1323'. [ 355.636336][ T25] audit: type=1326 audit(1731787174.315:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53ad82719 code=0x7ffc0000 [ 355.742264][ T4432] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 355.767680][ T4432] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.793589][ T4432] usb 2-1: config 0 descriptor?? [ 355.846991][ T4432] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 355.972479][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 355.991415][ T9155] device macvtap3 entered promiscuous mode [ 356.106994][ T9156] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 356.130816][ T9156] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 356.249024][ T9168] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 356.284451][ T9168] netlink: 15366 bytes leftover after parsing attributes in process `syz.2.1335'. [ 356.666333][ T26] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 357.032000][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 357.046352][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 256, setting to 64 [ 357.059019][ T26] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 357.074392][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.088154][ T26] usb 3-1: config 0 descriptor?? [ 357.238648][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1341'. [ 357.250476][ T9188] device macvtap4 entered promiscuous mode [ 357.351977][ T26] ath6kl: Failed to submit usb control message: -71 [ 357.359099][ T26] ath6kl: unable to send the bmi data to the device: -71 [ 357.369266][ T26] ath6kl: Unable to send get target info: -71 [ 357.376862][ T26] ath6kl: Failed to init ath6kl core: -71 [ 357.394240][ T26] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 357.404625][ T26] usb 3-1: USB disconnect, device number 57 [ 357.494950][ T9200] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 357.503465][ T9200] netlink: 15366 bytes leftover after parsing attributes in process `syz.3.1348'. [ 357.798773][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 357.811983][ T4432] gspca_vc032x: reg_r err -71 [ 357.816804][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.822254][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.837776][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.840140][ T9214] device macvtap5 entered promiscuous mode [ 357.847886][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.861998][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.872930][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.883863][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.914182][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.919505][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.941917][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.947241][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.947720][ T9217] loop2: detected capacity change from 0 to 16 [ 357.968669][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.997165][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 358.002791][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 358.008763][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 358.027805][ T9217] erofs: (device loop2): mounted with root inode @ nid 36. [ 358.035175][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 358.040471][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 358.054974][ T4432] gspca_vc032x: I2c Bus Busy Wait 00 [ 358.060267][ T4432] gspca_vc032x: Unknown sensor... [ 358.092744][ T4432] vc032x: probe of 2-1:0.0 failed with error -22 [ 358.106428][ T4432] usb 2-1: USB disconnect, device number 49 [ 358.250909][ T9224] attempt to access beyond end of device [ 358.250909][ T9224] loop2: rw=524288, want=312, limit=16 [ 358.277845][ T9202] loop0: detected capacity change from 0 to 32768 [ 358.315724][ T9224] attempt to access beyond end of device [ 358.315724][ T9224] loop2: rw=524288, want=320, limit=16 [ 358.316024][ T9227] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 358.354859][ T9224] attempt to access beyond end of device [ 358.354859][ T9224] loop2: rw=524288, want=1049280, limit=16 [ 358.367871][ T9224] attempt to access beyond end of device [ 358.367871][ T9224] loop2: rw=524288, want=1049288, limit=16 [ 358.387328][ T9224] attempt to access beyond end of device [ 358.387328][ T9224] loop2: rw=524288, want=24, limit=16 [ 358.400027][ T9224] attempt to access