last executing test programs: 17m21.820416641s ago: executing program 1 (id=382): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@cgroup=r0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000000280)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r5, &(0x7f0000019280)={0xa, 0xffff, 0x0, @loopback={0x0, 0x7ffffffe}}, 0x1c) sendmmsg$inet6(r5, 0x0, 0x0, 0x888) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x12) 17m18.600455669s ago: executing program 1 (id=385): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0xe000000) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) getxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) 17m11.33185411s ago: executing program 1 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$video(&(0x7f0000000340), 0x0, 0x40841) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001900)={0x5, 0x8, 0x2}) shutdown(r3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000001ac0)=0x5, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 17m4.725720203s ago: executing program 1 (id=398): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x110) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000700)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r3, &(0x7f0000000780)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) move_mount(r5, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(0x0) pivot_root(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0/../file0\x00') 17m2.848052664s ago: executing program 1 (id=399): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0xe000000) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) getxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) 17m0.873175875s ago: executing program 3 (id=400): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x48241, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0), 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES8, @ANYBLOB="1f6f6ebc8ae4f9b936d1aa3bbd3c98d580d64ba42e2a98d3704eacf4ff1952356cd6733e118374e98686ff56877d1b0bcbee805977733e484baa3952e246b626fece9155c975f124177fe2d8f3a57c53d0a301ba9a2bf808ef27ad043c015e838de9d31b80e61bc3672c878a43658225920b1681a34a28b8d32a33ab41c3a7e0580675"]) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002580)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f00000025c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000002600), 0x1, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000002640), 0x2, 0x141102) writev(r1, &(0x7f0000002680)=[{&(0x7f00000026c0)="94", 0xf000}, {0x0}], 0x2) read$char_usb(0xffffffffffffffff, &(0x7f0000002700)=""/236, 0xec) add_key(&(0x7f0000002900)='id_legacy\x00', 0x0, &(0x7f0000002940)="c5feb906e9af6c94e4bb228aa1ebeac34b1f1a0704e1e9914a58e6be2bdec72b4bdeba50b709343e747fab8612a3dd2d2468175a25ce9eded3302eac2cee5d0f54e9fca8f0f1d13aa17c0c6edaa877427ead9712a2a839e0af0b79d83eac8a9488b12a4473b9d520c3cb8e3d6ea9501eb40d5895208539158578b9c0b329a0ad1bbdfd4f6406c72399ad2b0fc3f7dabba66d0f9b0d5e4aa16a3ab7d5ebd12660260400000000000000000034ca1c3ee4144da116d35ef302b50f15495731a59376e1432c285c1b9d438a872c6927778835975589101b2ebd08fb43e7770efd6ec582ed174898125c9dae473d1fbe389707110f9335c00228a528d72f94721d7dcd7cf56213e4d2b21445c2e1c98f554feab4cc3fff9c04c8630d4f0644e4a0ed0962d62533a9d460751b7bc006eb9cf6241f89e428db18daa571e13dec4e1942b2549792dff1b3b68a418f9a6294c87df719fcb49a42569ac75ab585f9bbb6da73d400", 0x163, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000002ac0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000002b00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa0000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002c40)='./sys\x00', 0x1ff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002d00)={0x79, 0x17, 0x2, {0x2f, './sys/module/kvm/parameters/nx_huge_pages/file0'}}, 0x38) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000002d40)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r3}, [@crypt={0x0, 0x1080, 0x0, 0xa8, 'crypt\x00', {'capi:xts(aes)-random', 0x20, @fixed='0123456789abcdef0123456789abcdef01234567', 0x20, '4096', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1024'}, ' 2 sector_size:4096 iv_large_sectors'}}]}) ioctl$DM_DEV_REMOVE(r2, 0xc138fd04, &(0x7f00000030c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) 16m58.017207916s ago: executing program 1 (id=402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) timer_create(0x7, 0x0, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000100)={{0x77359400}, {0x0, 0x9}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 16m56.664810194s ago: executing program 32 (id=402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) timer_create(0x7, 0x0, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000100)={{0x77359400}, {0x0, 0x9}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 16m56.643021987s ago: executing program 3 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000140)="e4", 0x1}], 0x2) 16m56.372213874s ago: executing program 3 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$video(&(0x7f0000000340), 0x0, 0x40841) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000001900)={0x5, 0x8, 0x2}) shutdown(r1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000001ac0)=0x5, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 16m56.178034014s ago: executing program 3 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x110) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000700)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r3, &(0x7f0000000780)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) move_mount(r5, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(0x0) pivot_root(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0/../file0\x00') 16m54.094810256s ago: executing program 3 (id=408): setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x110) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000700)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r3, &(0x7f0000000780)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) open$dir(0x0, 0x48182, 0x14) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(0x0) 16m49.34791476s ago: executing program 3 (id=413): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000019600)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r2, 0x3b89, &(0x7f00000005c0)="300000000400") 16m48.609385355s ago: executing program 33 (id=413): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000019600)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r2, 0x3b89, &(0x7f00000005c0)="300000000400") 14m25.473884191s ago: executing program 0 (id=553): r0 = openat$ipvtap(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tun(r0, &(0x7f0000005cc0)=ANY=[], 0x64) 14m25.132377695s ago: executing program 0 (id=554): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='environ\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 14m20.119159306s ago: executing program 0 (id=562): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 14m19.10254952s ago: executing program 0 (id=563): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) unshare(0xe000000) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) getxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) 14m17.347483768s ago: executing program 0 (id=568): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f00000004c0)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000080)) 14m15.542628313s ago: executing program 0 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='environ\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 14m0.26386283s ago: executing program 34 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='environ\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 12m17.64175061s ago: executing program 6 (id=709): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000019340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019500)={&(0x7f0000019580)=ANY=[@ANYBLOB="38000000550001002cbd7000fedbdf2507000000", @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0102fe0f0000000000000000001effffe00000010800000059dd2eece160417a5a9b1ad9d0f91b970871cf54b598db996275539986ddbf2522bf9876549db479ea1bff8e275e542146c763d266c3366f1bdf5c663ae04786095586d2ca866cad0a380d4e13bd5a40910f705ddbcd60e513ed4dd23d511b8c05bbdc052659cd4d83b8de6f87403dfbd19b49b5acc3b4bb67e25f47846ef1d0a935115f14045cd0847f4586b98d3bcae04612c6a50f4c71e2b5bc07d15fa3c48ad5d7ab9ce271683a83f59ea285f01cddb155c05bd236521fb4453bbe"], 0x38}, 0x1, 0x0, 0x0, 0x4000081}, 0x40080c0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000019540)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x1, 0x401}, @timestamp], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000000340)=""/102392, 0x18ff8) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000019380), 0x2) r6 = memfd_create(&(0x7f00000193c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000019400)={r6, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000019480)={@private1}, 0x14) sendto$inet(r0, &(0x7f0000000240), 0xffffffffffffff94, 0xb, 0x0, 0x0) 12m15.507755738s ago: executing program 6 (id=712): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x10) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) 12m14.084345483s ago: executing program 6 (id=714): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'comedi_test\x00', [0x140, 0x2, 0x357, 0x2, 0x4, 0x1, 0x100, 0x2, 0x21027, 0xc72d, 0x8, 0xffffffff, 0x0, 0x6, 0x4d1, 0xfffffffe, 0xfc, 0x2, 0x3, 0x2000000, 0x4, 0x0, 0x4, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x7fffffff, 0x1007ff, 0x2]}) ioctl$COMEDI_SETRSUBD(r0, 0x6410) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) pipe(0x0) syz_io_uring_modify_offsets$flags(0x0, 0x0, 0x68, 0x1) pipe2(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000019a00), 0x0, 0x0) ioctl(r1, 0x40186f40, &(0x7f0000000000)="e64fb23cb2513ac639f8be98abc5cb14e3cba5172a617517dc524fd04bb0cd4c2a98") 12m13.831463729s ago: executing program 6 (id=716): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f00000007c0)="632a040000000000000000d8d6c8", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 12m13.43224937s ago: executing program 6 (id=717): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = getpid() openat$sequencer2(0xffffffffffffff9c, 0x0, 0x292002, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) 12m11.333024194s ago: executing program 6 (id=721): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000003980)={0xb, {{0xa, 0x0, 0x0, @mcast2, 0x1}}}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd"], 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x114, 0xfffffffffffffffe) 11m55.624599575s ago: executing program 35 (id=721): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000003980)={0xb, {{0xa, 0x0, 0x0, @mcast2, 0x1}}}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd"], 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x114, 0xfffffffffffffffe) 10m39.481361836s ago: executing program 4 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000c00)={r0, 0x0, 0x20000000}, 0x20) 10m39.312277964s ago: executing program 4 (id=920): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f00000007c0)="632a040000000000000000d8d6c8", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 10m39.229809282s ago: executing program 4 (id=921): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[], 0x8, 0x0) msgrcv(0x0, &(0x7f0000000440), 0x8, 0x0, 0x0) 10m36.409454349s ago: executing program 4 (id=925): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x6f) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000b40)='./dev\x00', &(0x7f0000000b80)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x12148c5, &(0x7f0000000540)={[{@utf8no}, {}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@fat=@showexec}, {@shortname_mixed}, {@fat=@showexec}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@utf8}, {@fat=@usefree}]}, 0x0, 0x2de, &(0x7f0000000600)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000900)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1333406, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mount$bind(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000a80)='.\x00', &(0x7f0000000ac0)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000002940)={0x2020}, 0x2020) 10m35.924404579s ago: executing program 4 (id=926): syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000005c0), 0x1, 0x2603) mprotect(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x6) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000600)={&(0x7f0000000640)=[{0x63, 0x5820, 0x0, 0x0}], 0x1}) 10m35.241912148s ago: executing program 4 (id=929): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f00000007c0)="632a040000000000000000d8d6c8", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 10m34.349819259s ago: executing program 36 (id=929): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f00000007c0)="632a040000000000000000d8d6c8", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 14.602771952s ago: executing program 2 (id=2381): socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x6, 0x22000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 9.976484483s ago: executing program 2 (id=2393): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000500)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000680)={0x0}) 9.692179132s ago: executing program 2 (id=2397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000002f00)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000002f40)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000005040)=@svm={0x1a, 0x1, 0x1080, {0x4, 0x6}, {"1e9bb45abc7c27c2a3ca0b31e6eaa817a91509bf94e44a2eb58d237dba31db53cc40d8c368e16bfc63814ec3f8517e34f73424801fea92cd528aaf6bd91a07a61756b4ad3fd8444b24cd7f40742bafadcd4a02c3eb7e976cd78ee9a8b779f6c54354a0aafa534832f85bbc89b44413bb3765b6f6fe49b10ec197a99a07c61c543ddd79ec4cab53fc244d6f14136589b1917f22dd29b08590c9fceb9ad35d1cb562c2735d8ed4c0499a409af4b6ba32ffa734b32dc25736c5ed3aba9bc53a89e607d3b55555392e2e7b928b2c7af32de96ea736f64314681be430442c9a50c09b92c423209d74a9311e687a54e52d3e9c2d2888d572bb367610861ee8f959271e47203d6b92f311d6751c0ae16df707fc16e1076f459896412ab911493b9cd82d4c7108ade3813dc2b9291d07c1183174ff8e9fc3c42c83cc4af0100eb633d64bb7c0b8fef6d12f6035164a187fb42c612d6b51bf2bacddada7e4bb2f86a540df17240ba6fbc02bb44cfa9af3475dd581102b06c9e8fb0a27e5a3d5817124a071d2b530c00b86ccee5b253697e7d7245785a416222586d643385355041385ebe69a6567a579e43df3ac2c97f15143a9284d9f3cd9d340b8153b755952b47a6c14fa94d077d68c6b8f530a8d3a993d7d729592dd8ce7d5cc18e904f39b4534e00921b1345def5a994be47b3e2fa93446f25fd1ef1b36c65dc80d12a56760b122695f8326d8e912542840ce1bdc2dc5a79234fbda9d52c844f8287b8562bfcb7002754c544fe78bc13c50fbca90f1eb6e1e91b2e67b45a75c1c23fe00ac8ab24f3cbb5b3eed4da8f8e4f85e9c194aed1491025dc4bcc844ecb617b07662a146db4afde2c60e3b536f8078b316a21a2ebce9f520e49f8b45eee1427077542522b0a2c2e9ee6faa54f86ea83467ced3ef5997a6f7364fab9d531e780b9010b2ee7e3bae395256fa69d1fa10b794ca2fc332b8309c2952241051148296d44e6a4708ec7ded49372d1b72b071f8fe0e97c736a379b08bcec0879b2d27fda49400b692ba500f7e29383ad1f16658190600cee57289438f5d0e74eb6247cf16128cc6eaa9b5d22e7eeff710f808a7075c2293b1c99e12b0e92f1fd74262fa6ae116b7abae66ea502fd681f7bf8ab4a7ff56edb4dea9ac4297644fa6a66c952864e1b18600e2b4d384f0eed97a859d52e5d9c94f7d654331b0a9831f086b17469672720c5cb23fc857afd91a61d32291e35aa943f12c04520ca6d295993a89fd513ff35c095afecec821c808a80a5f77386c5697af3162adb39b2d20435eb9431d02aa3b10585ef52c21dafe8834c32310c5de4faca700f97e03d81779decce71b6f70a24add3c43251250c59e0e1c8a1cab40c9191784b732333742585446796f3237390859a97196548d75f7525e948c6c240e185f6631a4af0e7d0944bb5c2c8cebb480d8f0e908424b68978fdfc1675535ef3748f2ac01bea80d4b6d61fabbd68ea7ab5d6e8a87769bae2b4def34031f9329414143763704a39ae0c47e4fec3337f7d590dd0a32f1fd9b8b22abc5d19927a4e5d1d2d00a4a4db6e68d2b05b397fb33af008c1b1ac2feab60d686f3745b1a0441578ddc1b1ff3d142dc588551afcbacb93d80543a97680ee6950519ee3cad11eebb417a13707de42ba60a0b02ebbc92530b6f50fa5c931119a1fad28e0b173c3d6e1c1abe710d911538ab25c556a0294d8f6e0e35d17259902cf56e024a2b59976bc2dcce6a0131070e8670af3f5ce38c0306f361872ba5eb8dbc154c5f8ccedfff8ff91d33a7abee02e36e477aeb60bd51b1bd2c0e81098ec0d9868cefbea4e51d02420e199460eb2e642e2bae5e216d259229d91d30597e446c6f91820c32205ce83d4a0f11c8d528f18435bab24e7950bf6caf72d5940039dd854fbb19aa8019203b18a7dd60e35b38bd519883d159b80050bf015b45be8d9487274648c4d1c2b1754b3a9a400d5a4068092c06c96a2ba8bcb39d17b35cf78458db3e64a955658018b8893e0f7b7bbd69faa0c3aef4a38ec56a0249f86ac9f9f0e5cb3b3af7963c20f97d7b9c7d31e89045001873ee7d3773ca978b6f6538ca8f806f99915551e17ab407670c93192a46adf5a735b495398afe9772aa3c6785bfdd05d60c14eeb0b98e8ea86f03a4d0d918f69b9c273df5bc1af83130e0b126f33326ca9708bd4b2fc00425fae85aa8f4f5fc920982226027555edf326f08b880da6c787739f1dcc55d105f88adc5bddba2c8bc158bcace7e92d785081b33bd7ef15ac9caade081631cbef0dfd9bb960a113b709a827002297e640f74f0c21c9f138788bb1a4b64020f680ea7b21f874f5eb6edf322404c38ebe7e8c58dfd8f44879d55480aaea2e0c05737f777da46718c13353a3a336fb209b525