last executing test programs: 8m13.961651379s ago: executing program 0 (id=103): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x90}}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xb) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000000)=""/115) socket$nl_route(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r4) keyctl$restrict_keyring(0xa, r4, 0x0, &(0x7f0000000000)='id:cb2e') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/usb/drivers_autoprobe\x00', 0x100, 0x0) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) 8m13.54090598s ago: executing program 0 (id=104): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) 8m13.357987934s ago: executing program 0 (id=106): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x31, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = io_uring_setup(0x7480, &(0x7f0000000180)={0x0, 0x87f1, 0x40000, 0x3, 0x17b}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000200)={r0, 0x3, 0xf9a000, 0x6a, 0xfffffff8}, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000003521fcea0000000000ffffffff0000000000000000000000000000000000000018000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x2) 8m10.457050204s ago: executing program 0 (id=119): fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff000705810240000007050102400000070582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8m8.498041103s ago: executing program 0 (id=130): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x31, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = io_uring_setup(0x7480, &(0x7f0000000180)={0x0, 0x87f1, 0x40000, 0x3, 0x17b}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000200)={r0, 0x3, 0xf9a000, 0x6a, 0xfffffff8}, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000003521fcea0000000000ffffffff0000000000000000000000000000000000000018000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x2) 8m5.427361378s ago: executing program 0 (id=145): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x2}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x4040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m4.9339197s ago: executing program 32 (id=145): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x2}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x4040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m8.208898959s ago: executing program 5 (id=891): openat$nullb(0xffffffffffffff9c, 0x0, 0x185202, 0x0) getpid() socket$inet(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffff01, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x280}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffff8) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 4m3.440916455s ago: executing program 5 (id=901): ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fcntl$getown(r1, 0x9) sched_setaffinity(r2, 0x0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) setns(0xffffffffffffffff, 0x24020000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 3m59.421202372s ago: executing program 5 (id=905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd700000100000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00010028010000000000007104baf9e9260570f1539facea93b34858023a7b46af9a1190c109ff2b99f29d7e2dfd981de5ac5b0afd747e8ac7ac94819bfbc5eaede5ba168b05b19121d0073a9ee37daf03f84875d6a68afa161b689aa87040950fd0d3872639ae86bee695037c4a1bce3c9dbd65eb81662e74d10702c893825ee74b461b15b20e4ec7d7c3c3af1678a9589c37097d99bc26a78f96b910612e9162d17c475a922e9c37b3c114c8d12739bf68a5489ff6ddcd8ccc9e5bc1bbd9aa9abacf889306fcc7348cd3"], 0x48}}, 0x4) 3m55.938185626s ago: executing program 5 (id=911): openat$nullb(0xffffffffffffff9c, 0x0, 0x185202, 0x0) getpid() socket$inet(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffff01, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x7, 0x3ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x280}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffff8) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 3m50.371085121s ago: executing program 5 (id=920): ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$getown(r1, 0x9) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) fsmount(0xffffffffffffffff, 0x1, 0x0) 3m46.465386216s ago: executing program 5 (id=929): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x804) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 3m31.347244572s ago: executing program 33 (id=929): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x804) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 17.328267761s ago: executing program 3 (id=1439): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x3}, 0x6) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4) creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) 16.897504411s ago: executing program 4 (id=1442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x24}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) setgroups(0x700, &(0x7f0000000280)) 15.861531436s ago: executing program 4 (id=1444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) 13.879138534s ago: executing program 3 (id=1447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0xc3ff, {0x0, 0x0, 0x74, r2, {}, {0xffff, 0x1}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 12.749018531s ago: executing program 1 (id=1449): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) 12.088017778s ago: executing program 1 (id=1450): socket$inet6(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x808, &(0x7f0000000300)=ANY=[@ANYBLOB='cruft,block=0x0000000000000000,showassoc,dmode=0x0000000000000005,nojoliet,uid=', @ANYRESHEX=0x0, @ANYRESHEX], 0x0, 0x690, &(0x7f0000000cc0)="$eJzs3e9vE/cZAPDHlIgolappmyqEKL3CJoFEg+2UoKhv5jmX5FrbZ905FbzqUEkqRGg36KTBq/Km26Ttj+jb/RHbX1Tt7d4x+WxTQ344QEko+nwsuK/vHt/3+R7mHl1yPwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiFp7tV5v1KKT9TavJ/trrxZ594Dlk/X956nJAf1G1IZ/Yn4+To9mnf71j4vfHf51Ps6O3p2N+eFkPh6+/e4vPv7VyROTzx+Q0JG4/+DhnZs7O1v3Dhk/Gd4rTuvIrKe9rMyzbms9TbIyT1aWl+tXNtbKZC3rpOWNcpB2k3aRtgZ5kVxsX0oaKytLSbp4I9/sra+2Oulk5rUPm/X6cvLJYj9tFWXeu/LJYtneyDqdrLdexQwXD2OuDb+In2aDZJC2ukmyfXtna2lWksOgxmGCmrOCmvVms9FoNhvLV1euXqvXT+6aUX9G7Io4/i8tx+un23nDSzoxrv/RiSx6sRnXI9nz1Y7VKCKP7j7Lxyb1/7dX0lHr2737na7/kyp/+sfFZ6Kq/+dG787tV//3yeXoXvfjQTyMO3EzdmIntuLesWd0tK/1SKMXWZSRRxbdaFVzkvGcJFZiOZajHp/HRqxFGUmsRRadSKOMG1HGINLqG9WOItJoxSDyKCKJi9GOS5FEI1ZiJZYiiTQW40bksRm9WI/VaFVr2Y7b1XZfOiDHJ0GNwwQ1DwhS/3le87vmvJodObyAx5P6DwAAALyxatVP34fH/3PxXtVayzpp/bjTAgAAAH5C1W/+zw4nc8PWe1Fz/A8AAABvmlp1jV0tIhbi/VFrciXU5IcAc8ecIgAAAPCSqt//nxtOFoat96O26/gfAAAA+Jn728x77M/3T9X+/d8oirnao/7139TutoZxrbtvjT5XTf73eGTYHqydqb0zXkk1WT45ftdOz9bGd798chPM8ckFP2zPyqN2YALT9k8g/hEfjGI+uDWa3posGfXydmSddLGddz5uRKv1zolBen3w569u/yWq4f+9132nFtu3d7YWv/h651aVy6PhWh7dHd9Acdd9FCe5DMc0zmWy6JvqfgvVNRd7jniuuhBj3O/CqN/69PhPjD5+4jnG/12cH8WcX4jHpyJi4enxzw/7bCzuN/pxFo0qi/mnOt135HtmcWEUc+HihdFkjyyas7JoTm//F9oWh8hiaVYWSy+ZBcBx2Z5RhWq7C/8L7OWOprp/FxdHMRfPVDvWk2f22KPXZ+3R689T1/fI4l9xaRRzaRK8X40d9vvPZ6rq98MPfL9vv2WnWRtuwre+ufvHePf+g4cf3r5788utL7e+ajaXlusf1etXmzFXDWM8UXsA2MPsZ+zMjKh9NOOo+pdPTilYjC/i69iJW3G5utqgOuNgz7UuxPbvYnwawuWpo9bKM0etC1NPeLk846huYepBL4ePXTqCfwkAODrnZ9Thw9T/yzOOuxemTim8POPoeLqWAwCvRlr8UFsY/LVWFFn/88bKSqM12EiTIm9/mhTZ6nqaZL1BWrQ3Wr31NOkX+SBv551h47NsNS2TcrPfz4tBspYXST8vs+vVk9+T8aPfy7Tb6g2ydtnvpK0yTdp5b9BqD5LVrGwn/c3fd7JyIy2qD5f9tJ2tZe3WIMt7SZlvFu10MUnKNJ0KzFbT3iBby4bNXtIvsm6ruJF8lnc2u2mympbtIusP8tEKJ31lvbW86FarXTzujQ0Ar4n7Dx7eubmzs3XvFTbi1HGPEgCYNlWlAQAAAAAAAAAAAACA19RRXP/3Bjb+9HPedKdejzQ0jqXx7R9G//NnBR/3ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdvt/AAAA//+qEFfo") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x30, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000f800000000000000fb"], 0x200000) 11.268853438s ago: executing program 1 (id=1452): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x272, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xc0, 0xc, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x2, 0x5f, 0x1, {0x22, 0x651}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x10, 0x1, 0x3}}}}}]}}]}}, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10.810579049s ago: executing program 3 (id=1454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x24}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) setgroups(0x700, &(0x7f0000000280)) 10.719731421s ago: executing program 4 (id=1455): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff00000007058102000200070502020002"], 0x0) ioctl(r0, 0x8914, &(0x7f0000000200)='usb0\x00'/16) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 9.852973762s ago: executing program 3 (id=1456): syz_usb_connect(0x3, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040f00a116700000102000109022a00010100c0000904000003ff00000003240107058102"], 0x0) 9.603698818s ago: executing program 2 (id=1458): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x3}, 0x6) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4) creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) 8.888891375s ago: executing program 2 (id=1459): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x31, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = io_uring_setup(0x7480, &(0x7f0000000180)={0x0, 0x87f1, 0x40000, 0x3, 0x17b}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000200)={r0, 0x3, 0xf9a000, 0x6a, 0xfffffff8}, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000003521fcea0000000000ffffffff0000000000000000000000000000000000000018000000000000000000000000000000000000000000000000fcffffff00"/135]}, 0xff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000340)={0x70000, 0x1108000}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2) 7.596323607s ago: executing program 1 (id=1460): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00') ioctl$KDSKBLED(r6, 0xc0686611, 0x20000081) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4}, [@generic={0x4, 0xa, 0x0, 0x9, 0x5139e381}, @alu={0x4, 0x1, 0x5, 0x4, 0x1, 0x40, 0x10}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x41100, 0x4, '\x00', r5, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f00000003c0)=[r4, r4, r4, r4], 0x0, 0x10, 0x6}, 0x94) write(r4, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,rol', 0x33) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 6.500540213s ago: executing program 1 (id=1461): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x25dfdbfe, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 5.561026516s ago: executing program 6 (id=1463): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1000, 0x8}}]}}}]}, 0x58}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286", 0xd, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 5.38276064s ago: executing program 2 (id=1464): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0xc3ff, {0x0, 0x0, 0x74, r2, {}, {0xffff, 0x1}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 5.231114054s ago: executing program 6 (id=1465): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) 5.171307955s ago: executing program 3 (id=1466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x24}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) setgroups(0x700, &(0x7f0000000280)) 5.169775595s ago: executing program 1 (id=1467): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) r3 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x14, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4000) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d7, &(0x7f0000000040)) 5.036599119s ago: executing program 2 (id=1468): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") 4.839262134s ago: executing program 4 (id=1469): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x3}, 0x6) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4) creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) 4.839102043s ago: executing program 2 (id=1470): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x272, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xc0, 0xc, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x2, 0x5f, 0x1, {0x22, 0x651}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x10, 0x1, 0x3}}}}}]}}]}}, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.007214663s ago: executing program 3 (id=1471): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000300)={0x1}) 2.90879971s ago: executing program 4 (id=1472): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00') ioctl$KDSKBLED(r6, 0xc0686611, 0x20000081) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4}, [@generic={0x4, 0xa, 0x0, 0x9, 0x5139e381}, @alu={0x4, 0x1, 0x5, 0x4, 0x1, 0x40, 0x10}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x41100, 0x4, '\x00', r5, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f00000003c0)=[r4, r4, r4, r4], 0x0, 0x10, 0x6}, 0x94) write(r4, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,rol', 0x33) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) 2.228878397s ago: executing program 6 (id=1473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c01000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.2502147s ago: executing program 4 (id=1474): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x31, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = io_uring_setup(0x7480, &(0x7f0000000180)={0x0, 0x87f1, 0x40000, 0x3, 0x17b}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000200)={r0, 0x3, 0xf9a000, 0x6a, 0xfffffff8}, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000003521fcea0000000000ffffffff0000000000000000000000000000000000000018000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff"]}, 0x104) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000340)={0x70000, 0x1108000}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2) 723.123363ms ago: executing program 2 (id=1475): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0xf0f022}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000140), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x0, 0x0, 0x2, 0xb, 0x5, 0xffffffffffffffff, 0xfffffffffffffff0}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r9, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) ioctl$TIOCSETD(r8, 0x5423, 0x0) ioctl$TCFLSH(r8, 0x400455c8, 0x4) 721.812593ms ago: executing program 6 (id=1476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b938"], 0xfdef) 168.954627ms ago: executing program 6 (id=1477): 0s ago: executing program 6 (id=1478): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x25dfdbfe, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) kernel console output (not intermixed with test programs): .281612][ T6465] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.298142][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.306633][ T4339] usb 2-1: Product: syz [ 219.389042][ T4339] usb 2-1: Manufacturer: syz [ 219.393719][ T4339] usb 2-1: SerialNumber: syz [ 219.451443][ T4339] cdc_mbim 2-1:1.0: skipping garbage [ 219.471517][ T4441] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 219.471872][ T4339] usb 2-1: selecting invalid altsetting 1 [ 219.509040][ T4274] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 219.849995][ T6448] loop5: detected capacity change from 0 to 8192 [ 219.857243][ T6448] FAT-fs (loop5): Unrecognized mount option "noÃqßrOÔ–Îì{X3hgÛ " or missing value [ 219.898990][ T4339] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 219.918013][ T4339] cdc_mbim 2-1:1.0: bind() failure [ 220.004796][ T4339] usb 2-1: USB disconnect, device number 25 [ 220.258382][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.474908][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.002076][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.513'. [ 221.978390][ T4316] usb 5-1: USB disconnect, device