last executing test programs: 14m10.000014373s ago: executing program 2 (id=1122): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {0x3e000000}, {}, {}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x200, 0x2, 0xa}) 14m9.801464563s ago: executing program 2 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002955a4f40f30c19e04ffb0102030109022d00018000200209049409027483318009"], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x550c, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x200000002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x4, 0x1, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f0000000140)={0x2fb7, 0x2, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900010073797a30000000000900023b07a1f62f42de88a4dbec2f4d211b5f0073797a3200000000300004802c0001800b0001006e756d67656e00001c000280080001400000000c0800024000000005080003400100000014000000110001000000000000000000000000114584d1b9aac90e0a9437e0a2fc9851c8ed66a7ec4d28fcd18656554a23c7e7b2caff289ebd311cfb741b4222d2c60026abe501b2ca3cf6d713a8e9ae0b1c936d30350ad69b6052a896a64c061d0f02fd767308d8e14fb8fcfded"], 0x84}}, 0x880) socket$inet(0x2, 0xa, 0x7a) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ptype\x00') preadv(r4, &(0x7f0000002540)=[{&(0x7f0000000040)=""/132, 0x84}], 0x1, 0x6, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x67, 0xf4, 0xc7, 0x8, 0x102c, 0x6251, 0x4ca3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x33, 0x0, 0x1, "", [{{0x9, 0x4, 0xa3, 0x7f, 0x0, 0xd3, 0x9c, 0x64, 0x5}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$SIOCSIFHWADDR(r5, 0x8b37, &(0x7f0000000100)={'wlan1\x00', @broadcast}) socket$packet(0x11, 0x3, 0x300) 14m6.840249231s ago: executing program 2 (id=1129): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10060, 0x0) pipe(&(0x7f0000000000)) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0xa) 14m5.763285675s ago: executing program 2 (id=1132): ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') lsetxattr$security_capability(&(0x7f0000000000)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_clone3(&(0x7f0000003380)={0x1100000, &(0x7f0000003180), &(0x7f00000031c0), &(0x7f0000003200), {0x6}, &(0x7f0000003240)=""/64, 0x40, &(0x7f0000003280)=""/145, &(0x7f0000003340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d878000000092095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c529a11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3beb018000000000000007bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d80000000000000007e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad15f0aa6fcf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d043e26fca3a64eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57229121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x6, 0x7ff, {0x5, 0x4000000008010001, 0x7, 0x40c, 0x6, 0x20000000, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r4, r5, 0x3d4, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x26, 0x105, 0x6100083a, 0x40, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000002100)="a6c574dd37ad5a06633d06f193c5b957758b45f2f4212a3ce6abbfded4461de98c0780332e9d3bfa72a53a1565605c551d53a1a3df7a15704f14493a1022fbcf144fe898338e9d3ea15101d7e179a6bfc093e7fb9ce3bb0854c64264cf2b2baeee72f52658949c8262186aa1582f932c471e68d5cfabd57f6abc46aa8052b942bac756f03e4a14f3ee3cc55d2aeec21d08ae0cd7a67ba70814ce161c6b7718e96055c1494f55f10673316179e99ce409c9cc18b80a020ea99be8bd3415d4420a9a4c74c9d16b8c6b58517f1380c44b8cee0d164eee6bfadada764eeac74f4c867b5e184dc0918d587bfc577836e9668f0fd44674f1310a910df2dc6e2342d47fbeb890b30d7183595996daa2e6f21fc1541ce0ed0686f2ca5536bfbc851a1ab1575502a19cbd990e954f12e9b7a0985d93c1ca66b268d4bdcdf7c75c17faa6d9b03c9f88fe6d31aaef35d2dc65bc74279983b0c6646475b83c1e01b6c8872d115aa72ae06a18e6d4120f551d2c35fae118d490c50867bf3f6cd2f950f22d6b0c7577e04697bee47b85c6144e2ecf45c4fd93ac1b51e44f98e38f9e9b93c3eb9160404d3a60f808836a8668604ffd8b317f91fd4dae384386c01f5fdebfa643907b5a07ad1423cb0d4a9a68aae6d2b5a912ba0b0789735e73d9a8ed8ae42c92f67f5c3a40e7df5575dd5e033f3bbfc443cfdde1685d9d5c05e8e9469bf7f546398a36cac008bc36520d0e08a4cee2a48ad2ab819524c9e2145f0d9d474acdb028b9cb8248a4d9df5bf6a1bfeea458fedbc039815ffe375cae1fb9be988916c20387318cde61c36b17eea13c176bb106d292728537032cdd79d7c8d48038a6b71aec0d61e774be6ad9f64210957c82dea29ca0991e019455cd7fd2ee2a64491e87e89807be62436132e5a6e75eb14f83885f161bc0c1ad2f3390cf0125712a9f5a14e62be0a9ef23f1eae46680143a83ab24483be91e1c015d4aadeb378c7aab79a474b755e14bbba59f2ac1b80d53d38baee42fd758e9a336ca9044e9fca0146f7168aa4a519e674daf9e061778a74a9ba48c34e1bc8ee86943f37b6fb653a82598902630bd4fa3cf374a622f38dcfe1006a3eed5c31766d13bcb431d7911ed3fd747755300b0343b65de201e0b95599f36cf1971b39fb3bad2448b863df0df7a3ad88741f08b90d7ab7632f481f0a6d1d8cea57d106b54790acb105f5a4030c48a232592a887863710b16abb7357670b36ccfa676d6689bf10b6ff95af963336f89f4136dc9ba2ea1c92bba5cafca6b248b2ffba2737012f29ac03ff59572833c4ff9e1a2ef2571e6962ab67e1e55138ddc4ac90441fa75f0feb9b2e07424bde534f28a50205f1136d9fca176d875bc44e3439c0bda08a2777987bb4e6795f48038f2ac7963d6528fddedf73b8416412031e84fb2ea1374adc4e3999db6339aadbf1c795dac51153f0ac54ca6d418427b696ded56900d663ef962822d67b6c7a6a0d5002f88e24b06ca47529f02ebbfffae34efec65f230de35368054a9d8bd9fc710f005008149019d683c7450234ae571b40e5de4c9178c1f1122aeac8293008a28ead3946bd6287126fdf42fecb03700cb9495b8a9be544aef8b489238020d7b9149f404dc17f61cfa4a3eeae72f46f79fe3f6d384ac2a4db2a45bc8c002ee4d491607e924fefd165c46fb15f2abba54a36a2460b6c2ee63de3e30e98ff3d453fab204eaef89ea21f8117b0e5e5e87eed6e2a3a58d270e65cc92f618b0e445d55f29c031fd36fce5ff62d036902bf5f1e4feb74c571f5f8fe03519d579c78f82efe2dea5192222f42ce4ed35f0f5df316dbe5b1db225b00dbe4e04518bb289c6eecbf2025a6758eb04f3675a9061b5e9ae5a9ec9bc5ee41b08d71c9059d2c68a42da09d2eacd3ace96be1ad943830663052cb8e3872588394453a1aee28cc3f7e4cfe34821cc8c323204a06e9d82fd4f67751c49f17f92dcb30e8f02f3ea24be55fbafa90c501c365cc0349e2c3b6f0f02ac83ff40793c4ed56e294ce28accdf6bbefcbfd0ff538d7cfab35635ed8fc8951a1ccd30b59bbe2c51eafe223b4dfcbdcde2acc437de051f9563b76a4360940a71986d86e0854a2b530ade41bdd87c0234ac5dd42ee03a102932b083e57f65c1019d4054efc1cd25f4f852b9cc6befd387ddecce4da58a466e536ee8f7a3ca5be424c92b1a20eca71d5901f3d62ac1bbcdeeaa2ef90fbcaf35168a1dc0a5cd52ea960ab4c1d0e0a6535afd5f209aa89617be651c4c2cd212445b32e17a04aeca05b42d4788921e5834744e63f13222dc52c90a08b6204d85fb27c9f15de631d53b5ff0ae50b5feb46f7c67363423d24f970e0e950839da3f42016ac2f38859ae4261a1e9da9552b6a17a1d5bcbf27fff17ad05384206948b49ce4c87c80c80edb9a3b5d76d1e64b01ba735f93667b8b378be78935936c2ac1071d7be693c198153769c6b1882bd805827abb977cf01edfe7664858cfd8f846a4de20d98a56860091820f9fe7ca2de7be202b36222b88bd8eac23f41f62e14110afafe64210f4a07f894bfbcb183b87747e362cd5b9e8c50df1453053c18fe121bb7507bc501a46f736bd13d5ecc4fa54dd77e53a604f7232c8331b1b7c0537689fb1945128f975d6405747bcc0d172c19d4fa610cf481a8aacd5f7a7cbef3456a65443322afd137708b3fc8b3ee9b8a4cb38c7b14d4fdd74daa58074bcaf22bca1cc8ec2dd22cde60ba5d892342a14be25b4d897ddb23b8154c6f24a93c00c17acd90522ef7acb80b343ac08b4af83ce8a0c95bbfe140c0f1c572639f4079607a34b8f675cf3ddfc2bff83635f9d13b2375c1d317920530fc72fc774edf8dc4f653d72876c1ae61edc6edb1cbc2edbda7207cca6811175cb8f9205d8be99d81d217e0433ac7d298962b87db00128fff1f3d264c50dedd3ca4bccc8db1c1191c3ea226d351560024be65f4e85f577bf8f06d6528f7c73640cd579ac1677ee58255c1bcedc9670684737173037eddc55bc943b78524f617653a324319f6026b6a9b02cc9e3b58e8b661d5d7805723cc5c476e3b7f04ee7dbfe1af744f756313a2146a84224877cf93d1f27c28e7e21e4d29193d6384c3e9eb337cf67a5b45970c7ec3d5523847d0e7d56cc4f132f160851feeced284fb5a75c203fa6b1e01362ff6da0ebf8d852c90b1a026386253afe5c7a078ecd8c5663bee57b83200653bd2a5e6695a3cc5d466d2e65d81da058107d2422fc99875e95b772608e456471cbbfa2ee8795b45cacb1290563eb23bf534c7db5e47fbee4081013974ce9dac3301d6cd966255e22243c90fc55f4b421940c7e819e5d54f44869943e2f267e3b1b9eafdf61a9157c04e71b756076445ead7851923efa6454ff156b2c3793192fec046b7b7e8947efe0009e9ef049dae89b34dfdc0183cc7a9c7cac4eb13994535e803a7d9f070b95df12bb2ecc30bb518517982be2a274faaec1713a423f94b589848326e5fe32c115de0b7f8c2876271a0d17924d246c9e08bb534d741b03646daea5411f1825632caf101ccae49a99b82e3735513947b6c6a4b09b76203547f79f2809c96bef593c6e64bd0eb84b1b11e3de36fe725607df9b3420af6cdead70bc572a44ec1453de49fa1f6843f5e74055cc37aa86a9c06cc8094f3f58f3bac7f7980c1d41729ce1331096fbab86ee7568798a0be045b132ec6c587143ed9071f949f0090b783a1324d76f5aec5559168da67c85e3bb8a48937a214d1f101d7ccff655c5eb778ddd61cde8dc39bb1920e0d7cf418b761ab92bcc677a0c5b6cab85574c1216e3cec682dbfad3a7b053e365578c0c1c7a70a1b48b6744441f1476e13366087913dd41e6d9a272301be9721dc0fc78355fa914b8033c1eec4f2cd0cb39e17603b2f7052619cb52e658c928e3925c326d00016146a754142115d4bafed77a5ad8b541f4e5cb732af4411a1a8833ff4215aa8e0d743ecc63c311bbe3fd21335a82f0648535688434df83e6fe6ea8455294a2bcafff88a0d0485657e7adf5b73083d873cc87ca6cd56593f11642fe27d9a998d55ac7af93b702fe4418d3ce0f2dd73d8c1f60524575119bfe0d961c468a906a0df2868465b5bf5d2018b97c2e11393f673b7199dd0c71df6469f984dbd484cf809ef1f919d1b7fcec368cb93ef49fae9b564a28225c2e2eef782a07f6aa660b2c385ac00a2151e3ccf29344b93621987f57bd29ecde89a2cc8dc87471606cce12f2ac1210358b5f08eddd983e86c02440a9b357f386f8d4ea61b0a73b64427e4e73b174ca05e63ab749626132643d02df141c757485cf729bec5229b91dced3640366200eb3beaacb9e9daf19fe74d7c06c18f3caf4d9ea2cc8fa906f58c620f91fd883dc9f3743f094a4b0c85d78f7ce6cc01c53856be10e861fe347f077399e187d22418c0aad8a913f4cc892c903d544be85be4b031d1028f70acd8184de1c28538001b153bf0bbb65c160339fe34856eca5eda8aaa79d76e4f126b4bbfaac2f44c0d936002ba75b0205a21c4720b0b3ae87f5c458a57254b017c51e3a51e087c3a29a654abe9fe9c21a100122a11f500fca1bf676aaf959980fca9cf1ace013d1de770ceea61e9c831d3a5dd8faab74bf95ee49f1a580e8c4add9cafddade6c761bd100e1658070b8fdba52481144d14fab4771b63a1e1ca1ef6d4edeada494a084bab8a5e4e97d1fb9313330ab144adc08933fcfa71ce95e9a274e5d1deb79705512b74306bbf702db06720abd251f38a4d6c3f8006cd42701e2355e7a5815131530749a409c0d5d993d20a6b82d84e4f14c36ce24c713c53e8edd3d571049838ae8815cbe000e492b645072e8635290d7b4e13439bd7964aa14f5d55b9347df8d7635ff028f4b6c9c21a98d2fc733fab1953ec9f142e95a29df4cb41d7b7863423ff7c39cbe4623bf449d5bc77040d90817ac0048cc360509a5a16c3094a6d57580db5497c3b3d5c62104dc58e851acafebe9eb531018215ff2bf2d58999d6ed966a646dddb0ca203a27978983128949878002ed1ddaa77aea7215e74499f9159cc9955822db1615a258fe65e0561be8c62435b7271b1f2911a9e01439ec15cec3e1f9fd795fa829c20e8729ec79fd064db0a8c2e676b9f3e3f49f05931d79303a9bdfeb04acf35596520383d8e758a889a00e7362cee3717b70cf30abb93a5f2a40ae099c265c2df3c02b4fdc4293d4e7fc26c8887fb9eb9832b716b083cd56d77ec2525ce622a2c088ceda4c753643212e2170e89ae2eb48d99e22c4844553b3ea0eb5383813522bca850896239fd228d4215d4c5b550f041c87b78efc4c1dbb96a6b0c0332f7663c4484b487804bc21d2b82f10da8a4fc7bddfe88882d1285e5eb1592ae121dc37b39e0de0c4825639ebf4cb8328c236721ddcb5820f4ca2efdc2bfcebaa0c588b0cac27dc5586aad5043434edcc6c02bf7173cc771d73f369951e97a0ef5cf2deff299adb75e564b3630c41fc059a75c661dc2510a3dbaa265bd700c9e20685991875a352a8083db7560f81cccecbfa3a744cedcd22efa444140e4d1b44ca8694ae7b80854989c393173b2fd8320ffea2d9a20a076357e5005c3c827808ad6a52b8de9968a41e0ac3170ed92f9f5630c62660746badb6894a6ad22b31be6486cd433520fb12c35a2720cc4b26749c0c4fff90060d3e5c4e5a3ea0116e20fe0b540b3b1dfca809b76bdeda4288667dc0b5b12a017fc660ec2f81d2e123c7a44c5a5080cc6bb82dea8c4afdc577c083bfc1030575b566f8a645b625b0afe554c68047ca43b99f9fce1dafe0b8c04c0a96b291cfb57239acdea88a4da0702b28de12fd36f24191e872a1f84a4f9922f54c1ec1c4b334a2637bdf17c0ea02c625d49d5dfb6f3799fd533a2948f4eb715ce107beffca4d4bcda4f74cae225cd2d47e5328ea2d43e90bb5d889cb25582a6dec2074c2a56c9b085da58d04b47f705bd20d2a038e74047995a5a91f130931fc916ee1ce71a6e1e448a692f2038612e4ec92d9aa496bb456303948ee34fa252fdff78c73d0ea3561edaad53a687172928fcc6b4f7c489113444a71073891181c863e1b11fb91ba0ed1362e313738bb094e59848b6686b609820a40f2bb7c06b2ed25f8834550a11be1d48af0260d8b22af8a560b9b995539118a7703621bf4f458d317ff594ff5ad5b54c460b0fbefb26e6afaed183d76f5deb150a96e8afa6ae08bf2e5cf7512ba46d153417530bb0f3d0fbccfa577b6f89d67c3d35402c50ca7e26a037d6e743ced3f562624aee7c9e7edb3e6dc1fc3e692b93b819bfec8e593efc6e5614ab7dc754ae7116c14b52d3cdb5a1fae2b420fcbb0a1df00ba19f61243e94f14324fbe9ff18cb9e9050fc795a9e4951119bf1fab9ea614cec2421d1f60dfb7776c5b689a443785f979c4abc48e730d091a63f8f504e605029a817135597e7556dfa086139077037f313e827f4f1ca48aafafc4c1f8350750c68eebdf64b9f8e7043d3f53fcdc7c3479d09d70305b197e68140b430290d6169a998762af1a6c18d9f5a383503a9861930a0058641e35ebf149bd092a3f16e91779b0782f850c6ceeae5325609431cd363f46c5411ccf4187a30d3681cf28b945b47ac0300522750c706d4e438d848339578b8cefbcbdcd0d0e325a9d201ee670a98e7c79bd695915bca29f1d06ec01b71797088126b936f3233a7e6d9536aa9f09f13bfea01d44508ecdded3819bd1c6efee93703f4886be2fa2e8c93a71955a61f0cf44a9aed26cd75416e83cd87191a6c060484b0cfb50780131141f6cee23e7a0dc395118699422b1ae82199a7482e6637e5f6d0cf95b59463bccbf9a1cb13ddff1510d9e4b6c83f87b54ea388d73bb7b8ea91ef354ab5a7d789ceb116659a9b094fca42bf3b3ca01a6183d0947993d1953ddfe86b4b9ed39ee0457632989bf804e638609c7a5f02ae3375b664f9420b809fcaafb8312f8306d76635fadd3e92c6cbdc4621ff29384d1c171f526446863f5264ba0bbda4591f7c556ef90883db06ea4df05fdc2ba59972efdd10ac63317e97756c596c01b9b63efc66576fc220822fb66e63e49bd6a0bd1af1a67659e36f0f8ce4594fb592c2592b6d59ea6c387c10d83bcb6fafb0ce23eef6f108d1449ee732b75bea6536a1d4279d8c73a873ab0273dbc47b33ced5c18358b719341148c3658ff43bb93ee7240511a549e7908a767ae713f3909f937b876989f2c78d379d5f62ea7fa8c2f872179b90adf80caec5e60965fa003f4c1b022d49b2b056e3f0809ad4667accf069c2d4f93d90a6272c2434566553ff0da6507d6a4680c2ecf6b0810a9777ab213283ebc2cde80001cb3e591ffc0524c2d49e297c98e71595cc7d742ca23fde6976297988fcfdbdb131f82547aa17dc8f2225db8829a8886147cdacaf7478fb383c645d6f87486ab377e83b3b4352330fbf82193aba642e7494fbaa86dd146f3fbcafa68502be06e76f62b43520568977fa3274a1ee63250778dbb50c9b53d559a025dd5dfca0b90c39bec748b7b48f277142e7b8feed18fcbd6d064af6aedbb4af14ed01a8b947d132c439d5fc28972b1f3dc32d1347d0c78d6b0253f5eebe2c2623a0be2f11d48281384c89b8f5e9317c3f9eb5ab19fe113376b5be6d7b13518e11d10f882dbd1a78020634169294b51202691c28a3c78c1dfcf4c90cf9b6bcd89ff2487e237fd8fdcf9438d3d7fe6170d50bc2fe85a0ea92bb74a4d5a4dcae9186b48f1733f165600e3daf69425a40ed47bdf21cce93fa901a6370e67eb5bdd59857742322ad6e9aa86a260f76262faef3c957b293c80a7e26a06d6ac6590a75f47df7784c2bfa51da1ca9b016628b56db020bcb88fd584b2a6e71d97a7505cc692b7c24ca690f54683b913741ed48487e358ac12d1f5082a618344a716bce24d899577a1f6f48b22bd0ebe6cd4f98cfa0bb645a8c28575d171d898a8feaf0578d97ad9a4cc4e0a0c8367202a5bce21a1c14a99073afbcb5399336efee97bd5819cc125d1fc401840e3a31f23b51d5d4e6c9ea449975817f08f742ee5479b9ba24a7b203b82d3e060510e85aab8c32434229e4100b5b1c3760b914e095d071790b65b9bb0a3466d19b206fa415f0f8b0bed0673f6e17e2e5fae3a42a3633c302c140fb82c2f5c01fc470c9c3e68b5c0d52039ef4e50fa31e1bb2019ebb9858b299b69740b2949449d8469d728f892da89e7115de8ee1f777c507bfe98e80d9b4d064fe0889392e5170711988b609972aa8f15525ad2bb1dc0117af0933792aaca6eebdd22ce19639bee25c877d802a503d1354bba99403435db2aeff550c0b477625bd22617398b9124d3edf1306e522cb2f8610bf533cbc55d4d1c5d7ff5d07f87a11494980e97a7c824beb7e16090040d2cbff761b826e8b5831dfcdf000eac2e771a48c6ba846b9ddf36a858099f77d51bbfad480bba9095905d618d7b355e40159f5e48ddd5583ea720ac9c74cb118c011d3ba1c67dc865a8eeab8667e0a81ce5894fd888fe4ec2ff936bfeb45c66cde689e4a4f13bd138e7dc27aa263fb009b81c274bd0d73b35385d99d1d082ebe5cb41de09d274fbd7c1c414f3d1ab45d2e8949cff34106b574710144cf6d2072c380cc9c83ca48b5e057973e73df30821c1478d21bc55a462727263062271d76fea1509b365fbdd92b4c23e088f61fce348ba0e7a3e5de600762c462e063e74981f14520babfc3278326b95419d24f4e4853507acea8a5f7e70c13b31f47dc3d823b3f699a029093b1ccbc564c3be29a974cea6fbecdae3f763fff2e65bfa1a52742fdcde3c9c0644267825576d7268e2bec08bfb52083df7b5bab93fbf2cf6a8d91cda5a04216e8b9d961a28720667d2a1d3098bba17517b74cc93b8e3b65d36c12f10a7e0898db2e1e4daf78a6696e1ee221cb885519cdfbe9284face6a525e4ac8d1d91f46d2dc8331ba90e9613947718bf51476ec3702c21313248edd984c46df760b2d83ce9599fa73508d12f606d4643c25ca38fb97fa43d229a8131332011fa87763ae10d48c5e2be8914c1d40d3e53e52f803804769edbac0e309590e4131982de1baae61ff0f1443b95344c488a7a7f4e0b3034400bddc2ec447a40a36d017b2caba9bda7f03f8cddcceecafa556820ffd3c072ef394a3d809d78f5ef53f57f72012b60ee76940b3aad36c76249a371669ddb0da3227b893b99a355143cab5cfc717658b14133aaf002ea497bd7db4d8f1bbf9934a55777ab886038492a934b1a2a2cce48971ab93c78fe4d45109e5db3c5c276cf99a3cd497023bb2a19b6a186325f72d2d202ff0201caa67ed9901afae678579fd3fce2f5bfaed4a54bd2dbb824f51dfe17d998b0526fa8dc596a80f097c46ce38f5e927ace3d0dc90b9092d619b71e36421fe0869681cdb5e385b794e9ed34932163ffc6b8d21e882b1ff00c7f3db420b8ee19c7c38ec3192de30dc3e5d01f572134c1b25b08f7cd1526fe4a97c1108cd84950a11dc697551b401c4186f2d1e4cd21a2b4fa43ec6c4af09f80bdadebbf121ad2339f6bac808f3a9964516132c3b3d8756f22f7b7b8a8695d3029c45e335c77945b8ae7eca964b77a04a1695d65c4f453f1cd3f6d85ba40764f1fae7165f1fba3b28d23f88534995119c869a20d48c67f79dd1d259042dd8226732905de52ee1aa570ff4fa732d86cc20a11dace7d65fdf1d26b58384b7f315d11cf3231007584025c3dd9f2d5e38d7c2e3bad6ac85267d31625dbbbce63e9898872f38a303fd638e43c5cefebd719e8efe6b2075f91cbc62cbb6579420016ac0216b667aecb7195da4c4a36477c665fcfef6ad551ea3606a1475230118d95e600cf2abeff563d92e1bc753d10d782a1d95140b5cafae4d2d350e7a84fa3b65723943a97c68cabb776ce502abf2f1f1fb8c1248a9bbf2903c9304fbf9a1219b40f378123b5f8130ba36f3f423327b869605d056a101f64d8d6ca8b59aae0e325ae5e114ea550d11fdf983ac2eedb404a10929eabaf2f7c402b82124c7bb30b5344295818a253012dafa47f6f34b4431f0180cc2859db29b349c6138b538fd4de3863c21c01285600dc1ce73013990e4c1daa03d78878200c639586038620fdb7a9fc844485818edfd2636aec5a2b16af4bff428d2dfe89475ca06776a68d5e4b4761b985095e94cd91d33a3f0a5dfbfc255ab5896491c03044aff1950823358b54edee81afea9b88764a24ac9b917e2cab6cb2ba1c91d10bd0ef8681cea3ad9c59f78882d4aa807a53a106ca2d0738a04457275cfac653638a94577c4ab03c9e5d6de1dc78b487ec918c4a7ca2a8d6ff852e8fa25776aa6f139a3c54693271502b71eaddb461c1819f6d20a79ac7226a177f42df6f4705cc62cc0484b28e5cfdf7fc52b0c582621bacd703a28714175db576ec0bf017c32424675d28d992e46de460b3289fee37b49b356f7842cd94764795c887115419234049a2a2708ae82efb8f10f5d22c2bae2f5c1abb9cd839c6214b0acc0b04fb6cfdf7f3adcadc5189d850dd957c47a4f946ac479a4e124f695d222f37ea07506638e90b86bf3bbb0ccb578bb6fee8941d6e1da1c77996a064c60157b6d417beb1ad5205f210851a079f9ef6e3faf3cab5482cdf7159e78b9d820cfee714a070ad35b91b49cb43b43bb7fbbfd5276b5c2eb0d4ca9ff9b10f0b8ec74233c7aebb2933e4bd5b0a388ed6ceafed8ef995098c2b88d74d2cebd44ba26c27b5d8983394d286156f4b501e45fe5217096b1bfe7b9bb3f6c3b4d2ad15bf1c86ed70ee852c4cfb979eb4a0c826953799a2030322669364aa905092fb45cbeacac44703c70d7e278f1a5926f242d459e36dd8e374f9bb7a0c907db1d4f8c1993ac0244f6d563041a8956ea82b7eef7a63ac200d32ab107d6728610efc530aa5783771a5fbedbf5a379b2923f088cd203e315f41072d83201a1f1fce87d8b7cf2f142e1ff5f8b2f52028e8764e49604b46dc3763f79015183f601e26346606e22c24e1833b2755afa285feb833d3ff3b910846a96e028070f925a6c640d9956c852367e89ca0dda26ad3c22f3c63f87c49f21e62363273579059ec88643943816a0a20caa0d97bb10aa5f1da882d422beefc5f59128636d851427783f1639d25af11d0bf7e8810f2304074f0710b82a1f8fea2f7da16b896783a468aa04e5524d9f118ae733501cfb913c3c2e327b7b5c87e250884667a9fcf29e27c9009c2173853b5ddafd7c6bfffbe1edaaecbf5134aff42876a192e34e32faa8605e1f5dc8553c3e43156126da540ba467be0b3bece1826a85a96232fd37a68bd9a381e96a74f857965477725c28aa908fc8367c7c4024059cd2454cdb0bd00213d70946b1751e133cff48809c6093c6fb00db7e477a86c857c81d39d49f1974d2191f52f737c0f9710a6eb8bf6b86161d30b312123840cfc060abd7f69e36a6393036550321d09dc13e484794aa0de078f03d8396464feeb7fe8055b23638d7d780a394013039dd006484051211c862bbfa85e5cfbd77d2ced2f5ddb9229f183fcffd2c5d5bfac", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa0, 0xffffffffffffffda, 0x1, {{0x0, 0x0, 0x1, 0x1abb, 0x4, 0x80007, {0xfffffffffffffffd, 0x2, 0x8000000000000655, 0x3, 0x10, 0x8, 0xffffffff, 0x141fc, 0xac, 0x8000, 0x8005, r4, 0x0, 0x58000000, 0x7}}}}, 0x0, 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$inet6(r7, 0x0, &(0x7f00000000c0)) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0x1a, r8, 0xb, &(0x7f0000000000)) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r9, r9, 0x0) fstat(r0, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003480)=0x0) statx(0xffffffffffffff9c, &(0x7f0000003540)='.