c93126418f032244a880c7739810b7b82f8595ceac87e1feea3a83b257e2f729db7303245dec5f0459cb7b5a5293bd69ce4cbebd1c3e4b1b53ced5a51b121d164da1983318825b0695f0f50f4dfa7c7c9e51467387aa9a982917843faa1622a0c111fe765ee52f33d90a4358b32d288947688bd7ec4ad34f172677cb8001325db527ddc8aa3e2156297444fe2f915790e641f57967bf3650047a40e43e4c89b64a1569da0a3b2e979b151ac3ebb23a83730bfea205f9dcba861c5f9dae719dc77e9fb24223fad0e056b784b3104312c4fba254f0484d71a9f5e0ad753d1f40c18ceb1e8f18d26be80e500b7e9748fcafbeee7f82c4ff3aebcf98ca1a515296ec3831555f962ca6bdb6535a6e8859e616082469e4922786f49e618018339a6bfc77bc191cf6f2cfa6d0adecf9fe917d383636b46c2e89f3286f8473380ef0aa71c5c5d116985ba2f571b94eee5ea5502c91c95e022db94509fb387fba794f4374e6674a375853e6d490c054a4382792be1ef2f98fbb5efda2215741b7224bb897ef7f331b585be464a56907f28088683ef1cf5123759fe5560abfaecefcc60401cc4ec6b4566d964264f32afa73cdf4f8b9efe643f201d7cabed90bd7dee3e36a632531f2d52bc373c344678e5db29798afd847a737208cd9627818ac096f224534035bd4cbb4c6e9e3e7bd72d24e7fc86e52a8fa31e18e8073d91e8a106fcd05cbf2abfd731ec90499b0192e370f4375c6f4c75f71d29d4040265683ecec695b06ca4108f719af420ee9c683279ba912af9744697bace0c3c811f925e4e57a42c634c5f8f3cbdf3b331d2753f86628a2e8a00b42a2ac91dd2fa42801f714ca1a5eb80aed0550fdee89c2ab18ca310872f97b36f6be3a52d10f1473ab8730516e312117577b1b63566d9db2944be0b486e4ad3c4f59a47737337b0f23049e9eb6e08a026aa6d0a67a4700cffbc97843a35213c14e5ff105c05ae932d510966db609b86545282234b1d50231be05066d2ad3effd1d3ca87bdb9a3a10e89090104dc08da0f2e55976b64da676473d60ff0986297cc2940104ca6423cbfbbe5b04caded82cb3365f782a968e9c093c4bf24010c994b0f650d95021f84ec7a0d5d7c1157936ea5941b2f3f7c5da67c6ffb064fe5abb895669c3a523bb5f04a3675c36fdce265c3ce694ef13d490916de195393146b68af82eb7afd3fd3778a68f5260d33d00a26f486947308a12b15ade2ad23fc79d9d158c449c500adadeb2352e802f13982ce98ee0237efc0d713d046888a4e68e45e16f44d2dbe1d5c085f6517a4bb5c3d5abfc99e8f081696dc855ca30803e8d3023ecdaa2b3c6ba494b0ded290b9c4a19a146c69581ae8e6bfca2558ba9034720a426c5560817ba540abd9d5ca9060a5579200d2045a22c9170f8cf021d11b01691cbb08175fc75730e4262cc574dded32f2b4469be8f1d3fc8b353beb9c51c1fb50e2a3704a1657bed1fb5566642bc69dcbac49d948987ac7a376d879a5d206e0ae51b146b1071e3d6e944e568592f863d1c52a68ce02e31522230cb88a6c9583ecb6707c8325ea1003ae6602bdc4329a9c132515fed2b6f88e90418559b9d71740c89aa6d860dff9dc33a309d80d095b7c5ce5386168d027a5b48dd18737d13d8ca52a9347821f156b8472fbc6ade8211c0aa77ef0235ce27ad98391b57f766813cd9c98c19826081926f28e98b2c938121db63645fde857a5380e6a541930953f417d5a9f45a169b4e1087adc05ac33c087c33f4baac0534bf448209e65664f9f158409b54c5302f0fafaf8c207c57e73846f78144f73fec51e6b4e0189b3ec534ec9e53f1642dd536695d761f0b4542eabf003936606a815b4a8845635ff81258965ed7a471173c8b852d143b4f06c7819c69bbe258af44d6f2cb0fe41cc48842e7b7c958dced8d57ed0fa3b559ffb8b7f5fd96653c9aecf37bf72abf8d3a7a83115449adb5cb4460ab19918b86f6b32600806f48eed4ff4e28398b590927fe7a6af10fe51b3069d69145ac3fd0b9f96cb9657dc5098fd2ecf1787572f4d7b0c96f7e74277bdb5d790e6c771cf966afeb830a539fcadd3fab65aef08628411fc5bd2b6e3f3e91bba8d4affa3d6d7d97341796d2b665971a04d6b56d3b053c3380da5814c97b31fb853a9037cdbb016093d948c104c18e86fa3f2fee1a509f43c1daf9be3c8d434cd97bf1512a323d848bca6d4de15c61d02ac21260be3faf6b0740c818f38a6a281eb7f38f4fb8d9191f78db000435e2100c8da23fc552e0d178021165315666f2a6a34918edb84cefcdaca646e697a4a0e116a6d4bfd40f0de2eefa9efbe029b9a249e139e6296af53e20a6ddd1593003b2e74577b2f990dcce3b6c91e12bc4bd44339093bae047445120f6d23d176e539aa11aeb75970e8560748197db6609c9b84c1c55b99c9d99e31acf6ca09704c562926307148e6e733895f191619f67a17adc022fc01bdf06ee184342fb41b8ed0386ec2378504547eadd4c0ef3a7bc506234921f4bbd17fcdef7ca5b4998a2df94bf55e82e343c3d3a5d666144654321f52328ba1aadd1c11e253f599dc10897ccc02032e53486319b617461a7f7f8afe0b170d2bb827bb7e83a3482c4f9be296da1c1dae6b4b2ca715f1430c63565f1bfbb19c2bb1c3919177083565d7042b8d85b8362b32c7d81db6cff97aa146cdb093e8dc5df0417f9cde32830fe666184042b8e4498df3cc28c9cf84a4fe896bb88e0fb81c6b8c1127837f64ee9906f9baf0f4275b07e688a2b08ea4fae2aa4c540a945cf45754fc57b5e0ae6d37653fc44b077dce3f41720ab37647c216bdb64717c24ef8e0b419573b905397f359fb5c9b3675c38e71a5a71e028295d2cab8e7f49322bf3324ab2004f5b1118827aa841dba90513236ee16c5c6cf2d725f51ced013672e295e427c144b1062c22a4ee86a413afe35ccd977e4a937e972e7db16b7cba5d9f62ccba4932332ac63f12fd85951eacd8f7b5fc92404efefef5f54363fed88f95e81446a4ba2118f154bb5f30efaa33135b60fbf4112ec0e4a0bd1b33caacae94f1b0094b48b9e1f40be4969d1b9f4b058f701e3a95fb1cba698f803cf8badefd72f95b3b689dfc8031f9a2482b1fc1d3a7893a148a9c27a54f82163ef927302dfc6e3636d24ed1e653ca86dbe77e05a4558332b475fd06c7fd30f54626e95d064de95541511536d6526f8e4bb7f3d6e81ee710d0e04ae66444f3e3e95a47223c802b6b7b68b26540cb80452f9934a7c202b7ab2682e73778224c33f45e3163a2b1bc51fb3bc80c89dbea58af51094b0050091cbdb2d612a693c31fca89d3d4cbc363bbb0c28d8fc04f1c8037579f33aee5aab698954027d2"}}) 9.295273493s ago: executing program 5 (id=2399): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000007c0)='ns/mnt\x00') fsetxattr$security_evm(r0, &(0x7f0000000800), 0x0, 0x0, 0x3) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000b529708410e42416ed40102030109"], 0x0) capset(&(0x7f0000000480)={0x20080522}, &(0x7f00000004c0)={0x0, 0x9, 0x4, 0x81, 0xffffffff, 0xffffffff}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 7.439771842s ago: executing program 2 (id=2402): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x6, 0x22000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 7.438556832s ago: executing program 7 (id=2403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x814}, 0x0) write(r0, &(0x7f0000000400)="ffffffffffffaabbccddeeff88ca5bf0004cffffff07010000000000000000000001aabbccdd", 0x26) 7.226263934s ago: executing program 7 (id=2404): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000880), 0x10) sendto$l2tp(r0, &(0x7f00000008c0)="e5786a0d0000000000", 0x9, 0x400c0c1, &(0x7f0000000900)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, 0x82004}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000940)=0x803, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x100a2, 0x0, 0x56) 6.314701207s ago: executing program 7 (id=2408): sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 6.298291128s ago: executing program 8 (id=2409): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800)={&(0x7f0000019840)=ANY=[@ANYBLOB="240000003100090027bd70000000000004000000100018"], 0x24}, 0x1, 0x0, 0x0, 0x46854}, 0x4) r3 = getpgrp(0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000198c0)=0x2468) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8108551b, &(0x7f0000019900)) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f00000199c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x81000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000019680)={0x0, 0x0, &(0x7f00000196c0)={&(0x7f0000019700)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d20000060003000015000034000280"], 0xc8}, 0x1, 0x0, 0x0, 0x20000001}, 0x4044800) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='keyring\x00', 0x20080, &(0x7f0000000200)={@_ha_fsid={[0x0, 0x8]}, {0x8, 0x4, 0x1, 0x5}}, 0x100, 0x0, &(0x7f0000000280)=0x8c9}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r7, 0xc1105518, &(0x7f0000000340)={{0x0, 0x5, 0x7fff, 0x7fff, '\x00', 0xca}, 0x2, 0x400, 0x1, r4, 0x1, 0x6, 'syz1\x00', &(0x7f0000000300)=['/dev/cpu/#/msr\x00'], 0xf}) r8 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r8, &(0x7f00000004c0)=""/102392, 0x18ff8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000194c0)={&(0x7f0000019500)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) 6.200370328s ago: executing program 7 (id=2410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000002f00)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000002f40)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000005040)=@svm={0x1a, 0x1, 0x1080, {0x4, 0x6}, {"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"}}) 4.549551166s ago: executing program 8 (id=2411): syz_open_dev$loop(0x0, 0xffff, 0x14f600) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x4, 0x4) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x40, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0], 0x1, 0x1ce, &(0x7f00000024c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000026c0)='./file2\x00', 0x80000, 0x71) 4.478914694s ago: executing program 5 (id=2412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x814}, 0x0) write(r0, &(0x7f0000000400)="ffffffffffffaabbccddeeff88ca5bf0004cffffff07010000000000000000000001aabbccdd", 0x26) 4.371762614s ago: executing program 2 (id=2413): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000240), 0x6, 0x800) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000280)={0x0, 0x5, 0x1, {0x9, @pix={0x84, 0x46e1, 0x20493859, 0x0, 0x7ff, 0x7fff, 0xb, 0xffffff6f, 0x0, 0x6, 0x1, 0x6}}, 0x8}) r2 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000400)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) unshare(0x20040400) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000600)={0x210a}, 0x0) 4.264619665s ago: executing program 7 (id=2414): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000780)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000840)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./dev/ttyUSB0\x00', 0x20000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000008c0)={0x3, 0x8, 0x9, 0x3, 0x6, "959cc289333b0100000007000000000000006a"}) 4.170647475s ago: executing program 5 (id=2415): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f03f455e96a02001fc3fb089ed9e5234", 0x25}], 0x1}}], 0x2, 0x0) 4.037504819s ago: executing program 5 (id=2416): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000880), 0x10) sendto$l2tp(r0, &(0x7f00000008c0)="e5786a0d0000000000", 0x9, 0x400c0c1, &(0x7f0000000900)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, 0x82004}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000940)=0x803, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x100a2, 0x0, 0x56) 3.33239646s ago: executing program 8 (id=2417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000280)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233"], 0x4a) 3.202215904s ago: executing program 8 (id=2418): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_uring_setup(0x5c5f, &(0x7f0000000300)={0x0, 0x982b, 0x1, 0x3, 0x38e}) close(0x3) socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f00000003c0)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r0, 0x10000008) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) close(r1) 3.121755192s ago: executing program 5 (id=2419): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800)={&(0x7f0000019840)=ANY=[@ANYBLOB="240000003100090027bd70000000000004000000100018"], 0x24}, 0x1, 0x0, 0x0, 0x46854}, 0x4) r3 = getpgrp(0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000198c0)=0x2468) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8108551b, &(0x7f0000019900)) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f00000199c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x81000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000019680)={0x0, 0x0, &(0x7f00000196c0)={&(0x7f0000019700)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d20000060003000015000034000280"], 0xc8}, 0x1, 0x0, 0x0, 0x20000001}, 0x4044800) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='keyring\x00', 0x20080, &(0x7f0000000200)={@_ha_fsid={[0x0, 0x8]}, {0x8, 0x4, 0x1, 0x5}}, 0x100, 0x0, &(0x7f0000000280)=0x8c9}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r7, 0xc1105518, &(0x7f0000000340)={{0x0, 0x5, 0x7fff, 0x7fff, '\x00', 0xca}, 0x2, 0x400, 0x1, r4, 0x1, 0x6, 'syz1\x00', &(0x7f0000000300)=['/dev/cpu/#/msr\x00'], 0xf}) r8 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r8, &(0x7f00000004c0)=""/102392, 0x18ff8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000194c0)={&(0x7f0000019500)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e210000060002004e24000008000200e000000234000380060002004e230000060002004e240000060001004e200000060002004e200000060002004e230000060001004e200000140004000000000000000000000000000000000008000200ac1414aa140005000000000000000000000000000000000008000100e000000284000e801400018008"], 0x1e8}}, 0x0) 722.282956ms ago: executing program 5 (id=2420): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000007c0)='ns/mnt\x00') fsetxattr$security_evm(r0, &(0x7f0000000800), 0x0, 0x0, 0x3) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000b529708410e42416ed40102030109"], 0x0) capset(&(0x7f0000000480)={0x20080522}, &(0x7f00000004c0)={0x0, 0x9, 0x4, 0x81, 0xffffffff, 0xffffffff}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 580.002711ms ago: executing program 8 (id=2421): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_ublk_setup_io_uring(0x7501, &(0x7f00000006c0)={0x0, 0xba29, 0x2, 0x2, 0x29c}, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000800)={0x0, 0x1ae7, 0x0, 0x2, 0x151, 0x0, r0}, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000940)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000009c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000a00)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000a40)={0x0, 0x6953, 0x3a, 0x0, 0x36f, 0x0, r0}, &(0x7f0000000ac0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc0d0, 0x800, 0x0, 0x3a6, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3382, 0x10000, 0x2, 0x279}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x1, 0x388, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x121a, 0x2000, 0x2000002, 0x44}}], 0x1, &(0x7f0000000d40)={0x2e, 0x6, 0x4500, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0x82, 0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x3000, 0x1800000, 0x12, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x40000) 552.694524ms ago: executing program 7 (id=2422): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x6, 0x22000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 532.834546ms ago: executing program 2 (id=2423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x0) write(r0, 0x0, 0x0) 0s ago: executing program 8 (id=2425): socket$netlink(0x10, 0x3, 0x14) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ptrace$getregs(0xffffffffffffffff, r1, 0x7, &(0x7f0000000000)=""/100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000300)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453d9f9759e0c09e456844131b87ca896fd8a", 0xd1, 0xffffffffffffffff) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="f9", 0x1, 0xfffffffffffffffe) fanotify_init(0xef0, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000500)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r5 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0007}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000780)={0x20004, r6, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000007c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000800)={r9}) close_range(r4, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) kernel console output (not intermixed with test programs): [ 1248.923755][T11724] usb 8-1: SerialNumber: syz [ 1248.961432][T11724] usb 8-1: config 0 descriptor?? [ 1249.001344][T11724] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found [ 1249.199632][T11724] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected [ 1249.227399][T11724] snd_usb_toneport: probe of 8-1:0.0 failed with error -22 [ 1250.230743][T11724] usb 8-1: USB disconnect, device number 18 [ 1250.357856][ T5868] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1250.558041][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 1250.569968][ T5868] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.604921][ T5868] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1250.640743][ T5868] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1250.668113][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.688070][ T5868] usb 3-1: Product: syz [ 1250.692322][ T5868] usb 3-1: Manufacturer: syz [ 1250.708151][ T5868] usb 3-1: SerialNumber: syz [ 1250.947577][ T5868] usb 3-1: 0:2 : does not exist [ 1250.983219][ T5868] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1251.075091][ T5868] usb 3-1: USB disconnect, device number 35 [ 1251.174560][T13404] udevd[13404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1255.639345][ T9] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1255.727935][ T971] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1255.858025][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1255.865618][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1255.875446][ T9] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1255.895556][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.907962][ T971] usb 6-1: Using ep0 maxpacket: 8 [ 1255.918187][ T9] usb 9-1: Product: syz [ 1255.923038][ T9] usb 9-1: Manufacturer: syz [ 1255.924111][ T971] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1255.938029][ T9] usb 9-1: SerialNumber: syz [ 1255.953319][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.964310][ T9] usb 9-1: config 0 descriptor?? [ 1255.978843][ T971] usb 6-1: Product: syz [ 1255.979921][ T9] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found [ 1255.992562][ T971] usb 6-1: Manufacturer: syz [ 1256.007479][ T971] usb 6-1: SerialNumber: syz [ 1256.021332][ T971] usb 6-1: config 0 descriptor?? [ 1256.188531][ T9] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected [ 1256.209904][ T9] snd_usb_toneport: probe of 9-1:0.0 failed with error -22 [ 1256.269892][ T971] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1256.405400][T12079] usb 9-1: USB disconnect, device number 28 [ 1256.578056][ T5868] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1256.757784][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 1256.765853][ T5868] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1256.774349][ T5868] usb 3-1: config 0 has no interface number 0 [ 1256.787000][ T5868] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1259.035290][ T971] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1259.059941][ T5868] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1259.078125][ T971] usb 6-1: USB disconnect, device number 22 [ 1259.093297][ T5868] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1259.126387][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.165252][ T5868] usb 3-1: Product: syz [ 1259.169651][ T5868] usb 3-1: Manufacturer: syz [ 1259.174316][ T5868] usb 3-1: SerialNumber: syz [ 1259.203753][ T5868] usb 3-1: config 0 descriptor?? [ 1259.216153][T13785] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1259.223790][T13785] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1259.280137][T13802] device-mapper: table: 248:2: integrity: Device lookup failed (-ENOENT) [ 1259.293302][T13802] device-mapper: ioctl: error adding target to table [ 1259.397982][ T5868] asix: probe of 3-1:0.251 failed with error -71 [ 1259.460563][ T5868] usb 3-1: USB disconnect, device number 36 [ 1259.967914][ T5868] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1260.166736][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 1260.186870][ T5868] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1260.208198][ T5868] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1260.237774][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1260.262038][ T5868] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1260.275814][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.300524][ T5868] usb 3-1: Product: syz [ 1260.309109][ T5868] usb 3-1: Manufacturer: syz [ 1260.313792][ T5868] usb 3-1: SerialNumber: syz [ 1260.327190][ T5868] usb 3-1: config 0 descriptor?? [ 1260.406041][T13819] Bluetooth: MGMT ver 1.22 [ 1262.678037][ T5096] Bluetooth: hci0: command 0x0406 tx timeout [ 1262.723116][ T5868] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1262.754540][ T5868] imon 3-1:0.0: unable to initialize intf0, err -19 [ 1262.775298][ T5868] imon:imon_probe: failed to initialize context! [ 1262.792488][ T5868] imon 3-1:0.0: unable to register, err -19 [ 1262.822477][ T5868] usb 3-1: USB disconnect, device number 37 [ 1265.620873][ T5096] Bluetooth: hci0: command 0x0406 tx timeout [ 1265.987961][T12079] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1266.188286][T12079] usb 9-1: Using ep0 maxpacket: 8 [ 1266.200311][T12079] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1266.224793][T12079] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1266.248041][T11724] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1266.253577][T12079] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.276440][T12079] usb 9-1: Product: syz [ 1266.284102][T12079] usb 9-1: Manufacturer: syz [ 1266.297873][T12079] usb 9-1: SerialNumber: syz [ 1266.306668][T12079] usb 9-1: config 0 descriptor?? [ 1266.326304][T12079] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found [ 1266.457931][T11724] usb 8-1: Using ep0 maxpacket: 16 [ 1266.473235][T11724] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1266.497698][T11724] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1266.507413][T11724] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1266.530877][T11724] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1266.533317][T12079] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected [ 1266.548165][T11724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.556303][T11724] usb 8-1: Product: syz [ 1266.591039][T11724] usb 8-1: Manufacturer: syz [ 1266.595733][T11724] usb 8-1: SerialNumber: syz [ 1266.600038][T12079] snd_usb_toneport: probe of 9-1:0.0 failed with error -22 [ 1266.634288][T11724] usb 8-1: config 0 descriptor?? [ 1266.735766][T12079] usb 9-1: USB disconnect, device number 29 [ 1266.863625][T11724] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1266.873526][T11724] imon 8-1:0.0: unable to initialize intf0, err -19 [ 1266.882668][T11724] imon:imon_probe: failed to initialize context! [ 1266.891618][T11724] imon 8-1:0.0: unable to register, err -19 [ 1266.903441][T11724] usb 8-1: USB disconnect, device number 19 [ 1267.047942][ T5886] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1267.234082][ T5886] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1267.247221][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.257732][ T5886] usb 6-1: Product: syz [ 1267.262055][ T5886] usb 6-1: Manufacturer: syz [ 1267.266738][ T5886] usb 6-1: SerialNumber: syz [ 1269.738338][ T5096] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1269.938129][ T5886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1269.970477][ T5886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1270.005617][ T5886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1270.037379][ T5886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1270.099028][ T5886] lan78xx: probe of 6-1:1.0 failed with error -71 [ 1270.139117][ T5886] usb 6-1: USB disconnect, device number 23 [ 1270.558419][ T57] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1272.417820][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 1272.425331][ T57] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1272.440773][ T57] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1272.458358][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1272.478321][ T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.486547][ T57] usb 9-1: Product: syz [ 1272.507970][ T57] usb 9-1: Manufacturer: syz [ 1272.513332][ T57] usb 9-1: SerialNumber: syz [ 1272.529090][ T57] usb 9-1: config 0 descriptor?? [ 1272.580176][ T57] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found [ 1272.680964][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1272.692378][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1272.706944][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1272.722512][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1272.736441][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1272.746013][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.764958][ T57] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected [ 1272.773044][ T9] usb 3-1: Product: syz [ 1272.777276][ T9] usb 3-1: Manufacturer: syz [ 1272.786382][ T57] snd_usb_toneport: probe of 9-1:0.0 failed with error -22 [ 1272.794061][ T9] usb 3-1: SerialNumber: syz [ 1272.804817][ T9] usb 3-1: config 0 descriptor?? [ 1272.979868][T11724] usb 9-1: USB disconnect, device number 30 [ 1273.032939][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1273.048194][ T9] imon 3-1:0.0: unable to initialize intf0, err -19 [ 1273.054957][ T9] imon:imon_probe: failed to initialize context! [ 1273.061851][ T9] imon 3-1:0.0: unable to register, err -19 [ 1273.079837][ T9] usb 3-1: USB disconnect, device number 38 [ 1273.675973][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1273.892629][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.927321][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1273.967884][ T9] usb 8-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1273.992086][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.877855][T12079] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1276.948099][ T5886] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1277.067892][T12079] usb 3-1: Using ep0 maxpacket: 8 [ 1277.077258][T12079] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1277.090058][T12079] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1277.099521][T12079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.114721][T12079] usb 3-1: Product: syz [ 1277.121932][T12079] usb 3-1: Manufacturer: syz [ 1277.126590][T12079] usb 3-1: SerialNumber: syz [ 1277.147934][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 1277.157642][T12079] usb 3-1: config 0 descriptor?? [ 1277.166403][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1277.187069][T12079] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1277.194042][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1277.204121][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1277.214195][ T5886] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1277.219178][ T57] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1277.235095][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.246541][ T5886] usb 6-1: Product: syz [ 1277.251212][ T5886] usb 6-1: Manufacturer: syz [ 1277.255970][ T5886] usb 6-1: SerialNumber: syz [ 1277.274224][ T5886] usb 6-1: config 0 descriptor?? [ 1277.399300][ T9] usb 8-1: USB disconnect, device number 20 [ 1277.447791][ T57] usb 9-1: Using ep0 maxpacket: 16 [ 1277.455317][T12079] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1277.467507][ T57] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1277.486988][T12079] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 1277.504379][ T57] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1277.516991][ T57] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1277.526961][ T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.537562][ T57] usb 9-1: Product: syz [ 1277.541901][ T57] usb 9-1: Manufacturer: syz [ 1277.547119][ T57] usb 9-1: SerialNumber: syz [ 1277.562772][ T5886] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1277.576340][ T5886] imon 6-1:0.0: unable to initialize intf0, err -19 [ 1277.584158][ T57] usb 9-1: config 0 descriptor?? [ 1277.585216][ T5886] imon:imon_probe: failed to initialize context! [ 1277.606595][ T5886] imon 6-1:0.0: unable to register, err -19 [ 1277.631454][ T5886] usb 6-1: USB disconnect, device number 24 [ 1277.655631][T12079] usb 3-1: USB disconnect, device number 39 [ 1277.835542][ T57] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input6 [ 1280.057002][ T57] rc_core: IR keymap rc-imon-pad not found [ 1280.063479][ T57] Registered IR keymap rc-empty [ 1280.068903][ T57] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1280.079623][ T57] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1280.163663][ C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1280.188163][ T57] imon:send_packet: packet tx failed (-71) [ 1280.237980][ T57] imon 9-1:0.0: remote input dev register failed [ 1280.244530][ T57] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 1280.335618][ T57] imon 9-1:0.0: unable to initialize intf0, err 0 [ 1280.357911][ T57] imon:imon_probe: failed to initialize context! [ 1280.364332][ T57] imon 9-1:0.0: unable to register, err -19 [ 1280.429258][ T57] usb 9-1: USB disconnect, device number 31 [ 1280.556346][T13962] fuse: Bad value for 'fd' [ 1281.188068][T11724] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1281.360325][T11724] usb 3-1: device descriptor read/64, error -71 [ 1281.627793][T11724] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1281.654578][T12079] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1281.779044][T11724] usb 3-1: device descriptor read/64, error -71 [ 1281.880656][T12079] usb 6-1: Using ep0 maxpacket: 8 [ 1281.908676][T11724] usb usb3-port1: attempt power cycle [ 1281.914640][T12079] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1281.930197][T12079] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1281.957716][T12079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.965786][T12079] usb 6-1: Product: syz [ 1281.978129][T12079] usb 6-1: Manufacturer: syz [ 1281.982787][T12079] usb 6-1: SerialNumber: syz [ 1281.999270][T12079] usb 6-1: config 0 descriptor?? [ 1282.016698][T12079] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 1282.167908][ T57] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1282.228174][T12079] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 1282.260914][T12079] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 1282.317829][T11724] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1282.353344][T11724] usb 3-1: device descriptor read/8, error -71 [ 1282.368474][ T57] usb 8-1: Using ep0 maxpacket: 16 [ 1282.382977][ T57] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.398955][ T57] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1282.413714][ T57] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1282.436227][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.445460][ T57] usb 8-1: Product: syz [ 1282.451299][ T971] usb 6-1: USB disconnect, device number 25 [ 1282.457604][ T57] usb 8-1: Manufacturer: syz [ 1282.468837][ T57] usb 8-1: SerialNumber: syz [ 1282.552579][T14002] loop2: detected capacity change from 0 to 8 [ 1282.562759][T14002] Dev loop2: unable to read RDB block 8 [ 1282.568625][T14002] loop2: unable to read partition table [ 1282.574777][T14002] loop2: partition table beyond EOD, truncated [ 1282.585270][T14002] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5) [ 1282.627949][T11724] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1282.679738][T11724] usb 3-1: device descriptor read/8, error -71 [ 1282.726647][ T57] usb 8-1: 0:2 : does not exist [ 1282.742101][ T57] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1282.783784][ T57] usb 8-1: USB disconnect, device number 21 [ 1282.801225][T11724] usb usb3-port1: unable to enumerate USB device [ 1282.842632][T13404] udevd[13404]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1283.384766][ T52] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 1283.418890][T14023] FAULT_INJECTION: forcing a failure. [ 1283.418890][T14023] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1283.432045][T14023] CPU: 1 PID: 14023 Comm: syz.7.1898 Not tainted syzkaller #0 [ 1283.439575][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1283.449674][T14023] Call Trace: [ 1283.452999][T14023] [ 1283.455973][T14023] dump_stack_lvl+0x18c/0x250 [ 1283.460744][T14023] ? show_regs_print_info+0x20/0x20 [ 1283.466005][T14023] ? load_image+0x420/0x420 [ 1283.470570][T14023] ? kasan_quarantine_put+0xd8/0x220 [ 1283.475924][T14023] ? lockdep_hardirqs_on+0x98/0x150 [ 1283.481188][T14023] should_fail_ex+0x394/0x4c0 [ 1283.485944][T14023] get_futex_key+0x134/0xf40 [ 1283.490623][T14023] ? futex_setup_timer+0xc0/0xc0 [ 1283.495608][T14023] ? kvm_dev_ioctl_get_cpuid+0x36b/0x790 [ 1283.501422][T14023] futex_wake+0x127/0x4f0 [ 1283.505809][T14023] ? futex_wake_mark+0x150/0x150 [ 1283.510807][T14023] ? kvm_arch_dev_ioctl+0x3f1/0x8b0 [ 1283.516145][T14023] do_futex+0x35d/0x3e0 [ 1283.520356][T14023] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1283.526361][T14023] __se_sys_futex+0x3a9/0x440 [ 1283.531103][T14023] ? __x64_sys_futex+0xf0/0xf0 [ 1283.535921][T14023] ? __x64_sys_futex+0x21/0xf0 [ 1283.540736][T14023] do_syscall_64+0x55/0xb0 [ 1283.545211][T14023] ? clear_bhb_loop+0x40/0x90 [ 1283.549948][T14023] ? clear_bhb_loop+0x40/0x90 [ 1283.554713][T14023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1283.560667][T14023] RIP: 0033:0x7f7e549a8fd9 [ 1283.565134][T14023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.584788][T14023] RSP: 002b:00007f7e557e30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1283.593262][T14023] RAX: ffffffffffffffda RBX: 00007f7e54c25fa8 RCX: 00007f7e549a8fd9 [ 1283.601281][T14023] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e54c25fac [ 1283.609301][T14023] RBP: 00007f7e54c25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1283.617326][T14023] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1283.625342][T14023] R13: 00007f7e54c26038 R14: 00007ffd47223960 R15: 00007ffd47223a48 [ 1283.633390][T14023] [ 1284.323426][T14039] tipc: Started in network mode [ 1284.331874][T14039] tipc: Node identity 06976f3c03ba, cluster identity 4711 [ 1284.362945][T14039] tipc: Enabled bearer , priority 10 [ 1284.467191][T14038] tipc: Resetting bearer [ 1284.487758][ T971] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1284.537034][T14038] tipc: Disabling bearer [ 1284.678156][ T971] usb 8-1: Using ep0 maxpacket: 8 [ 1284.694610][ T971] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1284.725873][ T971] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1284.751721][ T971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.776188][ T971] usb 8-1: Product: syz [ 1284.787231][ T971] usb 8-1: Manufacturer: syz [ 1284.800419][ T971] usb 8-1: SerialNumber: syz [ 1284.829695][ T971] usb 8-1: config 0 descriptor?? [ 1284.843963][ T971] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found [ 1284.997050][T14052] FAULT_INJECTION: forcing a failure. [ 1284.997050][T14052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1285.066900][T14052] CPU: 0 PID: 14052 Comm: syz.5.1909 Not tainted syzkaller #0 [ 1285.074433][T14052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1285.084535][T14052] Call Trace: [ 1285.087866][T14052] [ 1285.090839][T14052] dump_stack_lvl+0x18c/0x250 [ 1285.095595][T14052] ? show_regs_print_info+0x20/0x20 [ 1285.100859][T14052] ? load_image+0x420/0x420 [ 1285.105422][T14052] ? __lock_acquire+0x7eb0/0x7eb0 [ 1285.110504][T14052] ? __kasan_slab_alloc+0x6c/0x80 [ 1285.115594][T14052] should_fail_ex+0x394/0x4c0 [ 1285.120340][T14052] strncpy_from_user+0x36/0x2f0 [ 1285.125267][T14052] getname_flags+0xf6/0x500 [ 1285.129846][T14052] user_path_at_empty+0x2c/0x60 [ 1285.134767][T14052] path_setxattr+0x253/0x590 [ 1285.139426][T14052] ? simple_xattrs_free+0x150/0x150 [ 1285.144791][T14052] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1285.150844][T14052] ? lock_chain_count+0x20/0x20 [ 1285.155768][T14052] __x64_sys_setxattr+0xbb/0xd0 [ 1285.160685][T14052] do_syscall_64+0x55/0xb0 [ 1285.165180][T14052] ? clear_bhb_loop+0x40/0x90 [ 1285.169995][T14052] ? clear_bhb_loop+0x40/0x90 [ 1285.174749][T14052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1285.180707][T14052] RIP: 0033:0x7fe1673a8fd9 [ 1285.185322][T14052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.204985][T14052] RSP: 002b:00007fe1681e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1285.213463][T14052] RAX: ffffffffffffffda RBX: 00007fe167625fa0 RCX: 00007fe1673a8fd9 [ 1285.221601][T14052] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 1285.229635][T14052] RBP: 00007fe167437fed R08: 0000000000000001 R09: 0000000000000000 [ 1285.237667][T14052] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1285.245696][T14052] R13: 00007fe167626038 R14: 00007fe167625fa0 R15: 00007fff02932b38 [ 1285.253764][T14052] [ 1285.270938][ T971] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected [ 1285.287235][ T971] snd_usb_toneport: probe of 8-1:0.0 failed with error -22 [ 1285.367766][ T9616] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1285.473573][ T5886] usb 8-1: USB disconnect, device number 22 [ 1285.541131][ T52] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 1285.577877][ T9616] usb 9-1: Using ep0 maxpacket: 32 [ 1285.588318][ T57] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1285.597474][ T9616] usb 9-1: config 0 has no interfaces? [ 1285.615252][ T9616] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1285.625792][ T9616] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.634032][ T9616] usb 9-1: Product: syz [ 1285.640667][ T9616] usb 9-1: Manufacturer: syz [ 1285.645326][ T9616] usb 9-1: SerialNumber: syz [ 1285.659123][ T9616] usb 9-1: config 0 descriptor?? [ 1285.773945][ T57] usb 3-1: no configurations [ 1285.779225][ T57] usb 3-1: can't read configurations, error -22 [ 1285.876993][T14057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.889008][T14057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.927832][ T57] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1286.138451][ T57] usb 3-1: no configurations [ 1286.143142][ T57] usb 3-1: can't read configurations, error -22 [ 1286.175687][ T57] usb usb3-port1: attempt power cycle [ 1286.599188][ T57] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1286.643820][ T57] usb 3-1: no configurations [ 1286.655458][ T57] usb 3-1: can't read configurations, error -22 [ 1286.693225][T14105] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1922'. [ 1286.850097][ T52] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 1286.907934][ T57] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1286.952647][ T57] usb 3-1: no configurations [ 1286.962215][ T57] usb 3-1: can't read configurations, error -22 [ 1286.976816][ T57] usb usb3-port1: unable to enumerate USB device [ 1287.469663][ T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1287.478701][ T52] Bluetooth: hci0: Injecting HCI hardware error event [ 1287.488047][ T52] Bluetooth: hci0: hardware error 0x00 [ 1288.089066][ T57] usb 9-1: USB disconnect, device number 32 [ 1289.644307][T13876] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1289.654566][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1289.661132][T13876] Bluetooth: hci2: Injecting HCI hardware error event [ 1289.674873][ T52] Bluetooth: hci2: hardware error 0x00 [ 1289.860001][ T8] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1290.068086][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1290.082791][ T8] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1290.103526][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.118028][ T8] usb 3-1: Product: syz [ 1290.122462][ T8] usb 3-1: Manufacturer: syz [ 1290.128770][ T8] usb 3-1: SerialNumber: syz [ 1290.387763][ T5886] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1290.523774][T14143] sg_write: data in/out 409564/136 bytes for SCSI command 0x0-- guessing data in; [ 1290.523774][T14143] program syz.7.1938 not setting count and/or reply_len properly [ 1290.588514][ T5886] usb 9-1: no configurations [ 1290.593198][ T5886] usb 9-1: can't read configurations, error -22 [ 1290.644248][T14146] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1933'. [ 1291.258137][ T57] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1291.535105][ T57] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.572291][ T57] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1291.597843][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.616756][ T57] usb 8-1: Product: syz [ 1291.628617][ T57] usb 8-1: Manufacturer: syz [ 1291.654424][ T57] usb 8-1: SerialNumber: syz [ 1291.684603][ T5886] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1293.598328][ T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1293.747960][ T8] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 1293.874578][ T57] cdc_ncm 8-1:1.0: bind() failure [ 1293.896511][ T8] usb 3-1: USB disconnect, device number 48 [ 1293.914412][ T5886] usb 9-1: device not accepting address 34, error -71 [ 1293.921729][ T57] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1293.921777][ T57] cdc_ncm 8-1:1.1: bind() failure [ 1293.953611][ T57] usb 8-1: USB disconnect, device number 23 [ 1293.973404][ T5886] usb usb9-port1: attempt power cycle [ 1294.117410][T13876] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 1294.758863][T14174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1949'. [ 1297.388699][ T5886] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1297.458432][ T5886] usb 9-1: Using ep0 maxpacket: 32 [ 1297.470122][ T5886] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1297.488328][ T5886] usb 9-1: config 0 has no interface number 0 [ 1297.502733][ T5886] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1298.587112][T13876] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1298.597389][T13876] Bluetooth: hci3: Injecting HCI hardware error event [ 1298.606803][T13876] Bluetooth: hci3: hardware error 0x00 [ 1298.659367][ T5886] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1298.898346][ T5886] usb 9-1: string descriptor 0 read error: -71 [ 1298.905103][ T5886] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1298.927740][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.964569][ T5886] usb 9-1: config 0 descriptor?? [ 1298.980193][ T5886] usb 9-1: can't set config #0, error -71 [ 1299.012247][ T5886] usb 9-1: USB disconnect, device number 35 [ 1301.927894][T13876] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1301.970404][T14215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1962'. [ 1302.417953][ T8] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1303.305831][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.372984][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1303.438687][ T8] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1303.446415][ T8] usb 6-1: can't read configurations, error -71 [ 1305.606223][T14246] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1974'. [ 1307.628586][T14256] FAULT_INJECTION: forcing a failure. [ 1307.628586][T14256] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1307.694494][T14256] CPU: 1 PID: 14256 Comm: syz.8.1976 Not tainted syzkaller #0 [ 1307.702065][T14256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1307.712186][T14256] Call Trace: [ 1307.715513][T14256] [ 1307.718495][T14256] dump_stack_lvl+0x18c/0x250 [ 1307.723251][T14256] ? show_regs_print_info+0x20/0x20 [ 1307.728601][T14256] ? load_image+0x420/0x420 [ 1307.733186][T14256] should_fail_ex+0x394/0x4c0 [ 1307.737944][T14256] get_futex_key+0x134/0xf40 [ 1307.742601][T14256] ? futex_setup_timer+0xc0/0xc0 [ 1307.747589][T14256] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1307.753625][T14256] ? __lock_acquire+0x7eb0/0x7eb0 [ 1307.758707][T14256] ? preempt_schedule+0xc0/0xd0 [ 1307.763707][T14256] futex_wait_setup+0xbc/0x270 [ 1307.768530][T14256] ? futex_wait_multiple+0x970/0x970 [ 1307.773875][T14256] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1307.779831][T14256] ? _raw_spin_unlock+0x40/0x40 [ 1307.784742][T14256] futex_wait+0x1cf/0x640 [ 1307.789281][T14256] ? futex_wait_setup+0x270/0x270 [ 1307.794417][T14256] do_futex+0x2ff/0x3e0 [ 1307.798640][T14256] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1307.804609][T14256] __se_sys_futex+0x3a9/0x440 [ 1307.809395][T14256] ? __x64_sys_futex+0xf0/0xf0 [ 1307.814231][T14256] ? __x64_sys_futex+0x21/0xf0 [ 1307.819060][T14256] do_syscall_64+0x55/0xb0 [ 1307.823548][T14256] ? clear_bhb_loop+0x40/0x90 [ 1307.828291][T14256] ? clear_bhb_loop+0x40/0x90 [ 1307.833037][T14256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1307.839006][T14256] RIP: 0033:0x7fb40b9a8fd9 [ 1307.843635][T14256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.863308][T14256] RSP: 002b:00007fb40c8760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1307.871793][T14256] RAX: ffffffffffffffda RBX: 00007fb40bc25fa8 RCX: 00007fb40b9a8fd9 [ 1307.879899][T14256] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb40bc25fa8 [ 1307.887920][T14256] RBP: 00007fb40bc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1307.895938][T14256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.903970][T14256] R13: 00007fb40bc26038 R14: 00007ffdd1ae5f50 R15: 00007ffdd1ae6038 [ 1307.912032][T14256] [ 1312.523770][T14282] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1985'. [ 1314.349523][T14292] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 1314.359136][T14292] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 1318.773384][T14312] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1994'. [ 1320.098704][T12079] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1320.310167][T12079] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.337112][T12079] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1320.389380][T12079] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1320.407035][T12079] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.440203][T12079] usb 8-1: Product: syz [ 1320.456173][T12079] usb 8-1: Manufacturer: syz [ 1320.486518][T12079] usb 8-1: SerialNumber: syz [ 1320.540242][T12079] usb 8-1: config 0 descriptor?? [ 1321.009887][ T27] audit: type=1326 audit(1794485387.631:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14330 comm="syz.5.1992" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1673a8fd9 code=0x7ffc0000 [ 1321.035614][ T27] audit: type=1326 audit(1794485387.631:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14330 comm="syz.5.1992" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1673a8fd9 code=0x7ffc0000 [ 1321.062667][ T27] audit: type=1326 audit(1794485387.631:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14330 comm="syz.5.1992" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe1673a8fd9 code=0x7ffc0000 [ 1321.090324][ T27] audit: type=1326 audit(1794485387.631:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14330 comm="syz.5.1992" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1673a8fd9 code=0x7ffc0000 [ 1321.117994][ T27] audit: type=1326 audit(1794485387.631:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14330 comm="syz.5.1992" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe1673a8fd9 code=0x7ffc0000 [ 1321.143771][ T27] audit: type=1326 audit(1794485387.631:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14330 comm="syz.5.1992" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1673a8fd9 code=0x7ffc0000 [ 1321.177832][ T27] audit: type=1326 audit(1794485387.631:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14330 comm="syz.5.1992" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1673a8fd9 code=0x7ffc0000 [ 1321.202349][ T27] audit: type=1326 audit(1794485387.631:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14330 comm="syz.5.1992" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe1673a8fd9 code=0x7ffc0000 [ 1321.227088][ T27] audit: type=1326 audit(1794485387.631:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14330 comm="syz.5.1992" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1673a8fd9 code=0x7ffc0000 [ 1321.268002][ T57] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1323.016730][ T5886] usb 8-1: USB disconnect, device number 24 [ 1323.034712][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 1323.068255][ T57] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1323.087798][ T57] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.138201][ T57] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1323.147333][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.471686][T14345] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2004'. [ 1323.547902][ T5886] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1324.235554][T14358] FAULT_INJECTION: forcing a failure. [ 1324.235554][T14358] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1324.258113][T14358] CPU: 0 PID: 14358 Comm: syz.5.2007 Not tainted syzkaller #0 [ 1324.265753][T14358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1324.275853][T14358] Call Trace: [ 1324.279214][T14358] [ 1324.282200][T14358] dump_stack_lvl+0x18c/0x250 [ 1324.286952][T14358] ? show_regs_print_info+0x20/0x20 [ 1324.292225][T14358] ? load_image+0x420/0x420 [ 1324.296873][T14358] should_fail_ex+0x394/0x4c0 [ 1324.301617][T14358] get_futex_key+0x134/0xf40 [ 1324.306273][T14358] ? futex_setup_timer+0xc0/0xc0 [ 1324.311257][T14358] ? set_fd_set+0x4a/0x90 [ 1324.315664][T14358] ? core_sys_select+0x973/0xa80 [ 1324.320675][T14358] futex_wake+0x127/0x4f0 [ 1324.325081][T14358] ? futex_wake_mark+0x150/0x150 [ 1324.330104][T14358] ? __asan_memset+0x22/0x40 [ 1324.334752][T14358] ? poll_select_finish+0x52d/0x650 [ 1324.340023][T14358] do_futex+0x35d/0x3e0 [ 1324.344287][T14358] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1324.350250][T14358] __se_sys_futex+0x3a9/0x440 [ 1324.355010][T14358] ? __x64_sys_futex+0xf0/0xf0 [ 1324.359836][T14358] ? __x64_sys_futex+0x21/0xf0 [ 1324.364651][T14358] do_syscall_64+0x55/0xb0 [ 1324.369147][T14358] ? clear_bhb_loop+0x40/0x90 [ 1324.373886][T14358] ? clear_bhb_loop+0x40/0x90 [ 1324.378718][T14358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1324.384671][T14358] RIP: 0033:0x7fe1673a8fd9 [ 1324.389135][T14358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.408812][T14358] RSP: 002b:00007fe1681e10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1324.417296][T14358] RAX: ffffffffffffffda RBX: 00007fe167625fa8 RCX: 00007fe1673a8fd9 [ 1324.425328][T14358] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe167625fac [ 1324.433396][T14358] RBP: 00007fe167625fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1324.441459][T14358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.449490][T14358] R13: 00007fe167626038 R14: 00007fff02932a50 R15: 00007fff02932b38 [ 1324.457567][T14358] [ 1325.165550][T11724] usb 9-1: USB disconnect, device number 36 [ 1325.450564][ T5886] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.477671][ T27] audit: type=1807 audit(1794485392.091:50): action=measure func=FILE_CHECK UNKNOWN=obj_type res=0 [ 1325.477836][ T5886] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1325.509259][T14366] ima: policy update failed [ 1325.517763][ T5886] usb 8-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1325.526869][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.001413][T14362] loop2: detected capacity change from 0 to 65536 [ 1326.064099][T14362] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1326.200380][T14362] XFS (loop2): Ending clean mount [ 1326.221579][T14362] XFS (loop2): Quotacheck needed: Please wait. [ 