number 18 [ 222.225513][ T4274] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 223.969931][ T6540] netlink: 'syz.3.525': attribute type 8 has an invalid length. [ 224.337190][ T6551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.527'. [ 224.727364][ T4274] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 224.907620][ T129] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 225.112907][ T129] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.136036][ T129] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 225.273319][ T129] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.302024][ T129] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 225.329864][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.359769][ T129] usb 5-1: Product: syz [ 226.533197][ T6577] sched: RT throttling activated [ 226.548656][ T129] usb 5-1: Manufacturer: syz [ 226.553328][ T129] usb 5-1: SerialNumber: syz [ 226.732585][ T129] usb 5-1: selecting invalid altsetting 1 [ 226.738955][ T129] snd-usb-caiaq 5-1:1.0: can't set alt interface. [ 226.770770][ T129] usb 5-1: unable to init card! (ret=-5) [ 226.777038][ T129] snd-usb-caiaq: probe of 5-1:1.0 failed with error -5 [ 227.218093][ T129] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 227.429917][ T129] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.443062][ T129] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 227.452869][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.521466][ T129] as10x_usb: device has been detected [ 227.538519][ T129] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 227.603014][ T129] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 227.746975][ T129] as10x_usb: error during firmware upload part1 [ 227.758368][ T129] Registered device Abilis Systems DVB-Titan [ 228.003150][ T6606] loop3: detected capacity change from 0 to 512 [ 229.184295][ T129] usb 5-1: USB disconnect, device number 19 [ 229.356515][ T4274] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 230.616887][ T6620] device syzkaller0 entered promiscuous mode [ 230.651579][ T6620] tipc: Started in network mode [ 230.656551][ T6620] tipc: Node identity 1644255c22cf, cluster identity 4711 [ 230.671621][ T6620] tipc: Enabled bearer , priority 0 [ 230.725847][ T6620] tipc: Resetting bearer [ 230.775313][ T6619] tipc: Resetting bearer [ 230.896617][ T6619] tipc: Disabling bearer [ 231.004713][ T6629] process 'syz.4.550' launched './file0' with NULL argv: empty string added [ 232.065820][ T6637] device syzkaller0 entered promiscuous mode [ 232.103077][ T6637] tipc: Started in network mode [ 232.141347][ T6637] tipc: Node identity dac599f978a3, cluster identity 4711 [ 232.176524][ T6637] tipc: Enabled bearer , priority 0 [ 232.214312][ T6636] tipc: Resetting bearer [ 232.301594][ T6636] tipc: Disabling bearer [ 232.373654][ T4274] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 232.607707][ T4344] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 232.645479][ T6658] loop5: detected capacity change from 0 to 1024 [ 232.677070][ T6658] EXT4-fs: Ignoring removed bh option [ 232.798304][ T6658] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 232.813100][ T4344] usb 2-1: Using ep0 maxpacket: 32 [ 232.821811][ T6658] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.822704][ T4344] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.849625][ T4344] usb 2-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 232.865248][ T4344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.880102][ T4344] usb 2-1: Dual-Role OTG device on HNP port [ 232.886845][ T4344] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 232.898067][ T4344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.906293][ T4344] usb 2-1: Product: syz [ 232.910678][ T4344] usb 2-1: Manufacturer: syz [ 232.915500][ T4344] usb 2-1: SerialNumber: syz [ 233.000044][ T4916] EXT4-fs (loop5): unmounting filesystem. [ 233.140379][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.207248][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.307375][ T6649] loop3: detected capacity change from 0 to 7 [ 233.362501][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.421216][ T6649] loop3: p1 p4 [ 233.439169][ T6649] loop3: partition table partially beyond EOD, truncated [ 233.470308][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.918769][ T4319] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 233.957631][ T129] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 234.119511][ T4319] usb 6-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 234.142118][ T4319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 234.149543][ T129] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 234.166105][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.203703][ T4319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 234.259066][ T4319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 234.339089][ T4317] usb 3-1: USB disconnect, device number 12 [ 234.347574][ T4319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 234.364280][ T4319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 234.374826][ T4319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 234.414380][ T4317] Unregistered device Abilis Systems DVB-Titan [ 234.422428][ T4317] as10x_usb: device has been disconnected [ 234.461749][ T4319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 234.527353][ T4319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 234.564290][ T4319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 234.605250][ T4319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 234.676715][ T4319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 234.706747][ T4319] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 194, changing to 11 [ 234.735855][ T4319] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 58790, setting to 1024 [ 234.747461][ T4319] usb 6-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 234.780128][ T4319] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 234.808011][ T4319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.828841][ T4319] usb 6-1: Product: syz [ 234.833318][ T4319] usb 6-1: Manufacturer: syz [ 234.841966][ T4319] usb 6-1: SerialNumber: syz [ 234.858072][ T6673] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 234.866268][ T6673] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 234.874079][ T6673] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 234.881789][ T6673] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 234.891502][ T6673] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 234.899166][ T6673] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 234.906599][ T6673] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 234.914537][ T6673] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 234.922470][ T6673] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 234.930156][ T6673] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 234.937892][ T6673] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 234.945719][ T6673] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 234.983508][ T4319] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 234.998340][ T4319] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 235.027935][ T4319] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 235.047842][ T4319] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 235.058547][ T4319] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 235.512917][ T32] usb 6-1: USB disconnect, device number 9 [ 235.541085][ T32] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 235.571370][ T32] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 235.594207][ T32] keyspan 6-1:1.0: device disconnected [ 236.002221][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 236.039409][ T129] net1080 5-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, 7e:d0:d8:dd:54:41 [ 236.349707][ T4344] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 236.579274][ T4344] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 236.652103][ T4441] udevd[4441]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.668668][ T4274] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 236.682625][ T4344] usb 2-1: USB disconnect, device number 26 [ 237.165561][ T6704] loop5: detected capacity change from 0 to 764 [ 237.229625][ T4441] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.986915][ T26] audit: type=1326 audit(1788598697.151:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.5.575" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9270d9e159 code=0x7ffc0000 [ 239.046770][ T26] audit: type=1326 audit(1788598697.161:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.5.575" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9270d9e159 code=0x7ffc0000 [ 239.081950][ T26] audit: type=1326 audit(1788598697.161:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.5.575" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9270d9e159 code=0x7ffc0000 [ 239.117344][ T26] audit: type=1326 audit(1788598697.161:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.5.575" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9270d9e159 code=0x7ffc0000 [ 239.149658][ T26] audit: type=1326 audit(1788598697.161:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.5.575" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9270d9e159 code=0x7ffc0000 [ 239.183637][ T26] audit: type=1326 audit(1788598697.161:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.5.575" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9270d9e159 code=0x7ffc0000 [ 239.211719][ T26] audit: type=1326 audit(1788598697.161:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.5.575" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9270d9e159 code=0x7ffc0000 [ 239.287662][ T4274] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 241.110678][ T6703] tipc: Enabled bearer , priority 0 [ 241.118488][ T6698] device syzkaller0 entered promiscuous mode [ 241.172723][ T4261] usb 5-1: USB disconnect, device number 20 [ 241.189587][ T4261] net1080 5-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 241.385567][ T6703] tipc: Resetting bearer [ 241.715230][ T6703] tipc: Disabling bearer [ 242.677824][ T4316] tipc: Node number set to 1863348816 [ 246.234129][ T6798] device syzkaller0 entered promiscuous mode [ 246.264956][ T6798] tipc: Enabled bearer , priority 0 [ 246.320858][ T6796] tipc: Resetting bearer [ 246.358086][ T129] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 246.457839][ T32] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 246.580477][ T129] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 246.603836][ T129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.609855][ T6796] tipc: Disabling bearer [ 246.640066][ T4274] Bluetooth: hci4: link tx timeout [ 246.645252][ T4274] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 246.653413][ T4274] Bluetooth: hci4: link tx timeout [ 246.659028][ T4274] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 246.669605][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.684608][ T32] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 246.701981][ T129] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 246.711381][ T129] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 246.720015][ T129] usb 2-1: Product: syz [ 246.727362][ T32] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 246.740622][ T129] usb 2-1: Manufacturer: syz [ 246.745303][ T129] usb 2-1: SerialNumber: syz [ 246.751157][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.797558][ T32] usb 4-1: Product: syz [ 246.802921][ T129] usb 2-1: config 0 descriptor?? [ 246.828171][ T32] usb 4-1: Manufacturer: syz [ 246.876678][ T129] usb 2-1: selecting invalid altsetting 0 [ 246.901915][ T32] usb 4-1: SerialNumber: syz [ 247.073689][ T6790] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 247.178577][ T32] snd-usb-caiaq 4-1:1.0: invalid EPs [ 247.186011][ T32] usb 4-1: unable to init card! (ret=-22) [ 247.201587][ T32] snd-usb-caiaq: probe of 4-1:1.0 failed with error -22 [ 247.389238][ T32] usb 4-1: USB disconnect, device number 19 [ 248.783450][ T6790] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 249.099563][ T4344] usb 2-1: USB disconnect, device number 27 [ 249.620339][ T6832] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 253.269780][ T6865] device syzkaller0 entered promiscuous mode [ 253.355510][ T6865] tipc: Enabled bearer , priority 0 [ 253.430109][ T6862] tipc: Resetting bearer [ 253.625051][ T6862] tipc: Disabling bearer [ 255.902621][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.909617][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.749356][ T6890] nvmet: adding nsid 1 to subsystem testnqn [ 256.898890][ T6890] nvmet: failed to open block device (null): (-22) [ 261.321729][ T6916] device syzkaller0 entered promiscuous mode [ 261.437144][ T6916] tipc: Enabled bearer , priority 0 [ 261.643786][ T6915] tipc: Resetting bearer [ 262.752614][ T6915] tipc: Disabling bearer [ 263.002193][ T4316] tipc: Node number set to 881534300 [ 267.035652][ T6937] device syzkaller0 entered promiscuous mode [ 267.258917][ T6939] tipc: Enabled bearer , priority 0 [ 267.355939][ T6939] tipc: Resetting bearer [ 267.516124][ T6935] tipc: Resetting bearer [ 268.067722][ T6935] tipc: Disabling bearer [ 269.746265][ T6969] device syzkaller0 entered promiscuous mode [ 270.357323][ T6972] tipc: Enabled bearer , priority 0 [ 270.543239][ T6967] tipc: Resetting bearer [ 270.695005][ T6967] tipc: Disabling bearer [ 271.399797][ T6980] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6981] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6980] [ 272.439792][ T4274] Bluetooth: hci3: link tx timeout [ 272.447768][ T4274] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.538001][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 275.151071][ T7005] loop3: detected capacity change from 0 to 764 [ 278.487919][ T7044] loop5: detected capacity change from 0 to 764 [ 278.518059][ T4319] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 278.735138][ T4319] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 278.818640][ T4319] usb 2-1: config 0 interface 0 has no altsetting 0 [ 278.893654][ T4319] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 278.948671][ T7048] device syzkaller0 entered promiscuous mode [ 278.996737][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 278.998610][ T7048] tipc: Started in network mode [ 279.027156][ T7048] tipc: Node identity 2e39bfa29fde, cluster identity 4711 [ 279.048060][ T7048] tipc: Enabled bearer , priority 0 [ 279.070664][ T4319] usb 2-1: Product: syz [ 279.074979][ T4319] usb 2-1: Manufacturer: syz [ 279.110007][ T4319] usb 2-1: SerialNumber: syz [ 279.135805][ T4319] usb 2-1: config 0 descriptor?? [ 279.142394][ T7048] tipc: Resetting bearer [ 279.204796][ T4319] usb 2-1: selecting invalid altsetting 0 [ 279.254174][ T7047] tipc: Resetting bearer [ 279.380058][ T7040] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 279.575296][ T7047] tipc: Disabling bearer [ 281.175081][ T4319] usb 2-1: USB disconnect, device number 28 [ 281.786437][ T7081] loop1: detected capacity change from 0 to 764 [ 284.494440][ T7103] device syzkaller1 entered promiscuous mode [ 284.534088][ T7105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.686'. [ 284.567639][ T129] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 285.038811][ T129] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.076004][ T129] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 285.167367][ T129] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 285.197319][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.268627][ T129] usb 5-1: Product: syz [ 285.287524][ T4316] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 285.295348][ T129] usb 5-1: Manufacturer: syz [ 285.317799][ T129] usb 5-1: SerialNumber: syz [ 285.509171][ T4316] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 285.571381][ T4316] usb 4-1: config 0 interface 0 has no altsetting 0 [ 285.633783][ T4316] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 285.707450][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 285.758201][ T4316] usb 4-1: Product: syz [ 285.776996][ T4316] usb 4-1: Manufacturer: syz [ 285.793062][ T4316] usb 4-1: SerialNumber: syz [ 285.806915][ C1] usb 5-1: received EP1 urb->status = -2 [ 285.812737][ T129] usb 5-1: unable to init card! (ret=-110) [ 285.819289][ T129] snd-usb-caiaq: probe of 5-1:1.0 failed with error -110 [ 285.878419][ T4316] usb 4-1: config 0 descriptor?? [ 285.915642][ T4316] usb 4-1: selecting invalid altsetting 0 [ 285.967976][ T4352] usb 5-1: USB disconnect, device number 21 [ 286.118997][ T4316] usb 4-1: USB disconnect, device number 20 [ 286.385042][ T7125] loop5: detected capacity change from 0 to 764 [ 287.030383][ T7127] nvmet: failed to open block device (null): (-22) [ 287.296697][ T26] audit: type=1326 audit(1788598745.461:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0119e159 code=0x7ffc0000 [ 287.531295][ T26] audit: type=1326 audit(1788598745.511:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0119e159 code=0x7ffc0000 [ 287.621035][ T26] audit: type=1326 audit(1788598745.521:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fdf0119e159 code=0x7ffc0000 [ 287.712789][ T7140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.698'. [ 287.802079][ T26] audit: type=1326 audit(1788598745.521:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0119e159 code=0x7ffc0000 [ 287.913181][ T26] audit: type=1326 audit(1788598745.521:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0119e159 code=0x7ffc0000 [ 288.844069][ T7148] loop1: detected capacity change from 0 to 128 [ 289.420766][ T7154] loop1: detected capacity change from 0 to 256 [ 289.516905][ T7154] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 290.527182][ T26] audit: type=1800 audit(1788598748.011:35): pid=7159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.705" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 290.764797][ T7157] loop4: detected capacity change from 0 to 764 [ 290.798056][ T7163] nvmet: failed to open block device (null): (-22) [ 291.196026][ T7168] netlink: 68 bytes leftover after parsing attributes in process `syz.3.710'. [ 292.689439][ T7184] loop2: detected capacity change from 0 to 128 [ 293.537681][ T4316] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 293.567652][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.720'. [ 293.702106][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 293.738021][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 293.745835][ T4316] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 293.763054][ T7195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.720'. [ 293.773573][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.805010][ T4316] usb 2-1: config 0 descriptor?? [ 293.837741][ T4316] as10x_usb: device has been detected [ 293.871639][ T4316] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 293.974604][ T4316] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 293.996458][ T4316] as10x_usb: error during firmware upload part1 [ 294.035464][ T4316] Registered device nBox DVB-T Dongle [ 294.087648][ T7199] netlink: 68 bytes leftover after parsing attributes in process `syz.4.722'. [ 295.625937][ T7224] loop3: detected capacity change from 0 to 128 [ 295.794597][ T7186] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 295.827904][ T7186] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 295.871719][ T7186] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 295.886623][ T7186] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 295.895495][ T7186] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 295.910560][ T7186] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 295.922268][ T7186] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.932645][ T7186] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 295.944032][ T7186] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 295.956976][ T7186] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 295.966566][ T7186] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 295.976996][ T7186] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 296.006182][ T7186] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 296.240085][ T7230] loop2: detected capacity change from 0 to 764 [ 296.297539][ T4274] Bluetooth: hci0: command 0x0c1a tx timeout [ 296.365763][ T4316] usb 2-1: USB disconnect, device number 29 [ 296.443843][ T4316] Unregistered device nBox DVB-T Dongle [ 296.448357][ T4316] as10x_usb: device has been disconnected [ 296.685095][ T7239] netlink: 68 bytes leftover after parsing attributes in process `syz.1.734'. [ 297.414394][ T7253] loop5: detected capacity change from 0 to 128 [ 297.897692][ T4274] Bluetooth: hci1: command 0x0c1a tx timeout [ 297.977742][ T4274] Bluetooth: hci3: command 0x0c1a tx timeout [ 297.983942][ T4274] Bluetooth: hci4: command 0x0c1a tx timeout [ 297.993144][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.090249][ T7267] netlink: 36 bytes leftover after parsing attributes in process `syz.4.747'. [ 298.377814][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 299.977612][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 300.057747][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 300.064125][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 301.538807][ T7301] loop2: detected capacity change from 0 to 512 [ 301.697165][ T7301] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 301.841301][ T7301] EXT4-fs (loop2): 1 truncate cleaned up [ 301.884846][ T7301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 302.689200][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 308.225269][ T7378] MPTCP: kernel_bind error, err=-98 [ 309.974182][ T7388] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 310.197849][ T7395] MPTCP: kernel_bind error, err=-98 [ 311.438035][ T4274] Bluetooth: hci4: link tx timeout [ 311.448895][ T4274] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 311.456754][ T4274] Bluetooth: hci4: link tx timeout [ 311.463176][ T4274] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 311.538212][ T4352] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 311.737624][ T4352] usb 4-1: Using ep0 maxpacket: 8 [ 311.745206][ T4352] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 311.765606][ T4352] usb 4-1: config 179 has no interface number 0 [ 311.772386][ T4352] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 311.804244][ T4352] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 311.816148][ T4352] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 311.851175][ T4352] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 311.863480][ T4352] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 311.877352][ T4352] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 311.886835][ T4352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.933458][ T7407] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.409258][ T129] usb 4-1: USB disconnect, device number 21 [ 312.790074][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 312.802432][ T4352] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input18 [ 312.954077][ T129] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 313.537901][ T4352] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 313.565096][ T7432] MPTCP: kernel_bind error, err=-98 [ 313.739540][ T4352] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 313.794739][ T4352] usb 2-1: config 0 interface 0 has no altsetting 0 [ 313.822232][ T4352] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 313.855799][ T4352] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 313.925562][ T4352] usb 2-1: Product: syz [ 313.930462][ T4352] usb 2-1: Manufacturer: syz [ 313.935119][ T4352] usb 2-1: SerialNumber: syz [ 313.965292][ T4352] usb 2-1: config 0 descriptor?? [ 313.991324][ T4352] usb 2-1: selecting invalid altsetting 0 [ 314.275078][ T4352] usb 2-1: USB disconnect, device number 30 [ 315.450374][ T129] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 315.681707][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.709328][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.736120][ T129] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.374314][ T129] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.432248][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.522268][ T129] usb 4-1: config 0 descriptor?? [ 316.985514][ T129] usbhid 4-1:0.0: can't add hid device: -71 [ 316.998377][ T129] usbhid: probe of 4-1:0.0 failed with error -71 [ 317.010509][ T7463] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 317.026480][ T129] usb 4-1: USB disconnect, device number 22 [ 317.339650][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.346722][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.734575][ T7473] MPTCP: kernel_bind error, err=-98 [ 319.877740][ T32] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 320.089117][ T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.120079][ T32] usb 3-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 320.148943][ T32] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 320.188360][ T7491] loop3: detected capacity change from 0 to 512 [ 320.207010][ T32] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 320.223486][ T7491] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 320.307446][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.334812][ T32] usb 3-1: Product: syz [ 320.357933][ T32] usb 3-1: Manufacturer: syz [ 320.396628][ T32] usb 3-1: SerialNumber: syz [ 320.396855][ T7491] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 320.497586][ T7491] FAT-fs (loop3): Filesystem has been set read-only [ 320.520378][ T7495] device syzkaller0 entered promiscuous mode [ 320.560980][ T7495] tipc: Enabled bearer , priority 0 [ 320.593379][ T7495] tipc: Resetting bearer [ 320.638461][ T7494] tipc: Resetting bearer [ 320.717765][ T7494] tipc: Disabling bearer [ 320.860576][ C1] usb 3-1: received EP1 urb->status = -71 [ 320.866505][ T32] usb 3-1: unable to init card! (ret=-71) [ 320.872740][ T32] snd-usb-caiaq: probe of 3-1:1.0 failed with error -71 [ 320.891716][ T32] usb 3-1: USB disconnect, device number 13 [ 321.947825][ T4261] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 322.989402][ T4261] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.031393][ T4261] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.098204][ T4261] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.338354][ T4261] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.483032][ T4261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.686164][ T4261] usb 6-1: config 0 descriptor?? [ 323.965527][ T7530] CIFS: Attempting to mount \\127.0.0.1\share [ 324.146005][ T4261] usbhid 6-1:0.0: can't add hid device: -71 [ 324.163761][ T4261] usbhid: probe of 6-1:0.0 failed with error -71 [ 324.193283][ T7536] CIFS: VFS: Invalid response size 1 for command 0 [ 324.221398][ T7536] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 324.270218][ T4261] usb 6-1: USB disconnect, device number 10 [ 324.275739][ T7538] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 324.761648][ T7530] CIFS: VFS: cifs_mount failed w/return code = -5 [ 324.863314][ T7546] capability: warning: `syz.5.831' uses deprecated v2 capabilities in a way that may be insecure [ 328.677925][ T7567] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 330.187491][ T32] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 331.083992][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.097696][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.108079][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.121439][ T32] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.130850][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.155207][ T32] usb 3-1: config 0 descriptor?? [ 331.352718][ T4344] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 331.646898][ T32] usbhid 3-1:0.0: can't add hid device: -71 [ 331.653092][ T32] usbhid: probe of 3-1:0.0 failed with error -71 [ 331.701723][ T32] usb 3-1: USB disconnect, device number 14 [ 331.719307][ T4344] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 331.771269][ T4344] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 331.829630][ T4344] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 331.877744][ T4344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 331.923267][ T4344] usb 2-1: Product: syz [ 331.955204][ T4344] usb 2-1: Manufacturer: syz [ 331.989465][ T4344] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 332.317553][ T4261] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 332.395947][ T4344] mos7840: probe of ttyUSB0 failed with error -71 [ 332.418757][ T4344] usb 2-1: USB disconnect, device number 31 [ 332.445342][ T4344] mos7840 2-1:1.0: device disconnected [ 332.531463][ T4261] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.582409][ T4261] usb 5-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 332.667810][ T4261] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 332.756615][ T4261] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 333.757537][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.765627][ T4261] usb 5-1: Product: syz [ 333.770406][ T4261] usb 5-1: Manufacturer: syz [ 333.775515][ T4261] usb 5-1: SerialNumber: syz [ 334.057973][ T7596] device syzkaller0 entered promiscuous mode [ 334.090468][ T7596] tipc: Enabled bearer , priority 0 [ 334.179444][ T7596] tipc: Resetting bearer [ 334.219087][ C0] usb 5-1: received EP1 urb->status = -71 [ 334.225038][ T4261] usb 5-1: unable to init card! (ret=-71) [ 334.231504][ T4261] snd-usb-caiaq: probe of 5-1:1.0 failed with error -71 [ 334.248009][ T7595] tipc: Resetting bearer [ 334.271714][ T4261] usb 5-1: USB disconnect, device number 22 [ 334.529268][ T7595] tipc: Disabling bearer [ 335.322665][ T7609] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 341.447775][ T4339] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 341.798939][ T4339] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 341.923352][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.211262][ T4339] usb 5-1: NFC: Reader power on cmd error -71 [ 342.232943][ T4339] pn533_usb 5-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 342.294257][ T4339] pn533_usb: probe of 5-1:1.0 failed with error -71 [ 342.380434][ T4339] usb 5-1: USB disconnect, device number 23 [ 342.470729][ T7661] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 342.631103][ T7661] Bluetooth: ISO socket layer initialized [ 345.748288][ T7675] loop5: detected capacity change from 0 to 16 [ 346.052991][ T7677] MPTCP: kernel_bind error, err=-98 [ 346.141915][ T7678] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 346.269245][ T4486] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 346.342017][ T7663] loop5: detected capacity change from 0 to 8192 [ 346.349129][ T7663] FAT-fs (loop5): Unrecognized mount option "noÃqßrOÔ–Îì{X3hgÛ " or missing value [ 347.377971][ T7690] loop5: detected capacity change from 0 to 764 [ 