\x00', 0x1000, 0x20, &(0x7f0000003580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)={0xb8, 0x25, 0x4, 0x70bd2c, 0x25dfdbfd, "", [@typed={0xb, 0x15f, 0x0, 0x0, @str='autofs\x00'}, @generic="10618be1f8e4f3c28df2c1e73260cf43280904211e6f63bb8ecdcdb6f99ffbc98011396dd6ab0030ac9b9fc86fedc1f04c9410410f5f82947ee57cecca5b9b361bcabc1faa6899e5db672eaf627b69b7771451f15ea792161ad647873fc75ed7a33959b626753049416d9356c03410419ec06704c9a121859bd234b40eead5e97ea5241eef32b931f2ecdb6c83f57b6ea16a03dd9b63ddd9d1e8"]}, 0xb8}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100ef47ca5146d8c7f22b44e05e72a0ee82b3f1b33a32373980778034b7bc0600020800", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="34000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r11, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x4000080}, 0x8800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28880, 0x0) 14m5.107421557s ago: executing program 2 (id=1137): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async, rerun: 64) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x4000000000010001, 0x1000000000000008, 0x400, 0x7}, &(0x7f0000000080)={0x9, 0x6, 0x4010001, 0x5, 0x11, 0x0, 0x8, 0x1004}, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0800080006000000fdff14000000450a0014006600000b2f907864010101ffffffff"], 0x22) (async) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f00000005c0)) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000540)={{'\x00', 0x3}, {0x100}, 0x10, 0x0, 0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)="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", 0x12c, 0x0, &(0x7f0000000400)={0x2, 0x11c, {0x0, 0xc, 0x6a, "272b2264fb1c051f7b46b1f48806617ca4bec9ae097d5182be25abac846ba1d5f507bdb985aa93dbe760b20cbaa0d8a5781924391d641e94f9bc19d0fa14442984c6e467a2e477124c3536741e239bb009eaa2703723da52f712a3f6b33d38af39c5cb2ad44ff7d5d8db", 0xa5, "89b369459797aae66ad4518c3238aedeb8d0006c5df96ba943b6f75642895e8e6591e2a48823b9eba9b1ac69289ac4b6b3b809fa0e8f811c88967782b8cb7a6c063ff64ab2808796daeed9a54b510acb5bf0986398a66e4c51962496d6c23c5a7e37365ebd49b303e27bd99160c5d6adacaf11f282966c8ae4328f98408ddadd99fa67f79f9ae9e0c7c7231ce65114a84b6e2473b52170164bf4452aba5a3c81160f6e7784"}}, 0x128}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @loopback=0xc0586300}], 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001a001368d22a8beb10b5bfd01c"], 0x14}}, 0x20048010) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000140)=0x4) (async, rerun: 64) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (rerun: 64) close(0x3) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x821010, &(0x7f0000000200)=ANY=[@ANYBLOB="660a010f477dd6f3507e85e1a6de09210000dca4000000020000000000000000df054c834ed1c031303755d07c6a9dff7f209d448de4e50153d1c623fb5bad33caa85b11abbb6f609e95709df5c84582edaf36b76d07a744b7052a8df290a5ef9920cdae00931eceeae595a67f62d1abd52808af5aaf4e54c62127d702b7a8d6803d", @ANYRES64=r5]) 14m4.252227178s ago: executing program 2 (id=1143): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)=@overlay={0x8, 0x2, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x2, 0x8, 0x1, 0xb, 0x57, "0117903e"}, 0x7, 0x3, {}, 0x3}) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)=@overlay={0x8, 0x2, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x2, 0x8, 0x1, 0xb, 0x57, "0117903e"}, 0x7, 0x3, {}, 0x3}) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) (async) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) (async) 14m3.451245772s ago: executing program 32 (id=1143): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)=@overlay={0x8, 0x2, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x2, 0x8, 0x1, 0xb, 0x57, "0117903e"}, 0x7, 0x3, {}, 0x3}) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)=@overlay={0x8, 0x2, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x2, 0x8, 0x1, 0xb, 0x57, "0117903e"}, 0x7, 0x3, {}, 0x3}) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) (async) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) (async) 4.058782867s ago: executing program 3 (id=7212): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_mtu(r1, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) (async) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') 3.732179287s ago: executing program 3 (id=7216): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x30314142, 0x0, 0x0, [{}, {0xfffffffc}, {}, {0x5000000}, {}, {}, {}, {0x0, 0xfffffffc}], 0x0, 0x0, 0x0, 0x0, 0x5}}) 3.572279072s ago: executing program 3 (id=7219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x10a0, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1040}], 0x0, 0x0, 0x0}) 3.446557968s ago: executing program 3 (id=7221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x50) 3.273280471s ago: executing program 3 (id=7224): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0xe22, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x800, 0x10}, 0xc) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x62201) write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0xdbdd9dccd9473876, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0x10) sendto$inet(r0, &(0x7f0000000080)="ee", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) syz_usb_connect(0x0, 0x56, &(0x7f0000002d80)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e7010203010902440002000000000904"], 0x0) 2.082630552s ago: executing program 4 (id=7244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012c35b400304106098c60e0000010902120001000000000904"], 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0xfff, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8007}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) 924.15466ms ago: executing program 1 (id=7250): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000200900010073797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e6174005c000000060a010400000000000000000100000008000b400000000034000480300001800b00010074617267657400002080028005000300cb0000000a00010041554449540000000800024000000000090001"], 0xcc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) 923.799421ms ago: executing program 0 (id=7251): r0 = syz_open_dev$sndctrl(&(0x7f0000000d80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x541b, 0x0) sched_setscheduler(0x0, 0xb774fe03af048030, &(0x7f0000000040)=0x72e30a9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES16], 0xd8}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000810) 860.126302ms ago: executing program 0 (id=7252): socket$key(0xf, 0x3, 0x2) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xffff0018) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x7a, 0x0, 0x7e6b, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6a9, 0x64}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 804.148876ms ago: executing program 4 (id=7253): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) keyctl$clear(0x7, r0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185040, 0x136) mount$overlay(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)={[{@index_off}], [], 0x5c}) 728.459668ms ago: executing program 1 (id=7254): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1040}], 0x0, 0x0, 0x0}) 697.48784ms ago: executing program 4 (id=7255): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fd007c05e8fe55a10a0015000200142603600e12080005007f370401a8000700200006000418027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 631.228949ms ago: executing program 0 (id=7256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffc50, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 607.494126ms ago: executing program 4 (id=7257): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x10a0, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1040}], 0x0, 0x0, 0x0}) 606.213194ms ago: executing program 1 (id=7258): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x1409, 0x40e, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001800}, 0x4000040) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x100, 0x4, 0x13600, 0x6, 0x80000001, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x1, 0x7, 0x1, 0x6, 0x100, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b802, 0x9, 0x1, 0x2]}) ppoll(&(0x7f0000000040)=[{r0, 0x4001}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000380)={[0x6]}, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x140a, 0x205cfe77fa614fc7, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000024}, 0x80) 484.23778ms ago: executing program 1 (id=7259): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc200000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000100000000000000", 0x58}], 0x1) 447.436632ms ago: executing program 0 (id=7260): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d00e8030000a800628b8c8b144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbac68017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4e}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x64044004) 425.107188ms ago: executing program 4 (id=7261): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000302800000121f", 0x2e}], 0x1}, 0x8084) 288.428632ms ago: executing program 1 (id=7262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000084000c000440000800"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 264.5216ms ago: executing program 0 (id=7263): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x180300, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r1) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0xb, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010000"], 0x1c}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x240, 0x32, 0x1, 0x0, 0x0, {0x30000}, {}, {}, {}, 0x0, 0x40, 0x0, 0x8000, 0x1, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0xd, 0x8, 0x4, 0x0, 0x0, 0xa}) 108.446595ms ago: executing program 3 (id=7264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x50) 28.046899ms ago: executing program 1 (id=7265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$RTC_ALM_READ(r3, 0x40187014, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@cswp={0x58, 0x114, 0x7, {{0x88, 0x4}, &(0x7f0000000080)=0x3b4, 0x0, 0x8000000000000000, 0x4000002, 0x0, 0x4, 0x1}}, @fadd={0x54, 0x114, 0x6, {{0xc, 0x1}, 0x0, 0x0, 0x4, 0x5, 0x0, 0xfff, 0x8, 0x9}}], 0xb0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="010000000000feffffff2c00000008f70200", @ANYRESDEC=r0], 0x28}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r5, 0x1, 0x37, 0x0, &(0x7f0000000040)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0xb00, 0x12) 105.982µs ago: executing program 0 (id=7266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c7000000fffffff5000000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 0s ago: executing program 4 (id=7267): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000880), 0x0, 0x40000000, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 28] do_syscall_64+0x174/0x580 [ 1053.525117][T23328] ? trace_irq_disable+0x3b/0x140 [ 1053.525139][T23328] ? clear_bhb_loop+0x40/0x90 [ 1053.525163][T23328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.525183][T23328] RIP: 0033:0x7fdb6909ce59 [ 1053.525201][T23328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.525219][T23328] RSP: 002b:00007fdb672f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1053.525240][T23328] RAX: ffffffffffffffda RBX: 00007fdb69315fa0 RCX: 00007fdb6909ce59 [ 1053.525255][T23328] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1053.525268][T23328] RBP: 00007fdb672f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.525281][T23328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.525294][T23328] R13: 00007fdb69316038 R14: 00007fdb69315fa0 R15: 00007fffa59138f8 [ 1053.525332][T23328] [ 1053.561891][T23317] bridge0: port 3(dummy0) entered blocking state [ 1053.562226][T23317] bridge0: port 3(dummy0) entered disabled state [ 1053.665889][ T6764] usb 1-1: USB disconnect, device number 39 [ 1053.774904][T23330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6622'. [ 1053.906143][ T5670] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1053.927881][ T5670] usb 2-1: device descriptor read/8, error -71 [ 1054.176865][ T5670] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1054.200092][ T5670] usb 2-1: device descriptor read/8, error -71 [ 1054.306481][ T5670] usb usb2-port1: unable to enumerate USB device [ 1054.398633][T22707] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1054.546086][ T5707] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 1054.569220][T22707] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.569271][T22707] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1054.569298][T22707] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1054.573053][T22707] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 1054.573080][T22707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.573100][T22707] usb 5-1: Product: syz [ 1054.573114][T22707] usb 5-1: Manufacturer: syz [ 1054.573128][T22707] usb 5-1: SerialNumber: syz [ 1054.713848][ T5707] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1054.715113][ T5707] usb 4-1: not running at top speed; connect to a high speed hub [ 1054.718294][ T5707] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 115, changing to 4 [ 1054.718379][ T5707] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1054.718422][ T5707] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1536, setting to 1023 [ 1054.728157][ T5707] usb 4-1: string descriptor 0 read error: -22 [ 1054.728347][ T5707] usb 4-1: New USB device found, idVendor=0499, idProduct=103f, bcdDevice= 0.40 [ 1054.728372][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.773436][ T5707] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1054.774400][ T5707] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1054.782891][ T5707] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1054.783720][ T5707] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1054.795306][T23338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.797807][T23338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.799697][ T5707] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1054.886500][ T10] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1054.919566][T22707] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 1054.934889][T22707] usb 5-1: USB disconnect, device number 45 [ 1054.990612][ T5707] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1054.999405][ T5707] usb 4-1: USB disconnect, device number 118 [ 1055.052878][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 1055.059210][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 503, setting to 64 [ 1055.059242][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1055.061766][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a16, bcdDevice= 0.40 [ 1055.061794][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.061813][ T10] usb 1-1: Product: 砤≢憐 [ 1055.061827][ T10] usb 1-1: Manufacturer: 粄囚ڲ씒絑㏨⽠퇟瑹꠰მ픟⃖⟌咯従紾䥦ꒁⰏ⾁̎⩹쀽⺬യ姁뼤쾢먑។૔몁ﴔ☃槞堍幑甅譴ꛉ䖧ㅦ軥⒇꽇ⶋ瑛뒃ꡡ砞䋆朠ꃴ睮㙘ᥒ峉攚꣤崭⓻⭄蜅蟅읥뙊҆揸꫗麟쐢俏魮曘诧뷙櫣䭀 [ 1055.061855][ T10] usb 1-1: SerialNumber: syz [ 1055.075048][T23347] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1055.279985][T23347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.281020][T23347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.285181][T23347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.287303][T23347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.335291][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 1055.335404][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1055.340555][ T10] usb 1-1: USB disconnect, device number 40 [ 1055.492001][T23351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6629'. [ 1055.492054][T23351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6629'. [ 1056.187198][T23371] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.6636'. [ 1056.311049][T23368] netlink: ct family unspecified [ 1056.311091][T23368] openvswitch: netlink: Actions may not be safe on all matching packets [ 1056.687649][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1056.848050][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1056.858794][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.858826][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.858849][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1056.858891][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1056.858914][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.870256][ T10] usb 5-1: config 0 descriptor?? [ 1057.099940][T23387] Invalid option length (0) for dns_resolver key [ 1057.310601][ T10] logitech 0003:046D:CA04.0032: unknown main item tag 0x0 [ 1057.310637][ T10] logitech 0003:046D:CA04.0032: unknown main item tag 0x0 [ 1057.310665][ T10] logitech 0003:046D:CA04.0032: unknown main item tag 0x0 [ 1057.310691][ T10] logitech 0003:046D:CA04.0032: unknown main item tag 0x0 [ 1057.310717][ T10] logitech 0003:046D:CA04.0032: unknown main item tag 0x0 [ 1057.310743][ T10] logitech 0003:046D:CA04.0032: unknown main item tag 0x0 [ 1057.310771][ T10] logitech 0003:046D:CA04.0032: unknown main item tag 0x0 [ 1057.310795][ T10] logitech 0003:046D:CA04.0032: unknown main item tag 0x0 [ 1057.310821][ T10] logitech 0003:046D:CA04.0032: unknown main item tag 0x0 [ 1057.310846][ T10] logitech 0003:046D:CA04.0032: unknown main item tag 0x0 [ 1057.321184][ T10] logitech 0003:046D:CA04.0032: hidraw0: USB HID v10.05 Device [HID 046d:ca04] on usb-dummy_hcd.4-1/input0 [ 1057.321279][ T10] logitech 0003:046D:CA04.0032: no inputs found [ 1057.349931][ T38] audit: type=1326 audit(2000002618.206:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23395 comm="syz.0.6644" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff390a0ce59 code=0x0 [ 1057.436148][ T5692] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1057.502495][ T10] usb 5-1: USB disconnect, device number 46 [ 1057.588387][ T5692] usb 2-1: Using ep0 maxpacket: 8 [ 1057.590197][ T5692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.593696][ T5692] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1057.593723][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.593741][ T5692] usb 2-1: Product: syz [ 1057.593749][ T5692] usb 2-1: Manufacturer: syz [ 1057.593756][ T5692] usb 2-1: SerialNumber: syz [ 1057.648909][ T5692] usb 2-1: config 0 descriptor?? [ 1057.661284][ T5692] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1057.855274][T23389] netlink: 'syz.1.6643': attribute type 10 has an invalid