1326.380263][T14362] XFS (loop2): Quotacheck: Done. [ 1326.515317][ T5797] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1327.048184][ T5886] usb 8-1: USB disconnect, device number 25 [ 1327.092130][ T11] rtsx_usb_ms rtsx_usb_ms.2.auto: Runtime PM usage count underflow! [ 1327.248923][ T57] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1327.298358][T14396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2016'. [ 1327.359809][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1327.359848][ T27] audit: type=1807 audit(1794485393.981:53): action=measure func=FILE_CHECK UNKNOWN=obj_type res=0 [ 1327.364333][T14397] ima: policy update failed [ 1327.366300][ T27] audit: type=1802 audit(1794485393.981:54): pid=14398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.2020" res=0 errno=0 [ 1327.541487][ T27] audit: type=1802 audit(1794485394.001:55): pid=14397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2020" res=0 errno=0 [ 1327.581824][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 1327.606113][ T57] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1327.642404][ T57] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.698822][ T57] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1327.756942][ T57] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1327.803497][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.842912][ T57] usbtmc 9-1:16.0: bulk endpoints not found [ 1329.764470][ T27] audit: type=1807 audit(1794485396.381:56): action=measure func=FILE_CHECK UNKNOWN=obj_type res=0 [ 1329.775224][T14432] ima: policy update failed [ 1329.845034][ T27] audit: type=1802 audit(1794485396.381:57): pid=14433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2029" res=0 errno=0 [ 1329.863471][ T27] audit: type=1802 audit(1794485396.391:58): pid=14432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2029" res=0 errno=0 [ 1330.000495][ T971] usb 9-1: USB disconnect, device number 37 [ 1330.133147][T14438] fuse: Bad value for 'fd' [ 1330.381294][T14425] loop5: detected capacity change from 0 to 32768 [ 1330.424065][T14425] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1330.445429][T14449] FAULT_INJECTION: forcing a failure. [ 1330.445429][T14449] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1330.465879][T14449] CPU: 1 PID: 14449 Comm: syz.8.2036 Not tainted syzkaller #0 [ 1330.473464][T14449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1330.483576][T14449] Call Trace: [ 1330.486900][T14449] [ 1330.489879][T14449] dump_stack_lvl+0x18c/0x250 [ 1330.494639][T14449] ? show_regs_print_info+0x20/0x20 [ 1330.499903][T14449] ? load_image+0x420/0x420 [ 1330.504519][T14449] ? __lock_acquire+0x1431/0x7eb0 [ 1330.509624][T14449] should_fail_ex+0x394/0x4c0 [ 1330.514376][T14449] get_futex_key+0x134/0xf40 [ 1330.519056][T14449] ? futex_setup_timer+0xc0/0xc0 [ 1330.524100][T14449] futex_wake+0x127/0x4f0 [ 1330.528510][T14449] ? futex_wake_mark+0x150/0x150 [ 1330.533577][T14449] do_futex+0x35d/0x3e0 [ 1330.537808][T14449] ? __might_fault+0xaa/0x120 [ 1330.542569][T14449] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1330.548553][T14449] ? __might_fault+0xc6/0x120 [ 1330.553261][T14449] mm_release+0x184/0x3a0 [ 1330.557648][T14449] ? exit_mm_release+0x30/0x30 [ 1330.562466][T14449] ? lockdep_hardirqs_on+0x98/0x150 [ 1330.567738][T14449] exit_mm+0xa4/0x340 [ 1330.571814][T14449] ? sysctl_delayacct+0x220/0x220 [ 1330.576967][T14449] ? do_exit+0x2530/0x2530 [ 1330.581517][T14449] ? tty_audit_exit+0x14d/0x1f0 [ 1330.586564][T14449] do_exit+0x909/0x2530 [ 1330.590831][T14449] ? put_task_struct+0xc0/0xc0 [ 1330.595679][T14449] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1330.601730][T14449] ? get_signal+0x100e/0x1390 [ 1330.606559][T14449] ? lock_chain_count+0x20/0x20 [ 1330.611491][T14449] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1330.616598][T14449] do_group_exit+0x22d/0x2f0 [ 1330.621257][T14449] ? lockdep_hardirqs_on+0x98/0x150 [ 1330.626529][T14449] get_signal+0x12a6/0x1390 [ 1330.631109][T14449] ? fd_install+0x60/0x4e0 [ 1330.635609][T14449] arch_do_signal_or_restart+0xc2/0x7b0 [ 1330.641233][T14449] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1330.647193][T14449] ? get_sigframe_size+0x20/0x20 [ 1330.652233][T14449] ? exit_to_user_mode_loop+0x3b/0x110 [ 1330.657776][T14449] exit_to_user_mode_loop+0x70/0x110 [ 1330.663141][T14449] exit_to_user_mode_prepare+0xee/0x180 [ 1330.668767][T14449] syscall_exit_to_user_mode+0x1a/0x50 [ 1330.674296][T14449] do_syscall_64+0x61/0xb0 [ 1330.678781][T14449] ? clear_bhb_loop+0x40/0x90 [ 1330.683527][T14449] ? clear_bhb_loop+0x40/0x90 [ 1330.688291][T14449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1330.694257][T14449] RIP: 0033:0x7fb40b9a8fd9 [ 1330.698758][T14449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.718505][T14449] RSP: 002b:00007fb40c8760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1330.727017][T14449] RAX: 0000000000000001 RBX: 00007fb40bc25fa8 RCX: 00007fb40b9a8fd9 [ 1330.735088][T14449] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb40bc25fac [ 1330.743203][T14449] RBP: 00007fb40bc25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1330.751238][T14449] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1330.759276][T14449] R13: 00007fb40bc26038 R14: 00007ffdd1ae5f50 R15: 00007ffdd1ae6038 [ 1330.767335][T14449] [ 1330.957185][T14425] XFS (loop5): Ending clean mount [ 1330.982922][T14425] XFS (loop5): Quotacheck needed: Please wait. [ 1331.101185][T14425] XFS (loop5): Quotacheck: Done. [ 1331.169210][T14467] ima: policy update failed [ 1331.183289][ T27] audit: type=1807 audit(1794485397.791:59): action=measure func=FILE_CHECK UNKNOWN=obj_type= res=0 [ 1331.227949][ T27] audit: type=1802 audit(1794485397.791:60): pid=14468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.8.2038" res=0 errno=0 [ 1331.282790][ T27] audit: type=1802 audit(1794485397.791:61): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2038" res=0 errno=0 [ 1331.637067][T14479] fuse: Bad value for 'fd' [ 1331.916093][ T971] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1332.323049][ T971] usb 9-1: Using ep0 maxpacket: 8 [ 1332.333204][ T971] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1332.349665][ T971] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.371050][T14486] FAULT_INJECTION: forcing a failure. [ 1332.371050][T14486] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1332.384233][ T971] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1332.389168][T14486] CPU: 0 PID: 14486 Comm: syz.7.2045 Not tainted syzkaller #0 [ 1332.404817][T14486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1332.414919][T14486] Call Trace: [ 1332.417101][ T971] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1332.418223][T14486] [ 1332.418234][T14486] dump_stack_lvl+0x18c/0x250 [ 1332.418275][T14486] ? alloc_file_pseudo+0x184/0x210 [ 1332.418354][T14486] ? __sys_socket+0x140/0x1b0 [ 1332.418379][T14486] ? show_regs_print_info+0x20/0x20 [ 1332.418407][T14486] ? load_image+0x420/0x420 [ 1332.418435][T14486] ? mark_lock+0x94/0x320 [ 1332.443052][ T971] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.444945][T14486] should_fail_ex+0x394/0x4c0 [ 1332.471855][T14486] get_futex_key+0x134/0xf40 [ 1332.476508][T14486] ? futex_setup_timer+0xc0/0xc0 [ 1332.481508][T14486] futex_wake+0x127/0x4f0 [ 1332.485904][T14486] ? futex_wake_mark+0x150/0x150 [ 1332.490909][T14486] ? fd_install+0x60/0x4e0 [ 1332.495397][T14486] do_futex+0x35d/0x3e0 [ 1332.498788][ T971] usbtmc 9-1:16.0: bulk endpoints not found [ 1332.499590][T14486] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1332.511701][T14486] ? __lock_acquire+0x7eb0/0x7eb0 [ 1332.516795][T14486] __se_sys_futex+0x3a9/0x440 [ 1332.521537][T14486] ? __x64_sys_futex+0xf0/0xf0 [ 1332.526360][T14486] ? __x64_sys_futex+0x21/0xf0 [ 1332.531176][T14486] do_syscall_64+0x55/0xb0 [ 1332.535649][T14486] ? clear_bhb_loop+0x40/0x90 [ 1332.540496][T14486] ? clear_bhb_loop+0x40/0x90 [ 1332.545236][T14486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1332.551196][T14486] RIP: 0033:0x7f7e549a8fd9 [ 1332.555656][T14486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.575322][T14486] RSP: 002b:00007f7e557e30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1332.583813][T14486] RAX: ffffffffffffffda RBX: 00007f7e54c25fa8 RCX: 00007f7e549a8fd9 [ 1332.591831][T14486] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e54c25fac [ 1332.599846][T14486] RBP: 00007f7e54c25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1332.607859][T14486] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1332.615877][T14486] R13: 00007f7e54c26038 R14: 00007ffd47223960 R15: 00007ffd47223a48 [ 1332.623915][T14486] [ 1332.708940][ T7582] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1334.552241][ T971] usb 9-1: USB disconnect, device number 38 [ 1334.790706][T14502] fuse: Bad value for 'fd' [ 1335.028527][T14506] input: syz1 as /devices/virtual/input/input8 [ 1336.219488][T14521] FAULT_INJECTION: forcing a failure. [ 1336.219488][T14521] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.259110][T14521] CPU: 1 PID: 14521 Comm: syz.8.2057 Not tainted syzkaller #0 [ 1336.266676][T14521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1336.276789][T14521] Call Trace: [ 1336.280126][T14521] [ 1336.283126][T14521] dump_stack_lvl+0x18c/0x250 [ 1336.287855][T14521] ? show_regs_print_info+0x20/0x20 [ 1336.293097][T14521] ? load_image+0x420/0x420 [ 1336.297660][T14521] ? __might_sleep+0xe0/0xe0 [ 1336.302337][T14521] ? __lock_acquire+0x7eb0/0x7eb0 [ 1336.307398][T14521] should_fail_ex+0x394/0x4c0 [ 1336.312159][T14521] should_failslab+0x9/0x20 [ 1336.316687][T14521] slab_pre_alloc_hook+0x59/0x300 [ 1336.321756][T14521] ? apparmor_capable+0x137/0x1a0 [ 1336.326807][T14521] kmem_cache_alloc+0x5a/0x2d0 [ 1336.331581][T14521] ? alloc_empty_file+0x9e/0x1d0 [ 1336.336537][T14521] alloc_empty_file+0x9e/0x1d0 [ 1336.341329][T14521] alloc_file+0x5b/0x600 [ 1336.345593][T14521] alloc_file_pseudo+0x184/0x210 [ 1336.350543][T14521] ? fput+0x1a0/0x1a0 [ 1336.354561][T14521] ? alloc_fd+0x590/0x640 [ 1336.358918][T14521] sock_alloc_file+0xb7/0x280 [ 1336.363623][T14521] __sys_socket+0x140/0x1b0 [ 1336.368153][T14521] __x64_sys_socket+0x7a/0x90 [ 1336.372881][T14521] do_syscall_64+0x55/0xb0 [ 1336.377356][T14521] ? clear_bhb_loop+0x40/0x90 [ 1336.382096][T14521] ? clear_bhb_loop+0x40/0x90 [ 1336.386833][T14521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1336.392788][T14521] RIP: 0033:0x7fb40b9a8fd9 [ 1336.397291][T14521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.417069][T14521] RSP: 002b:00007fb40c876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1336.425570][T14521] RAX: ffffffffffffffda RBX: 00007fb40bc25fa0 RCX: 00007fb40b9a8fd9 [ 1336.433596][T14521] RDX: 0000000000000001 RSI: 0000000000080801 RDI: 000000000000002b [ 1336.441621][T14521] RBP: 00007fb40ba37fed R08: 0000000000000000 R09: 0000000000000000 [ 1336.449640][T14521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1336.457658][T14521] R13: 00007fb40bc26038 R14: 00007fb40bc25fa0 R15: 00007ffdd1ae6038 [ 1336.465694][T14521] [ 1337.709390][T14515] loop2: detected capacity change from 0 to 32768 [ 1337.734811][T14515] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2054 (14515) [ 1337.855469][T14515] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1337.866647][T11724] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1337.897555][T14515] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1337.919009][T14515] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1337.944547][T14515] BTRFS info (device loop2): use zstd compression, level 3 [ 1337.969697][T14515] BTRFS info (device loop2): using free space tree [ 1338.078279][T11724] usb 9-1: Using ep0 maxpacket: 8 [ 1338.107088][T11724] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1338.129028][T11724] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.166782][T11724] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1338.208280][ T5886] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1338.242658][T11724] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1338.256875][T14515] BTRFS info (device loop2): enabling ssd optimizations [ 1338.264489][T11724] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.281333][T14515] BTRFS info (device loop2): auto enabling async discard [ 1338.301868][T11724] usbtmc 9-1:16.0: bulk endpoints not found [ 1338.411057][ T5886] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1338.430731][ T5886] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1338.447895][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.464133][ T5886] usb 8-1: Product: syz [ 1338.470614][ T5886] usb 8-1: Manufacturer: syz [ 1338.475265][ T5886] usb 8-1: SerialNumber: syz [ 1338.508822][ T5886] usb 8-1: config 0 descriptor?? [ 1338.625747][ T5797] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1340.688320][ T8] usb 9-1: USB disconnect, device number 39 [ 1342.065465][ T8] usb 8-1: USB disconnect, device number 26 [ 1343.935127][T14569] FAULT_INJECTION: forcing a failure. [ 1343.935127][T14569] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.967704][T14569] CPU: 0 PID: 14569 Comm: syz.7.2067 Not tainted syzkaller #0 [ 1343.975291][T14569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1343.985401][T14569] Call Trace: [ 1343.988731][T14569] [ 1343.991724][T14569] dump_stack_lvl+0x18c/0x250 [ 1343.996450][T14569] ? show_regs_print_info+0x20/0x20 [ 1344.001690][T14569] ? load_image+0x420/0x420 [ 1344.006248][T14569] ? __might_sleep+0xe0/0xe0 [ 1344.010896][T14569] ? __lock_acquire+0x7eb0/0x7eb0 [ 1344.015967][T14569] ? trace_contention_end+0x39/0xe0 [ 1344.021225][T14569] should_fail_ex+0x394/0x4c0 [ 1344.025948][T14569] should_failslab+0x9/0x20 [ 1344.030493][T14569] slab_pre_alloc_hook+0x59/0x300 [ 1344.035574][T14569] ? nvme_tcp_create_ctrl+0x733/0xbb0 [ 1344.041090][T14569] ? nvme_tcp_create_ctrl+0x733/0xbb0 [ 1344.046503][T14569] __kmem_cache_alloc_node+0x53/0x260 [ 1344.051916][T14569] ? nvme_tcp_create_ctrl+0x733/0xbb0 [ 1344.057331][T14569] __kmalloc+0xa7/0x240 [ 1344.061539][T14569] nvme_tcp_create_ctrl+0x733/0xbb0 [ 1344.066787][T14569] nvmf_dev_write+0x2383/0x2b50 [ 1344.071703][T14569] ? nvmf_host_put+0x190/0x190 [ 1344.076493][T14569] ? aa_file_perm+0x11b/0xee0 [ 1344.081199][T14569] ? futex_wait_queue+0x138/0x1b0 [ 1344.086291][T14569] ? common_file_perm+0x198/0x1f0 [ 1344.091344][T14569] ? fsnotify_perm+0x5d/0x5e0 [ 1344.096053][T14569] ? security_file_permission+0x79/0xa0 [ 1344.101636][T14569] ? nvmf_host_put+0x190/0x190 [ 1344.106433][T14569] vfs_write+0x299/0x9a0 [ 1344.110807][T14569] ? file_end_write+0x250/0x250 [ 1344.115702][T14569] ? __fget_files+0x28/0x460 [ 1344.120352][T14569] ? __fget_files+0x3fc/0x460 [ 1344.125075][T14569] ? __fdget_pos+0x1d8/0x330 [ 1344.129698][T14569] ? ksys_write+0x74/0x260 [ 1344.134155][T14569] ksys_write+0x151/0x260 [ 1344.138530][T14569] ? __ia32_sys_read+0x90/0x90 [ 1344.143357][T14569] ? lockdep_hardirqs_on+0x98/0x150 [ 1344.148596][T14569] do_syscall_64+0x55/0xb0 [ 1344.153055][T14569] ? clear_bhb_loop+0x40/0x90 [ 1344.157838][T14569] ? clear_bhb_loop+0x40/0x90 [ 1344.162562][T14569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1344.168491][T14569] RIP: 0033:0x7f7e549a8fd9 [ 1344.172933][T14569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.192579][T14569] RSP: 002b:00007f7e557e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1344.201036][T14569] RAX: ffffffffffffffda RBX: 00007f7e54c25fa0 RCX: 00007f7e549a8fd9 [ 1344.209033][T14569] RDX: 0000000000000031 RSI: 0000200000000180 RDI: 0000000000000004 [ 1344.217028][T14569] RBP: 00007f7e54a37fed R08: 0000000000000000 R09: 0000000000000000 [ 1344.225030][T14569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1344.233025][T14569] R13: 00007f7e54c26038 R14: 00007f7e54c25fa0 R15: 00007ffd47223a48 [ 1344.241060][T14569] [ 1346.268372][ T5886] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1346.437863][ T5886] usb 9-1: device descriptor read/64, error -71 [ 1346.717753][ T5886] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1346.815360][T14582] loop7: detected capacity change from 0 to 32768 [ 1346.887866][ T5886] usb 9-1: device descriptor read/64, error -71 [ 1346.943534][T14582] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 1346.985340][T14582] JBD2: Ignoring recovery information on journal [ 1347.008142][ T5886] usb usb9-port1: attempt power cycle [ 1347.113011][T14585] loop5: detected capacity change from 0 to 36864 [ 1347.120887][T14585] EXT4-fs: Ignoring removed orlov option [ 1347.143679][T14585] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1347.183570][T14582] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1347.235892][T14585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1347.324469][T14585] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2072: bg 0: block 449: padding at end of