347.425509][ T7690] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 347.603253][ T7696] CIFS: Attempting to mount \\127.0.0.1\share [ 348.015841][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'. [ 348.411629][ T7696] CIFS: VFS: cifs_mount failed w/return code = -112 [ 349.040814][ T7707] nvmet: failed to open block device (null): (-22) [ 354.482260][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.892'. [ 354.617658][ T4352] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 354.866564][ T4352] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 354.907399][ T4352] usb 3-1: config 0 interface 0 has no altsetting 0 [ 355.099966][ T4352] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 355.133576][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 355.161799][ T7752] device bond_slave_0 entered promiscuous mode [ 355.168492][ T7752] device bond_slave_1 entered promiscuous mode [ 355.187488][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 355.226767][ T4352] usb 3-1: Product: syz [ 355.249825][ T7752] device macvtap1 entered promiscuous mode [ 355.255839][ T7752] device bond0 entered promiscuous mode [ 355.257409][ T4352] usb 3-1: Manufacturer: syz [ 355.288131][ T4352] usb 3-1: SerialNumber: syz [ 355.304649][ T4352] usb 3-1: config 0 descriptor?? [ 355.491119][ T7752] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 355.879726][ T4352] usb 3-1: selecting invalid altsetting 0 [ 355.917198][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 356.074431][ T7754] device bond0 left promiscuous mode [ 356.112489][ T4352] usb 3-1: USB disconnect, device number 15 [ 356.167946][ T7754] device bond_slave_0 left promiscuous mode [ 356.173910][ T7754] device bond_slave_1 left promiscuous mode [ 356.272496][ T7758] loop1: detected capacity change from 0 to 16 [ 356.737956][ T7754] device macvtap1 left promiscuous mode [ 356.799381][ T7751] loop1: detected capacity change from 0 to 8192 [ 356.807470][ T7751] FAT-fs (loop1): Unrecognized mount option "noÃqßrOÔ–Îì{X3hgÛ " or missing value [ 358.501966][ T7768] nvmet: failed to open block device (null): (-22) [ 359.130090][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 363.283950][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.904'. [ 363.919778][ T7798] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7799] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7798] [ 365.597626][ T4320] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 365.819002][ T4320] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.829930][ T4320] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 365.840338][ T4320] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 365.869221][ T4320] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 366.013451][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.021882][ T4320] usb 3-1: Product: syz [ 366.054760][ T4320] usb 3-1: Manufacturer: syz [ 366.098370][ T4320] usb 3-1: SerialNumber: syz [ 366.633041][ C1] usb 3-1: received EP1 urb->status = -2 [ 366.639070][ T4320] usb 3-1: unable to init card! (ret=-110) [ 366.658174][ T4320] snd-usb-caiaq: probe of 3-1:1.0 failed with error -110 [ 366.897631][ T4274] Bluetooth: hci3: command 0x0405 tx timeout [ 366.901221][ T4319] usb 3-1: USB disconnect, device number 16 [ 367.027551][ T7815] nvmet: failed to open block device (null): (-22) [ 372.325455][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'. [ 374.182132][ T7870] nvmet: failed to open block device (null): (-22) [ 375.230032][ T7876] CIFS: Attempting to mount \\127.0.0.1\share [ 375.288009][ T7876] CIFS: VFS: Error connecting to socket. Aborting operation. [ 375.327916][ T7876] CIFS: VFS: cifs_mount failed w/return code = -111 [ 375.654117][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.927'. [ 375.781564][ T7880] device erspan0 entered promiscuous mode [ 375.835120][ T7880] device macvtap2 entered promiscuous mode [ 375.916150][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.927'. [ 376.038675][ T7883] device erspan0 left promiscuous mode [ 376.146887][ T7883] device macvtap2 left promiscuous mode [ 376.268998][ T7886] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 376.396639][ T4276] Bluetooth: hci4: link tx timeout [ 376.402631][ T4276] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 376.411517][ T4276] Bluetooth: hci4: link tx timeout [ 376.416687][ T4276] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 376.757680][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 378.779698][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.786142][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.407666][ T7920] nvmet: failed to open block device (null): (-22) [ 381.386049][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 381.406499][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.416355][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.050454][ T7938] CIFS: Attempting to mount \\127.0.0.1\share [ 384.409041][ T7938] CIFS: VFS: cifs_mount failed w/return code = -112 [ 385.751758][ T7964] nvmet: failed to open block device (null): (-22) [ 389.758075][ T7983] MPTCP: kernel_bind error, err=-98 [ 391.243806][ T7994] nvmet: failed to open block device (null): (-22) [ 393.151194][ T4274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 393.164030][ T4274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 393.165872][ T8012] loop3: detected capacity change from 0 to 256 [ 393.181355][ T4274] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 393.227967][ T4274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.238014][ T4274] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 393.245753][ T4274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.347623][ T8012] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 394.930043][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 395.337728][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 396.644543][ T8010] chnl_net:caif_netlink_parms(): no params data found [ 396.735085][ T8041] nvmet: failed to open block device (null): (-22) [ 397.417585][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 398.800388][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.858225][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.925645][ T8010] device bridge_slave_0 entered promiscuous mode [ 399.031035][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.303546][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.497549][ T4276] Bluetooth: hci5: command 0x040f tx timeout [ 399.615825][ T8010] device bridge_slave_1 entered promiscuous mode [ 399.967784][ T8010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.058176][ T8010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.577485][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 402.560323][ T8053] loop3: detected capacity change from 0 to 32768 [ 402.622190][ T8010] team0: Port device team_slave_0 added [ 403.379305][ T8010] team0: Port device team_slave_1 added [ 403.595230][ T6223] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.725825][ T7790] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by udevd (7790) [ 403.749676][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'. [ 403.910547][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.947600][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.255218][ T8010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.716650][ T8090] nvmet: failed to open block device (null): (-22) [ 404.774376][ T6223] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.869286][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.876735][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.066811][ T8010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.973767][ T6223] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.074190][ T8010] device hsr_slave_0 entered promiscuous mode [ 406.109822][ T8010] device hsr_slave_1 entered promiscuous mode [ 406.152184][ T8010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.214215][ T8010] Cannot create hsr debugfs directory [ 406.268293][ T8105] loop3: detected capacity change from 0 to 256 [ 406.284681][ T6223] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.401644][ T8105] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 408.323199][ T26] audit: type=1800 audit(1788598866.491:36): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.986" name="file1" dev="loop3" ino=1048625 res=0 errno=0 [ 408.873061][ T6223] tipc: Left network mode [ 409.617928][ T4339] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 409.816962][ T8010] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 409.819596][ T4339] usb 4-1: config 0 has no interfaces? [ 409.852043][ T4339] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 409.896793][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.944490][ T4339] usb 4-1: Product: syz [ 409.966897][ T4339] usb 4-1: Manufacturer: syz [ 410.000859][ T4339] usb 4-1: SerialNumber: syz [ 410.046385][ T4339] usb 4-1: config 0 descriptor?? [ 410.136848][ T8010] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 410.232926][ T8010] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 410.266338][ T8010] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 410.345630][ T4320] usb 4-1: USB disconnect, device number 23 [ 410.842475][ T8010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.973147][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 411.001753][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.242791][ T8010] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.736944][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 412.321564][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 412.368383][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.375537][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.566979][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 412.578309][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 412.658250][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 412.659047][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'. [ 412.728045][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.735233][ T4430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.778060][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 413.115043][ T8153] loop1: detected capacity change from 0 to 256 [ 413.192676][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 413.251748][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 413.315332][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 413.356793][ T8153] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 413.404429][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 413.433313][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 413.455188][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 413.518143][ T6223] device hsr_slave_0 left promiscuous mode [ 413.574673][ T6223] device hsr_slave_1 left promiscuous mode [ 413.812472][ T26] audit: type=1800 audit(1788598871.981:37): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.996" name="file1" dev="loop1" ino=1048627 res=0 errno=0 [ 414.509319][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.538725][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.636743][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.675239][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.809777][ T6223] device bridge_slave_1 left promiscuous mode [ 414.817087][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.887638][ T6223] device bridge_slave_0 left promiscuous mode [ 414.901323][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.013792][ T6223] device veth1_macvtap left promiscuous mode [ 416.021905][ T6223] device veth0_macvtap left promiscuous mode [ 416.047720][ T6223] device veth1_vlan left promiscuous mode [ 416.075506][ T6223] device veth0_vlan left promiscuous mode [ 418.311531][ T6223] team0 (unregistering): Port device team_slave_1 removed [ 418.377283][ T6223] team0 (unregistering): Port device team_slave_0 removed [ 418.438936][ T6223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.499615][ T6223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.953528][ T6223] bond0 (unregistering): Released all slaves [ 419.146862][ T8010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 419.159994][ T8010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.221114][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 419.230703][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 419.239365][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 419.248238][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 419.256801][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 419.279617][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 419.301824][ T8170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.999'. [ 419.362547][ T8171] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 423.463677][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.488336][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.524949][ T8010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.030899][ T26] audit: type=1800 audit(1788598882.201:38): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1009" name="device_path" dev="configfs" ino=46972 res=0 errno=0 [ 424.946849][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 424.964502][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 425.210589][ T8010] device veth0_vlan entered promiscuous mode [ 425.262231][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 425.298531][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 425.353459][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 425.392671][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 425.449796][ T8010] device veth1_vlan entered promiscuous mode [ 425.628089][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 425.794205][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 425.845235][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 425.885843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 425.948197][ T8010] device veth0_macvtap entered promiscuous mode [ 425.981893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 426.014340][ T8010] device veth1_macvtap entered promiscuous mode [ 427.672471][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.843992][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.985586][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.163287][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.341794][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.497285][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.663199][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.843356][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.011176][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.120720][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 429.177725][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 429.324857][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.445569][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.459351][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.470212][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.480165][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.491331][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.508520][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.520975][ T8010] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.544916][ T8010] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.567494][ T8010] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.576968][ T8010] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.589333][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 429.638658][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 429.752643][ T8293] loop2: detected capacity change from 0 to 256 [ 429.845305][ T8293] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 430.106618][ T6470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.133097][ T26] audit: type=1800 audit(1788598888.301:39): pid=8300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1023" name="file1" dev="loop2" ino=1048629 res=0 errno=0 [ 430.170889][ T6470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.229401][ T4352] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 430.264687][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 430.303432][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 430.439084][ T4352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.452750][ T6470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.462493][ T6470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.471109][ T4352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.485649][ T4352] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.499300][ T4352] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.509223][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 430.510803][ T4352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.528910][ T8305] device syzkaller0 entered promiscuous mode [ 430.548578][ T4352] usb 5-1: config 0 descriptor?? [ 430.973680][ T4352] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 431.007640][ T4352] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 431.041089][ T4352] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 431.077682][ T4352] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 431.098177][ T4352] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 431.109078][ T4352] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 431.138265][ T4352] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 431.397702][ T4319] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 431.487732][ T4352] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 431.607509][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 431.618373][ T4319] usb 3-1: config 1 interface 0 has no altsetting 0 [ 431.661709][ T4319] usb 3-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 431.704631][ T4352] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.726374][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.756639][ T4352] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 431.769163][ T4319] usb 3-1: Product: syz [ 431.784219][ T4319] usb 3-1: Manufacturer: syz [ 431.794627][ T4352] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 431.804633][ T4319] usb 3-1: SerialNumber: syz [ 431.835593][ T4352] usb 7-1: Product: syz [ 431.846118][ T4352] usb 7-1: Manufacturer: syz [ 431.857802][ T4352] usb 7-1: SerialNumber: syz [ 432.068248][ T4316] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 432.097164][ T4352] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 432.152293][ T4319] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input19 [ 432.184284][ T3623] bcm5974 3-1:1.0: could not read from device [ 432.244920][ T4319] usb 3-1: USB disconnect, device number 17 [ 432.257712][ T4316] usb 2-1: Using ep0 maxpacket: 16 [ 432.268797][ T4316] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.326316][ T4316] usb 2-1: config 0 interface 0 has no altsetting 0 [ 432.360058][ T4339] usb 7-1: USB disconnect, device number 2 [ 432.382500][ T4316] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 432.382915][ T4339] usblp1: removed [ 432.436803][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.466890][ T4316] usb 2-1: Product: syz [ 432.471702][ T4316] usb 2-1: Manufacturer: syz [ 432.476454][ T4316] usb 2-1: SerialNumber: syz [ 432.523133][ T4316] usb 2-1: config 0 descriptor?? [ 432.784745][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 432.834737][ T4316] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 432.930947][ T4316] imon:send_packet: packet tx failed (-71) [ 432.973505][ T4316] imon 2-1:0.0: panel buttons/knobs setup failed [ 433.022569][ T4314] usb 5-1: USB disconnect, device number 24 [ 433.487671][ T4316] rc_core: IR keymap rc-imon-pad not found [ 433.493897][ T4316] Registered IR keymap rc-empty [ 433.560999][ T4316] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 433.595403][ T4316] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 433.637726][ T4316] imon:send_packet: packet tx failed (-71) [ 433.660389][ T8356] loop3: detected capacity change from 0 to 256 [ 433.707757][ T4316] imon 2-1:0.0: remote input dev register failed [ 435.018129][ T4316] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 435.294759][ T8356] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 435.386235][ T4316] imon 2-1:0.0: unable to initialize intf0, err 0 [ 435.412617][ T4316] imon:imon_probe: failed to initialize context! [ 435.463438][ T4316] imon 2-1:0.0: unable to register, err -19 [ 435.537528][ T4316] usb 2-1: USB disconnect, device number 32 [ 436.037654][ T4316] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 436.254856][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.297987][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.347427][ T4316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 436.412183][ T4316] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.457599][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.498898][ T4316] usb 2-1: config 0 descriptor?? [ 436.940330][ T4316] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 436.960496][ T4316] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 436.996686][ T4316] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 437.024905][ T4316] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 437.038293][ T4316] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 437.069624][ T4316] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 437.118016][ T4316] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 437.192150][ T4339] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 437.399828][ T4339] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 437.433944][ T4339] usb 7-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 437.474576][ T4339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.541207][ T4339] net1080: probe of 7-1:1.0 failed with error -22 [ 438.260321][ T8406] loop2: detected capacity change from 0 to 128 [ 438.375299][ T8405] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1046'. [ 439.070198][ T4316] usb 2-1: USB disconnect, device number 33 [ 439.526975][ T8415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1049'. [ 439.974440][ T4352] usb 7-1: USB disconnect, device number 3 [ 440.219130][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.225865][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.972999][ T8437] loop2: detected capacity change from 0 to 256 [ 441.073134][ T8437] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 441.321366][ T26] audit: type=1800 audit(1788598899.491:40): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1056" name="file1" dev="loop2" ino=1048635 res=0 errno=0 [ 442.038736][ T8456] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 442.347700][ T4339] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 442.559698][ T4339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.592552][ T4339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.642091][ T4339] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 442.678873][ T8463] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1060'. [ 442.771457][ T4339] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 442.877457][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.942262][ T4339] usb 3-1: config 0 descriptor?? [ 443.108497][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1062'. [ 443.919352][ T4339] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 443.968640][ T4339] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 444.016670][ T4274] Bluetooth: hci4: link tx timeout [ 444.022059][ T4274] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 444.030306][ T4274] Bluetooth: hci4: link tx timeout [ 444.036972][ T4274] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 444.050764][ T4339] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 444.078251][ T4339] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 444.095644][ T4339] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 444.103762][ T4339] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 444.127999][ T4339] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 444.161770][ T4339] usb 3-1: USB disconnect, device number 18 [ 444.345187][ T8484] fido_id[8484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 448.269707][ T8514] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1072'. [ 448.342283][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1068'. [ 448.913389][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1074'. [ 448.999392][ T8528] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 449.385204][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1077'. [ 452.942179][ T8563] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1083'. [ 454.165375][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'. [ 454.295608][ T8584] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 455.006868][ T8591] CIFS: Attempting to mount \\127.0.0.1\share [ 455.020163][ T8591] CIFS: VFS: Error connecting to socket. Aborting operation. [ 455.047883][ T8591] CIFS: VFS: cifs_mount failed w/return code = -111 [ 456.368122][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 456.450108][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1093'. [ 456.571847][ T8604] device bond_slave_0 entered promiscuous mode [ 456.578161][ T8604] device bond_slave_1 entered promiscuous mode [ 457.205922][ T8604] device macvtap1 entered promiscuous mode [ 457.807639][ T8604] device bond0 entered promiscuous mode [ 457.998271][ T8604] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 458.555852][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1093'. [ 459.113679][ T26] audit: type=1800 audit(1788598917.281:41): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1098" name="device_path" dev="configfs" ino=48923 res=0 errno=0 [ 459.212938][ T26] audit: type=1800 audit(1788598917.331:42): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1098" name="enable" dev="configfs" ino=48924 res=0 errno=0 [ 459.384537][ T8635] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1094'. [ 459.670438][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 463.074151][ T8669] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 463.894949][ T26] audit: type=1800 audit(1788598922.061:43): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1109" name="device_path" dev="configfs" ino=48015 res=0 errno=0 [ 463.976602][ T26] audit: type=1800 audit(1788598922.091:44): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1109" name="enable" dev="configfs" ino=48016 res=0 errno=0 [ 464.373248][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 464.472882][ T8686] device bond_slave_0 entered promiscuous mode [ 464.479264][ T8686] device bond_slave_1 entered promiscuous mode [ 464.527684][ T8686] device macvtap1 entered promiscuous mode [ 464.533743][ T8686] device bond0 entered promiscuous mode [ 464.547681][ T4316] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 464.587940][ T8686] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 464.612938][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 464.637765][ T8691] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1111'. [ 464.737485][ T4316] usb 5-1: Using ep0 maxpacket: 16 [ 464.744749][ T4316] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 464.827558][ T4316] usb 5-1: config 0 interface 0 has no altsetting 0 [ 464.857678][ T4261] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 464.884370][ T4316] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 464.937471][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.994605][ T4316] usb 5-1: Product: syz [ 465.014981][ T4316] usb 5-1: Manufacturer: syz [ 465.025160][ T4316] usb 5-1: SerialNumber: syz [ 465.032982][ T4261] usb 7-1: device descriptor read/64, error -71 [ 465.049562][ T4316] usb 5-1: config 0 descriptor?? [ 465.299122][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 465.321681][ T4316] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 465.337536][ T4261] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 465.363143][ T4316] imon:send_packet: packet tx failed (-71) [ 465.367509][ T4339] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 465.387541][ T4316] imon 5-1:0.0: panel buttons/knobs setup failed [ 465.507577][ T4261] usb 7-1: device descriptor read/64, error -71 [ 465.567518][ T4316] rc_core: IR keymap rc-imon-pad not found [ 465.573433][ T4316] Registered IR keymap rc-empty [ 465.586909][ T4316] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 465.600876][ T4316] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 465.615104][ T4316] imon:send_packet: packet tx failed (-71) [ 465.695270][ T4316] imon 5-1:0.0: remote input dev register failed [ 465.813320][ T4316] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 466.189309][ T4316] imon 5-1:0.0: unable to initialize intf0, err 0 [ 466.213276][ T4316] imon:imon_probe: failed to initialize context! [ 466.254519][ T4316] imon 5-1:0.0: unable to register, err -19 [ 466.319475][ T4316] usb 5-1: USB disconnect, device number 25 [ 467.057399][ T4352] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 467.065184][ T4339] usb 4-1: Using ep0 maxpacket: 32 [ 467.073831][ T4261] usb usb7-port1: attempt power cycle [ 467.081564][ T4339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.133125][ T4339] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 467.142331][ T4339] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 467.163723][ T4339] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 467.184011][ T4339] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 467.194078][ T4339] usb 4-1: config 1 interface 1 has no altsetting 0 [ 467.211569][ T4339] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 467.236512][ T26] audit: type=1800 audit(1788598925.401:45): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1121" name="device_path" dev="configfs" ino=48062 res=0 errno=0 [ 467.237542][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.278470][ T4339] usb 4-1: Product: syz [ 467.282734][ T4339] usb 4-1: Manufacturer: syz [ 467.287708][ T4339] usb 4-1: SerialNumber: syz [ 467.300719][ T26] audit: type=1800 audit(1788598925.401:46): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1121" name="enable" dev="configfs" ino=48063 res=0 errno=0 [ 467.325205][ T4352] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 467.354427][ T4352] usb 2-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 467.375658][ T4352] usb 2-1: config 0 interface 0 has no altsetting 0 [ 467.397631][ T4352] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 467.405701][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 467.416233][ T4352] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 467.438602][ T8730] device bond_slave_0 entered promiscuous mode [ 467.444985][ T8730] device bond_slave_1 entered promiscuous mode [ 467.453756][ T8730] device macvtap1 entered promiscuous mode [ 467.458844][ T4352] usb 2-1: Product: syz [ 467.461391][ T8730] device bond0 entered