length. [ 1057.855296][T23389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6643'. [ 1057.861883][T22707] usb 2-1: USB disconnect, device number 107 [ 1057.915187][T23401] input: syz0 as /devices/virtual/input/input71 [ 1058.522091][T23416] netlink: 'syz.1.6653': attribute type 10 has an invalid length. [ 1058.522314][T23416] dummy0: left allmulticast mode [ 1058.522341][T23416] dummy0: left promiscuous mode [ 1058.522577][T23416] bridge0: port 3(dummy0) entered disabled state [ 1058.579673][T23418] netlink: 'syz.1.6653': attribute type 10 has an invalid length. [ 1058.608863][T23414] sysfs: Unknown parameter 'workdir' [ 1058.622129][T16297] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 1058.705370][T23416] team0: Port device dummy0 added [ 1058.797455][T23418] team0: Port device dummy0 removed [ 1058.848603][T22707] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1058.995485][T22707] usb 4-1: Using ep0 maxpacket: 32 [ 1058.998361][T22707] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1058.999934][T22707] usb 4-1: config 98 has an invalid interface number: 52 but max is 0 [ 1058.999959][T22707] usb 4-1: config 98 has no interface number 0 [ 1058.999991][T22707] usb 4-1: config 98 interface 52 has no altsetting 0 [ 1059.004069][T22707] usb 4-1: New USB device found, idVendor=04cb, idProduct=0109, bcdDevice=d8.7a [ 1059.004095][T22707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.004115][T22707] usb 4-1: Product: syz [ 1059.004130][T22707] usb 4-1: Manufacturer: syz [ 1059.004145][T22707] usb 4-1: SerialNumber: syz [ 1059.135521][ T5692] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1059.250713][T22707] gspca_main: finepix-2.14.0 probing 04cb:0109 [ 1059.266002][T22707] usb 4-1: USB disconnect, device number 119 [ 1059.297562][ T5692] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1059.297589][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.297610][ T5692] usb 2-1: Product: syz [ 1059.297627][ T5692] usb 2-1: Manufacturer: syz [ 1059.297642][ T5692] usb 2-1: SerialNumber: syz [ 1059.320994][T23435] netlink: 868 bytes leftover after parsing attributes in process `syz.0.6659'. [ 1059.353286][ T5692] usb 2-1: config 0 descriptor?? [ 1059.370211][ T5692] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 108 [ 1059.377362][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.757865][T22707] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1059.769229][ T5692] (null): failure reading functionality [ 1059.818312][ T5692] i2c i2c-2: failure reading functionality [ 1059.858415][ T5692] i2c i2c-2: connected i2c-tiny-usb device [ 1059.869802][ T5692] usb 2-1: USB disconnect, device number 108 [ 1059.908047][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1059.908150][T22707] usb 1-1: Using ep0 maxpacket: 16 [ 1059.909997][T22707] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1059.910025][T22707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.913047][T22707] usb 1-1: config 0 descriptor?? [ 1059.960183][T22707] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1060.077036][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1060.077124][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.077144][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1060.077193][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.091939][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1060.091984][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1060.092054][ T10] usb 5-1: Product: syz [ 1060.092069][ T10] usb 5-1: Manufacturer: syz [ 1060.107827][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 1060.107843][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 1060.112545][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1060.112563][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 1060.125358][ T822] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1060.156600][T22707] usb 1-1: Detected FT232A [ 1060.159883][T22707] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1060.163844][T22707] usb 1-1: USB disconnect, device number 41 [ 1060.174690][T22707] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1060.183150][T22707] ftdi_sio 1-1:0.0: device disconnected [ 1060.277591][ T822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.277673][ T822] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1060.282135][ T822] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1060.282165][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.282186][ T822] usb 4-1: Product: syz [ 1060.282201][ T822] usb 4-1: Manufacturer: syz [ 1060.282216][ T822] usb 4-1: SerialNumber: syz [ 1060.340020][T23449] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 1060.567013][ T822] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 1060.567040][ T822] usb 4-1: found format II with max.bitrate = 9, frame size=2 [ 1060.567074][ T822] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1060.567205][ T822] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 1060.567248][ T822] usb 4-1: found format II with max.bitrate = 9, frame size=2 [ 1060.567264][ T822] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1060.570378][ T822] usb 4-1: unit 4 not found! [ 1060.728213][ T822] usb 4-1: USB disconnect, device number 120 [ 1060.931954][T23458] sysfs: Unknown parameter 'workdir' [ 1060.933873][T16297] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 1061.475432][ T822] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 1061.548749][T23473] loop9: detected capacity change from 0 to 7 [ 1061.611570][ T822] usb 2-1: device descriptor read/64, error -71 [ 1061.673484][T23473] Dev loop9: unable to read RDB block 7 [ 1061.673512][T23473] loop9: unable to read partition table [ 1061.673672][T23473] loop9: partition table beyond EOD, truncated [ 1061.673691][T23473] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1061.845336][ T822] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1061.975460][ T822] usb 2-1: device descriptor read/64, error -71 [ 1062.087788][ T822] usb usb2-port1: attempt power cycle [ 1062.207759][T23484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.208156][T23484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.435198][ T5692] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1062.455153][ T822] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1062.475997][ T822] usb 2-1: device descriptor read/8, error -71 [ 1062.588760][ T5692] usb 1-1: Using ep0 maxpacket: 32 [ 1062.621222][ T5692] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1062.621252][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.621567][ T5692] usb 1-1: Product: syz [ 1062.621584][ T5692] usb 1-1: Manufacturer: syz [ 1062.621600][ T5692] usb 1-1: SerialNumber: syz [ 1062.645290][T16297] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1062.674664][T16297] Bluetooth: hci1: Injecting HCI hardware error event [ 1062.686279][T22837] Bluetooth: hci1: hardware error 0x00 [ 1062.709304][T22707] usb 5-1: USB disconnect, device number 47 [ 1062.769243][ T822] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1062.836135][ T822] usb 2-1: device descriptor read/8, error -71 [ 1062.846543][T23487] input: syz0 as /devices/virtual/input/input72 [ 1062.972831][ T5692] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 1062.973017][ T5692] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1062.993255][ T822] usb usb2-port1: unable to enumerate USB device [ 1063.005943][ T5692] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1063.014597][ T5692] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1063.065070][ T5692] usb 1-1: USB disconnect, device number 42 [ 1063.071443][ T5692] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1063.168972][ T5692] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1063.171468][ T5692] visor 1-1:1.0: device disconnected [ 1063.400772][T23489] wg2 speed is unknown, defaulting to 1000 [ 1063.594735][T16297] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 1063.605554][ T10] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 1063.636190][T16297] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1063.647314][T16297] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1063.761514][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1063.761542][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.761562][ T10] usb 4-1: config 0 has no interface number 0 [ 1063.761607][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1063.761631][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.770542][ T10] usb 4-1: config 0 descriptor?? [ 1063.774812][ T10] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1063.926655][ T6764] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1064.066155][ T6764] usb 5-1: device descriptor read/64, error -71 [ 1064.082614][ T38] audit: type=1326 audit(2000002624.937:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.3.6683" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6909ce59 code=0x7ffc0000 [ 1064.083396][ T38] audit: type=1326 audit(2000002624.937:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.3.6683" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6909ce59 code=0x7ffc0000 [ 1064.083445][ T38] audit: type=1326 audit(2000002624.937:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.3.6683" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6909ce59 code=0x7ffc0000 [ 1064.103622][ T38] audit: type=1326 audit(2000002624.937:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.3.6683" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fdb6909ce59 code=0x7ffc0000 [ 1064.103671][ T38] audit: type=1326 audit(2000002624.947:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.3.6683" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6909ce59 code=0x7ffc0000 [ 1064.103714][ T38] audit: type=1326 audit(2000002624.957:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.3.6683" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6909ce59 code=0x7ffc0000 [ 1064.103753][ T38] audit: type=1326 audit(2000002624.957:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.3.6683" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6909ce59 code=0x7ffc0000 [ 1064.103793][ T38] audit: type=1326 audit(2000002624.957:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.3.6683" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6909ce59 code=0x7ffc0000 [ 1064.103831][ T38] audit: type=1326 audit(2000002624.957:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.3.6683" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6909ce59 code=0x7ffc0000 [ 1064.104098][ T38] audit: type=1326 audit(2000002624.957:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.3.6683" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fdb6909ce59 code=0x7ffc0000 [ 1064.257528][ T5707] usb 4-1: USB disconnect, device number 121 [ 1064.306878][ T6764] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1064.452830][ T6764] usb 5-1: device descriptor read/64, error -71 [ 1064.567810][ T6764] usb usb5-port1: attempt power cycle [ 1064.744863][T13632] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1064.894850][T13632] usb 1-1: Using ep0 maxpacket: 32 [ 1064.903477][T13632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.903507][T13632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.903545][T13632] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1064.903568][T13632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.960048][T13632] usb 1-1: config 0 descriptor?? [ 1064.962402][ T6764] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1064.965792][T16297] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1064.966056][T16297] Bluetooth: hci0: Injecting HCI hardware error event [ 1064.969995][T16297] Bluetooth: hci0: hardware error 0x00 [ 1064.987305][ T6764] usb 5-1: device descriptor read/8, error -71 [ 1065.007085][T23508] netlink: 'syz.1.6691': attribute type 10 has an invalid length. [ 1065.007104][T23508] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6691'. [ 1065.224807][ T6764] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1065.247112][ T6764] usb 5-1: device descriptor read/8, error -71 [ 1065.364914][T22837] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1065.365503][ T6764] usb usb5-port1: unable to enumerate USB device [ 1065.509132][T23517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.519234][T23517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.542873][T13632] usbhid 1-1:0.0: can't add hid device: -71 [ 1065.542994][T13632] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1065.562812][T13632] usb 1-1: USB disconnect, device number 43 [ 1066.234750][T13632] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1066.384738][T13632] usb 2-1: Using ep0 maxpacket: 32 [ 1066.386934][T13632] usb 2-1: config 7 has an invalid interface number: 215 but max is 0 [ 1066.386960][T13632] usb 2-1: config 7 has no interface number 0 [ 1066.386992][T13632] usb 2-1: config 7 interface 215 has no altsetting 0 [ 1066.418833][T13632] usb 2-1: New USB device found, idVendor=0403, idProduct=eeec, bcdDevice=1d.28 [ 1066.418860][T13632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.418882][T13632] usb 2-1: Product: syz [ 1066.418896][T13632] usb 2-1: Manufacturer: syz [ 1066.418910][T13632] usb 2-1: SerialNumber: syz [ 1066.504840][ T823] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1066.574700][ T5707] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 1066.669498][ T823] usb 1-1: Using ep0 maxpacket: 8 [ 1066.673836][ T823] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1066.673890][ T823] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1066.673913][ T823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1066.673937][ T823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1066.673960][ T823] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.674001][ T823] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1066.674024][ T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.753062][T13632] usb-storage 2-1:7.215: USB Mass Storage device detected [ 1066.762431][ T5707] usb 4-1: config 2 has an invalid interface number: 12 but max is 0 [ 1066.762457][ T5707] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1066.762476][ T5707] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.762938][ T5707] usb 4-1: config 2 has no interface number 0 [ 1066.763527][ T5707] usb 4-1: config 2 interface 12 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1066.763557][ T5707] usb 4-1: config 2 interface 12 altsetting 7 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1066.763583][ T5707] usb 4-1: config 2 interface 12 altsetting 7 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1066.763605][ T5707] usb 4-1: config 2 interface 12 has no altsetting 0 [ 1066.791222][ T5707] usb 4-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3 [ 1066.791251][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.791967][ T5707] usb 4-1: Product: syz [ 1066.791984][ T5707] usb 4-1: Manufacturer: syz [ 1066.791999][ T5707] usb 4-1: SerialNumber: syz [ 1066.904621][ T823] usb 1-1: usb_control_msg returned -32 [ 1066.904866][ T823] usbtmc 1-1:16.0: can't read capabilities [ 1066.977330][T13632] ftdi_sio 2-1:7.215: FTDI USB Serial Device converter detected [ 1066.979320][T13632] ftdi_sio ttyUSB0: unknown device type: 0x1d28 [ 1066.998362][T13632] usb 2-1: USB disconnect, device number 113 [ 1067.007539][T13632] ftdi_sio 2-1:7.215: device disconnected [ 1067.096226][ T5707] usb 4-1: USB disconnect, device number 122 [ 1067.114621][ T5692] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1067.264569][ T5692] usb 5-1: Using ep0 maxpacket: 16 [ 1067.266931][ T5692] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1067.266947][ T5692] usb 5-1: config 0 has no interface number 0 [ 1067.266971][ T5692] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1067.266985][ T5692] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1067.266999][ T5692] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1067.268557][ T5692] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1067.268583][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1067.268594][ T5692] usb 5-1: Product: syz [ 1067.268601][ T5692] usb 5-1: SerialNumber: syz [ 1067.343980][T23539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6700'. [ 1067.344032][T23539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6700'. [ 1067.364768][T16297] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1067.382231][ T5692] usb 5-1: config 0 descriptor?? [ 1067.400182][ T5692] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1067.413374][ T5692] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input73 [ 1067.596188][T23536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.598288][T23536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.614579][T23536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.615153][T23536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.711236][ C1] cm109_urb_ctl_callback: 1209 callbacks suppressed [ 1067.711261][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1067.711517][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1067.711760][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1067.712001][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1067.712231][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1067.712470][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1067.712699][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1067.712933][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1067.713170][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1067.713399][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1067.720357][ T823] usb 5-1: USB disconnect, device number 52 [ 1067.720416][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1067.780182][ T823] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1068.256511][ T823] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1068.410147][ T823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1068.411776][ T823] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.411800][ T823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1068.414244][ T823] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1068.414273][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.414495][ T823] usb 4-1: Product: syz [ 1068.414508][ T823] usb 4-1: Manufacturer: syz [ 1068.414522][ T823] usb 4-1: SerialNumber: syz [ 1068.680655][T23557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.682435][T23567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.682999][T23567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.712787][T23557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.721484][T23568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6711'. [ 1068.721534][T23568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6711'. [ 1068.750484][ T823] usb 4-1: selecting invalid altsetting 1 [ 1068.750923][ T823] usb 4-1: unit 3 not found! [ 1068.750933][ T823] usb 4-1: unit 6 not found! [ 1068.903649][ T823] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1068.913852][ T823] usb 4-1: USB disconnect, device number 123 [ 1069.239790][ T5692] usb 1-1: USB