beyond end of device [ 358.400027][ T9224] loop2: rw=524288, want=32, limit=16 [ 358.411487][ T9224] attempt to access beyond end of device [ 358.411487][ T9224] loop2: rw=524288, want=392, limit=16 [ 358.484861][ T9202] XFS (loop0): Mounting V5 Filesystem [ 358.504019][ T9240] netlink: 'syz.1.1360': attribute type 1 has an invalid length. [ 358.538942][ T9240] netlink: 15366 bytes leftover after parsing attributes in process `syz.1.1360'. [ 358.649572][ T9202] XFS (loop0): Ending clean mount [ 358.882794][ T4174] XFS (loop0): Unmounting Filesystem [ 359.276334][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1366'. [ 359.380469][ T9259] device macvtap6 entered promiscuous mode [ 359.657490][ T9270] program syz.3.1370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.795365][ T9274] netlink: 'syz.0.1372': attribute type 1 has an invalid length. [ 359.814202][ T9274] netlink: 15366 bytes leftover after parsing attributes in process `syz.0.1372'. [ 359.841951][ T4322] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 360.091975][ T4322] usb 5-1: Using ep0 maxpacket: 8 [ 360.166409][ T9257] loop1: detected capacity change from 0 to 32768 [ 360.212096][ T4322] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.235652][ T4322] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 360.331512][ T9257] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 360.552137][ T4322] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 360.562493][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 360.570662][ T4322] usb 5-1: Product: syz [ 360.583400][ T4322] usb 5-1: Manufacturer: syz [ 360.588007][ T4322] usb 5-1: SerialNumber: syz [ 360.670513][ T4322] usb 5-1: config 0 descriptor?? [ 360.696194][ T4164] ocfs2: Unmounting device (7,1) on (node local) [ 360.746824][ T9280] loop0: detected capacity change from 0 to 32768 [ 360.753664][ T4212] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 360.928252][ T9280] XFS (loop0): Mounting V5 Filesystem [ 360.960999][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1376'. [ 361.186878][ T4504] usb 5-1: USB disconnect, device number 35 [ 361.188342][ T9280] XFS (loop0): Ending clean mount [ 361.322018][ T4212] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 361.331077][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.384215][ T4212] usb 3-1: Product: syz [ 361.399166][ T4212] usb 3-1: Manufacturer: syz [ 361.409694][ T4212] usb 3-1: SerialNumber: syz [ 361.430070][ T4212] usb 3-1: config 0 descriptor?? [ 361.473598][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 361.494494][ T4212] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 361.516991][ T4174] XFS (loop0): Unmounting Filesystem [ 361.527965][ T4212] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input54 [ 361.610584][ T9312] device macvtap7 entered promiscuous mode [ 361.638140][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 362.062068][ T4504] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 362.264588][ T9325] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 362.276585][ T9325] netlink: 15366 bytes leftover after parsing attributes in process `syz.0.1385'. [ 362.301995][ T4504] usb 4-1: Using ep0 maxpacket: 16 [ 362.552153][ T4504] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 362.579842][ T4504] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 362.606955][ T4504] usb 4-1: Product: syz [ 362.621395][ T4504] usb 4-1: SerialNumber: syz [ 362.640107][ T4504] usb 4-1: config 0 descriptor?? [ 362.694320][ T4504] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 362.718802][ T4504] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 362.739970][ T4504] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 362.769482][ T4504] dvb_usb_af9035: probe of 4-1:0.0 failed with error -22 [ 362.813794][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1396'. [ 362.835522][ T9346] device erspan0 entered promiscuous mode [ 362.857827][ T9346] device macvtap1 entered promiscuous mode [ 362.866032][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1396'. [ 362.880629][ T9347] device erspan0 left promiscuous mode [ 362.909805][ T4432] usb 4-1: USB disconnect, device number 43 [ 362.942019][ T4504] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 363.015592][ T9336] loop1: detected capacity change from 0 to 32768 [ 363.116824][ T9336] XFS (loop1): Mounting V5 Filesystem [ 363.149298][ T9336] XFS (loop1): Ending clean mount [ 363.191948][ T4504] usb 5-1: Using ep0 maxpacket: 16 [ 363.312915][ T4504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.325980][ T4504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.336613][ T4504] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.354014][ T4504] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.366843][ T4504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.389301][ T4504] usb 5-1: config 0 descriptor?? [ 363.398277][ T4164] XFS (loop1): Unmounting Filesystem [ 363.497142][ T9364] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 363.506171][ T9364] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.1400'. [ 363.617011][ T4322] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 363.643613][ T4322] Bluetooth: hci4: Injecting HCI hardware error event [ 363.652673][ T4178] Bluetooth: hci4: hardware error 0x00 [ 363.893660][ T4504] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 363.915319][ T4504] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 363.940485][ T4504] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 363.948139][ T4504] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 363.955564][ T4504] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 363.968154][ T4504] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 363.975926][ T4504] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 363.981967][ T4432] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 363.983347][ T4504] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 363.998146][ T4504] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 364.005836][ T4504] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 364.013324][ T4504] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 364.024354][ T4504] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0010/input/input55 [ 364.042322][ T4322] usb 3-1: USB disconnect, device number 58 [ 364.137021][ T4504] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 364.168992][ T4504] usb 5-1: USB disconnect, device number 36 [ 364.241924][ T4432] usb 2-1: Using ep0 maxpacket: 8 [ 364.582228][ T4432] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 364.595945][ T4432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.610039][ T4432] usb 2-1: Product: syz [ 364.614548][ T4432] usb 2-1: Manufacturer: syz [ 364.619254][ T4432] usb 2-1: SerialNumber: syz [ 364.633195][ T4432] usb 2-1: config 0 descriptor?? [ 364.829924][ T9396] netlink: 'syz.4.1411': attribute type 1 has an invalid length. [ 364.840803][ T9396] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1411'. [ 364.897090][ T4432] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 364.910076][ T9391] loop2: detected capacity change from 0 to 32768 [ 365.032303][ T9391] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 365.202637][ T4322] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 365.449683][ T4166] ocfs2: Unmounting device (7,2) on (node local) [ 365.572153][ T4432] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 365.599910][ T4432] usb 2-1: USB disconnect, device number 50 [ 365.612063][ T4322] usb 4-1: config index 0 descriptor too short (expected 5292, got 77) [ 365.639793][ T4322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.684286][ T4322] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 20 [ 365.747784][ T25] audit: type=1326 audit(1731787184.505:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7994e5a719 code=0x7ffc0000 [ 365.841689][ T25] audit: type=1326 audit(1731787184.505:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f7994e5a719 code=0x7ffc0000 [ 365.852760][ T4322] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 365.926081][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.950328][ T25] audit: type=1326 audit(1731787184.505:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7994e5a719 code=0x7ffc0000 [ 365.993825][ T4322] usb 4-1: Product: syz [ 366.008321][ T4322] usb 4-1: Manufacturer: syz [ 366.062149][ T4322] usb 4-1: SerialNumber: syz [ 366.089943][ T4322] usb 4-1: config 0 descriptor?? [ 366.441934][ T4504] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 366.511957][ T4430] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 366.691892][ T4504] usb 3-1: Using ep0 maxpacket: 16 [ 366.751925][ T4430] usb 5-1: Using ep0 maxpacket: 32 [ 366.811968][ T4504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.833419][ T4504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.858602][ T4504] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.872301][ T4430] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 366.881910][ T4504] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 366.897401][ T4504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.908851][ T4430] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 366.934050][ T4504] usb 3-1: config 0 descriptor?? [ 366.964632][ T4430] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 366.979481][ T4430] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 366.998336][ T4430] usb 5-1: config 0 interface 0 has no altsetting 0 [ 367.162226][ T4430] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 367.195350][ T4430] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 367.209412][ T4430] usb 5-1: Product: syz [ 367.214072][ T4430] usb 5-1: Manufacturer: syz [ 367.219041][ T4430] usb 5-1: SerialNumber: syz [ 367.233816][ T4430] usb 5-1: config 0 descriptor?? [ 367.294009][ T4430] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 367.331962][ T4430] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 367.443602][ T4504] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.451247][ T4504] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.483055][ T4504] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.527553][ T1106] usb 5-1: USB disconnect, device number 37 [ 367.539073][ T4504] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.556379][ T1106] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 367.566648][ T4504] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.587473][ T4504] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.607517][ T4504] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.621931][ T4504] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.636437][ T4504] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.648058][ T9438] loop0: detected capacity change from 0 to 32768 [ 367.654633][ T4504] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.662058][ T4504] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.674642][ T4504] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0011/input/input56 [ 367.721033][ T9438] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 367.850887][ T1106] usb 4-1: USB disconnect, device number 44 [ 367.857257][ T4504] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 367.892820][ T4504] usb 3-1: USB disconnect, device number 59 [ 367.981913][ T4322] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 368.075057][ T4174] ocfs2: Unmounting device (7,0) on (node local) [ 368.127590][ T9459] [ 368.129922][ T9459] ====================================================== [ 368.136918][ T9459] WARNING: possible circular locking dependency detected [ 368.143937][ T9459] 5.15.172-syzkaller #0 Not tainted [ 368.149109][ T9459] ------------------------------------------------------ [ 368.156128][ T9459] syz.3.1433/9459 is trying to acquire lock: [ 368.162091][ T9459] ffff88802ab38c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 368.173156][ T9459] [ 368.173156][ T9459] but task is already holding lock: [ 368.180501][ T9459] ffffffff8dcbe6a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 368.190147][ T9459] [ 368.190147][ T9459] which lock already depends on the new lock. [ 368.190147][ T9459] [ 368.200531][ T9459] [ 368.200531][ T9459] the existing dependency chain (in reverse order) is: [ 368.209524][ T9459] [ 368.209524][ T9459] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 368.217508][ T9459] lock_acquire+0x1db/0x4f0 [ 368.222522][ T9459] __mutex_lock_common+0x1da/0x25a0 [ 368.228226][ T9459] mutex_lock_nested+0x17/0x20 [ 368.233509][ T9459] rfkill_register+0x30/0x880 [ 368.238687][ T9459] hci_register_dev+0x4dd/0xa50 [ 368.244040][ T9459] vhci_create_device+0x310/0x590 [ 368.249578][ T9459] vhci_write+0x382/0x430 [ 368.254409][ T9459] vfs_write+0xacd/0xe50 [ 368.259151][ T9459] ksys_write+0x1a2/0x2c0 [ 368.263991][ T9459] do_syscall_64+0x3b/0xb0 [ 368.268910][ T9459] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 368.275313][ T9459] [ 368.275313][ T9459] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 368.283112][ T9459] lock_acquire+0x1db/0x4f0 [ 368.288119][ T9459] __mutex_lock_common+0x1da/0x25a0 [ 368.293829][ T9459] mutex_lock_nested+0x17/0x20 [ 368.299360][ T9459] vhci_send_frame+0x8a/0xf0 [ 368.304455][ T9459] hci_send_frame+0x1af/0x2f0 [ 368.309630][ T9459] hci_tx_work+0xb2e/0x1a30 [ 368.314630][ T9459] process_one_work+0x8a1/0x10c0 [ 368.320078][ T9459] worker_thread+0xaca/0x1280 [ 368.325287][ T9459] kthread+0x3f6/0x4f0 [ 368.329867][ T9459] ret_from_fork+0x1f/0x30 [ 368.334788][ T9459] [ 368.334788][ T9459] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 368.343979][ T9459] lock_acquire+0x1db/0x4f0 [ 368.348995][ T9459] __flush_work+0xeb/0x1a0 [ 368.353911][ T9459] hci_dev_do_open+0xd19/0x1330 [ 368.359270][ T9459] hci_power_on+0x1cd/0x630 [ 368.364280][ T9459] process_one_work+0x8a1/0x10c0 [ 368.369724][ T9459] worker_thread+0xaca/0x1280 [ 368.374903][ T9459] kthread+0x3f6/0x4f0 [ 368.379471][ T9459] ret_from_fork+0x1f/0x30 [ 368.384411][ T9459] [ 368.384411][ T9459] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 368.392045][ T9459] lock_acquire+0x1db/0x4f0 [ 368.397081][ T9459] __mutex_lock_common+0x1da/0x25a0 [ 368.402788][ T9459] mutex_lock_nested+0x17/0x20 [ 368.408254][ T9459] bg_scan_update+0xa1/0x4a0 [ 368.413348][ T9459] process_one_work+0x8a1/0x10c0 [ 368.418804][ T9459] worker_thread+0xaca/0x1280 [ 368.424005][ T9459] kthread+0x3f6/0x4f0 [ 368.428578][ T9459] ret_from_fork+0x1f/0x30 [ 368.433507][ T9459] [ 368.433507][ T9459] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 368.443313][ T9459] validate_chain+0x1649/0x5930 [ 368.448670][ T9459] __lock_acquire+0x1295/0x1ff0 [ 368.454022][ T9459] lock_acquire+0x1db/0x4f0 [ 368.459031][ T9459] __flush_work+0xeb/0x1a0 [ 368.463950][ T9459] __cancel_work_timer+0x519/0x6a0 [ 368.469582][ T9459] hci_request_cancel_all+0xcb/0x300 [ 368.475372][ T9459] hci_dev_do_close+0x51/0x1070 [ 368.480722][ T9459] hci_rfkill_set_block+0x114/0x1a0 [ 368.486422][ T9459] rfkill_set_block+0x1e7/0x430 [ 368.491779][ T9459] rfkill_fop_write+0x5b7/0x790 [ 368.497138][ T9459] vfs_write+0x30c/0xe50 [ 368.501883][ T9459] ksys_write+0x1a2/0x2c0 [ 368.506711][ T9459] do_syscall_64+0x3b/0xb0 [ 368.511656][ T9459] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 368.518062][ T9459] [ 368.518062][ T9459] other info that might help us debug this: [ 368.518062][ T9459] [ 368.528277][ T9459] Chain exists of: [ 368.528277][ T9459] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 368.528277][ T9459] [ 368.543990][ T9459] Possible unsafe locking scenario: [ 368.543990][ T9459] [ 368.551420][ T9459] CPU0 CPU1 [ 368.556761][ T9459] ---- ---- [ 368.562100][ T9459] lock(rfkill_global_mutex); [ 368.566842][ T9459] lock(&data->open_mutex); [ 368.573928][ T9459] lock(rfkill_global_mutex); [ 368.581190][ T9459] lock((work_completion)(&hdev->bg_scan_update)); [ 368.587767][ T9459] [ 368.587767][ T9459] *** DEADLOCK *** [ 368.587767][ T9459] [ 368.595884][ T9459] 1 lock held by syz.3.1433/9459: [ 368.600881][ T9459] #0: ffffffff8dcbe6a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 368.610971][ T9459] [ 368.610971][ T9459] stack backtrace: [ 368.616852][ T9459] CPU: 0 PID: 9459 Comm: syz.3.1433 Not tainted 5.15.172-syzkaller #0 [ 368.625002][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 368.635039][ T9459] Call Trace: [ 368.638305][ T9459] [ 368.641219][ T9459] dump_stack_lvl+0x1e3/0x2d0 [ 368.645882][ T9459] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 368.651497][ T9459] ? print_circular_bug+0x12b/0x1a0 [ 368.656676][ T9459] check_noncircular+0x2f8/0x3b0 [ 368.661594][ T9459] ? add_chain_block+0x850/0x850 [ 368.666536][ T9459] ? lockdep_lock+0x11f/0x2a0 [ 368.671216][ T9459] ? _find_first_zero_bit+0xcf/0xf0 [ 368.676399][ T9459] validate_chain+0x1649/0x5930 [ 368.681235][ T9459] ? mark_lock+0x98/0x340 [ 368.685566][ T9459] ? reacquire_held_locks+0x660/0x660 [ 368.690924][ T9459] ? __lock_acquire+0x1295/0x1ff0 [ 368.695938][ T9459] ? look_up_lock_class+0x77/0x120 [ 368.701032][ T9459] ? register_lock_class+0x100/0x9a0 [ 368.706318][ T9459] ? mark_lock+0x98/0x340 [ 368.710632][ T9459] ? is_dynamic_key+0x1f0/0x1f0 [ 368.715462][ T9459] ? __lock_acquire+0x1295/0x1ff0 [ 368.720468][ T9459] ? mark_lock+0x98/0x340 [ 368.724794][ T9459] __lock_acquire+0x1295/0x1ff0 [ 368.729633][ T9459] lock_acquire+0x1db/0x4f0 [ 368.734118][ T9459] ? __flush_work+0xcf/0x1a0 [ 368.738691][ T9459] ? rcu_lock_release+0x5/0x20 [ 368.743437][ T9459] ? read_lock_is_recursive+0x10/0x10 [ 368.748792][ T9459] ? start_flush_work+0x776/0x820 [ 368.753806][ T9459] __flush_work+0xeb/0x1a0 [ 368.758204][ T9459] ? __flush_work+0xcf/0x1a0 [ 368.762772][ T9459] ? flush_work+0x20/0x20 [ 368.767102][ T9459] ? print_irqtrace_events+0x210/0x210 [ 368.772561][ T9459] ? lock_timer_base+0x260/0x260 [ 368.777491][ T9459] ? __cancel_work_timer+0x467/0x6a0 [ 368.782757][ T9459] __cancel_work_timer+0x519/0x6a0 [ 368.787852][ T9459] ? cancel_work_sync+0x20/0x20 [ 368.792684][ T9459] ? lockdep_hardirqs_on+0x94/0x130 [ 368.797865][ T9459] ? __cancel_work+0x2ef/0x380 [ 368.802608][ T9459] ? cancel_work+0x20/0x20 [ 368.807003][ T9459] ? print_irqtrace_events+0x210/0x210 [ 368.812457][ T9459] hci_request_cancel_all+0xcb/0x300 [ 368.817730][ T9459] hci_dev_do_close+0x51/0x1070 [ 368.822565][ T9459] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 368.828463][ T9459] ? _raw_spin_unlock+0x40/0x40 [ 368.833398][ T9459] hci_rfkill_set_block+0x114/0x1a0 [ 368.838579][ T9459] ? rcu_lock_release+0x20/0x20 [ 368.843408][ T9459] rfkill_set_block+0x1e7/0x430 [ 368.848246][ T9459] rfkill_fop_write+0x5b7/0x790 [ 368.853077][ T9459] ? rfkill_fop_read+0x470/0x470 [ 368.858015][ T9459] ? fsnotify_perm+0x64/0x590 [ 368.862670][ T9459] ? security_file_permission+0x75/0xa0 [ 368.868195][ T9459] ? rfkill_fop_read+0x470/0x470 [ 368.873118][ T9459] vfs_write+0x30c/0xe50 [ 368.877345][ T9459] ? file_end_write+0x250/0x250 [ 368.882173][ T9459] ? __fget_files+0x413/0x480 [ 368.886834][ T9459] ? __fdget_pos+0x1e9/0x380 [ 368.891405][ T9459] ? ksys_write+0x77/0x2c0 [ 368.895799][ T9459] ksys_write+0x1a2/0x2c0 [ 368.900109][ T9459] ? print_irqtrace_events+0x210/0x210 [ 368.905547][ T9459] ? __ia32_sys_read+0x80/0x80 [ 368.910305][ T9459] ? syscall_enter_from_user_mode+0x2e/0x240 [ 368.916266][ T9459] ? lockdep_hardirqs_on+0x94/0x130 [ 368.921449][ T9459] ? syscall_enter_from_user_mode+0x2e/0x240 [ 368.927411][ T9459] do_syscall_64+0x3b/0xb0 [ 368.931820][ T9459] ? clear_bhb_loop+0x15/0x70 [ 368.936478][ T9459] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 368.942355][ T9459] RIP: 0033:0x7fe53ad82719 [ 368.946753][ T9459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.966336][ T9459] RSP: 002b:00007fe5391fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 368.975166][ T9459] RAX: ffffffffffffffda RBX: 00007fe53af39f80 RCX: 00007fe53ad82719 [ 368.983118][ T9459] RDX: 0000000000000008 RSI: 0000000020000100 RDI: 0000000000000003 [ 368.991069][ T9459] RBP: 00007fe53adf575e R08: 0000000000000000 R09: 0000000000000000 [ 368.999031][ T9459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.006979][ T9459] R13: 0000000000000000 R14: 00007fe53af39f80 R15: 00007ffd6512d8f8 [ 369.014935][ T9459] [ 369.061889][ T4322] usb 2-1: Using ep0 maxpacket: 32 [ 369.191955][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.203140][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.212918][ T4322] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 369.222047][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.231249][ T4322] usb 2-1: config 0 descriptor?? [ 369.391902][ T4506] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 369.631890][ T4506] usb 1-1: Using ep0 maxpacket: 16 [ 369.911990][ T4506] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 369.921048][ T4506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.930032][ T4506] usb 1-1: Product: syz [ 369.934346][ T4506] usb 1-1: Manufacturer: syz [ 369.938931][ T4506] usb 1-1: SerialNumber: syz [ 369.945339][ T4506] usb 1-1: config 0 descriptor?? [ 369.951975][ T4322] usb 2-1: string descriptor 0 read error: -71 [ 369.971918][ T4322] uclogic 0003:5543:3031.0012: failed retrieving string descriptor #200: -71 [ 369.980691][ T4322] uclogic 0003:5543:3031.0012: failed retrieving pen parameters: -71 [ 369.990484][ T4506] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 369.999017][ T4322] uclogic 0003:5543:3031.0012: failed probing pen v2 parameters: -71 [ 370.008201][ T4322] uclogic 0003:5543:3031.0012: failed probing parameters: -71 [ 370.015690][ T4322] uclogic: probe of 0003:5543:3031.0012 failed with error -71 [ 370.024731][ T4322] usb 2-1: USB disconnect, device number 51 [ 371.313705][ T4506] usb 1-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 371.514632][ T1106] usb 1-1: USB disconnect, device number 34 [ 371.521421][ T1106] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 371.532093][ T1106] ssu100 1-1:0.0: device disconnected