promiscuous mode [ 467.463865][ T4352] usb 2-1: Manufacturer: syz [ 467.463887][ T4352] usb 2-1: SerialNumber: syz [ 467.471872][ T8730] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 467.487922][ T4352] usb 2-1: config 0 descriptor?? [ 467.497845][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 467.547481][ T4261] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 467.585776][ T26] audit: type=1326 audit(1788598925.751:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.3.1114" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf0119e159 code=0x0 [ 467.748946][ T4352] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 467.756185][ T8735] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1123'. [ 467.768316][ T4261] usb 7-1: device descriptor read/8, error -71 [ 467.841757][ T4352] usb 2-1: USB disconnect, device number 34 [ 467.886011][ T8375] udevd[8375]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.408395][ T4314] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 468.661415][ T4261] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 468.687445][ T4314] usb 3-1: Using ep0 maxpacket: 32 [ 468.695910][ T4314] usb 3-1: config 1 interface 0 has no altsetting 0 [ 468.707095][ T4314] usb 3-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 468.718337][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.728262][ T4261] usb 7-1: Using ep0 maxpacket: 32 [ 468.738023][ T4314] usb 3-1: Product: syz [ 468.739026][ T4261] usb 7-1: config 1 interface 0 has no altsetting 0 [ 468.742421][ T4314] usb 3-1: Manufacturer: syz [ 468.755681][ T4314] usb 3-1: SerialNumber: syz [ 468.831973][ T8754] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 468.850578][ T4261] usb 7-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 468.910496][ T4261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.996578][ T4314] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input24 [ 469.035349][ T3623] bcm5974 3-1:1.0: could not read from device [ 469.043192][ T4261] usb 7-1: Product: syz [ 469.089024][ T4261] usb 7-1: Manufacturer: syz [ 469.103073][ T4261] usb 7-1: SerialNumber: syz [ 469.149716][ T3623] bcm5974 3-1:1.0: could not read from device [ 469.159275][ T4314] usb 3-1: USB disconnect, device number 19 [ 469.328827][ T4339] usb 4-1: selecting invalid altsetting 0 [ 469.391135][ T4261] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input25 [ 469.497589][ T4339] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 469.536638][ T8760] device syzkaller1 entered promiscuous mode [ 469.537247][ T4339] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 469.550989][ T3623] bcm5974 7-1:1.0: could not read from device [ 469.608097][ T3623] bcm5974 7-1:1.0: could not read from device [ 469.609431][ T4261] usb 7-1: USB disconnect, device number 7 [ 469.742347][ T4339] usb 4-1: USB disconnect, device number 24 [ 471.593161][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 471.604993][ T26] audit: type=1800 audit(1788598929.771:48): pid=8781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1132" name="device_path" dev="configfs" ino=49190 res=0 errno=0 [ 471.651787][ T26] audit: type=1800 audit(1788598929.771:49): pid=8781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1132" name="enable" dev="configfs" ino=49191 res=0 errno=0 [ 471.960141][ T8792] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1135'. [ 472.257914][ T4314] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 472.461132][ T4314] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 472.492852][ T4314] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 472.526967][ T4314] usb 4-1: config 0 interface 0 has no altsetting 0 [ 472.550962][ T4314] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 472.571837][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 472.591895][ T4314] usb 4-1: Product: syz [ 472.597959][ T8809] binder: BINDER_SET_CONTEXT_MGR already set [ 472.604430][ T8809] binder: 8808:8809 ioctl 4018620d 200000004a80 returned -16 [ 472.612522][ T4314] usb 4-1: Manufacturer: syz [ 472.617179][ T4314] usb 4-1: SerialNumber: syz [ 472.624970][ T4314] usb 4-1: config 0 descriptor?? [ 472.791449][ T4317] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 472.877248][ T4314] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 472.907689][ T22] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 472.920860][ T4314] usb 4-1: USB disconnect, device number 25 [ 472.997760][ T4317] usb 5-1: Using ep0 maxpacket: 32 [ 473.004953][ T4317] usb 5-1: config 1 interface 0 has no altsetting 0 [ 473.032601][ T4317] usb 5-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 473.047232][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.060853][ T4317] usb 5-1: Product: syz [ 473.065389][ T4317] usb 5-1: Manufacturer: syz [ 473.081716][ T4317] usb 5-1: SerialNumber: syz [ 473.108659][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 473.117070][ T22] usb 2-1: config 1 interface 0 has no altsetting 0 [ 473.129938][ T4352] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 473.140786][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.170287][ T22] usb 2-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 473.181469][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.194113][ T22] usb 2-1: Product: syz [ 473.203853][ T22] usb 2-1: Manufacturer: syz [ 473.215244][ T22] usb 2-1: SerialNumber: syz [ 473.307426][ T4352] usb 3-1: device descriptor read/64, error -71 [ 473.602937][ T4352] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 473.777425][ T4352] usb 3-1: device descriptor read/64, error -71 [ 473.897828][ T4352] usb usb3-port1: attempt power cycle [ 474.317484][ T4352] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 474.358031][ T4352] usb 3-1: device descriptor read/8, error -71 [ 474.647497][ T4352] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 474.688152][ T4352] usb 3-1: device descriptor read/8, error -71 [ 474.797133][ T4317] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input26 [ 474.808231][ T8820] device syzkaller1 entered promiscuous mode [ 474.809392][ T4352] usb usb3-port1: unable to enumerate USB device [ 474.819591][ T22] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input27 [ 474.844725][ T3623] bcm5974 5-1:1.0: could not read from device [ 474.861698][ T4317] usb 5-1: USB disconnect, device number 26 [ 474.880110][ T22] usb 2-1: USB disconnect, device number 35 [ 475.470139][ T26] audit: type=1800 audit(1788598933.641:50): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1147" name="device_path" dev="configfs" ino=50248 res=0 errno=0 [ 475.607620][ T26] audit: type=1800 audit(1788598933.691:51): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1147" name="enable" dev="configfs" ino=50249 res=0 errno=0 [ 475.737028][ T8837] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1148'. [ 476.392568][ T8851] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 476.795775][ T8858] device syzkaller1 entered promiscuous mode [ 477.704016][ T4274] Bluetooth: hci5: link tx timeout [ 477.710127][ T4274] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 478.187443][ T22] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 478.387437][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 478.394551][ T22] usb 3-1: config 1 interface 0 has no altsetting 0 [ 478.420088][ T22] usb 3-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 478.460113][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.487399][ T22] usb 3-1: Product: syz [ 478.517585][ T22] usb 3-1: Manufacturer: syz [ 478.530020][ T22] usb 3-1: SerialNumber: syz [ 478.760914][ T22] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input28 [ 478.800483][ T3623] bcm5974 3-1:1.0: could not read from device [ 478.807628][ T4339] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 478.831373][ T3623] bcm5974 3-1:1.0: could not read from device [ 478.866852][ T22] usb 3-1: USB disconnect, device number 24 [ 478.935632][ T3623] bcm5974 3-1:1.0: could not read from device [ 479.017567][ T4339] usb 7-1: Using ep0 maxpacket: 32 [ 479.028112][ T4339] usb 7-1: config 1 interface 0 has no altsetting 0 [ 479.057930][ T4339] usb 7-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 479.087185][ T26] audit: type=1800 audit(1788598937.251:52): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1156" name="device_path" dev="configfs" ino=49341 res=0 errno=0 [ 479.119977][ T4339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.151361][ T4339] usb 7-1: Product: syz [ 479.155685][ T4339] usb 7-1: Manufacturer: syz [ 479.187414][ T4339] usb 7-1: SerialNumber: syz [ 479.445806][ T4339] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input29 [ 479.481482][ T3623] bcm5974 7-1:1.0: could not read from device [ 479.568153][ T3623] bcm5974 7-1:1.0: could not read from device [ 479.597876][ T4339] usb 7-1: USB disconnect, device number 8 [ 479.649802][ T26] audit: type=1800 audit(1788598937.821:53): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1159" name="device_path" dev="configfs" ino=50307 res=0 errno=0 [ 479.737441][ T4274] Bluetooth: hci5: command 0x0406 tx timeout [ 479.773511][ T26] audit: type=1800 audit(1788598937.851:54): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1159" name="enable" dev="configfs" ino=50308 res=0 errno=0 [ 480.297680][ T22] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 480.299279][ T8892] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1163'. [ 480.467735][ T22] usb 3-1: device descriptor read/64, error -71 [ 481.464358][ T4276] Bluetooth: hci5: link tx timeout [ 481.469686][ T4276] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 481.647789][ T22] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 481.857639][ T22] usb 3-1: device descriptor read/64, error -71 [ 481.978395][ T22] usb usb3-port1: attempt power cycle [ 482.375810][ T26] audit: type=1800 audit(1788598940.541:55): pid=8912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1170" name="device_path" dev="configfs" ino=50337 res=0 errno=0 [ 482.437746][ T4339] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 482.657485][ T4339] usb 4-1: Using ep0 maxpacket: 32 [ 482.664932][ T4339] usb 4-1: config 1 interface 0 has no altsetting 0 [ 482.746490][ T4339] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 482.806687][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.852270][ T4339] usb 4-1: Product: syz [ 482.856513][ T4339] usb 4-1: Manufacturer: syz [ 482.913296][ T4339] usb 4-1: SerialNumber: syz [ 483.443303][ T4339] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input30 [ 483.533849][ T3623] bcm5974 4-1:1.0: could not read from device [ 483.594551][ T4339] usb 4-1: USB disconnect, device number 26 [ 483.601912][ T3623] bcm5974 4-1:1.0: could not read from device [ 484.015189][ T26] audit: type=1800 audit(1788598942.181:56): pid=8928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1172" name="device_path" dev="configfs" ino=49415 res=0 errno=0 [ 484.096160][ T26] audit: type=1800 audit(1788598942.191:57): pid=8928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1172" name="enable" dev="configfs" ino=49416 res=0 errno=0 [ 485.916537][ T8956] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 485.960221][ T8924] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.993483][ T8924] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 486.064495][ T8945] device syzkaller1 entered promiscuous mode [ 487.212944][ T4276] Bluetooth: hci5: link tx timeout [ 487.219901][ T4276] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 490.699464][ T26] audit: type=1800 audit(1788598948.871:58): pid=8988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1181" name="device_path" dev="configfs" ino=49488 res=0 errno=0 [ 491.052960][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 491.062694][ T7] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 491.123152][ T8999] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 491.235094][ T26] audit: type=1800 audit(1788598949.401:59): pid=9000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1185" name="device_path" dev="configfs" ino=50422 res=0 errno=0 [ 491.269640][ T7] usb 2-1: config 0 has no interfaces? [ 491.278465][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 491.332588][ T7] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 491.353335][ T26] audit: type=1800 audit(1788598949.431:60): pid=9000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1185" name="enable" dev="configfs" ino=50423 res=0 errno=0 [ 491.371993][ T7] usb 2-1: Product: syz [ 491.406380][ T7] usb 2-1: Manufacturer: syz [ 491.432885][ T7] usb 2-1: SerialNumber: syz [ 491.469685][ T7] usb 2-1: config 0 descriptor?? [ 491.698325][ T7] usb 2-1: USB disconnect, device number 36 [ 492.586473][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 492.958724][ T9031] device syzkaller1 entered promiscuous mode [ 493.129932][ T26] audit: type=1800 audit(1788598951.301:61): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1194" name="device_path" dev="configfs" ino=49553 res=0 errno=0 [ 493.488367][ T9042] loop2: detected capacity change from 0 to 764 [ 494.516632][ T4276] Bluetooth: hci5: link tx timeout [ 494.522187][ T4276] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 494.570645][ T8375] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 494.620644][ T9051] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 494.722419][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1198'. [ 494.834315][ T9055] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 495.627425][ T4316] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 495.837622][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 495.857467][ T4316] usb 3-1: config 1 interface 0 has no altsetting 0 [ 495.905257][ T4316] usb 3-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 495.915642][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.924340][ T4316] usb 3-1: Product: syz [ 495.929363][ T4316] usb 3-1: Manufacturer: syz [ 495.934056][ T4316] usb 3-1: SerialNumber: syz [ 496.376744][ T4316] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input31 [ 496.440412][ T3623] bcm5974 3-1:1.0: could not read from device [ 496.482305][ T3623] bcm5974 3-1:1.0: could not read from device [ 496.489216][ T4316] usb 3-1: USB disconnect, device number 28 [ 496.561581][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1202'. [ 497.219600][ T9079] CIFS: Attempting to mount \\127.0.0.1\share [ 497.321737][ T9079] CIFS: VFS: Error connecting to socket. Aborting operation. [ 497.402660][ T9079] CIFS: VFS: cifs_mount failed w/return code = -111 [ 497.684054][ T26] audit: type=1800 audit(1788598955.851:62): pid=9091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1206" name="device_path" dev="configfs" ino=49629 res=0 errno=0 [ 497.993165][ T9094] device syzkaller1 entered promiscuous mode [ 499.370205][ T9103] loop1: detected capacity change from 0 to 764 [ 500.227758][ T4276] Bluetooth: hci5: link tx timeout [ 500.232961][ T4276] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.678007][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.684665][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.842177][ T9137] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 502.857732][ T9148] CIFS: Attempting to mount \\127.0.0.1\share [ 502.919395][ T9148] CIFS: VFS: Error connecting to socket. Aborting operation. [ 502.943752][ T9148] CIFS: VFS: cifs_mount failed w/return code = -111 [ 504.157739][ T7673] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 504.410380][ T7673] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 