disconnect, device number 44 [ 1069.807389][ T6764] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1069.946173][ T5692] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1069.976360][ T6764] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1069.976387][ T6764] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.976406][ T6764] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1069.976456][ T6764] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.978766][ T6764] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1069.978792][ T6764] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1069.978812][ T6764] usb 4-1: Product: syz [ 1069.978827][ T6764] usb 4-1: Manufacturer: syz [ 1070.069102][ T6764] cdc_wdm 4-1:1.0: skipping garbage [ 1070.069135][ T6764] cdc_wdm 4-1:1.0: skipping garbage [ 1070.069229][ T6764] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1070.127065][ T5692] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1070.128785][ T5692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.128835][ T5692] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1070.128860][ T5692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1070.128882][ T5692] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1070.147086][ T5692] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1070.147113][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.147145][ T5692] usb 1-1: Product: syz [ 1070.147160][ T5692] usb 1-1: Manufacturer: syz [ 1070.147175][ T5692] usb 1-1: SerialNumber: syz [ 1070.152052][ T5692] usb 1-1: config 0 descriptor?? [ 1070.153012][T23593] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1070.162063][ C1] usb 1-1: NFC: Urb failure (status -71) [ 1070.166580][ T5692] usb 1-1: NFC: Unable to get FW version [ 1070.170042][ T5692] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90 [ 1070.263804][ T6764] usb 4-1: USB disconnect, device number 124 [ 1070.354235][T13632] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1070.363198][T23593] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6717'. [ 1070.397104][T23593] 0: renamed from hsr0 (while UP) [ 1070.438836][T23593] 0: entered allmulticast mode [ 1070.438856][T23593] hsr_slave_0: entered allmulticast mode [ 1070.438881][T23593] hsr_slave_1: entered allmulticast mode [ 1070.455948][T23593] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1070.464538][ T6764] usb 1-1: USB disconnect, device number 45 [ 1070.487510][T13632] usb 5-1: device descriptor read/64, error -71 [ 1070.724416][T13632] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1070.857250][T13632] usb 5-1: device descriptor read/64, error -71 [ 1070.964734][T13632] usb usb5-port1: attempt power cycle [ 1071.197156][ T38] kauditd_printk_skb: 45 callbacks suppressed [ 1071.197204][ T38] audit: type=1326 audit(2000002632.058:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23616 comm="syz.1.6725" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f772048ce59 code=0x0 [ 1071.289653][T23620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6725'. [ 1071.346725][T13632] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1071.368972][T13632] usb 5-1: device descriptor read/8, error -71 [ 1071.621125][T13632] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1071.640559][T13632] usb 5-1: device descriptor read/8, error -71 [ 1071.694070][ T5692] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1071.746033][T13632] usb usb5-port1: unable to enumerate USB device [ 1071.825116][ T5692] usb 1-1: device descriptor read/64, error -71 [ 1072.065191][ T5692] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1072.197989][ T5692] usb 1-1: device descriptor read/64, error -71 [ 1072.304609][ T5692] usb usb1-port1: attempt power cycle [ 1072.344085][ T5707] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1072.507018][ T5707] usb 2-1: Using ep0 maxpacket: 8 [ 1072.511342][ T5707] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.532906][ T5707] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1072.532933][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.532954][ T5707] usb 2-1: Product: syz [ 1072.532969][ T5707] usb 2-1: Manufacturer: syz [ 1072.532984][ T5707] usb 2-1: SerialNumber: syz [ 1072.572349][ T5707] usb 2-1: config 0 descriptor?? [ 1072.582460][ T5707] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1072.644129][ T5692] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1072.665959][ T5692] usb 1-1: device descriptor read/8, error -71 [ 1072.784386][T23630] netlink: 'syz.1.6731': attribute type 10 has an invalid length. [ 1072.784407][T23630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6731'. [ 1072.803513][T23630] dummy0: entered promiscuous mode [ 1072.829680][T23630] bridge0: port 3(dummy0) entered blocking state [ 1072.830112][T23630] bridge0: port 3(dummy0) entered disabled state [ 1072.830419][T23630] dummy0: entered allmulticast mode [ 1072.853396][T23630] bridge0: port 3(dummy0) entered blocking state [ 1072.853576][T23630] bridge0: port 3(dummy0) entered forwarding state [ 1072.874453][ T5707] usb 2-1: USB disconnect, device number 114 [ 1072.903963][ T5692] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1072.924483][ T5692] usb 1-1: device descriptor read/8, error -71 [ 1073.034177][ T5692] usb usb1-port1: unable to enumerate USB device [ 1073.486746][ T5707] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1073.640070][ T5707] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1073.640104][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.640125][ T5707] usb 5-1: Product: syz [ 1073.640140][ T5707] usb 5-1: Manufacturer: syz [ 1073.640156][ T5707] usb 5-1: SerialNumber: syz [ 1074.109023][T23644] comedi comedi4: bad chanlist[0]=0x04410007 chan=7 range length=2 [ 1074.119993][T23644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.128159][ T5707] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1074.128221][ T5707] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1074.160548][T23644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.556271][T23658] pim6reg: entered allmulticast mode [ 1074.809563][T23664] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 1075.195161][ T5707] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1075.195220][ T5707] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1075.227697][ T5707] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1075.256247][ T5707] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1075.290892][ T5707] usb 5-1: USB disconnect, device number 57 [ 1076.355526][ T823] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1076.507401][ T823] usb 5-1: not running at top speed; connect to a high speed hub [ 1076.508932][ T823] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 120, changing to 4 [ 1076.513068][ T823] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1076.513096][ T823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.513117][ T823] usb 5-1: Product: 섐㛋ᮁ꯬沐慌孅⎼Ⴭ꥘皩꓍⩼௃泌㿅╎烖퓸᭹㜜ࠝꎨ妮ሹ礪怏ᢪᴘ떐쐛℡撴ᐏ㔵ᾥ⦝뮰恞氐֓碧ƞ佛⫅쉹苵黙啃┙莞岾²䕶쓊⿜桳㲞䤍泯쳻爫殦쾑䰭醜栘⇛⛵饮器冣滨ହ滄犤შኒ宜鐠쫨験篦Ṹ娲櫑┠ⶊ䶈惾놵⌆쵍႓렰⾻终 [ 1076.513139][ T823] usb 5-1: Manufacturer: ꟳ犎內⺠湻襪ﴣࡩ晑뽈 [ 1076.513148][ T823] usb 5-1: SerialNumber: ж [ 1076.828972][T23698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.838305][T23698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.951648][ T823] usb 5-1: BAAD HEADSET c_chmask mismatch [ 1077.121708][ T823] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1077.185412][ T823] usb 5-1: USB disconnect, device number 58 [ 1077.279116][T23707] binder: 23706:23707 ioctl c0306201 200000000080 returned -14 [ 1077.281829][T23707] binder: 23706:23707 ioctl c0306201 2000000003c0 returned -14 [ 1077.693939][ T823] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1077.871679][ T823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1077.872734][ T823] usb 5-1: not running at top speed; connect to a high speed hub [ 1077.900324][ T823] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 1077.900353][ T823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.900374][ T823] usb 5-1: Product: syz [ 1077.900389][ T823] usb 5-1: Manufacturer: syz [ 1077.900405][ T823] usb 5-1: SerialNumber: syz [ 1078.021196][T23727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6769'. [ 1078.021214][T23727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6769'. [ 1078.103493][ T6764] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1078.187479][ T823] usb 5-1: Fast Track Pro switching to config #2 [ 1078.208502][ T823] usb 5-1: USB disconnect, device number 59 [ 1078.285247][ T6764] usb 4-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 1078.285294][ T6764] usb 4-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1078.285322][ T6764] usb 4-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 1078.285349][ T6764] usb 4-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1078.285376][ T6764] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1078.285409][ T6764] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1078.285432][ T6764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.365723][ T6764] usb 4-1: config 0 descriptor?? [ 1078.366917][T23725] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1078.584936][ T822] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1078.713383][ T822] usb 2-1: device descriptor read/64, error -71 [ 1078.795570][ T6764] hid_parser_main: 30 callbacks suppressed [ 1078.795593][ T6764] dragonrise 0003:0079:0011.0033: unknown main item tag 0x0 [ 1078.795623][ T6764] dragonrise 0003:0079:0011.0033: unknown main item tag 0x0 [ 1078.795651][ T6764] dragonrise 0003:0079:0011.0033: unknown main item tag 0x0 [ 1078.795679][ T6764] dragonrise 0003:0079:0011.0033: unknown main item tag 0x0 [ 1078.795705][ T6764] dragonrise 0003:0079:0011.0033: unknown main item tag 0x0 [ 1078.795732][ T6764] dragonrise 0003:0079:0011.0033: unknown main item tag 0x0 [ 1078.795758][ T6764] dragonrise 0003:0079:0011.0033: unknown main item tag 0x0 [ 1078.795785][ T6764] dragonrise 0003:0079:0011.0033: unknown main item tag 0x0 [ 1078.795812][ T6764] dragonrise 0003:0079:0011.0033: unknown main item tag 0x0 [ 1078.795838][ T6764] dragonrise 0003:0079:0011.0033: unknown main item tag 0x0 [ 1078.917187][ T6764] dragonrise 0003:0079:0011.0033: hidraw0: USB HID v0.0c Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 1078.956514][ T822] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 1079.070889][ T6764] usb 4-1: USB disconnect, device number 125 [ 1079.083226][ T822] usb 2-1: device descriptor read/64, error -71 [ 1079.193716][ T822] usb usb2-port1: attempt power cycle [ 1079.216431][T23742] sg_write: data in/out 62/136 bytes for SCSI command 0x0-- guessing data in; [ 1079.216431][T23742] program syz.4.6773 not setting count and/or reply_len properly [ 1079.282747][T23740] wg2 speed is unknown, defaulting to 1000 [ 1079.473792][T13632] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1079.533317][ T822] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1079.554618][ T822] usb 2-1: device descriptor read/8, error -71 [ 1079.627915][T13632] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.627974][T13632] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1079.628001][T13632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1079.628027][T13632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1079.628048][T13632] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1079.631335][T13632] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1079.631361][T13632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1079.631381][T13632] usb 5-1: Product: syz [ 1079.631397][T13632] usb 5-1: Manufacturer: syz [ 1079.631412][T13632] usb 5-1: SerialNumber: syz [ 1079.657223][T13632] usb 5-1: config 0 descriptor?? [ 1079.794837][ T822] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1079.813788][ T822] usb 2-1: device descriptor read/8, error -71 [ 1079.899583][T13632] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1079.899867][T13632] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1079.909830][T13632] usb 5-1: USB disconnect, device number 60 [ 1079.938534][ T822] usb usb2-port1: unable to enumerate USB device [ 1080.063183][ T5692] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1080.255124][ T5692] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1080.255155][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.255176][ T5692] usb 1-1: Product: syz [ 1080.255190][ T5692] usb 1-1: Manufacturer: syz [ 1080.255205][ T5692] usb 1-1: SerialNumber: syz [ 1080.259380][ T5692] usb 1-1: config 0 descriptor?? [ 1080.263305][ T5692] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1080.712888][T23755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6778'. [ 1080.900480][T23761] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6780'. [ 1081.328129][T23766] wg2 speed is unknown, defaulting to 1000 [ 1082.037292][T23780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6787'. [ 1082.310542][T23749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.315017][T23749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.319552][ T5692] gspca_stk1135: reg_w 0x203 err -71 [ 1082.320749][ T5692] gspca_stk1135: serial bus timeout: status=0x00 [ 1082.320762][ T5692] gspca_stk1135: Sensor write failed [ 1082.320788][ T5692] gspca_stk1135: serial bus timeout: status=0x00 [ 1082.320797][ T5692] gspca_stk1135: Sensor write failed [ 1082.320845][ T5692] gspca_stk1135: serial bus timeout: status=0x00 [ 1082.320857][ T5692] gspca_stk1135: Sensor read failed [ 1082.320880][ T5692] gspca_stk1135: serial bus timeout: status=0x00 [ 1082.320890][ T5692] gspca_stk1135: Sensor read failed [ 1082.320896][ T5692] gspca_stk1135: Detected sensor type unknown (0x0) [ 1082.320939][ T5692] gspca_stk1135: serial bus timeout: status=0x00 [ 1082.320949][ T5692] gspca_stk1135: Sensor read failed [ 1082.320974][ T5692] gspca_stk1135: serial bus timeout: status=0x00 [ 1082.320984][ T5692] gspca_stk1135: Sensor read failed [ 1082.321007][ T5692] gspca_stk1135: serial bus timeout: status=0x00 [ 1082.321017][ T5692] gspca_stk1135: Sensor write failed [ 1082.321041][ T5692] gspca_stk1135: serial bus timeout: status=0x00 [ 1082.321052][ T5692] gspca_stk1135: Sensor write failed [ 1082.321132][ T5692] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 1082.335012][ T5692] usb 1-1: USB disconnect, device number 50 [ 1083.757559][T23811] netlink: 'syz.0.6801': attribute type 1 has an invalid length. [ 1083.757743][T23811] netlink: 'syz.0.6801': attribute type 1 has an invalid length. [ 1083.910728][T23820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6802'. [ 1084.072896][T22707] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1084.223075][T22707] usb 4-1: Using ep0 maxpacket: 16 [ 1084.225404][T22707] usb 4-1: config 0 has no interfaces? [ 1084.225438][T22707] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1084.225462][T22707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.242091][T23792] syz.1.6792 (23792): drop_caches: 2 [ 1084.270807][T22707] usb 4-1: config 0 descriptor?? [ 1084.272748][ T823] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1084.442720][ T823] usb 1-1: Using ep0 maxpacket: 8 [ 1084.445672][ T823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.448366][ T823] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1084.448393][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.448413][ T823] usb 1-1: Product: syz [ 1084.448427][ T823] usb 1-1: Manufacturer: syz [ 1084.448442][ T823] usb 1-1: SerialNumber: syz [ 1084.503449][ T823] usb 1-1: config 0 descriptor?? [ 1084.510500][ T823] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1084.582149][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f0c7800: rx timeout, send abort [ 1084.709896][T23824] netlink: 'syz.0.6803': attribute type 10 has an invalid length. [ 1084.709916][T23824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6803'. [ 1084.728958][ T823] usb 1-1: USB disconnect, device number 51 [ 1084.975347][ T5692] usb 4-1: USB disconnect, device number 126 [ 1085.082165][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f0c7800: abort rx timeout. Force session deactivation [ 1085.082301][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032079c00: rx timeout, send abort [ 1085.582312][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032079c00: abort rx timeout. Force session deactivation [ 1085.585404][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803207b000: rx timeout, send abort [ 1086.085413][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803207b000: abort rx timeout. Force session deactivation [ 1086.260431][T23866] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1086.260680][T23866] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1086.260697][T23866] netlink: 576 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1086.692415][ T5693] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1086.844574][ T5693] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1086.844602][ T5693] usb 2-1: config 1 has no interface number 0 [ 1086.844645][ T5693] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1086.844668][ T5693] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1086.844690][ T5693] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1086.856405][ T5693] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1086.856433][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.856453][ T5693] usb 2-1: Product: syz [ 1086.856468][ T5693] usb 2-1: Manufacturer: syz [ 1086.856482][ T5693] usb 2-1: SerialNumber: syz [ 1086.869205][T23868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1086.880875][ T5693] usb 2-1: Expected 3 endpoints, found: 1 [ 1087.083196][ T5693] usb 2-1: USB disconnect, device number 119 [ 1087.326963][T23888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1088.242392][ T823] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1088.402570][ T823] usb 1-1: Using ep0 maxpacket: 32 [ 1088.405732][ T823] usb 1-1: config 7 has an invalid descriptor of length 133, skipping remainder of the config [ 1088.405758][ T823] usb 1-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 1088.426009][ T823] usb 1-1: New USB device found, idVendor=0403, idProduct=eeec, bcdDevice=1d.28 [ 1088.426038][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.426058][ T823] usb 1-1: Product: syz [ 1088.426073][ T823] usb 1-1: Manufacturer: syz [ 1088.426088][ T823] usb 1-1: SerialNumber: syz [ 1088.592198][T22707] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 1088.706153][T23905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6838'. [ 1088.740026][ T823] usb 1-1: USB disconnect, device number 52 [ 1088.763293][T22707] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1088.763320][T22707] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.763369][T22707] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1088.763393][T22707] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1088.763416][T22707] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1088.763457][T22707] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1088.763480][T22707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.843443][T22707] usbtmc 5-1:16.0: bulk endpoints not found [ 1088.976914][ T823] usb 5-1: USB disconnect, device number 61 [ 1089.410929][T23948] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 1089.782206][ T823] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1089.873412][ T5707] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 1089.933071][ T823] usb 1-1: Using ep0 maxpacket: 32 [ 1089.935685][ T823] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1089.937417][ T823] usb 1-1: config 98 has an invalid interface number: 126 but max is 0 [ 1089.937441][ T823] usb 1-1: config 98 has an invalid descriptor of length 255, skipping remainder of the config [ 1089.937463][ T823] usb 1-1: config 98 has no interface number 0 [ 1089.937494][ T823] usb 1-1: config 98 interface 126 has no altsetting 0 [ 1089.940809][ T823] usb 1-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=86.0e [ 1089.940836][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.940855][ T823] usb 1-1: Product: syz [ 1089.940870][ T823] usb 1-1: Manufacturer: syz [ 1089.940884][ T823] usb 1-1: SerialNumber: syz [ 1090.035498][ T5707] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1090.037148][ T5707] usb 2-1: not running at top speed; connect to a high speed hub [ 1090.038394][ T5707] usb 2-1: config 9 has an invalid interface number: 65 but max is 0 [ 1090.038418][ T5707] usb 2-1: config 9 has no interface number 0 [ 1090.038450][ T5707] usb 2-1: config 9 interface 65 has no altsetting 0 [ 1090.041132][ T5707] usb 2-1: New USB device found, idVendor=12d1, idProduct=ccef, bcdDevice=e5.56 [ 1090.041157][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.041232][ T5707] usb 2-1: Product: syz [ 1090.041245][ T5707] usb 2-1: Manufacturer: syz [ 1090.041260][ T5707] usb 2-1: SerialNumber: syz [ 1090.205903][ T823] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 1090.236449][ T823] usb 1-1: USB disconnect, device number 53 [ 1090.357604][T23956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.384425][T23956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.421681][ T5707] cdc_mbim 2-1:9.65: More than one union descriptor, skipping ... [ 1090.421705][ T5707] cdc_mbim 2-1:9.65: CDC Union missing and no IAD found [ 1090.421747][ T5707] cdc_mbim 2-1:9.65: bind() failure [ 1090.440176][ T5707] usb 2-1: USB disconnect, device number 120 [ 1090.702025][ T5692] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1090.855821][ T5692] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1090.857268][ T5692] usb 5-1: not running at top speed; connect to a high speed hub [ 1090.882845][ T5692] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 1090.882873][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.882894][ T5692] usb 5-1: Product: syz [ 1090.882908][ T5692] usb 5-1: Manufacturer: syz [ 1090.882922][ T5692] usb 5-1: SerialNumber: syz [ 1091.170319][ T5692] usb 5-1: Fast Track Pro switching to config #2 [ 1091.181302][ T5692] usb 5-1: USB disconnect, device number 62 [ 1091.513778][T23991] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 1091.514682][ T38] audit: type=1326 audit(2000002652.370:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23987 comm="syz.0.6872" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff390a0ce59 code=0x0 [ 1092.458573][T24007] input: syz0 as /devices/virtual/input/input75 [ 1092.964431][T24029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6887'. [ 1092.964457][T24029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6887'. [ 1093.150979][T24032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6888'. [ 1093.166716][T24032] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6888'. [ 1093.570849][T24046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.583075][T24046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.801609][ T5693] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1093.860022][T24050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6896'. [ 1093.925257][T24052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6897'. [ 1093.925281][T24052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6897'. [ 1093.961576][ T5693] usb 2-1: Using ep0 maxpacket: 32 [ 1093.963737][ T5693] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1093.963763][ T5693] usb 2-1: config 0 has no interface number 0 [ 1093.963807][ T5693] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1093.963833][ T5693] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1093.963856][ T5693] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1093.967963][ T5693] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1093.967993][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.968014][ T5693] usb 2-1: Product: syz [ 1093.968029][ T5693] usb 2-1: Manufacturer: syz [ 1093.968045][ T5693] usb 2-1: SerialNumber: syz [ 1094.056970][ T5693] usb 2-1: config 0 descriptor?? [ 1094.263414][ T5693] appletouch 2-1:0.85: Failed to read mode from device. [ 1094.263691][ T5693] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 1094.294206][ T5693] usb 2-1: USB disconnect, device number 121 [ 1094.407642][T24065] netlink: 'syz.0.6902': attribute type 2 has an invalid length. [ 1094.860592][T24076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6907'. [ 1095.331495][ T5707] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 1095.394606][T22707] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1095.470246][T24090] program syz.4.6913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1095.472412][T24090] program syz.4.6913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1095.473737][T24090] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1095.497246][ T5707] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1095.497285][ T5707] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 8 [ 1095.505197][ T5707] usb 1-1: string descriptor 0 read error: -22 [ 1095.505333][ T5707] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1095.505357][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.553916][T22707] usb 2-1: Using ep0 maxpacket: 16 [ 1095.561235][T22707] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1095.564008][T22707] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1095.564035][T22707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.566485][ T5707] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1095.566536][ T5707] usb 1-1: MIDIStreaming interface descriptor not found [ 1095.575577][T22707] usb 2-1: config 0 descriptor?? [ 1095.625798][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6914'. [ 1095.625848][T24092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6914'. [ 1095.876950][ T5707] usb 1-1: USB disconnect, device number 54 [ 1096.059081][T24082] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1096.060611][T22707] kone 0003:1E7D:2CED.0034: collection stack underflow [ 1096.060641][T22707] kone 0003:1E7D:2CED.0034: item 0 4 0 12 parsing failed [ 1096.070078][T22707] kone 0003:1E7D:2CED.0034: parse failed [ 1096.070148][T22707] kone 0003:1E7D:2CED.0034: probe with driver kone failed with error -22 [ 1096.266247][T13632] usb 2-1: USB disconnect, device number 122 [ 1097.336696][T24119] FAULT_INJECTION: forcing a failure. [ 1097.336696][T24119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.336746][T24119] CPU: 0 UID: 0 PID: 24119 Comm: syz.0.6925 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1097.336774][T24119] Tainted: [L]=SOFTLOCKUP [ 1097.336781][T24119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1097.336793][T24119] Call Trace: [ 1097.336802][T24119] [ 1097.336811][T24119] dump_stack_lvl+0xe8/0x150 [ 1097.336840][T24119] should_fail_ex+0x46b/0x600 [ 1097.336887][T24119] _copy_from_user+0x2d/0xb0 [ 1097.336912][T24119] sg_new_write+0x5d2/0x890 [ 1097.337023][T24119] ? __pfx_sg_new_write+0x10/0x10 [ 1097.337074][T24119] sg_ioctl+0x11fd/0x21a0 [ 1097.337138][T24119] ? __pfx_sg_ioctl+0x10/0x10 [ 1097.337166][T24119] ? __fget_files+0x2a/0x420 [ 1097.337190][T24119] ? __fget_files+0x2a/0x420 [ 1097.337211][T24119] ? __fget_files+0x3a6/0x420 [ 1097.337230][T24119] ? __fget_files+0x2a/0x420 [ 1097.337255][T24119] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1097.337283][T24119] ? __pfx_sg_ioctl+0x10/0x10 [ 1097.337312][T24119] __se_sys_ioctl+0xff/0x170 [ 1097.337339][T24119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.337360][T24119] do_syscall_64+0x174/0x580 [ 1097.337386][T24119] ? trace_irq_disable+0x3b/0x140 [ 1097.337409][T24119] ? clear_bhb_loop+0x40/0x90 [ 1097.337432][T24119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.337452][T24119] RIP: 0033:0x7ff390a0ce59 [ 1097.337469][T24119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.337486][T24119] RSP: 002b:00007ff38ec66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1097.337507][T24119] RAX: ffffffffffffffda RBX: 00007ff390c85fa0 RCX: 00007ff390a0ce59 [ 1097.337522][T24119] RDX: 00002000000006c0 RSI: 0000000000002285 RDI: 0000000000000004 [ 1097.337536][T24119] RBP: 00007ff38ec66090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.337548][T24119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.337560][T24119] R13: 00007ff390c86038 R14: 00007ff390c85fa0 R15: 00007fffdeb480d8 [ 1097.337589][T24119] [ 1098.511164][ T5707] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1098.611795][T22707] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1098.662822][ T5707] usb 1-1: Using ep0 maxpacket: 8 [ 1098.665734][ T5707] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1098.665787][ T5707] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1098.665813][ T5707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1098.665838][ T5707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1098.665863][ T5707] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1098.665906][ T5707] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1098.665930][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.778402][T22707] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1098.779021][T22707] usb 2-1: not running at top speed; connect to a high speed hub [ 1098.780153][T22707] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1098.801950][T22707] usb 2-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 1098.801978][T22707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.801998][T22707] usb 2-1: Product: syz [ 1098.802068][T22707] usb 2-1: Manufacturer: syz [ 1098.802083][T22707] usb 2-1: SerialNumber: syz [ 1098.838603][T24143] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1098.945966][ T5707] usb 1-1: usb_control_msg returned -32 [ 1098.946013][ T5707] usbtmc 1-1:16.0: can't read capabilities [ 1098.950866][T24140] openvswitch: netlink: Actions may not be safe on all matching packets [ 1099.007304][ T5707] usb 1-1: USB disconnect, device number 55 [ 1099.100732][T22707] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1099.100786][T22707] usb 2-1: MIDIStreaming interface descriptor not found [ 1099.315547][T22707] usb 2-1: USB disconnect, device number 123 [ 1099.940976][ T5692] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1100.095573][ T5692] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1100.097027][ T5692] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.097119][ T5692] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1100.132668][ T5692] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1100.132696][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.132715][ T5692] usb 4-1: Product: syz [ 1100.132729][ T5692] usb 4-1: Manufacturer: syz [ 1100.132744][ T5692] usb 4-1: SerialNumber: syz [ 1100.412720][ T5692] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1100.413453][ T5692] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1100.413479][ T5692] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1100.413622][ T5692] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1100.413641][ T5692] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1100.626803][ T5692] usb 4-1: USB disconnect, device number 127 [ 1101.420801][T22707] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1101.550770][T22707] usb 2-1: device descriptor read/64, error -71 [ 1101.570766][ T5707] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1101.720741][ T5707] usb 4-1: Using ep0 maxpacket: 16 [ 1101.723161][ T5707] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1101.723209][ T5707] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1101.723233][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.745211][ T5707] usb 4-1: config 0 descriptor?? [ 1101.800754][T22707] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1101.950889][T22707] usb 2-1: device descriptor read/64, error -71 [ 1102.003553][T24202] Bluetooth: MGMT ver 1.23 [ 1102.129928][T22707] usb usb2-port1: attempt power cycle [ 1102.182859][ T5707] kone 0003:1E7D:2CED.0035: reserved main item tag 0xd [ 1102.182893][ T5707] hid_parser_main: 30 callbacks suppressed [ 1102.182909][ T5707] kone 0003:1E7D:2CED.0035: unknown main item tag 0x0 [ 1102.182936][ T5707] kone 0003:1E7D:2CED.0035: unknown main item tag 0x0 [ 1102.182963][ T5707] kone 0003:1E7D:2CED.0035: unknown main item tag 0x0 [ 1102.182995][ T5707] kone 0003:1E7D:2CED.0035: unknown main item tag 0x0 [ 1102.183023][ T5707] kone 0003:1E7D:2CED.0035: unknown global tag 0xc [ 1102.183038][ T5707] kone 0003:1E7D:2CED.0035: item 0 1 1 12 parsing failed [ 1102.183699][ T5707] kone 0003:1E7D:2CED.0035: parse failed [ 1102.183784][ T5707] kone 0003:1E7D:2CED.0035: probe with driver kone failed with error -22 [ 1102.358772][T24193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.372474][T24193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.453991][ T10] usb 4-1: USB disconnect, device number 2 [ 1102.570704][T22707] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1102.592216][T22707] usb 2-1: device descriptor read/8, error -71 [ 1102.632947][T24223] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 1102.831009][T22707] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1102.854390][T22707] usb 2-1: device descriptor read/8, error -71 [ 1102.892618][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1102.961171][T22707] usb usb2-port1: unable to enumerate USB device [ 1102.978080][ T38] audit: type=1326 audit(2000002663.831:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24228 comm="syz.4.6966" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd954c7ce59 code=0x0 [ 1103.056056][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1103.060360][ T10] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 1103.060385][ T10] usb 4-1: config 0 has no interface number 0 [ 1103.060430][ T10] usb 4-1: config 0 interface 115 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1103.060668][ T10] usb 4-1: config 0 interface 115 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 1103.060694][ T10] usb 4-1: config 0 interface 115 has no altsetting 0 [ 1103.094653][ T10] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff55, bcdDevice=72.3e [ 1103.094681][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.094701][ T10] usb 4-1: Product: syz [ 1103.094715][ T10] usb 4-1: Manufacturer: syz [ 1103.094729][ T10] usb 4-1: SerialNumber: syz [ 1103.114798][ T10] usb 4-1: config 0 descriptor?? [ 1103.126726][ T10] option 4-1:0.115: GSM modem (1-port) converter detected [ 1103.353312][T24220] __nla_validate_parse: 2 callbacks suppressed [ 1103.353332][T24220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6962'. [ 1103.723007][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1103.892861][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1103.898894][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1103.902897][ T10] usb 1-1: config 98 has an invalid interface number: 11 but max is 0 [ 1103.902922][ T10] usb 1-1: config 98 has no interface number 0 [ 1103.902959][ T10] usb 1-1: config 98 interface 11 has no altsetting 0 [ 1103.918728][ T10] usb 1-1: New USB device found, idVendor=413c, idProduct=0001, bcdDevice= 0.00 [ 1103.918754][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.918784][ T10] usb 1-1: Product: syz [ 1103.918799][ T10] usb 1-1: Manufacturer: syz [ 1103.918814][ T10] usb 1-1: SerialNumber: syz [ 1103.982926][ T6764] usb 4-1: USB disconnect, device number 3 [ 1104.066846][ T6764] option 4-1:0.115: device disconnected [ 1104.294411][ T10] usb 1-1: USB disconnect, device number 56 [ 1104.542373][T24256] netlink: 'syz.3.6976': attribute type 58 has an invalid length. [ 1105.255080][T24278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6986'. [ 1105.813394][T24299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6992'. [ 1105.813418][T24299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6992'. [ 1105.931593][ T10] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1105.951839][ T6764] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1106.090041][ T10] usb 5-1: device descriptor read/64, error -71 [ 1106.128419][ T6764] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.128471][ T6764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.128498][ T6764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.128535][ T6764] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1106.128559][ T6764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.148044][ T6764] usb 2-1: config 0 descriptor?? [ 1106.208643][T24306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6995'. [ 1106.208668][T24306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6995'. [ 1106.330770][ T10] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1106.471102][ T10] usb 5-1: device descriptor read/64, error -71 [ 1106.577582][ T6764] hid-rmi 0003:0461:4E72.0036: item fetching failed at offset 10/11 [ 1106.582174][ T10] usb usb5-port1: attempt power cycle [ 1106.582883][ T6764] hid-rmi 0003:0461:4E72.0036: parse failed [ 1106.583002][ T6764] hid-rmi 0003:0461:4E72.0036: probe with driver hid-rmi failed with error -22 [ 1106.611295][T24312] netlink: 'syz.1.6993': attribute type 21 has an invalid length. [ 1106.672992][T24316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6997'. [ 1106.674672][T24316] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6997'. [ 1106.837908][ T5707] usb 2-1: USB disconnect, device number 2 [ 1106.920287][ T10] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1106.942180][ T10] usb 5-1: device descriptor read/8, error -71 [ 1106.960249][ T5692] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1107.115254][ T5692] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1107.116121][ T5692] usb 1-1: not running at top speed; connect to a high speed hub [ 1107.116183][ T5692] usb 1-1: too many configurations: 66, using maximum allowed: 8 [ 1107.118768][ T5692] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1107.118802][ T5692] usb 1-1: can't read configurations, error -61 [ 1107.200144][ T10] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1107.220816][ T10] usb 5-1: device descriptor read/8, error -71 [ 1107.271355][ T5692] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1107.330329][ T10] usb usb5-port1: unable to enumerate USB device [ 1107.404594][T24322] netlink: 'syz.1.7000': attribute type 10 has an invalid length. [ 1107.432999][ T5692] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1107.433840][ T5692] usb 1-1: not running at top speed; connect to a high speed hub [ 1107.433901][ T5692] usb 1-1: too many configurations: 66, using maximum allowed: 8 [ 1107.436280][ T5692] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1107.436314][ T5692] usb 1-1: can't read configurations, error -61 [ 1107.436992][ T5692] usb usb1-port1: attempt power cycle [ 1107.588429][T24322] team0 (unregistering): Port device team_slave_0 removed [ 1107.644040][T24322] team0 (unregistering): Port device team_slave_1 removed [ 1107.820248][ T5692] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1107.850730][ T5692] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1107.851473][ T5692] usb 1-1: not running at top speed; connect to a high speed hub [ 1107.851536][ T5692] usb 1-1: too many configurations: 66, using maximum allowed: 8 [ 1107.854502][ T5692] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1107.854536][ T5692] usb 1-1: can't read configurations, error -61 [ 1107.959632][T24336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7005'. [ 1108.000318][ T5692] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1108.023174][ T5692] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1108.028448][ T5692] usb 1-1: not running at top speed; connect to a high speed hub [ 1108.028510][ T5692] usb 1-1: too many configurations: 66, using maximum allowed: 8 [ 1108.053821][ T5692] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1108.053855][ T5692] usb 1-1: can't read configurations, error -61 [ 1108.054248][ T5692] usb usb1-port1: unable to enumerate USB device [ 1108.748206][T24342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7008'. [ 1108.968141][T24349] FAULT_INJECTION: forcing a failure. [ 1108.968141][T24349] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.968176][T24349] CPU: 1 UID: 0 PID: 24349 Comm: syz.3.7011 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1108.968201][T24349] Tainted: [L]=SOFTLOCKUP [ 1108.968207][T24349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1108.968219][T24349] Call Trace: [ 1108.968227][T24349] [ 1108.968235][T24349] dump_stack_lvl+0xe8/0x150 [ 1108.968261][T24349] should_fail_ex+0x46b/0x600 [ 1108.968293][T24349] should_failslab+0xa8/0x100 [ 1108.968318][T24349] __kmalloc_noprof+0xdf/0x7b0 [ 1108.968341][T24349] ? __kasan_kmalloc+0x93/0xb0 [ 1108.968362][T24349] ? nla_strdup+0x9d/0x140 [ 1108.968386][T24349] nla_strdup+0x9d/0x140 [ 1108.968408][T24349] nf_tables_newchain+0x1a9a/0x2890 [ 1108.968433][T24349] ? __lock_acquire+0x6b5/0x2d10 [ 1108.968471][T24349] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1108.968524][T24349] ? nfnl_pernet+0x23/0x240 [ 1108.968550][T24349] ? nfnl_pernet+0x23/0x240 [ 1108.968585][T24349] ? __nla_parse+0x40/0x60 [ 1108.968609][T24349] nfnetlink_rcv+0x1247/0x27b0 [ 1108.968667][T24349] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1108.968707][T24349] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 1108.968729][T24349] ? ref_tracker_free+0x673/0x820 [ 1108.968784][T24349] ? __netlink_deliver_tap+0x866/0x8b0 [ 1108.968824][T24349] ? netlink_deliver_tap+0x2e/0x1b0 [ 1108.968861][T24349] ? netlink_deliver_tap+0x2e/0x1b0 [ 1108.968894][T24349] netlink_unicast+0x780/0x920 [ 1108.968930][T24349] netlink_sendmsg+0x813/0xb40 [ 1108.968957][T24349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.968978][T24349] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1108.969006][T24349] ? aa_sock_msg_perm+0x122/0x200 [ 1108.969026][T24349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.969044][T24349] sock_sendmsg_nosec+0x13a/0x180 [ 1108.969070][T24349] ____sys_sendmsg+0x55c/0x870 [ 1108.969103][T24349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1108.969139][T24349] ? import_iovec+0x73/0xa0 [ 1108.969165][T24349] ___sys_sendmsg+0x2a5/0x360 [ 1108.969193][T24349] ? __lock_acquire+0x6b5/0x2d10 [ 1108.969218][T24349] ? __pfx____sys_sendmsg+0x10/0x10 [ 1108.969276][T24349] ? __fget_files+0x2a/0x420 [ 1108.969298][T24349] ? __fget_files+0x3a6/0x420 [ 1108.969331][T24349] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1108.969362][T24349] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1108.969400][T24349] ? __pfx_ksys_write+0x10/0x10 [ 1108.969436][T24349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.969458][T24349] do_syscall_64+0x174/0x580 [ 1108.969486][T24349] ? trace_irq_disable+0x3b/0x140 [ 1108.969508][T24349] ? clear_bhb_loop+0x40/0x90 [ 1108.969532][T24349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.969552][T24349] RIP: 0033:0x7fdb6909ce59 [ 1108.969571][T24349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.969587][T24349] RSP: 002b:00007fdb672f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.969607][T24349] RAX: ffffffffffffffda RBX: 00007fdb69315fa0 RCX: 00007fdb6909ce59 [ 1108.969622][T24349] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1108.969634][T24349] RBP: 00007fdb672f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.969645][T24349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.969657][T24349] R13: 00007fdb69316038 R14: 00007fdb69315fa0 R15: 00007fffa59138f8 [ 1108.969688][T24349] [ 1109.536252][ T5692] libceph: connect (1)[c::]:6789 error -101 [ 1109.536455][ T5692] libceph: mon0 (1)[c::]:6789 connect error [ 1109.537444][ T5692] libceph: connect (1)[c::]:6789 error -101 [ 1109.537633][ T5692] libceph: mon0 (1)[c::]:6789 connect error [ 1109.570137][T24362] ceph: No mds server is up or the cluster is laggy [ 1109.608488][T24368] netlink: 'syz.3.7017': attribute type 10 has an invalid length. [ 1109.608508][T24368] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7017'. [ 1109.793974][ T5692] libceph: connect (1)[c::]:6789 error -101 [ 1109.794152][ T5692] libceph: mon0 (1)[c::]:6789 connect error [ 1109.905194][T24365] /dev/nullb0: Can't open blockdev [ 1110.351621][ T6764] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1110.506516][ T6764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1110.506567][ T6764] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1110.506591][ T6764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.518780][ T6764] usb 1-1: config 0 descriptor?? [ 1110.521792][T24372] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1110.653753][T24389] program syz.4.7025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1110.729097][T24372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.732930][T24372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.742419][T24372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.747027][T24372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.780189][T24391] netlink: 'syz.4.7026': attribute type 27 has an invalid length. [ 1110.798102][T24391] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7026'. [ 1110.897939][T24395] FAULT_INJECTION: forcing a failure. [ 1110.897939][T24395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.897973][T24395] CPU: 1 UID: 0 PID: 24395 Comm: syz.1.7028 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1110.898000][T24395] Tainted: [L]=SOFTLOCKUP [ 1110.898007][T24395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1110.898019][T24395] Call Trace: [ 1110.898028][T24395] [ 1110.898036][T24395] dump_stack_lvl+0xe8/0x150 [ 1110.898065][T24395] should_fail_ex+0x46b/0x600 [ 1110.898101][T24395] _copy_to_user+0x31/0xb0 [ 1110.898125][T24395] put_sg_io_hdr+0xd3/0x640 [ 1110.898236][T24395] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1110.898267][T24395] ? __pfx_put_sg_io_hdr+0x10/0x10 [ 1110.898286][T24395] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1110.898313][T24395] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1110.898340][T24395] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1110.898367][T24395] sg_new_read+0x383/0x550 [ 1110.898387][T24395] ? rt_write_unlock+0x190/0x230 [ 1110.898412][T24395] sg_ioctl+0x1c88/0x21a0 [ 1110.898449][T24395] ? __pfx_sg_ioctl+0x10/0x10 [ 1110.898477][T24395] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1110.898503][T24395] ? __fget_files+0x2a/0x420 [ 1110.898525][T24395] ? __fget_files+0x3a6/0x420 [ 1110.898546][T24395] ? __fget_files+0x2a/0x420 [ 1110.898571][T24395] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1110.898599][T24395] ? __pfx_sg_ioctl+0x10/0x10 [ 1110.898626][T24395] __se_sys_ioctl+0xff/0x170 [ 1110.898663][T24395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.898684][T24395] do_syscall_64+0x174/0x580 [ 1110.898710][T24395] ? trace_irq_disable+0x3b/0x140 [ 1110.898733][T24395] ? clear_bhb_loop+0x40/0x90 [ 1110.898757][T24395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.898776][T24395] RIP: 0033:0x7f772048ce59 [ 1110.898794][T24395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.898811][T24395] RSP: 002b:00007f771e6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1110.898831][T24395] RAX: ffffffffffffffda RBX: 00007f7720705fa0 RCX: 00007f772048ce59 [ 1110.898846][T24395] RDX: 00002000000006c0 RSI: 0000000000002285 RDI: 0000000000000004 [ 1110.898858][T24395] RBP: 00007f771e6de090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.898871][T24395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.898883][T24395] R13: 00007f7720706038 R14: 00007f7720705fa0 R15: 00007ffdde726778 [ 1110.898912][T24395] [ 1111.038295][ T6764] uclogic 0003:5543:0064.0037: unknown main item tag 0x0 [ 1111.038330][ T6764] uclogic 0003:5543:0064.0037: unknown main item tag 0x0 [ 1111.038357][ T6764] uclogic 0003:5543:0064.0037: unknown main item tag 0x0 [ 1111.038385][ T6764] uclogic 0003:5543:0064.0037: unknown main item tag 0x0 [ 1111.038411][ T6764] uclogic 0003:5543:0064.0037: unknown main item tag 0x0 [ 1111.038437][ T6764] uclogic 0003:5543:0064.0037: unknown main item tag 0x0 [ 1111.038463][ T6764] uclogic 0003:5543:0064.0037: unknown main item tag 0x0 [ 1111.038489][ T6764] uclogic 0003:5543:0064.0037: unknown main item tag 0x0 [ 1111.038515][ T6764] uclogic 0003:5543:0064.0037: unknown main item tag 0x0 [ 1111.038541][ T6764] uclogic 0003:5543:0064.0037: unknown main item tag 0x0 [ 1111.290897][ T6764] uclogic 0003:5543:0064.0037: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.0-1/input0 [ 1111.305804][ T6764] usb 1-1: USB disconnect, device number 61 [ 1111.986526][T13632] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1112.149745][T13632] usb 5-1: Using ep0 maxpacket: 8 [ 1112.151619][T13632] usb 5-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1112.151641][T13632] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1112.151660][T13632] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1112.151695][T13632] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1112.151720][T13632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.156837][T13632] usb 5-1: config 0 descriptor?? [ 1112.192547][ T5692] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1112.339615][ T5692] usb 1-1: device descriptor read/64, error -71 [ 1112.361165][T13632] usb 5-1: USB disconnect, device number 67 [ 1112.432698][ T6764] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1112.571259][ T6764] usb 4-1: device descriptor read/64, error -71 [ 1112.585911][ T5692] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1112.710994][ T5692] usb 1-1: device descriptor read/64, error -71 [ 1112.821865][ T5692] usb usb1-port1: attempt power cycle [ 1112.829641][ T6764] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1112.959573][ T6764] usb 4-1: device descriptor read/64, error -71 [ 1113.080044][ T6764] usb usb4-port1: attempt power cycle [ 1113.159514][ T5692] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1113.180066][ T5692] usb 1-1: device descriptor read/8, error -71 [ 1113.419494][ T6764] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1113.422507][ T5692] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1113.440348][ T5692] usb 1-1: device descriptor read/8, error -71 [ 1113.454490][ T6764] usb 4-1: device descriptor read/8, error -71 [ 1113.550070][ T5692] usb usb1-port1: unable to enumerate USB device [ 1113.709772][ T6764] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1113.733257][ T6764] usb 4-1: device descriptor read/8, error -71 [ 1113.849692][ T6764] usb usb4-port1: unable to enumerate USB device [ 1113.996557][T24444] netlink: 'syz.4.7045': attribute type 21 has an invalid length. [ 1113.996578][T24444] netlink: 'syz.4.7045': attribute type 7 has an invalid length. [ 1114.079816][T24446] netlink: 'syz.4.7046': attribute type 5 has an invalid length. [ 1114.881025][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cfc3000: rx timeout, send abort [ 1115.101770][T24466] sg_write: data in/out 583486/136 bytes for SCSI command 0x0-- guessing data in; [ 1115.101770][T24466] program syz.1.7053 not setting count and/or reply_len properly [ 1115.389666][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880403c0c00: rx timeout, send abort [ 1115.389732][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cfc3000: abort rx timeout. Force session deactivation [ 1115.570259][ T5693] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1115.639417][T13632] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1115.789964][T13632] usb 4-1: Using ep0 maxpacket: 16 [ 1115.794316][T13632] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1115.794443][T13632] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1115.794468][T13632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.822558][T13632] usb 4-1: config 0 descriptor?? [ 1115.880598][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880403c0800: rx timeout, send abort [ 1115.893373][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880403c0c00: abort rx timeout. Force session deactivation [ 1115.990421][T24479] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7059'. [ 1116.144203][T24481] netlink: 868 bytes leftover after parsing attributes in process `syz.0.7060'. [ 1116.294506][T24472] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7055'. [ 1116.387321][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880403c0800: abort rx timeout. Force session deactivation [ 1116.407319][T24472] input: syz1 as /devices/virtual/input/input79 [ 1116.548309][T13632] kone 0003:1E7D:2CED.0038: reserved main item tag 0xd [ 1116.548345][T13632] hid_parser_main: 355 callbacks suppressed [ 1116.548361][T13632] kone 0003:1E7D:2CED.0038: unknown main item tag 0x0 [ 1116.548441][T13632] kone 0003:1E7D:2CED.0038: unknown main item tag 0x0 [ 1116.548469][T13632] kone 0003:1E7D:2CED.0038: unknown main item tag 0x0 [ 1116.548495][T13632] kone 0003:1E7D:2CED.0038: unknown main item tag 0x0 [ 1116.548523][T13632] kone 0003:1E7D:2CED.0038: unknown global tag 0xc [ 1116.548539][T13632] kone 0003:1E7D:2CED.0038: item 0 1 1 12 parsing failed [ 1116.551640][T13632] kone 0003:1E7D:2CED.0038: parse failed [ 1116.551710][T13632] kone 0003:1E7D:2CED.0038: probe with driver kone failed with error -22 [ 1117.169151][ T5692] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1117.325429][ T5692] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1117.325464][ T5692] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1117.328325][ T5692] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1117.328353][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1117.328372][ T5692] usb 5-1: SerialNumber: syz [ 1117.359817][ T5692] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1117.362960][ T5692] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1117.381106][ T5692] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1117.394757][ T5692] scsi host1: usb-storage 5-1:1.0 [ 1118.415825][ T5692] usb 4-1: USB disconnect, device number 8 [ 1118.889284][ T5692] usb 5-1: USB disconnect, device number 68 [ 1119.400259][T13632] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1119.432739][T24538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7082'. [ 1119.548757][T13632] usb 4-1: Using ep0 maxpacket: 32 [ 1119.551839][T13632] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.557448][T13632] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1119.557476][T13632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.557498][T13632] usb 4-1: Product: syz [ 1119.557512][T13632] usb 4-1: Manufacturer: syz [ 1119.557527][T13632] usb 4-1: SerialNumber: syz [ 1119.584454][T13632] usb 4-1: config 0 descriptor?? [ 1119.599887][T13632] cdc_ether 4-1:0.0: missing cdc header descriptor [ 1119.605186][T13632] usb 4-1: unsupported MDLM descriptors [ 1120.032953][T24550] input: syz0 as /devices/virtual/input/input81 [ 1120.706759][T24556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7089'. [ 1120.706783][T24556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7089'. [ 1120.823008][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.060032][T24564] overlayfs: conflicting lowerdir path [ 1121.062489][T24566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7092'. [ 1121.111158][T24566] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7092'. [ 1121.260906][T24568] overlayfs: conflicting lowerdir path [ 1121.938979][T24582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7097'. [ 1121.978532][ T5692] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1122.131831][ T5692] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 1122.131857][ T5692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.131876][ T5692] usb 1-1: config 0 has no interface number 0 [ 1122.131917][ T5692] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1122.131941][ T5692] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1122.131981][ T5692] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1122.132005][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.208668][ T5692] usb 1-1: config 0 descriptor?? [ 1122.234926][T24585] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7099'. [ 1122.315405][ T5707] usb 4-1: USB disconnect, device number 9 [ 1122.340778][ T5692] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1122.443220][ T5692] usb 1-1: USB disconnect, device number 66 [ 1122.454467][ T13] usb 1-1: Failed to submit usb control message: -71 [ 1122.454492][ T13] usb 1-1: unable to send the bmi data to the device: -71 [ 1122.454506][ T13] usb 1-1: unable to get target info from device [ 1122.454517][ T13] usb 1-1: could not get target info (-71) [ 1122.454530][ T13] usb 1-1: could not probe fw (-71) [ 1123.299734][ T5707] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1123.522903][ T5707] usb 4-1: device descriptor read/64, error -71 [ 1123.713751][T24595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7102'. [ 1123.889489][ T5707] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1124.157733][ T5707] usb 4-1: device descriptor read/64, error -71 [ 1124.271822][ T5707] usb usb4-port1: attempt power cycle [ 1124.743001][ T5707] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1124.818713][ T5707] usb 4-1: device descriptor read/8, error -71 [ 1125.166886][ T5707] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1125.206522][ T5707] usb 4-1: device descriptor read/8, error -71 [ 1125.283588][ T5692] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1125.302222][ T5707] usb usb4-port1: unable to