504.429266][ T7673] usb 7-1: config 0 has no interface number 0 [ 504.465957][ T7673] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 504.467578][ T4352] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 504.502553][ T7673] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.544656][ T7673] usb 7-1: Product: syz [ 504.554659][ T7673] usb 7-1: Manufacturer: syz [ 504.583650][ T7673] usb 7-1: SerialNumber: syz [ 504.602378][ T7673] usb 7-1: config 0 descriptor?? [ 504.692965][ T4352] usb 3-1: config 0 has no interfaces? [ 504.705927][ T4352] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 504.746943][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 504.791434][ T9167] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1227'. [ 504.800960][ T4352] usb 3-1: Product: syz [ 504.805180][ T4352] usb 3-1: Manufacturer: syz [ 504.822539][ T4352] usb 3-1: SerialNumber: syz [ 504.840489][ T9157] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1222'. [ 504.870846][ T9169] device syzkaller1 entered promiscuous mode [ 504.895010][ T7673] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 504.898657][ T4352] usb 3-1: config 0 descriptor?? [ 504.923441][ T7673] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 504.984436][ T7673] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 505.013502][ T7673] usb 7-1: media controller created [ 505.042150][ T9172] loop3: detected capacity change from 0 to 256 [ 505.120857][ T7673] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.173125][ T9172] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 505.208109][ T4352] usb 3-1: USB disconnect, device number 29 [ 505.290572][ T7673] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 505.395466][ T26] audit: type=1800 audit(1788598963.561:63): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1213" name="file1" dev="loop3" ino=1048637 res=0 errno=0 [ 505.423822][ T7673] usb 7-1: USB disconnect, device number 9 [ 507.563077][ T4276] Bluetooth: hci4: link tx timeout [ 507.569625][ T4276] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 507.578096][ T4276] Bluetooth: hci4: link tx timeout [ 507.584263][ T4276] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 508.393144][ T9199] CIFS: Attempting to mount \\127.0.0.1\share [ 508.415502][ T9199] CIFS: VFS: Error connecting to socket. Aborting operation. [ 508.479261][ T9199] CIFS: VFS: cifs_mount failed w/return code = -111 [ 508.600079][ T9205] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 509.956930][ T9210] loop3: detected capacity change from 0 to 764 [ 510.124119][ T9214] device syzkaller1 entered promiscuous mode [ 510.212825][ T9216] loop1: detected capacity change from 0 to 256 [ 510.273728][ T9216] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 510.366186][ T8375] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 510.674617][ T26] audit: type=1800 audit(1788598968.841:64): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1242" name="file1" dev="loop1" ino=1048639 res=0 errno=0 [ 511.607557][ T4314] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 511.965795][ T4314] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 511.978190][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 511.987234][ T4314] usb 5-1: Product: syz [ 512.038097][ T4314] usb 5-1: config 0 descriptor?? [ 512.076195][ T4314] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 512.107945][ T4314] usb 5-1: Detected FT232H [ 512.282000][ T4314] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 512.299427][ T4314] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 512.321087][ T4314] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 512.343425][ T4314] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 512.407901][ T4314] usb 5-1: USB disconnect, device number 27 [ 512.455071][ T4314] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 512.505679][ T4314] ftdi_sio 5-1:0.0: device disconnected [ 513.437851][ T4316] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 513.524627][ T9240] CIFS: Attempting to mount \\127.0.0.1\share [ 513.583732][ T9240] CIFS: VFS: Error connecting to socket. Aborting operation. [ 513.668923][ T4316] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 513.704253][ T9240] CIFS: VFS: cifs_mount failed w/return code = -111 [ 513.719655][ T4316] usb 4-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 513.782566][ T4316] usb 4-1: config 0 interface 0 has no altsetting 0 [ 513.806787][ T4316] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 513.847635][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 513.856058][ T4316] usb 4-1: Product: syz [ 513.897183][ T4316] usb 4-1: Manufacturer: syz [ 513.911185][ T4316] usb 4-1: SerialNumber: syz [ 513.930716][ T4316] usb 4-1: config 0 descriptor?? [ 514.216038][ T4316] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 514.225772][ T4316] usb 4-1: USB disconnect, device number 27 [ 514.484692][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.269022][ T9279] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 516.781026][ T9283] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 517.607705][ T4314] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 517.802701][ T9293] loop3: detected capacity change from 0 to 256 [ 517.850800][ T4314] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 517.865494][ T9293] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 517.911591][ T4314] usb 5-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 518.190972][ T4314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 518.340106][ T4314] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 518.356430][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 518.365516][ T4314] usb 5-1: Product: syz [ 518.376044][ T4314] usb 5-1: Manufacturer: syz [ 518.381797][ T4314] usb 5-1: SerialNumber: syz [ 518.416492][ T4314] usb 5-1: config 0 descriptor?? [ 518.490552][ T26] audit: type=1800 audit(1788598976.661:65): pid=9300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1266" name="file1" dev="loop3" ino=1048641 res=0 errno=0 [ 518.867857][ T4314] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 518.982042][ T4314] usb 5-1: USB disconnect, device number 28 [ 519.008282][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.225879][ T9315] device syzkaller0 entered promiscuous mode [ 521.483583][ T9334] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 524.001746][ T7] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 524.219162][ T7] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 524.240151][ T7] usb 3-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 524.328196][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 524.360648][ T7] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 524.390523][ T7] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 524.427656][ T7] usb 3-1: Product: syz [ 524.457553][ T7] usb 3-1: Manufacturer: syz [ 524.470332][ T7] usb 3-1: SerialNumber: syz [ 524.528676][ T7] usb 3-1: config 0 descriptor?? [ 524.821023][ T7] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 524.879510][ T7] usb 3-1: USB disconnect, device number 30 [ 524.893217][ T9352] device syzkaller0 entered promiscuous mode [ 524.942536][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.410243][ T9358] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 525.747623][ T9363] loop1: detected capacity change from 0 to 256 [ 525.846266][ T9363] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 526.048622][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 526.091403][ T9367] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1283'. [ 526.433773][ T26] audit: type=1800 audit(1788598984.601:66): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1290" name="file1" dev="loop1" ino=1048643 res=0 errno=0 [ 528.453540][ T9393] device syzkaller0 entered promiscuous mode [ 528.472967][ T9393] tipc: Started in network mode [ 528.487962][ T9393] tipc: Node identity be1d53d70018, cluster identity 4711 [ 528.516623][ T9393] tipc: Enabled bearer , priority 0 [ 528.636055][ T9396] tipc: Resetting bearer [ 528.660003][ T9392] tipc: Resetting bearer [ 528.733610][ T9392] tipc: Disabling bearer [ 529.987875][ T4316] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 530.031908][ T9412] device syzkaller0 entered promiscuous mode [ 530.119429][ T9414] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 530.199781][ T4316] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 530.221823][ T4316] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.289401][ T4316] usb 3-1: config 0 interface 0 has no altsetting 0 [ 530.313266][ T4316] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 530.367169][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 530.436036][ T4316] usb 3-1: Product: syz [ 530.462901][ T4316] usb 3-1: Manufacturer: syz [ 530.490906][ T4316] usb 3-1: SerialNumber: syz [ 530.596859][ T4316] usb 3-1: config 0 descriptor?? [ 532.051784][ T4316] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 532.092807][ T4316] usb 3-1: USB disconnect, device number 31 [ 532.153277][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.157445][ T7] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 535.242705][ T9455] loop2: detected capacity change from 0 to 256 [ 535.299833][ T9455] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 535.347619][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 535.354566][ T7] usb 5-1: config 1 interface 0 has no altsetting 0 [ 535.516189][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 535.540042][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.567435][ T7] usb 5-1: Product: syz [ 535.571775][ T7] usb 5-1: Manufacturer: syz [ 535.576423][ T7] usb 5-1: SerialNumber: syz [ 535.715354][ T26] audit: type=1800 audit(1788598993.881:67): pid=9457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1312" name="file1" dev="loop2" ino=1048645 res=0 errno=0 [ 535.809988][ T9449] binder_alloc: 9448: binder_alloc_buf, no vma [ 535.865452][ T7] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input32 [ 535.881636][ T3623] bcm5974 5-1:1.0: could not read from device [ 535.924619][ T3623] bcm5974 5-1:1.0: could not read from device [ 535.932591][ T7] usb 5-1: USB disconnect, device number 29 [ 535.955147][ T3623] bcm5974 5-1:1.0: could not read from device [ 536.283078][ T9467] device syzkaller0 entered promiscuous mode [ 538.157493][ T7] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 538.369412][ T7] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 538.395350][ T7] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.462108][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 538.502740][ T7] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 538.557701][ T7] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 538.593725][ T7] usb 5-1: Product: syz [ 538.598455][ T7] usb 5-1: Manufacturer: syz [ 538.603271][ T7] usb 5-1: SerialNumber: syz [ 538.638022][ T7] usb 5-1: config 0 descriptor?? [ 538.876969][ T7] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 538.925158][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.971814][ T7] usb 5-1: USB disconnect, device number 30 [ 539.384496][ T9492] loop3: detected capacity change from 0 to 512 [ 539.392076][ T9492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 540.733238][ T9492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 540.742384][ T9492] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.013504][ T4421] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 541.087533][ T4421] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 541.156421][ T4421] EXT4-fs (loop3): This should not happen!! Data will be lost [ 541.156421][ T4421] [ 541.171554][ T4421] EXT4-fs (loop3): Total free blocks count 0 [ 541.178327][ T4421] EXT4-fs (loop3): Free/Dirty block details [ 541.184944][ T4421] EXT4-fs (loop3): free_blocks=65280 [ 541.199088][ T4421] EXT4-fs (loop3): dirty_blocks=33 [ 541.204291][ T4421] EXT4-fs (loop3): Block reservation details [ 541.213465][ T4421] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 541.238831][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 541.451819][ T9506] device syzkaller1 entered promiscuous mode [ 541.785728][ T9512] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 541.998568][ T9514] MPTCP: kernel_bind error, err=-98 [ 543.837991][ T9527] device syzkaller0 entered promiscuous mode [ 544.337380][ T22] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 544.540063][ T22] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 544.627236][ T22] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.717615][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 544.746792][ T22] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 544.817561][ T22] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 544.876093][ T22] usb 3-1: Product: syz [ 544.905957][ T22] usb 3-1: Manufacturer: syz [ 544.962859][ T22] usb 3-1: SerialNumber: syz [ 545.170116][ T22] usb 3-1: config 0 descriptor?? [ 546.044809][ T22] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 546.087938][ T22] usb 3-1: USB disconnect, device number 32 [ 546.168112][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.372827][ T9555] device syzkaller1 entered promiscuous mode [ 546.691184][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1339'. [ 548.383584][ T9570] device syzkaller0 entered promiscuous mode [ 549.098482][ T9588] device syzkaller1 entered promiscuous mode [ 549.223679][ T9589] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 549.340231][ T4261] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 549.549989][ T4261] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 549.583250][ T4261] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 549.643634][ T4261] usb 3-1: config 0 interface 0 has no altsetting 0 [ 549.675982][ T4261] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 549.743747][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 549.891896][ T4261] usb 3-1: Product: syz [ 549.918377][ T4261] usb 3-1: Manufacturer: syz [ 549.923093][ T4261] usb 3-1: SerialNumber: syz [ 549.970169][ T4261] usb 3-1: config 0 descriptor?? [ 551.354765][ T4261] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 551.378798][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.397572][ T4261] usb 3-1: USB disconnect, device number 33 [ 551.623643][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1354'. [ 554.709165][ T9630] device syzkaller1 entered promiscuous mode [ 555.360573][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1365'. [ 556.067022][ T9649] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 556.076543][ T4314] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 556.207634][ T4317] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 556.277743][ T4314] usb 7-1: Using ep0 maxpacket: 16 [ 556.286802][ T4314] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 556.316682][ T4314] usb 7-1: config 0 interface 0 has no altsetting 0 [ 556.349277][ T4314] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 556.373836][ T4314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.392813][ T4314] usb 7-1: Product: syz [ 556.409463][ T4314] usb 7-1: Manufacturer: syz [ 556.435497][ T4317] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 556.446164][ T4314] usb 7-1: SerialNumber: syz [ 556.451429][ T4317] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 556.466908][ T4317] usb 5-1: config 0 interface 0 has no altsetting 0 [ 556.474983][ T4314] usb 7-1: config 0 descriptor?? [ 556.500131][ T4317] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 556.525640][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 556.552707][ T4317] usb 5-1: Product: syz [ 556.570572][ T4317] usb 5-1: Manufacturer: syz [ 556.577687][ T4317] usb 5-1: SerialNumber: syz [ 556.598657][ T4317] usb 5-1: config 0 descriptor?? [ 556.695626][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 556.715604][ T4317] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 556.756267][ T4314] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input33 [ 556.842137][ T8375] udevd[8375]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.860417][ T4261] usb 5-1: USB disconnect, device number 31 [ 556.901215][ T4314] imon:send_packet: packet tx failed (-71) [ 556.991449][ T4314] imon 7-1:0.0: panel buttons/knobs setup failed [ 557.170301][ T4314] rc_core: IR keymap rc-imon-pad not found [ 557.184383][ T4314] Registered IR keymap rc-empty [ 557.204800][ T9662] device syzkaller1 entered promiscuous mode [ 557.216721][ T4314] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 557.236223][ T4314] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 557.274875][ T4314] imon:send_packet: packet tx failed (-71) [ 557.307768][ T4314] imon 7-1:0.0: remote input dev register failed [ 557.325552][ T4314] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 557.375406][ T4314] imon 7-1:0.0: unable to initialize intf0, err 0 [ 557.397407][ T4314] imon:imon_probe: failed to initialize context! [ 557.423855][ T4314] imon 7-1:0.0: unable to register, err -19 [ 557.460247][ T4314] usb 7-1: USB disconnect, device number 10 [ 557.894657][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1377'. [ 560.560713][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'. [ 561.947718][ T9690] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1383'. [ 562.025115][ T9696] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 562.423082][ T9701] device syzkaller1 entered promiscuous mode [ 563.101232][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.108160][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.257539][ T4261] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 565.626405][ T9717] loop6: detected capacity change from 0 to 764 [ 565.707587][ T4261] usb 3-1: Using ep0 maxpacket: 16 [ 565.724811][ T4261] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 565.741672][ T4261] usb 3-1: config 0 interface 0 has no altsetting 0 [ 565.772727][ T4261] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 565.799726][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.842254][ T4261] usb 3-1: Product: syz [ 565.847105][ T4261] usb 3-1: Manufacturer: syz [ 565.864109][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1391'. [ 565.876886][ T4261] usb 3-1: SerialNumber: syz [ 565.893381][ T4261] usb 3-1: config 0 descriptor?? [ 565.922522][ T8174] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 566.130540][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 566.138331][ T4261] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input35 [ 566.174651][ T4261] imon:send_packet: packet tx failed (-71) [ 566.220819][ T4261] imon 3-1:0.0: panel buttons/knobs setup failed [ 567.792641][ T4261] rc_core: IR keymap rc-imon-pad not found [ 567.802534][ T4261] Registered IR keymap rc-empty [ 567.808722][ T4261] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 567.819633][ T4261] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 567.831087][ T4261] imon:send_packet: packet tx failed (-71) [ 567.876547][ T4261] imon 3-1:0.0: remote input dev register failed [ 567.889201][ T4261] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 567.953919][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1397'. [ 567.988763][ T4261] imon 3-1:0.0: unable to initialize intf0, err 0 [ 568.017428][ T4261] imon:imon_probe: failed to initialize context! [ 568.024201][ T4261] imon 3-1:0.0: unable to register, err -19 [ 568.047191][ T9735] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1397'. [ 568.083716][ T4261] usb 3-1: USB disconnect, device number 34 [ 568.113371][ T9736] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 569.534217][ T9751] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 569.772105][ T4421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.835895][ T4421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.433741][ T9759] loop6: detected capacity change from 0 to 764 [ 570.489396][ T8330] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 570.526950][ T9761] device syzkaller1 entered promiscuous mode [ 571.657503][ T4276] Bluetooth: hci4: link tx timeout [ 571.662743][ T4276] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 571.670695][ T4276] Bluetooth: hci4: link tx timeout [ 571.676010][ T4276] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 571.740027][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1406'. [ 573.577765][ T4314] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 573.777776][ T4314] usb 4-1: Using ep0 maxpacket: 32 [ 573.787101][ T4314] usb 4-1: config 1 interface 0 has no altsetting 0 [ 573.803403][ T4314] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 576.084545][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.135153][ T4314] usb 4-1: Product: syz [ 576.152682][ T4314] usb 4-1: Manufacturer: syz [ 576.172916][ T4314] usb 4-1: SerialNumber: syz [ 576.341360][ T4314] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input37 [ 576.362754][ T9795] device syzkaller1 entered promiscuous mode [ 576.390922][ T3623] bcm5974 4-1:1.0: could not read from device [ 576.429440][ T3623] bcm5974 4-1:1.0: could not read from device [ 576.437463][ T4314] usb 4-1: USB disconnect, device number 28 [ 576.461542][ T9798] loop3: detected capacity change from 0 to 128 [ 576.567931][ T3623] bcm5974 4-1:1.0: could not read from device [ 576.591914][ T3623] bcm5974 4-1:1.0: could not read from device [ 577.026548][ T9801] device syzkaller0 entered promiscuous mode [ 577.549549][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1421'. [ 578.735500][ T9823] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 578.924104][ T9827] loop6: detected capacity change from 0 to 764 [ 583.024130][ T9853] device syzkaller0 entered promiscuous mode [ 584.398037][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1437'. [ 585.636720][ T9878] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 587.038350][ T9891] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 587.094047][ T9893] loop2: detected capacity change from 0 to 128 [ 590.808949][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1451'. [ 590.895610][ T9912] loop1: detected capacity change from 0 to 764 [ 590.981101][ T8330] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 591.496329][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1447'. [ 591.527464][ T4339] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 591.533322][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1447'. [ 591.737553][ T4339] usb 2-1: Using ep0 maxpacket: 32 [ 592.567440][ T4339] usb 2-1: config 1 interface 0 has no altsetting 0 [ 592.586661][ T4339] usb 2-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 592.638677][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.696192][ T4339] usb 2-1: Product: syz [ 592.708170][ T4339] usb 2-1: Manufacturer: syz [ 592.723241][ T4339] usb 2-1: SerialNumber: syz [ 594.286879][ T9933] loop6: detected capacity change from 0 to 32768 [ 594.587297][ T7] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 594.600988][ T4339] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input38 [ 594.612850][ T3623] bcm5974 2-1:1.0: could not read from device [ 594.642747][ T3623] bcm5974 2-1:1.0: could not read from device [ 594.650218][ T4339] usb 2-1: USB disconnect, device number 37 [ 594.666188][ T9933] XFS (loop6): Mounting V5 Filesystem [ 594.822870][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 594.867515][ T9933] XFS (loop6): Ending clean mount [ 594.874261][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.919071][ T9933] XFS (loop6): Quotacheck needed: Please wait. [ 595.115409][ T9933] XFS (loop6): Quotacheck: Done. [ 595.571760][ T7] net1080 5-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, de:68:ab:81:e0:f2 [ 595.987427][ T4317] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 596.033175][ T8010] XFS (loop6): Unmounting Filesystem [ 596.299705][ T4317] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.310091][ T4317] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.321040][ T4317] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 596.337374][ T4317] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 596.368243][ T4317] usb 4-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 596.389639][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 596.398432][ T4317] usb 4-1: Product: syz [ 596.402702][ T4317] usb 4-1: Manufacturer: syz [ 596.423919][ T4317] hso 4-1:1.0: Can't find BULK OUT endpoint [ 596.643628][ T4317] usb 4-1: USB disconnect, device number 29 [ 596.643947][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1462'. [ 596.994334][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1463'. [ 597.160545][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 597.234736][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 597.531852][ T7] usb 5-1: USB disconnect, device number 32 [ 597.541124][ T7] net1080 5-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 598.510102][ T9999] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 600.167343][ T4352] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 601.187446][ T4352] usb 3-1: Using ep0 maxpacket: 32 [ 601.194585][ T4352] usb 3-1: config 1 interface 0 has no altsetting 0 [ 601.234269][ T4352] usb 3-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 601.267421][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.289478][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1473'. [ 601.333657][ T4352] usb 3-1: Product: syz [ 601.350978][ T4352] usb 3-1: Manufacturer: syz [ 601.377577][ T4352] usb 3-1: SerialNumber: syz [ 601.673384][ T4352] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input39 [ 601.770591][ T3623] bcm5974 3-1:1.0: could not read from device [ 601.842466][ T3623] bcm5974 3-1:1.0: could not read from device [ 601.848868][ T4352] usb 3-1: USB disconnect, device number 35 [ 601.881498][ T3623] bcm5974 3-1:1.0: could not read from device [ 602.459772][T10026] general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN [ 602.471835][T10026] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 602.480625][T10026] CPU: 1 PID: 10026 Comm: syz.2.1475 Not tainted syzkaller #0 [ 602.488105][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 602.498391][T10026] RIP: 0010:klist_remove+0x165/0x390 [ 602.503737][T10026] Code: 80 3c 04 00 74 08 4c 89 f7 e8 d7 76 b6 f7 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 b0 76 b6 f7 49 8b 47 58 48 89 44 24 10 4c 89 [ 602.523625][T10026] RSP: 0018:ffffc9000323f900 EFLAGS: 00010202 [ 602.529732][T10026] RAX: 000000000000000b RBX: ffff888030040000 RCX: dffffc0000000000 [ 602.537818][T10026] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 602.545812][T10026] RBP: ffffc9000323f9f8 R08: ffffffff8e09ab43 R09: 1ffffffff1c13568 [ 602.553878][T10026] R10: dffffc0000000000 R11: fffffbfff1c13569 R12: 1ffff1100ab27f8c [ 602.561857][T10026] R13: dffffc0000000000 R14: ffff88805593fc60 R15: 0000000000000000 [ 602.569915][T10026] FS: 00007fa9a29d46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 602.578932][T10026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.585985][T10026] CR2: 00007f25e44f1068 CR3: 000000002e2bc000 CR4: 00000000003506e0 [ 602.593980][T10026] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 602.601953][T10026] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 602.610295][T10026] Call Trace: [ 602.613681][T10026] [ 602.616609][T10026] ? klist_del+0x110/0x110 [ 602.621057][T10026] ? kobject_move+0x5cd/0x710 [ 602.625817][T10026] ? kobject_put+0x450/0x450 [ 602.630514][T10026] ? get_device_parent+0x288/0x3e0 [ 602.635999][T10026] device_move+0x18a/0x6e0 [ 602.640646][T10026] hci_conn_del_sysfs+0xab/0x160 [ 602.645691][T10026] hci_conn_cleanup+0x57e/0x750 [ 602.650603][T10026] hci_conn_del+0x4df/0x6e0 [ 602.655124][T10026] ? hci_conn_hash_flush+0x1f7/0x290 [ 602.660415][T10026] hci_conn_hash_flush+0x203/0x290 [ 602.665619][T10026] hci_dev_close_sync+0x95e/0x1040 [ 602.671036][T10026] hci_rfkill_set_block+0x117/0x1e0 [ 602.676241][T10026] ? hci_req_cmd_complete+0x8b0/0x8b0 [ 602.681630][T10026] rfkill_set_block+0x1c1/0x3c0 [ 602.686549][T10026] rfkill_fop_write+0x453/0x560 [ 602.691438][T10026] ? rfkill_fop_read+0x550/0x550 [ 602.696385][T10026] ? common_file_perm+0x140/0x1c0 [ 602.701447][T10026] ? fsnotify_perm+0x5a/0x550 [ 602.706408][T10026] ? security_file_permission+0x75/0xa0 [ 602.711985][T10026] ? rfkill_fop_read+0x550/0x550 [ 602.717346][T10026] vfs_write+0x2dc/0x9a0 [ 602.721755][T10026] ? file_end_write+0x250/0x250 [ 602.726610][T10026] ? __fget_files+0x28/0x460 [ 602.731429][T10026] ? __fget_files+0x3fc/0x460 [ 602.736211][T10026] ? __fdget_pos+0x1d4/0x360 [ 602.741088][T10026] ? ksys_write+0x70/0x260 [ 602.745705][T10026] ksys_write+0x14d/0x260 [ 602.750227][T10026] ? __ia32_sys_read+0x80/0x80 [ 602.755104][T10026] ? lockdep_hardirqs_on+0x94/0x140 [ 602.760465][T10026] do_syscall_64+0x4c/0xa0 [ 602.764899][T10026] ? clear_bhb_loop+0x60/0xb0 [ 602.769728][T10026] ? clear_bhb_loop+0x60/0xb0 [ 602.774425][T10026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 602.780369][T10026] RIP: 0033:0x7fa9a1b9e159 [ 602.784981][T10026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.805396][T10026] RSP: 002b:00007fa9a29d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 602.813934][T10026] RAX: ffffffffffffffda RBX: 00007fa9a1e26090 RCX: 00007fa9a1b9e159 [ 602.822269][T10026] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000009 [ 602.830645][T10026] RBP: 00007fa9a1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 602.838987][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.847254][T10026] R13: 00007fa9a1e26128 R14: 00007fa9a1e26090 R15: 00007ffded3c8ac8 [ 602.855369][T10026] [ 602.858411][T10026] Modules linked in: [ 602.863693][T10026] ---[ end trace 0000000000000000 ]--- [ 602.959994][T10026] RIP: 0010:klist_remove+0x165/0x390 [ 603.075510][T10026] Code: 80 3c 04 00 74 08 4c 89 f7 e8 d7 76 b6 f7 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 b0 76 b6 f7 49 8b 47 58 48 89 44 24 10 4c 89 [ 603.096411][T10026] RSP: 0018:ffffc9000323f900 EFLAGS: 00010202 [ 603.109460][T10026] RAX: 000000000000000b RBX: ffff888030040000 RCX: dffffc0000000000 [ 603.120318][T10026] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 603.129896][T10026] RBP: ffffc9000323f9f8 R08: ffffffff8e09ab43 R09: 1ffffffff1c13568 [ 603.139835][T10026] R10: dffffc0000000000 R11: fffffbfff1c13569 R12: 1ffff1100ab27f8c [ 603.148577][T10026] R13: dffffc0000000000 R14: ffff88805593fc60 R15: 0000000000000000 [ 603.157474][T10026] FS: 00007fa9a29d46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 603.166604][T10026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 603.174837][T10026] CR2: 00007f5e89e257e8 CR3: 000000002e2bc000 CR4: 00000000003506e0 [ 603.183761][T10026] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 603.193172][T10026] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 603.202149][T10026] Kernel panic - not syncing: Fatal exception [ 603.208545][T10026] Kernel Offset: disabled [ 603.213189][T10026] Rebooting in 86400 seconds..