enumerate USB device [ 1125.593532][ T5692] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.593593][ T5692] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1125.630562][ T5692] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1125.630590][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1125.630611][ T5692] usb 1-1: SerialNumber: syz [ 1125.722486][ T5692] cdc_ether 1-1:1.0: missing cdc ether descriptor [ 1125.966263][T24599] FAULT_INJECTION: forcing a failure. [ 1125.966263][T24599] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.966294][T24599] CPU: 0 UID: 0 PID: 24599 Comm: syz.4.7105 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1125.966317][T24599] Tainted: [L]=SOFTLOCKUP [ 1125.966323][T24599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1125.966332][T24599] Call Trace: [ 1125.966339][T24599] [ 1125.966346][T24599] dump_stack_lvl+0xe8/0x150 [ 1125.966368][T24599] should_fail_ex+0x46b/0x600 [ 1125.966396][T24599] should_failslab+0xa8/0x100 [ 1125.966419][T24599] __kmalloc_noprof+0xdf/0x7b0 [ 1125.966440][T24599] ? __kasan_kmalloc+0x93/0xb0 [ 1125.966461][T24599] ? nla_strdup+0x9d/0x140 [ 1125.966484][T24599] nla_strdup+0x9d/0x140 [ 1125.966506][T24599] nf_tables_newchain+0x1a9a/0x2890 [ 1125.966529][T24599] ? __lock_acquire+0x6b5/0x2d10 [ 1125.966557][T24599] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1125.966606][T24599] ? nfnl_pernet+0x23/0x240 [ 1125.966629][T24599] ? nfnl_pernet+0x23/0x240 [ 1125.966654][T24599] ? __nla_parse+0x40/0x60 [ 1125.966677][T24599] nfnetlink_rcv+0x1247/0x27b0 [ 1125.966732][T24599] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1125.966771][T24599] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 1125.966817][T24599] ? ref_tracker_free+0x673/0x820 [ 1125.966864][T24599] ? __netlink_deliver_tap+0x866/0x8b0 [ 1125.966902][T24599] ? netlink_deliver_tap+0x2e/0x1b0 [ 1125.966927][T24599] ? netlink_deliver_tap+0x2e/0x1b0 [ 1125.966957][T24599] netlink_unicast+0x780/0x920 [ 1125.966993][T24599] netlink_sendmsg+0x813/0xb40 [ 1125.967018][T24599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1125.967039][T24599] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1125.967066][T24599] ? aa_sock_msg_perm+0x122/0x200 [ 1125.967088][T24599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1125.967105][T24599] sock_sendmsg_nosec+0x13a/0x180 [ 1125.967132][T24599] ____sys_sendmsg+0x55c/0x870 [ 1125.967163][T24599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1125.967201][T24599] ? import_iovec+0x73/0xa0 [ 1125.967227][T24599] ___sys_sendmsg+0x2a5/0x360 [ 1125.967256][T24599] ? __lock_acquire+0x6b5/0x2d10 [ 1125.967282][T24599] ? __pfx____sys_sendmsg+0x10/0x10 [ 1125.967343][T24599] ? __fget_files+0x2a/0x420 [ 1125.967365][T24599] ? __fget_files+0x3a6/0x420 [ 1125.967397][T24599] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1125.967429][T24599] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1125.967467][T24599] ? __pfx_ksys_write+0x10/0x10 [ 1125.967500][T24599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.967522][T24599] do_syscall_64+0x174/0x580 [ 1125.967548][T24599] ? trace_irq_disable+0x3b/0x140 [ 1125.967568][T24599] ? clear_bhb_loop+0x40/0x90 [ 1125.967586][T24599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.967602][T24599] RIP: 0033:0x7fd954c7ce59 [ 1125.967617][T24599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.967632][T24599] RSP: 002b:00007fd952ed6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1125.967652][T24599] RAX: ffffffffffffffda RBX: 00007fd954ef5fa0 RCX: 00007fd954c7ce59 [ 1125.967666][T24599] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1125.967677][T24599] RBP: 00007fd952ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.967686][T24599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.967695][T24599] R13: 00007fd954ef6038 R14: 00007fd954ef5fa0 R15: 00007ffc49cc4148 [ 1125.967724][T24599] [ 1126.038432][T24596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7103'. [ 1126.426969][ T10] usb 1-1: USB disconnect, device number 67 [ 1127.131027][T24612] binder: 24610:24612 ioctl c0306201 200000000080 returned -14 [ 1127.150217][T24612] binder: 24610:24612 ioctl c0306201 2000000003c0 returned -14 [ 1127.545985][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1127.716090][T24620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7113'. [ 1127.716155][T24620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7113'. [ 1127.741438][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.741471][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.741509][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1127.741534][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.795588][ T10] usb 5-1: config 0 descriptor?? [ 1128.318028][ T5707] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1128.338176][T22707] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1128.422604][T24633] binder: 24632:24633 ioctl c0306201 200000000080 returned -14 [ 1128.425487][T24633] binder: 24632:24633 ioctl c0306201 2000000003c0 returned -14 [ 1128.480875][ T5707] usb 2-1: Using ep0 maxpacket: 8 [ 1128.491788][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1128.491820][ T5707] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1128.491913][ T5707] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1128.491935][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.499799][T22707] usb 4-1: Using ep0 maxpacket: 16 [ 1128.502605][T22707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1128.542338][ T10] usb 5-1: string descriptor 0 read error: -22 [ 1128.547998][T22707] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1128.548025][T22707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.548105][T22707] usb 4-1: Product: syz [ 1128.548120][T22707] usb 4-1: Manufacturer: syz [ 1128.548135][T22707] usb 4-1: SerialNumber: syz [ 1128.572761][ T5707] usb 2-1: config 0 descriptor?? [ 1128.605661][T22707] usb 4-1: config 0 descriptor?? [ 1128.625945][T22707] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1128.626202][T22707] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1128.765992][T24614] netlink: 'syz.4.7112': attribute type 83 has an invalid length. [ 1128.819054][T24637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.820311][T24637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.837006][ T5707] usb 2-1: string descriptor 0 read error: -71 [ 1128.868327][ T5707] usbhid 2-1:0.0: can't add hid device: -71 [ 1128.868502][ T5707] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1128.911660][ T5707] usb 2-1: USB disconnect, device number 4 [ 1128.913595][ T10] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0039/input/input82 [ 1129.061742][ T38] audit: type=1326 audit(2000002689.884:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24613 comm="syz.4.7112" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd954c7ce59 code=0x0 [ 1129.253369][T22707] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1129.344389][ T10] uclogic 0003:256C:006D.0039: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1129.357454][ T10] usb 5-1: USB disconnect, device number 69 [ 1129.535084][T24644] binder: 24643:24644 ioctl c0306201 200000000080 returned -14 [ 1129.548358][T24644] binder: 24643:24644 ioctl c0306201 2000000003c0 returned -14 [ 1129.891235][T24628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.895015][T24628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.900069][T24628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.900663][T24628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.972974][T22707] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1129.973003][T22707] em28xx 4-1:0.0: board has no eeprom [ 1130.067677][T22707] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1130.067695][T22707] em28xx 4-1:0.0: dvb set to bulk mode. [ 1130.068460][ T5707] em28xx 4-1:0.0: Binding DVB extension [ 1130.085451][T22707] usb 4-1: USB disconnect, device number 14 [ 1130.092005][T22707] em28xx 4-1:0.0: Disconnecting em28xx [ 1130.201701][ T5707] em28xx 4-1:0.0: Registering input extension [ 1130.202489][T24659] netlink: 'syz.0.7128': attribute type 21 has an invalid length. [ 1130.202508][T24659] netlink: 'syz.0.7128': attribute type 7 has an invalid length. [ 1130.205285][T22707] em28xx 4-1:0.0: Closing input extension [ 1130.265945][T24661] binder: 24660:24661 ioctl c0306201 200000000080 returned -14 [ 1130.268987][T24661] binder: 24660:24661 ioctl c0306201 2000000003c0 returned -14 [ 1130.449083][T22707] em28xx 4-1:0.0: Freeing device [ 1130.528978][T24670] binder: 24669:24670 ioctl c0306201 200000000080 returned -14 [ 1130.530823][T24670] binder: 24669:24670 ioctl c0306201 2000000003c0 returned -14 [ 1130.620961][ T5692] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1130.712434][T24676] netlink: 'syz.4.7135': attribute type 10 has an invalid length. [ 1130.825071][ T5692] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1130.825102][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.850766][ T5692] usb 1-1: config 0 descriptor?? [ 1130.854545][ T5692] cp210x 1-1:0.0: cp210x converter detected [ 1130.940181][T24676] dummy0: left allmulticast mode [ 1130.940210][T24676] dummy0: left promiscuous mode [ 1130.940471][T24676] bridge0: port 3(dummy0) entered disabled state [ 1131.178183][T24676] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1131.180014][T24676] netlink: 'syz.4.7135': attribute type 10 has an invalid length. [ 1131.209078][T24676] netlink: 'syz.4.7135': attribute type 10 has an invalid length. [ 1131.209305][T24676] netlink: 'syz.4.7135': attribute type 10 has an invalid length. [ 1131.209509][T24676] netlink: 'syz.4.7135': attribute type 10 has an invalid length. [ 1131.209696][T24676] netlink: 'syz.4.7135': attribute type 10 has an invalid length. [ 1131.209927][T24676] netlink: 'syz.4.7135': attribute type 10 has an invalid length. [ 1131.337561][ T5692] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1131.338661][ T5692] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1131.338688][ T5692] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1131.355520][T24690] binder: 24689:24690 ioctl c0306201 200000000080 returned -14 [ 1131.355591][ T5692] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1131.361881][T24690] binder: 24689:24690 ioctl c0306201 2000000003c0 returned -14 [ 1131.398895][ T5692] usb 1-1: USB disconnect, device number 68 [ 1131.405458][ T5692] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1131.406307][ T5692] cp210x 1-1:0.0: device disconnected [ 1131.449262][ T5693] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1131.510707][T24696] binder: 24694:24696 ioctl c0306201 200000000080 returned -14 [ 1131.512306][T24696] binder: 24694:24696 ioctl c0306201 2000000003c0 returned -14 [ 1131.514219][T24695] FAULT_INJECTION: forcing a failure. [ 1131.514219][T24695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.514252][T24695] CPU: 0 UID: 0 PID: 24695 Comm: syz.4.7141 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1131.514280][T24695] Tainted: [L]=SOFTLOCKUP [ 1131.514286][T24695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1131.514298][T24695] Call Trace: [ 1131.514307][T24695] [ 1131.514316][T24695] dump_stack_lvl+0xe8/0x150 [ 1131.514345][T24695] should_fail_ex+0x46b/0x600 [ 1131.514378][T24695] _copy_from_user+0x2d/0xb0 [ 1131.514402][T24695] ___sys_recvmsg+0x175/0x590 [ 1131.514421][T24695] ? get_pid_task+0x20/0x1f0 [ 1131.514441][T24695] ? get_pid_task+0x20/0x1f0 [ 1131.514465][T24695] ? __pfx____sys_recvmsg+0x10/0x10 [ 1131.514489][T24695] ? __fget_files+0x2a/0x420 [ 1131.514529][T24695] ? __fget_files+0x3a6/0x420 [ 1131.514561][T24695] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1131.514584][T24695] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1131.514613][T24695] ? __pfx_ksys_write+0x10/0x10 [ 1131.514648][T24695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.514669][T24695] do_syscall_64+0x174/0x580 [ 1131.514696][T24695] ? trace_irq_disable+0x3b/0x140 [ 1131.514718][T24695] ? clear_bhb_loop+0x40/0x90 [ 1131.514746][T24695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.514765][T24695] RIP: 0033:0x7fd954c7ce59 [ 1131.514790][T24695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.514807][T24695] RSP: 002b:00007fd952ed6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1131.514828][T24695] RAX: ffffffffffffffda RBX: 00007fd954ef5fa0 RCX: 00007fd954c7ce59 [ 1131.514843][T24695] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1131.514856][T24695] RBP: 00007fd952ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.514869][T24695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.514881][T24695] R13: 00007fd954ef6038 R14: 00007fd954ef5fa0 R15: 00007ffc49cc4148 [ 1131.514912][T24695] [ 1131.607470][ T5693] usb 2-1: Using ep0 maxpacket: 16 [ 1131.669037][T24698] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7143'. [ 1131.684185][ T5693] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 1131.684216][ T5693] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1447, setting to 64 [ 1131.684242][ T5693] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1535, setting to 1024 [ 1131.745284][T24700] netlink: 868 bytes leftover after parsing attributes in process `syz.0.7144'. [ 1131.787416][ T5693] usb 2-1: New USB device found, idVendor=0499, idProduct=1016, bcdDevice= 0.40 [ 1131.787444][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.787464][ T5693] usb 2-1: Product: ᭘㐮鷯弒滒鴩罁赗郖錒蠒퍟ℯ䭝頹鮱٤鐯欺ꎉ䝪呭吤ᦨ뵿䀊⋝勞墐蜻몥攑䦞Ṡ涓䖳씤ഃ♝ッ᳕쩤Ｍ鳺ଂ밸筞碗넓쳝쏚揙魠⯗←⤨柚ᾤბ쐷❬臤㷼ﱺ஗㥲丨醣傭蕬●퐂೛굫㠡짧芦䇹ぅἬ⹑탙ᜤÞ윻뒔Ꞵ烨듘⤸䢃쯎ᦿ똿좻퍨鉦㻻觢ꗩݹ䴆갫霸 [ 1131.787497][ T5693] usb 2-1: Manufacturer: ᐻ悧ᦜ跑⹊淖嘔熉ꭍ봅䂆쭎뵓蒡๵堝砌播妆䟌๲⺉嚗꠯첑龯寑攔〳⇝૊鏙좆饩㌤앷麄ࣣ㍛涅䩴鵁樫뗭雯ߞ⽛䆺纂겋玥싃犩腢硰盾⌬澉췁࿶ﵲꐈ꨻Ɥ踻橬륋䍡괘⦸狤뭛⿘⏾歒ᅗ儣誠萍⮶ۮ큐芎㛴ﴇ戞㽳滓Ȁ龃݊」⡚䈀浱萬型㘉Ꝙ곂쓃ס脯暡刿 [ 1131.787530][ T5693] usb 2-1: SerialNumber:  [ 1131.913597][T24685] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1131.913919][T24685] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1132.270687][T24713] binder: 24712:24713 ioctl c0306201 200000000080 returned -14 [ 1132.578776][T24725] binder: 24724:24725 ioctl c0306201 200000000080 returned -14 [ 1132.583630][T24725] binder: 24724:24725 ioctl c0306201 2000000003c0 returned -14 [ 1132.992730][T24736] binder: 24735:24736 ioctl c0306201 200000000080 returned -14 [ 1133.018093][T24737] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 1133.340461][T24747] binder: 24745:24747 ioctl 4018620d 0 returned -22 [ 1133.342567][T24747] binder: 24745:24747 ioctl c0306201 200000000080 returned -14 [ 1133.345861][T24747] binder: 24745:24747 ioctl c0306201 2000000003c0 returned -14 [ 1133.504545][T24746] sit0: entered promiscuous mode [ 1133.520437][T24746] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7162'. [ 1133.938576][T24764] binder: 24763:24764 ioctl c0306201 0 returned -14 [ 1133.973140][ T5693] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1133.974114][ T5693] usb 2-1: invalid MIDI in EP 0 [ 1134.121743][ T5707] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1134.160838][ T5693] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1134.178532][ T5693] usb 2-1: USB disconnect, device number 5 [ 1134.200259][T22707] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1134.256588][T24768] binder: 24767:24768 ioctl 4018620d 0 returned -22 [ 1134.265236][T24768] binder: 24767:24768 ioctl c0306201 200000000080 returned -14 [ 1134.275516][T24768] binder: 24767:24768 ioctl c0306201 2000000003c0 returned -14 [ 1134.277535][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 1134.279866][ T5707] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1134.279894][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.286888][ T5707] usb 1-1: config 0 descriptor?? [ 1134.298691][ T5707] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1134.338156][T22707] usb 4-1: device descriptor read/64, error -71 [ 1134.527398][ T5693] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1134.590922][T22707] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1134.677093][ T5693] usb 2-1: Using ep0 maxpacket: 8 [ 1134.680228][ T5693] usb 2-1: config 0 interface 0 altsetting 22 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 1134.680261][ T5693] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1134.680293][ T5693] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1134.680316][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.736357][ T5707] gspca_vc032x: reg_w err -71 [ 1134.736373][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736383][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736392][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736401][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736410][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736419][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736428][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736437][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736446][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736454][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736463][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736472][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736481][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736490][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736499][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736507][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736516][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736524][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 1134.736533][ T5707] gspca_vc032x: Unknown sensor... [ 1134.736609][ T5707] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1134.822426][T22707] usb 4-1: device descriptor read/64, error -71 [ 1134.869393][ T5693] usb 2-1: config 0 descriptor?? [ 1134.882252][ T5707] usb 1-1: USB disconnect, device number 69 [ 1134.927607][T22707] usb usb4-port1: attempt power cycle [ 1135.269031][T22707] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1135.276394][T24766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.277319][T24766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.290013][T22707] usb 4-1: device descriptor read/8, error -71 [ 1135.414658][ T5693] magicmouse 0003:05AC:0269.003A: unknown main item tag 0x0 [ 1135.414693][ T5693] magicmouse 0003:05AC:0269.003A: unknown main item tag 0x0 [ 1135.414721][ T5693] magicmouse 0003:05AC:0269.003A: unknown main item tag 0x0 [ 1135.414746][ T5693] magicmouse 0003:05AC:0269.003A: unknown main item tag 0x0 [ 1135.414773][ T5693] magicmouse 0003:05AC:0269.003A: unknown main item tag 0x0 [ 1135.414800][ T5693] magicmouse 0003:05AC:0269.003A: unknown main item tag 0x0 [ 1135.414827][ T5693] magicmouse 0003:05AC:0269.003A: unknown main item tag 0x0 [ 1135.414855][ T5693] magicmouse 0003:05AC:0269.003A: unknown main item tag 0x0 [ 1135.484726][ T5693] magicmouse 0003:05AC:0269.003A: hidraw0: USB HID v0.04 Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 1135.548529][T22707] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1135.568751][T22707] usb 4-1: device descriptor read/8, error -71 [ 1135.623275][ T10] usb 2-1: USB disconnect, device number 6 [ 1135.683767][T22707] usb usb4-port1: unable to enumerate USB device [ 1135.704967][T24789] binder: 24788:24789 ioctl 4018620d 0 returned -22 [ 1135.705686][T24789] binder: 24788:24789 ioctl c0306201 200000000080 returned -14 [ 1135.730194][T24789] binder: 24788:24789 ioctl c0306201 2000000003c0 returned -14 [ 1135.757192][T24791] netlink: 4592 bytes leftover after parsing attributes in process `syz.0.7184'. [ 1135.841302][T24795] validate_nla: 59 callbacks suppressed [ 1135.841341][T24795] netlink: 'syz.0.7185': attribute type 39 has an invalid length. [ 1135.867329][T24795] hsr_slave_0: left promiscuous mode [ 1135.913211][T24795] hsr_slave_1: left promiscuous mode [ 1136.137761][ T10] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1136.198902][T24802] input: syz0 as /devices/virtual/input/input84 [ 1136.298951][ T10] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 1136.299973][ T10] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1136.300007][ T10] usb 1-1: can't read configurations, error -22 [ 1136.379836][ T823] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1136.438605][ T10] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1136.540212][ T823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.540243][ T823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.540265][ T823] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1136.540289][ T823] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1136.540301][ T823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.543404][ T823] usb 5-1: config 0 descriptor?? [ 1136.608490][ T10] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 1136.609811][ T10] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1136.609845][ T10] usb 1-1: can't read configurations, error -22 [ 1136.610748][ T10] usb usb1-port1: attempt power cycle [ 1136.986857][ T10] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 1137.018825][ T10] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 1137.021179][ T10] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1137.021214][ T10] usb 1-1: can't read configurations, error -22 [ 1137.050767][T24800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.052917][T24800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.071340][ T823] usbhid 5-1:0.0: can't add hid device: -71 [ 1137.071451][ T823] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1137.093893][ T823] usb 5-1: USB disconnect, device number 70 [ 1137.146916][ T10] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 1137.171215][ T10] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 1137.177649][ T10] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1137.177685][ T10] usb 1-1: can't read configurations, error -22 [ 1137.179843][ T10] usb usb1-port1: unable to enumerate USB device [ 1137.751307][ T38] audit: type=1326 audit(2000002698.605:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24820 comm="syz.4.7193" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd954c7ce59 code=0x0 [ 1137.820344][T24824] binder: BINDER_SET_CONTEXT_MGR already set [ 1137.820359][T24824] binder: 24822:24824 ioctl 4018620d 200000000040 returned -16 [ 1137.951282][T24831] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7196'. [ 1138.465187][T24852] binder: BINDER_SET_CONTEXT_MGR already set [ 1138.465203][T24852] binder: 24850:24852 ioctl 4018620d 200000000040 returned -16 [ 1139.014038][T24873] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1139.014086][T24873] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1139.070368][T24873] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1139.070390][T24873] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1139.093742][T24877] binder: BINDER_SET_CONTEXT_MGR already set [ 1139.093751][T24877] binder: 24876:24877 ioctl 4018620d 200000000040 returned -16 [ 1139.259955][T24884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7218'. [ 1139.424344][T24887] binder: 24886:24887 ioctl c0306201 200000000080 returned -14 [ 1139.431066][T24887] binder: 24886:24887 ioctl c0306201 2000000003c0 returned -14 [ 1139.431537][T24887] binder_alloc: 24886: binder_alloc_buf, no vma [ 1139.695053][T24893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7222'. [ 1139.695416][T24893] unsupported nla_type 147 [ 1139.831909][T24901] binder: 24899:24901 ioctl c0306201 0 returned -14 [ 1139.847296][T24901] binder: 24899:24901 ioctl c0306201 2000000003c0 returned -14 [ 1139.999558][T24908] binder: 24907:24908 ioctl c0306201 200000000080 returned -14 [ 1140.001187][T24908] binder: 24907:24908 ioctl c0306201 2000000003c0 returned -14 [ 1140.001422][T24908] binder_alloc: 24907: binder_alloc_buf, no vma [ 1140.088717][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1140.185929][T24913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7231'. [ 1140.185982][T24913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7231'. [ 1140.248321][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1140.251151][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.251175][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1140.270326][ T10] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1140.270355][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.270376][ T10] usb 4-1: Product: syz [ 1140.270390][ T10] usb 4-1: Manufacturer: syz [ 1140.270405][ T10] usb 4-1: SerialNumber: syz [ 1140.317512][ T10] usb 4-1: config 0 descriptor?? [ 1140.327285][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1140.415136][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1140.462450][T24923] binder: 24922:24923 ioctl c0306201 0 returned -14 [ 1140.464757][T24923] binder: 24922:24923 ioctl c0306201 2000000003c0 returned -14 [ 1140.584080][T24928] binder: 24927:24928 ioctl c0306201 200000000080 returned -14 [ 1140.585265][T24928] binder: 24927:24928 ioctl c0306201 2000000003c0 returned -14 [ 1140.996427][ T10] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 1141.126361][ T5693] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1141.150038][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1141.150072][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 8 [ 1141.177607][ T10] usb 1-1: string descriptor 0 read error: -22 [ 1141.177745][ T10] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1141.177770][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.216018][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1141.216071][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 1141.313929][ T5693] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1141.313960][ T5693] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1141.313981][ T5693] usb 5-1: Manufacturer: syz [ 1141.353313][ T5693] usb 5-1: config 0 descriptor?? [ 1141.381667][ T5693] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1141.385116][T24945] binder: 24944:24945 ioctl c0306201 0 returned -14 [ 1141.386066][ T5693] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1141.398040][T24945] binder: 24944:24945 ioctl c0306201 2000000003c0 returned -14 [ 1141.432485][ T5693] usb 1-1: USB disconnect, device number 74 [ 1141.510324][T24947] loop2: detected capacity change from 0 to 7 [ 1141.539820][T24947] Dev loop2: unable to read RDB block 7 [ 1141.539871][T24947] loop2: unable to read partition table [ 1141.540071][T24947] loop2: partition table beyond EOD, truncated [ 1141.540089][T24947] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1141.581933][T22707] usb 5-1: USB disconnect, device number 71 [ 1141.589795][T22707] ftdi_sio 5-1:0.0: device disconnected [ 1141.707930][T24949] netlink: zone id is out of range [ 1141.736444][T24949] netlink: zone id is out of range [ 1141.751102][T24949] netlink: set zone limit has 4 unknown bytes [ 1141.837351][T24951] binder: 24950:24951 ioctl c0306201 200000000080 returned -14 [ 1141.838504][T24951] binder: 24950:24951 ioctl c0306201 2000000003c0 returned -14 [ 1141.924330][ C1] sd 0:0:1:0: [sda] tag#9279 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1141.924364][ C1] sd 0:0:1:0: [sda] tag#9279 CDB: Write(6) 0a 00 00 02 00 00 [ 1142.000862][T24955] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.7250'. [ 1142.000959][T24955] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.7250'. [ 1142.000975][T24955] netlink: 576 bytes leftover after parsing attributes in process `syz.1.7250'. [ 1142.182478][T24961] overlay: Unknown parameter '\' [ 1142.253404][T24963] binder: 24962:24963 ioctl c0306201 2000000003c0 returned -14 [ 1142.271412][T24965] netlink: 'syz.4.7255': attribute type 21 has an invalid length. [ 1142.271432][T24965] netlink: 'syz.4.7255': attribute type 7 has an invalid length. [ 1142.368989][T24967] genirq: Flags mismatch irq 4. 00202000 (pcl818) vs. 00202080 (ttyS0) [ 1142.429894][T24972] binder: 24970:24972 ioctl c0306201 200000000080 returned -14 [ 1142.437480][T24972] binder: 24970:24972 ioctl c0306201 2000000003c0 returned -14 [ 1142.539750][T24976] netlink: 'syz.0.7260': attribute type 13 has an invalid length. [ 1142.539772][T24976] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7260'. [ 1142.607374][T24978] netlink: 'syz.4.7261': attribute type 10 has an invalid length. [ 1142.639363][T24978] bond0: (slave dummy0): Releasing backup interface [ 1142.654666][T24981] netlink: 'syz.4.7261': attribute type 10 has an invalid length. [ 1142.705026][T24978] team0: Port device dummy0 added [ 1142.784719][ T5693] usb 4-1: USB disconnect, device number 19 [ 1142.793988][T24981] team0: Port device dummy0 removed [ 1142.905831][T24986] [ 1142.905862][T24986] ====================================================== [ 1142.905876][T24986] WARNING: possible circular locking dependency detected [ 1142.905943][T24986] syzkaller #0 Tainted: G L [ 1142.905956][T24986] ------------------------------------------------------ [ 1142.905993][T24986] syz.1.7265/24986 is trying to acquire lock: [ 1142.906011][T24986] ffffffff8e958b58 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 1142.906107][T24986] [ 1142.906107][T24986] but task is already holding lock: [ 1142.906116][T24986] ffffffff8e075558 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 1142.906170][T24986] [ 1142.906170][T24986] which lock already depends on the new lock. [ 1142.906170][T24986] [ 1142.906178][T24986] [ 1142.906178][T24986] the existing dependency chain (in reverse order) is: [ 1142.906185][T24986] [ 1142.906185][T24986] -> #7 (system_transition_mutex){+.+.}-{4:4}: [ 1142.906241][T24986] mutex_lock_nested+0x5a/0x1d0 [ 1142.906273][T24986] pm_test_store+0x95/0x480 [ 1142.906295][T24986] kernfs_fop_write_iter+0x3b0/0x540 [ 1142.906324][T24986] vfs_write+0x629/0xba0 [ 1142.906349][T24986] ksys_write+0x156/0x270 [ 1142.906374][T24986] do_syscall_64+0x174/0x580 [ 1142.906401][T24986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.906420][T24986] [ 1142.906420][T24986] -> #6 (&of->mutex){+.+.}-{4:4}: [ 1142.906448][T24986] mutex_lock_nested+0x5a/0x1d0 [ 1142.906470][T24986] kernfs_seq_start+0x5c/0x420 [ 1142.906497][T24986] seq_read_iter+0x3f8/0xe20 [ 1142.906527][T24986] copy_splice_read+0x605/0xab0 [ 1142.906549][T24986] splice_direct_to_actor+0x483/0xc80 [ 1142.906573][T24986] do_splice_direct+0x19b/0x2a0 [ 1142.906596][T24986] do_sendfile+0x547/0x7e0 [ 1142.906614][T24986] __se_sys_sendfile64+0x144/0x1a0 [ 1142.906632][T24986] do_syscall_64+0x174/0x580 [ 1142.906659][T24986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.906678][T24986] [ 1142.906678][T24986] -> #5 (&p->lock){+.+.}-{4:4}: [ 1142.906704][T24986] mutex_lock_nested+0x5a/0x1d0 [ 1142.906724][T24986] seq_read_iter+0xb8/0xe20 [ 1142.906752][T24986] lo_rw_aio+0xc80/0xf00 [ 1142.906848][T24986] loop_process_work+0x92a/0x11b0 [ 1142.906875][T24986] process_one_work+0x98b/0x1630 [ 1142.906902][T24986] worker_thread+0xb49/0x1140 [ 1142.906929][T24986] kthread+0x388/0x470 [ 1142.906948][T24986] ret_from_fork+0x514/0xb70 [ 1142.906970][T24986] ret_from_fork_asm+0x1a/0x30 [ 1142.906995][T24986] [ 1142.906995][T24986] -> #4 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 1142.907023][T24986] process_one_work+0x8d7/0x1630 [ 1142.907048][T24986] worker_thread+0xb49/0x1140 [ 1142.907076][T24986] kthread+0x388/0x470 [ 1142.907095][T24986] ret_from_fork+0x514/0xb70 [ 1142.907113][T24986] ret_from_fork_asm+0x1a/0x30 [ 1142.907135][T24986] [ 1142.907135][T24986] -> #3 ((wq_completion)loop5){+.+.}-{0:0}: [ 1142.907159][T24986] touch_wq_lockdep_map+0xcb/0x180 [ 1142.907177][T24986] __flush_workqueue+0x14b/0x14f0 [ 1142.907193][T24986] drain_workqueue+0xd3/0x390 [ 1142.907210][T24986] lo_release+0x287/0x8f0 [ 1142.907234][T24986] bdev_release+0x541/0x660 [ 1142.907287][T24986] blkdev_release+0x15/0x20 [ 1142.907304][T24986] __fput+0x461/0xa70 [ 1142.907324][T24986] fput_close_sync+0x11f/0x240 [ 1142.907345][T24986] __x64_sys_close+0x7e/0x110 [ 1142.907367][T24986] do_syscall_64+0x174/0x580 [ 1142.907396][T24986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.907416][T24986] [ 1142.907416][T24986] -> #2 (&disk->open_mutex#4){+.+.}-{4:4}: [ 1142.907449][T24986] mutex_lock_nested+0x5a/0x1d0 [ 1142.907470][T24986] __del_gendisk+0x127/0x980 [ 1142.907491][T24986] del_gendisk+0xe7/0x160 [ 1142.907511][T24986] loop_remove+0x42/0xc0 [ 1142.907536][T24986] loop_control_ioctl+0x4ba/0x5b0 [ 1142.907562][T24986] __se_sys_ioctl+0xff/0x170 [ 1142.907590][T24986] do_syscall_64+0x174/0x580 [ 1142.907620][T24986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.907639][T24986] [ 1142.907639][T24986] -> #1 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1142.907665][T24986] down_read+0x97/0x200 [ 1142.907681][T24986] add_disk_fwnode+0xe7/0x480 [ 1142.907701][T24986] loop_add+0x86e/0xb50 [ 1142.907726][T24986] blk_request_module+0x27d/0x2a0 [ 1142.907747][T24986] blkdev_get_no_open+0x3f/0xe0 [ 1142.907774][T24986] blkdev_open+0x1f5/0x620 [ 1142.907791][T24986] do_dentry_open+0x83d/0x13e0 [ 1142.907811][T24986] vfs_open+0x3b/0x350 [ 1142.907828][T24986] path_openat+0x2eea/0x3960 [ 1142.907854][T24986] do_file_open+0x23e/0x4a0 [ 1142.907880][T24986] do_sys_openat2+0x115/0x200 [ 1142.907901][T24986] __x64_sys_creat+0x8f/0xc0 [ 1142.907923][T24986] do_syscall_64+0x174/0x580 [ 1142.907952][T24986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.907971][T24986] [ 1142.907971][T24986] -> #0 (major_names_lock){+.+.}-{4:4}: [ 1142.907999][T24986] __lock_acquire+0x15a5/0x2d10 [ 1142.908022][T24986] lock_acquire+0x106/0x350 [ 1142.908043][T24986] mutex_lock_nested+0x5a/0x1d0 [ 1142.908065][T24986] blk_request_module+0x35/0x2a0 [ 1142.908087][T24986] blkdev_get_no_open+0x3f/0xe0 [ 1142.908115][T24986] bdev_file_open_by_dev+0xa0/0x240 [ 1142.908145][T24986] swsusp_check+0x56/0x490 [ 1142.908166][T24986] software_resume+0x51/0x4c0 [ 1142.908195][T24986] resume_store+0x333/0x4f0 [ 1142.908210][T24986] kernfs_fop_write_iter+0x3b0/0x540 [ 1142.908236][T24986] vfs_write+0x629/0xba0 [ 1142.908268][T24986] ksys_write+0x156/0x270 [ 1142.908294][T24986] do_syscall_64+0x174/0x580 [ 1142.908324][T24986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.908344][T24986] [ 1142.908344][T24986] other info that might help us debug this: [ 1142.908344][T24986] [ 1142.908351][T24986] Chain exists of: [ 1142.908351][T24986] major_names_lock --> &of->mutex --> system_transition_mutex [ 1142.908351][T24986] [ 1142.908423][T24986] Possible unsafe locking scenario: [ 1142.908423][T24986] [ 1142.908431][T24986] CPU0 CPU1 [ 1142.908500][T24986] ---- ---- [ 1142.908513][T24986] lock(system_transition_mutex); [ 1142.908527][T24986] lock(&of->mutex); [ 1142.908543][T24986] lock(system_transition_mutex); [ 1142.908559][T24986] lock(major_names_lock); [ 1142.908573][T24986] [ 1142.908573][T24986] *** DEADLOCK *** [ 1142.908573][T24986] [ 1142.908579][T24986] 5 locks held by syz.1.7265/24986: [ 1142.908591][T24986] #0: ffff888037adbb28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1142.908665][T24986] #1: ffff888037204480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1142.908723][T24986] #2: ffff888026639878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1142.908776][T24986] #3: ffff88801f6be3c8 (kn->active#70){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1142.908836][T24986] #4: ffffffff8e075558 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 1142.908894][T24986] [ 1142.908894][T24986] stack backtrace: [ 1142.908908][T24986] CPU: 0 UID: 0 PID: 24986 Comm: syz.1.7265 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1142.908937][T24986] Tainted: [L]=SOFTLOCKUP [ 1142.908945][T24986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1142.908959][T24986] Call Trace: [ 1142.908967][T24986] [ 1142.908976][T24986] dump_stack_lvl+0xe8/0x150 [ 1142.909001][T24986] print_circular_bug+0x2e1/0x300 [ 1142.909032][T24986] check_noncircular+0x12e/0x150 [ 1142.909063][T24986] __lock_acquire+0x15a5/0x2d10 [ 1142.909090][T24986] ? __lock_acquire+0x6b5/0x2d10 [ 1142.909117][T24986] ? blk_request_module+0x35/0x2a0 [ 1142.909140][T24986] lock_acquire+0x106/0x350 [ 1142.909163][T24986] ? blk_request_module+0x35/0x2a0 [ 1142.909188][T24986] ? blk_request_module+0x35/0x2a0 [ 1142.909213][T24986] ? blk_request_module+0x35/0x2a0 [ 1142.909234][T24986] mutex_lock_nested+0x5a/0x1d0 [ 1142.909257][T24986] ? blk_request_module+0x35/0x2a0 [ 1142.909290][T24986] blk_request_module+0x35/0x2a0 [ 1142.909315][T24986] blkdev_get_no_open+0x3f/0xe0 [ 1142.909347][T24986] bdev_file_open_by_dev+0xa0/0x240 [ 1142.909380][T24986] swsusp_check+0x56/0x490 [ 1142.909403][T24986] software_resume+0x51/0x4c0 [ 1142.909435][T24986] resume_store+0x333/0x4f0 [ 1142.909452][T24986] ? sysfs_file_kobj+0x1a/0x230 [ 1142.909472][T24986] ? __pfx_resume_store+0x10/0x10 [ 1142.909503][T24986] ? sysfs_file_kobj+0x1a/0x230 [ 1142.909523][T24986] ? sysfs_file_kobj+0x1e4/0x230 [ 1142.909540][T24986] ? sysfs_kf_write+0x166/0x260 [ 1142.909560][T24986] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1142.909578][T24986] kernfs_fop_write_iter+0x3b0/0x540 [ 1142.909609][T24986] vfs_write+0x629/0xba0 [ 1142.909638][T24986] ? __pfx_vfs_write+0x10/0x10 [ 1142.909665][T24986] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1142.909692][T24986] ? lockdep_hardirqs_on+0x7a/0x110 [ 1142.909720][T24986] ? mutex_lock_nested+0x152/0x1d0 [ 1142.909740][T24986] ? fdget_pos+0x252/0x320 [ 1142.909765][T24986] ksys_write+0x156/0x270 [ 1142.909792][T24986] ? __pfx_ksys_write+0x10/0x10 [ 1142.909822][T24986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.909842][T24986] do_syscall_64+0x174/0x580 [ 1142.909872][T24986] ? clear_bhb_loop+0x40/0x90 [ 1142.909894][T24986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.909914][T24986] RIP: 0033:0x7f772048ce59 [ 1142.909932][T24986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.909950][T24986] RSP: 002b:00007f771e6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1142.909972][T24986] RAX: ffffffffffffffda RBX: 00007f7720705fa0 RCX: 00007f772048ce59 [ 1142.909989][T24986] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000008 [ 1142.910003][T24986] RBP: 00007f7720522d6f R08: 0000000000000000 R09: 0000000000000000 [ 1142.910016][T24986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.910029][T24986] R13: 00007f7720706038 R14: 00007f7720705fa0 R15: 00007ffdde726778 [ 1142.910051][T24986] [ 1143.211853][T24986] PM: Image not found (code -6)