block bitmap is not set [ 1347.345813][T14585] EXT4-fs (loop5): Remounting filesystem read-only [ 1347.356291][T14585] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1347.380299][T14592] (syz.7.2071,14592,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1347.457812][ T5886] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1347.577142][ T7582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.608210][ T9330] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1347.621920][ T9330] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1347.678881][ T5886] usb 9-1: device not accepting address 42, error -71 [ 1347.741054][ T9515] ocfs2: Unmounting device (7,7) on (node local) [ 1351.258210][ T57] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1352.679603][ T57] usb 3-1: device descriptor read/64, error -71 [ 1352.977888][ T57] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1353.068207][ T5886] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1353.157998][ T57] usb 3-1: device descriptor read/64, error -71 [ 1353.298015][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 1353.298051][ T57] usb usb3-port1: attempt power cycle [ 1353.320161][ T5886] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1353.339693][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.368674][ T5886] usb 6-1: config 0 descriptor?? [ 1353.598613][ T5886] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1353.646580][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1353.667339][ T5886] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1353.686711][ T5886] usb 6-1: media controller created [ 1353.750133][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1353.763329][ T57] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1353.806992][ T5886] az6027: usb out operation failed. (-71) [ 1353.830713][ T57] usb 3-1: device descriptor read/8, error -71 [ 1353.852423][ T5886] az6027: usb out operation failed. (-71) [ 1353.878333][ T5886] stb0899_attach: Driver disabled by Kconfig [ 1353.885089][ T5886] az6027: no front-end attached [ 1353.885089][ T5886] [ 1353.896616][ T5886] az6027: usb out operation failed. (-71) [ 1353.903931][ T5886] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1353.937286][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 1354.026480][ T5886] dvb-usb: schedule remote query interval to 400 msecs. [ 1354.048918][ T5886] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1354.067803][ T5886] usb 6-1: USB disconnect, device number 28 [ 1354.127792][ T971] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1354.301873][ T5886] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1354.345018][ T971] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.399241][ T971] usb 9-1: config 0 has no interfaces? [ 1354.426627][ T971] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1354.438730][ T971] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.456434][ T971] usb 9-1: config 0 descriptor?? [ 1354.671465][T14682] FAULT_INJECTION: forcing a failure. [ 1354.671465][T14682] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.717819][T14682] CPU: 1 PID: 14682 Comm: syz.7.2092 Not tainted syzkaller #0 [ 1354.725410][T14682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1354.735524][T14682] Call Trace: [ 1354.738861][T14682] [ 1354.741841][T14682] dump_stack_lvl+0x18c/0x250 [ 1354.746624][T14682] ? show_regs_print_info+0x20/0x20 [ 1354.751905][T14682] ? load_image+0x420/0x420 [ 1354.756481][T14682] ? __might_sleep+0xe0/0xe0 [ 1354.761138][T14682] ? __lock_acquire+0x7eb0/0x7eb0 [ 1354.766222][T14682] should_fail_ex+0x394/0x4c0 [ 1354.770965][T14682] should_failslab+0x9/0x20 [ 1354.775519][T14682] slab_pre_alloc_hook+0x59/0x300 [ 1354.780598][T14682] ? kfree+0x31/0x1a0 [ 1354.784663][T14682] ? alloc_fs_context+0x63/0x7a0 [ 1354.789794][T14682] __kmem_cache_alloc_node+0x53/0x260 [ 1354.795227][T14682] ? alloc_fs_context+0x63/0x7a0 [ 1354.800225][T14682] kmalloc_trace+0x2a/0xe0 [ 1354.804716][T14682] alloc_fs_context+0x63/0x7a0 [ 1354.809561][T14682] mq_init_ns+0x10a/0x510 [ 1354.814110][T14682] copy_ipcs+0x309/0x500 [ 1354.818407][T14682] create_new_namespaces+0x212/0x700 [ 1354.823893][T14682] unshare_nsproxy_namespaces+0x11a/0x160 [ 1354.829803][T14682] ksys_unshare+0x4fa/0x8f0 [ 1354.834476][T14682] ? sighand_ctor+0x50/0x50 [ 1354.839089][T14682] ? lock_chain_count+0x20/0x20 [ 1354.844013][T14682] ? syscall_enter_from_user_mode+0x25/0x80 [ 1354.849950][T14682] __x64_sys_unshare+0x38/0x40 [ 1354.854784][T14682] do_syscall_64+0x55/0xb0 [ 1354.859274][T14682] ? clear_bhb_loop+0x40/0x90 [ 1354.864150][T14682] ? clear_bhb_loop+0x40/0x90 [ 1354.868937][T14682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1354.874926][T14682] RIP: 0033:0x7f7e549a8fd9 [ 1354.879393][T14682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.899061][T14682] RSP: 002b:00007f7e557e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1354.907555][T14682] RAX: ffffffffffffffda RBX: 00007f7e54c25fa0 RCX: 00007f7e549a8fd9 [ 1354.915586][T14682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004c000680 [ 1354.923609][T14682] RBP: 00007f7e54a37fed R08: 0000000000000000 R09: 0000000000000000 [ 1354.931629][T14682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1354.939643][T14682] R13: 00007f7e54c26038 R14: 00007f7e54c25fa0 R15: 00007ffd47223a48 [ 1354.947684][T14682] [ 1355.217157][ T971] usb 9-1: USB disconnect, device number 44 [ 1355.410537][T14697] loop7: detected capacity change from 0 to 33280 [ 1355.525691][T14697] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1355.592483][T14697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1355.613325][T14697] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.817135][ T9515] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.357778][ T5886] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1356.517892][ T5886] usb 9-1: device descriptor read/64, error -71 [ 1356.797807][ T5886] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1358.608063][ T5886] usb 9-1: device descriptor read/64, error -71 [ 1358.748120][ T5886] usb usb9-port1: attempt power cycle [ 1359.317784][ T5886] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1359.547991][ T5886] usb 9-1: device not accepting address 47, error -71 [ 1359.614662][T14734] loop7: detected capacity change from 0 to 2048 [ 1359.650017][T14734] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 1359.688021][ T971] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1359.907931][ T971] usb 3-1: Using ep0 maxpacket: 32 [ 1359.923112][ T971] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1359.945861][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.962009][ T971] usb 3-1: Product: syz [ 1359.966392][ T971] usb 3-1: Manufacturer: syz [ 1359.974056][ T971] usb 3-1: SerialNumber: syz [ 1359.990341][ T971] usb 3-1: config 0 descriptor?? [ 1360.005944][ T971] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1360.148328][ T9616] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1360.207877][ T971] gspca_stk1135: reg_w 0x2 err -71 [ 1360.221599][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 1360.242132][ T971] gspca_stk1135: Sensor write failed [ 1360.252020][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 1360.264017][ T971] gspca_stk1135: Sensor write failed [ 1360.280960][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 1360.287463][ T971] gspca_stk1135: Sensor read failed [ 1360.313226][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 1360.322958][ T971] gspca_stk1135: Sensor read failed [ 1360.335650][ T971] gspca_stk1135: Detected sensor type unknown (0x0) [ 1360.348510][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 1360.372337][ T9616] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1360.381857][ T971] gspca_stk1135: Sensor read failed [ 1360.387124][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 1360.395944][T14750] tipc: Cannot configure node identity twice [ 1360.407809][ T9616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.416847][ T971] gspca_stk1135: Sensor read failed [ 1360.422584][ T9616] usb 6-1: Product: syz [ 1360.426932][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 1360.433411][ T9616] usb 6-1: Manufacturer: syz [ 1360.438805][ T9616] usb 6-1: SerialNumber: syz [ 1360.445100][ T971] gspca_stk1135: Sensor write failed [ 1360.451475][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 1360.459470][ T9616] usb 6-1: config 0 descriptor?? [ 1360.465441][ T971] gspca_stk1135: Sensor write failed [ 1360.476157][ T9616] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1360.482950][ T971] stk1135: probe of 3-1:0.0 failed with error -71 [ 1360.503994][ T971] usb 3-1: USB disconnect, device number 53 [ 1360.684238][ T9616] gspca_sunplus: reg_r err -32 [ 1361.817889][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1361.998843][ T971] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1362.022882][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1362.037839][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.055408][ T9] usb 3-1: Product: syz [ 1362.065456][ T9] usb 3-1: Manufacturer: syz [ 1362.075901][ T9] usb 3-1: SerialNumber: syz [ 1362.167964][ T971] usb 9-1: device descriptor read/64, error -71 [ 1362.299725][T14767] netlink: 'syz.7.2118': attribute type 1 has an invalid length. [ 1362.376351][T14767] bond1: entered promiscuous mode [ 1362.382609][T14767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1362.395383][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2118'. [ 1362.447770][ T971] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1362.463948][T14769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1362.478156][T14769] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1362.489244][T14769] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1362.509625][T14769] bond1: (slave wireguard0): making interface the new active one [ 1362.518975][T14769] wireguard0: entered promiscuous mode [ 1362.525531][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1362.540131][T14769] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 1362.597728][ T971] usb 9-1: device descriptor read/64, error -71 [ 1362.728091][ T971] usb usb9-port1: attempt power cycle [ 1363.166138][T11724] usb 6-1: USB disconnect, device number 29 [ 1363.387869][ T971] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1363.457164][ T971] usb 9-1: device descriptor read/8, error -71 [ 1363.868190][ T971] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1363.911631][ T971] usb 9-1: device descriptor read/8, error -71 [ 1363.927214][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1364.058183][ T971] usb usb9-port1: unable to enumerate USB device [ 1364.347843][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 1364.378686][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 1364.403610][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1364.438773][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1364.463302][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1364.487335][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1364.533527][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1364.549571][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 1364.567139][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1364.582664][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1364.597354][ T9] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1364.642063][ T9] usb 3-1: USB disconnect, device number 54 [ 1364.764413][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.037973][ T57] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1367.253326][ T57] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1367.272594][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.286976][ T57] usb 3-1: Product: syz [ 1367.300649][ T57] usb 3-1: Manufacturer: syz [ 1367.316458][ T57] usb 3-1: SerialNumber: syz [ 1367.328888][ T57] usb 3-1: config 0 descriptor?? [ 1367.361739][ T57] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1367.578145][ T57] gspca_sunplus: reg_r err -32 [ 1368.217977][ T57] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1368.387825][ T57] usb 9-1: device descriptor read/64, error -71 [ 1368.620116][ T9] usb 3-1: USB disconnect, device number 55 [ 1368.668633][ T57] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1370.320805][ T5886] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1370.390406][ T57] usb 9-1: device descriptor read/64, error -71 [ 1372.152393][ T57] usb usb9-port1: attempt power cycle [ 1372.227764][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 1372.425540][ T5886] usb 6-1: device descriptor read/all, error -71 [ 1378.329030][T14888] syzkaller1: entered promiscuous mode [ 1378.334720][T14888] syzkaller1: entered allmulticast mode [ 1378.880490][T14884] loop7: detected capacity change from 0 to 32768 [ 1378.963731][T14884] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1378.988401][ T5886] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1379.198803][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 1379.209764][ T5886] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1379.227202][ T5886] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1379.262710][ T5886] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1379.289161][ T5886] usb 6-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1379.319672][ T5886] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1379.338177][T14884] XFS (loop7): Metadata corruption detected at xfs_buf_ioend+0x25a/0x6b0, xfs_inode block 0x4880 xfs_inode_buf_verify [ 1379.351029][T14884] XFS (loop7): Unmount and run xfs_repair [ 1379.356915][T14884] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1379.358600][ T5886] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1379.372323][T14884] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 1379.390699][T14884] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1379.401461][T14884] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 1379.406027][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.411951][T14884] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 1379.428776][T14884] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1379.439422][T14884] 00000050: 00 00 00 02 00 00 00 00 00 00 07 00 00 00 00 00 ................ [ 1379.448869][T14884] 00000060: 00 00 ff ff 4c 7b c2 21 00 00 00 00 00 00 00 04 ....L{.!........ [ 1379.463959][ T5886] usbtmc 6-1:16.0: bulk endpoints not found [ 1379.469414][T14884] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 1379.493223][T14884] XFS (loop7): metadata I/O error in "xfs_imap_to_bp+0x112/0x190" at daddr 0x4880 len 64 error 117 [ 1379.510310][T14884] XFS (loop7): Failed to read root inode 0x2440, error 117 [ 1381.517747][ T5886] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1381.731943][ T5868] usb 6-1: USB disconnect, device number 32 [ 1381.751292][ T5886] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1381.788918][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.811070][ T5886] usb 3-1: Product: syz [ 1381.815323][ T5886] usb 3-1: Manufacturer: syz [ 1381.834282][ T5886] usb 3-1: SerialNumber: syz [ 1381.849403][ T5886] usb 3-1: config 0 descriptor?? [ 1381.869168][ T5886] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1382.178829][ T5886] gspca_sunplus: reg_r err -32 [ 1383.017858][ T9616] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1383.265240][ T5886] usb 3-1: USB disconnect, device number 56 [ 1383.271597][ T9616] usb 9-1: Using ep0 maxpacket: 16 [ 1383.319044][ T9616] usb 9-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 1383.385490][ T9616] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1383.426019][T14929] syzkaller1: entered promiscuous mode [ 1383.443431][ T9616] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1383.463129][T14929] syzkaller1: entered allmulticast mode [ 1383.473209][ T9616] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.523305][ T9616] usb 9-1: Product: syz [ 1383.544792][ T9616] usb 9-1: Manufacturer: syz [ 1383.571820][ T9616] usb 9-1: SerialNumber: syz [ 1383.597015][ T9616] usb 9-1: config 0 descriptor?? [ 1383.830145][ T9616] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1383.890476][ T9616] imon 9-1:0.0: unable to initialize intf0, err -19 [ 1383.932242][ T9616] imon:imon_probe: failed to initialize context! [ 1383.957810][ T9616] imon 9-1:0.0: unable to register, err -19 [ 1385.633665][ T9616] usb 9-1: USB disconnect, device number 56 [ 1386.127829][T11724] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1386.347896][T11724] usb 3-1: Using ep0 maxpacket: 8 [ 1386.362369][T11724] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1386.373672][T11724] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1386.409243][T11724] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1386.432135][T11724] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1386.457808][T11724] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1386.481918][T11724] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1386.507695][T11724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.530679][T11724] usbtmc 3-1:16.0: bulk endpoints not found [ 1386.678001][ T7463] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1386.897517][ T7463] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1386.920766][ T7463] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.931387][ T7463] usb 9-1: Product: syz [ 1386.935645][ T7463] usb 9-1: Manufacturer: syz [ 1386.941096][ T7463] usb 9-1: SerialNumber: syz [ 1386.954528][ T7463] usb 9-1: config 0 descriptor?? [ 1386.964691][ T7463] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1388.870823][ T7463] usb 3-1: USB disconnect, device number 57 [ 1390.911495][ T5868] usb 9-1: USB disconnect, device number 57 [ 1391.068241][ T7463] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1391.288100][ T7463] usb 3-1: Using ep0 maxpacket: 16 [ 1391.358119][ T7463] usb 3-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 1391.392256][ T7463] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1391.417528][T14983] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2176'. [ 1391.464992][ T7463] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1391.494464][ T7463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.534319][ T7463] usb 3-1: Product: syz [ 1391.553432][ T7463] usb 3-1: Manufacturer: syz [ 1391.585369][ T7463] usb 3-1: SerialNumber: syz [ 1391.771521][ T7463] usb 3-1: config 0 descriptor?? [ 1392.014981][ T7463] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1392.037774][ T7463] imon 3-1:0.0: unable to initialize intf0, err -19 [ 1392.044489][ T7463] imon:imon_probe: failed to initialize context! [ 1392.077730][ T7463] imon 3-1:0.0: unable to register, err -19 [ 1392.109799][ T7463] usb 3-1: USB disconnect, device number 58 [ 1394.837758][ T9616] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1395.042732][ T9616] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1395.067913][ T9616] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.076026][ T9616] usb 9-1: Product: syz [ 1395.107927][ T9616] usb 9-1: Manufacturer: syz [ 1395.117898][ T9616] usb 9-1: SerialNumber: syz [ 1395.125504][ T9616] usb 9-1: config 0 descriptor?? [ 1395.154893][ T9616] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1395.488086][ T7463] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1395.580291][T15022] loop7: detected capacity change from 0 to 256 [ 1395.616176][T15022] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1395.698242][ T7463] usb 3-1: Using ep0 maxpacket: 16 [ 1395.720895][ T7463] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1395.737648][ T7463] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1395.753830][ T7463] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1395.765506][ T7463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.774830][ T7463] usb 3-1: Product: syz [ 1395.779222][ T7463] usb 3-1: Manufacturer: syz [ 1395.783978][ T7463] usb 3-1: SerialNumber: syz [ 1395.927395][ T7463] usb 3-1: config 0 descriptor?? [ 1396.219537][ T7463] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1396.274852][ T7463] imon 3-1:0.0: unable to initialize intf0, err -19 [ 1396.296812][ T7463] imon:imon_probe: failed to initialize context! [ 1396.331139][ T7463] imon 3-1:0.0: unable to register, err -19 [ 1396.346139][ T7463] usb 3-1: USB disconnect, device number 59 [ 1397.477320][T15036] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1398.189568][ T57] usb 9-1: USB disconnect, device number 58 [ 1398.748021][T15042] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2196'. [ 1399.307816][T15043] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2196'. [ 1399.317834][T15043] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2196'. [ 1399.327124][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2196'. [ 1401.701065][T15051] loop2: detected capacity change from 0 to 32768 [ 1401.751554][T15051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2200 (15051) [ 1401.806663][T15051] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1401.834959][T15051] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1401.857155][T15051] BTRFS warning (device loop2): excessive commit interval 3581 [ 1401.866752][T15051] BTRFS info (device loop2): force zlib compression, level 3 [ 1401.891862][T15051] BTRFS info (device loop2): metadata ratio 107050 [ 1401.922905][T15051] BTRFS info (device loop2): turning on flush-on-commit [ 1401.944219][T15051] BTRFS info (device loop2): max_inline at 4096 [ 1401.963100][T15051] BTRFS info (device loop2): using free space tree [ 1402.107228][T15051] BTRFS info (device loop2): enabling ssd optimizations [ 1402.918073][T15087] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2205'. [ 1403.477175][T15088] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2205'. [ 1403.489119][T15088] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2205'. [ 1403.498506][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2205'. [ 1404.406005][ T5797] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1404.610093][T15090] loop7: detected capacity change from 0 to 32768 [ 1404.644159][T15090] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1404.653008][T15090] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1404.922523][T15090] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1404.963935][ T57] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1404.972262][ T57] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1405.103942][ T57] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 131ms [ 1405.163815][ T57] gfs2: fsid=syz:syz.0: jid=0: Done [ 1405.199988][T15090] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1406.038068][ T971] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1406.159455][T15106] loop2: detected capacity change from 0 to 32768 [ 1406.197867][ T57] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1406.224063][T15106] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1406.235241][ T971] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.274559][ T971] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1406.345053][ T971] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1406.407796][ T57] usb 9-1: Using ep0 maxpacket: 16 [ 1406.413611][ T971] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1406.423583][ T57] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1406.444821][ T57] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1406.453646][T15106] XFS (loop2): Ending clean mount [ 1406.471664][ T57] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1406.479719][ T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.487819][ T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.505849][T15106] XFS (loop2): Quotacheck needed: Please wait. [ 1406.524561][ T57] usb 9-1: Product: syz [ 1406.534148][ T971] spcp8x5 6-1:1.0: required endpoints missing [ 1406.537946][ T57] usb 9-1: Manufacturer: syz [ 1406.549040][ T57] usb 9-1: SerialNumber: syz [ 1406.557567][ T57] usb 9-1: config 0 descriptor?? [ 1406.626606][T15106] XFS (loop2): Quotacheck: Done. [ 1406.775493][ T57] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1406.787476][T15123] loop7: detected capacity change from 0 to 4096 [ 1406.794299][ T57] imon 9-1:0.0: unable to initialize intf0, err -19 [ 1406.806208][ T57] imon:imon_probe: failed to initialize context! [ 1406.820397][ T57] imon 9-1:0.0: unable to register, err -19 [ 1406.828590][T15123] ntfs3: loop7: Different NTFS sector size (1024) and media sector size (512). [ 1406.848150][ T57] usb 9-1: USB disconnect, device number 59 [ 1406.943614][T15123] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1406.969100][ T5797] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1407.738015][T15126] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2215'. [ 1408.293776][T15127] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2215'. [ 1408.303741][T15127] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2215'. [ 1408.313009][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2215'. [ 1409.104398][ T971] usb 6-1: USB disconnect, device number 33 [ 1410.395060][T15145] loop5: detected capacity change from 0 to 33280 [ 1410.435460][T15145] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1412.457389][T15145] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1412.508656][T15145] EXT4-fs error (device loop5): ext4_orphan_get:1434: comm syz.5.2221: bad orphan inode 131083 [ 1412.544953][T15145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1412.557522][T15142] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2220'. [ 1412.881344][T15145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1412.939824][T15153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1413.577793][ T5868] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1413.687774][ T5886] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1413.767970][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 1413.785067][ T5868] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1413.798503][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1413.816440][ T5868] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1413.857796][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.873809][ T5868] usb 6-1: Product: syz [ 1413.880438][ T5868] usb 6-1: Manufacturer: syz [ 1413.885667][ T5868] usb 6-1: SerialNumber: syz [ 1413.900476][ T5868] usb 6-1: config 0 descriptor?? [ 1413.911742][ T5886] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.929444][ T5886] usb 8-1: config 0 has no interfaces? [ 1413.945699][ T5886] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1413.957501][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.986369][ T5886] usb 8-1: config 0 descriptor?? [ 1414.135020][ T5868] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1414.155598][ T5868] imon 6-1:0.0: unable to initialize intf0, err -19 [ 1414.164234][ T5868] imon:imon_probe: failed to initialize context! [ 1414.174443][ T5868] imon 6-1:0.0: unable to register, err -19 [ 1414.185818][ T5868] usb 6-1: USB disconnect, device number 34 [ 1415.083800][T15194] loop5: detected capacity change from 0 to 33792 [ 1415.115064][T15194] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1415.128279][T15194] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1415.139915][T15194] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1415.169404][T15194] EXT4-fs error (device loop5): ext4_ext_check_inode:532: inode #3: comm syz.5.2233: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1415.233532][T15194] EXT4-fs (loop5): no journal found [ 1415.250357][T15194] EXT4-fs (loop5): can't get journal size [ 1415.291893][T15194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1415.480849][ T7582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.493226][T15179] loop2: detected capacity change from 0 to 32768 [ 1415.639841][T15179] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1415.655164][T15212] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2234'. [ 1416.041636][T15179] XFS (loop2): Ending clean mount [ 1416.089634][T15179] XFS (loop2): Quotacheck needed: Please wait. [ 1416.248818][T15179] XFS (loop2): Quotacheck: Done. [ 1416.357229][ T5886] usb 8-1: USB disconnect, device number 27 [ 1416.518211][ T5797] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1416.795468][T15223] loop8: detected capacity change from 0 to 32768 [ 1416.896052][T15223] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 1416.949057][T15223] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1417.096471][T15223] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 1417.192088][T15223] XFS (loop8): Tail block (0x10) overwrite detected. Updated to 0x30 [ 1417.266127][T15223] XFS (loop8): Ending clean mount [ 1417.296646][T15223] XFS (loop8): Quotacheck needed: Please wait. [ 1417.420341][T15223] XFS (loop8): Quotacheck: Done. [ 1417.495435][T15245] loop7: detected capacity change from 0 to 32768 [ 1417.512834][T15245] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.2242 (15245) [ 1417.552284][T15245] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1417.575125][T15245] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1417.609898][T15245] BTRFS info (device loop7): setting nodatasum [ 1417.636253][T15245] BTRFS info (device loop7): force zlib compression, level 3 [ 1417.658880][T15245] BTRFS info (device loop7): turning on flush-on-commit [ 1417.670019][T15245] BTRFS info (device loop7): max_inline at 4096 [ 1417.676429][T15245] BTRFS info (device loop7): using free space tree [ 1417.722236][T10356] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1417.917749][T15245] BTRFS info (device loop7): enabling ssd optimizations [ 1418.037091][T11724] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1418.299944][T11724] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.344305][T11724] usb 6-1: config 0 has no interfaces? [ 1418.354115][T11724] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1418.417810][T11724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.428819][T11724] usb 6-1: config 0 descriptor?? [ 1418.634373][ T9515] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1419.565281][T15266] loop2: detected capacity change from 0 to 32768 [ 1419.667744][T12079] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1419.677983][T15266] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1419.817771][T12079] usb 9-1: device descriptor read/64, error -71 [ 1420.214338][T15266] XFS (loop2): Ending clean mount [ 1420.242133][T15266] XFS (loop2): Quotacheck needed: Please wait. [ 1420.258424][T12079] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1420.320661][T15266] XFS (loop2): Quotacheck: Done. [ 1420.440412][T12079] usb 9-1: device descriptor read/64, error -71 [ 1420.924569][T11724] usb 6-1: USB disconnect, device number 35 [ 1421.270242][ T5797] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1421.333661][T12079] usb usb9-port1: attempt power cycle [ 1421.648636][T15310] netlink: 'syz.2.2255': attribute type 2 has an invalid length. [ 1421.768067][T12079] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1421.808542][T12079] usb 9-1: device descriptor read/8, error -71 [ 1421.937823][ T5868] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1422.078016][T12079] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1422.134804][T12079] usb 9-1: device descriptor read/8, error -71 [ 1422.145057][ T5868] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.177984][ T57] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1422.197570][ T5868] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1422.241654][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.300524][T12079] usb usb9-port1: unable to enumerate USB device [ 1422.484106][ T5868] idmouse 6-1:1.0: Unable to find bulk-in endpoint. [ 1422.951339][T12079] usb 6-1: USB disconnect, device number 36 [ 1424.707739][ T57] usb 8-1: Using ep0 maxpacket: 16 [ 1424.729344][ T57] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1424.748065][ T57] usb 8-1: config 0 has no interface number 0 [ 1424.765383][ T57] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1424.787661][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.795758][ T57] usb 8-1: Product: syz [ 1424.807664][ T57] usb 8-1: Manufacturer: syz [ 1424.812359][ T57] usb 8-1: SerialNumber: syz [ 1424.830706][ T57] usb 8-1: config 0 descriptor?? [ 1424.839279][ T57] hub 8-1:0.132: bad descriptor, ignoring hub [ 1424.845425][ T57] hub: probe of 8-1:0.132 failed with error -5 [ 1424.897010][ T57] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input10 [ 1425.080717][T15341] fuse: Unknown parameter 'grou00000000000000000000' [ 1425.607722][ T5886] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1426.195618][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.204154][ T5886] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1428.218937][ T5886] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1428.228119][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.251851][ T5886] spcp8x5 6-1:1.0: required endpoints missing [ 1428.397882][ T5886] usb 6-1: USB disconnect, device number 37 [ 1428.987733][ T5886] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1429.195505][ T5886] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.205832][ T5886] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1429.215410][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.249181][ T5886] idmouse 6-1:1.0: Unable to find bulk-in endpoint. [ 1429.408725][ T5868] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1429.482889][ T5886] usb 6-1: USB disconnect, device number 38 [ 1429.597725][ T5868] usb 9-1: Using ep0 maxpacket: 16 [ 1429.613624][ T5868] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.637654][ T5868] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1429.659720][ T5868] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1429.677950][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.696351][ T5868] usb 9-1: Product: syz [ 1429.700654][ T5868] usb 9-1: Manufacturer: syz [ 1429.705306][ T5868] usb 9-1: SerialNumber: syz [ 1431.516796][T15375] loop2: detected capacity change from 0 to 49152 [ 1431.538110][T15375] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1431.585660][T15375] EXT4-fs (loop2): mounted filesystem 05d77d82-05ee-4f46-abdc-70d8711375ca r/w with ordered data mode. Quota mode: none. [ 1431.590616][ T5868] usb 9-1: 0:2 : does not exist [ 1431.620041][ T5868] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1431.687290][ T5868] usb 9-1: USB disconnect, device number 64 [ 1431.764342][T15095] udevd[15095]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1431.827495][ T5797] EXT4-fs (loop2): unmounting filesystem 05d77d82-05ee-4f46-abdc-70d8711375ca. [ 1433.863566][T15394] jffs2: notice: (15394) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1434.439420][ T57] usb 8-1: USB disconnect, device number 28 [ 1434.998059][T15402] device-mapper: table: 248:4: multipath: invalid initial priority group (-EINVAL) [ 1435.055610][T15402] device-mapper: ioctl: error adding target to table [ 1435.437752][ T57] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1435.547904][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1435.671907][ T57] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1435.696721][ T57] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1435.733269][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.763256][ T57] spcp8x5 8-1:1.0: required endpoints missing [ 1435.777076][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.787943][ T9] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1435.797060][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.842908][ T9] idmouse 6-1:1.0: Unable to find bulk-in endpoint. [ 1436.891025][ T57] usb 6-1: USB disconnect, device number 39 [ 1436.984423][T15425] fuse: Unknown parameter 'group_i00000000000000000000' [ 1437.031593][T15422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.106083][ T57] usb 8-1: USB disconnect, device number 29 [ 1438.158847][T15431] loop0: detected capacity change from 0 to 32767 [ 1438.439113][T15431] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 1438.676332][T15444] netlink: 'syz.8.2305': attribute type 4 has an invalid length. [ 1438.696538][T15444] netlink: 'syz.8.2305': attribute type 4 has an invalid length. [ 1438.719962][T15437] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1438.742869][T15437] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1438.869630][T15450] fuse: Unknown parameter 'group_i00000000000000000000' [ 1439.069601][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2310'. [ 1439.357712][ T5886] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1439.367747][T12079] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1439.568204][ T5886] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1439.582238][ T5886] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1439.592764][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.602133][T12079] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.614064][T12079] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1439.634609][ T5886] spcp8x5 8-1:1.0: required endpoints missing [ 1439.645003][T12079] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.679295][T12079] idmouse 9-1:1.0: Unable to find bulk-in endpoint. [ 1440.011004][T15476] fuse: Unknown parameter 'group_i00000000000000000000' [ 1441.624266][T15499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2326'. [ 1442.088607][ T5868] usb 9-1: USB disconnect, device number 65 [ 1442.157006][T12079] usb 8-1: USB disconnect, device number 30 [ 1442.697722][ T57] usb 9-1: new full-speed USB device number 66 using dummy_hcd [ 1442.938387][ T57] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1442.961793][ T57] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 1442.987809][ T57] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1443.008178][ T57] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1443.022589][ T57] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1443.051581][ T57] usb 9-1: Product: syz [ 1443.055811][ T57] usb 9-1: Manufacturer: syz [ 1443.084086][ T57] usb 9-1: SerialNumber: syz [ 1443.102681][ T57] usb 9-1: config 0 descriptor?? [ 1443.124623][T15509] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1443.148673][ T57] usb 9-1: selecting invalid altsetting 0 [ 1443.168817][T15510] loop2: detected capacity change from 0 to 32768 [ 1443.202610][T15510] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1443.481303][T15510] XFS (loop2): Ending clean mount [ 1443.521104][T15510] XFS (loop2): Quotacheck needed: Please wait. [ 1443.615851][T15510] XFS (loop2): Quotacheck: Done. [ 1443.637785][T15509] usb 9-1: BOGUS urb xfer, pipe 0 != type 1 [ 1443.819273][T12079] usb 9-1: USB disconnect, device number 66 [ 1443.819264][ C0] usb 9-1: Unable to submit urb #2: -19 at snd_usb_queue_pending_output_urbs [ 1443.835702][T15509] usb 9-1: cannot submit urb 0, error -19: no device [ 1443.847354][T15509] usb 9-1: cannot submit urb 0, error -19: no device [ 1443.855594][T15509] usb 9-1: cannot submit urb 0, error -19: no device [ 1443.893579][ T5797] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1443.947996][T11724] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1444.169896][T11724] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1444.190910][T11724] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1444.213818][T11724] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.249508][T11724] spcp8x5 8-1:1.0: required endpoints missing [ 1444.898170][T11724] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1445.080224][T11724] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1445.097804][T11724] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1445.106909][T11724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.140973][T11724] idmouse 6-1:1.0: Unable to find bulk-in endpoint. [ 1445.987695][T12079] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1446.197781][T12079] usb 9-1: Using ep0 maxpacket: 8 [ 1446.924038][T12079] usb 9-1: no configurations [ 1446.930796][T12079] usb 9-1: can't read configurations, error -22 [ 1447.007232][ T57] usb 8-1: USB disconnect, device number 31 [ 1447.097736][T12079] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1447.287689][T12079] usb 9-1: Using ep0 maxpacket: 8 [ 1447.308853][T12079] usb 9-1: no configurations [ 1447.318882][T12079] usb 9-1: can't read configurations, error -22 [ 1447.348007][T12079] usb usb9-port1: attempt power cycle [ 1447.755940][ T57] usb 6-1: USB disconnect, device number 40 [ 1447.777709][T12079] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1447.848176][T12079] usb 9-1: Using ep0 maxpacket: 8 [ 1447.856082][T12079] usb 9-1: no configurations [ 1447.868104][T12079] usb 9-1: can't read configurations, error -22 [ 1448.027956][T12079] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1448.058808][T12079] usb 9-1: Using ep0 maxpacket: 8 [ 1448.068158][T12079] usb 9-1: no configurations [ 1448.076312][T12079] usb 9-1: can't read configurations, error -22 [ 1448.090293][T12079] usb usb9-port1: unable to enumerate USB device [ 1449.356748][T15607] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1449.577852][T12079] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1449.743806][T15619] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2367'. [ 1449.772556][T15619] syzkaller1: entered promiscuous mode [ 1449.773105][T12079] usb 6-1: Using ep0 maxpacket: 16 [ 1449.778192][T15619] syzkaller1: entered allmulticast mode [ 1449.822519][T12079] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.835572][T12079] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1449.855302][T12079] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1449.871370][T12079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.883731][T12079] usb 6-1: Product: syz [ 1449.888369][T12079] usb 6-1: Manufacturer: syz [ 1449.893232][T12079] usb 6-1: SerialNumber: syz [ 1450.314202][T12079] usb 6-1: 0:2 : does not exist [ 1450.613199][T12079] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1450.828934][T12079] usb 6-1: USB disconnect, device number 41 [ 1450.872078][T15626] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1450.935372][T15095] udevd[15095]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1453.061021][T15629] loop7: detected capacity change from 0 to 49152 [ 1453.214467][T15629] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: journalled. [ 1453.296725][T15648] loop8: detected capacity change from 0 to 2048 [ 1453.298752][T15629] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1453.429651][T15648] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1453.451810][T15650] ubi0: attaching mtd0 [ 1453.472846][T15650] ubi0: scanning is finished [ 1453.484800][T15650] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1453.501678][ T9515] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.599906][T15652] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1453.616786][T15650] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1453.648133][T15648] syz.8.2377: attempt to access beyond end of device [ 1453.648133][T15648] loop8: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1454.257950][T15654] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2380'. [ 1454.819917][T15655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2380'. [ 1454.830321][T15655] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2380'. [ 1454.839969][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2380'. [ 1455.494733][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1455.506500][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1455.547830][T15648] Remounting filesystem read-only [ 1455.588071][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1455.612836][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1455.639334][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1455.658230][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1455.686997][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1455.707961][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1455.738863][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1455.757767][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1455.785984][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1455.796544][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1455.811118][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1455.822718][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1455.836137][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1455.856941][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1455.886099][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1455.917437][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1455.929550][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1455.943897][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1455.959147][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1455.970391][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1455.981185][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1456.007671][T11724] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1456.015925][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1456.047782][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1456.064489][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1456.076254][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1456.086978][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1456.118305][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1456.136794][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1456.156669][T15648] NILFS (loop8): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1456.172795][T15648] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1456.192135][ T27] audit: type=1800 audit(1794485522.801:62): pid=15648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2377" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1456.193699][T15663] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1456.220533][T11724] usb 8-1: Using ep0 maxpacket: 8 [ 1456.238245][T11724] usb 8-1: no configurations [ 1456.242920][T11724] usb 8-1: can't read configurations, error -22 [ 1456.272856][T15648] syz.8.2377 (15648) used greatest stack depth: 18896 bytes left [ 1456.407754][T11724] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1456.607826][T11724] usb 8-1: Using ep0 maxpacket: 8 [ 1456.614005][T11724] usb 8-1: no configurations [ 1456.625957][T11724] usb 8-1: can't read configurations, error -22 [ 1456.644548][T11724] usb usb8-port1: attempt power cycle [ 1456.708757][ T9] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1456.911505][ T9] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1456.924464][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.940115][ T9] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1456.949785][ T9] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1456.958254][ T9] usb 9-1: Manufacturer: syz [ 1456.966200][ T9] usb 9-1: config 0 descriptor?? [ 1456.988023][ T5886] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1457.087925][T11724] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1457.100919][ T9] rc_core: IR keymap rc-hauppauge not found [ 1457.106911][ T9] Registered IR keymap rc-empty [ 1457.117305][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1457.129938][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input11 [ 1457.142692][T11724] usb 8-1: Using ep0 maxpacket: 8 [ 1457.150959][T11724] usb 8-1: no configurations [ 1457.155652][T11724] usb 8-1: can't read configurations, error -22 [ 1457.188316][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 1457.213574][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.245336][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1457.267493][ T5886] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1457.285164][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.304524][ T5886] usb 3-1: Product: syz [ 1457.827999][T15684] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2389'. [ 1458.286007][T15685] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2389'. [ 1458.296858][T15685] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2389'. [ 1458.306490][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2389'. [ 1459.211052][T11724] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1459.223400][ C0] igorplugusb 9-1:0.0: receive overflow invalid: 187 [ 1459.260333][ T5886] usb 3-1: Manufacturer: syz [ 1459.267694][T11724] usb 8-1: device descriptor read/8, error -71 [ 1459.296992][ T5886] usb 3-1: SerialNumber: syz [ 1459.394436][T11724] usb usb8-port1: unable to enumerate USB device [ 1459.433370][ T9] usb 9-1: USB disconnect, device number 71 [ 1459.528740][ T5886] usb 3-1: 0:2 : does not exist [ 1459.550947][ T5886] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1459.591857][ T5886] usb 3-1: USB disconnect, device number 60 [ 1459.655098][T15095] udevd[15095]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1460.425964][T15704] FAULT_INJECTION: forcing a failure. [ 1460.425964][T15704] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1460.458149][T15704] CPU: 0 PID: 15704 Comm: syz.7.2396 Not tainted syzkaller #0 [ 1460.465702][T15704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1460.475815][T15704] Call Trace: [ 1460.479145][T15704] [ 1460.482148][T15704] dump_stack_lvl+0x18c/0x250 [ 1460.486890][T15704] ? show_regs_print_info+0x20/0x20 [ 1460.492234][T15704] ? load_image+0x420/0x420 [ 1460.496896][T15704] ? __lock_acquire+0x1431/0x7eb0 [ 1460.502016][T15704] should_fail_ex+0x394/0x4c0 [ 1460.506762][T15704] get_futex_key+0x16a/0xf40 [ 1460.511410][T15704] ? futex_setup_timer+0xc0/0xc0 [ 1460.516407][T15704] futex_wake+0x127/0x4f0 [ 1460.520815][T15704] ? futex_wake_mark+0x150/0x150 [ 1460.525815][T15704] do_futex+0x35d/0x3e0 [ 1460.529998][T15704] ? __might_fault+0xaa/0x120 [ 1460.534712][T15704] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1460.540634][T15704] ? __might_fault+0xc6/0x120 [ 1460.545347][T15704] mm_release+0x184/0x3a0 [ 1460.549704][T15704] ? exit_mm_release+0x30/0x30 [ 1460.554507][T15704] ? lockdep_hardirqs_on+0x98/0x150 [ 1460.559744][T15704] exit_mm+0xa4/0x340 [ 1460.563790][T15704] ? sysctl_delayacct+0x220/0x220 [ 1460.568886][T15704] ? do_exit+0x2530/0x2530 [ 1460.573346][T15704] ? tty_audit_exit+0x14d/0x1f0 [ 1460.578239][T15704] do_exit+0x909/0x2530 [ 1460.582481][T15704] ? put_task_struct+0xc0/0xc0 [ 1460.587307][T15704] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1460.593348][T15704] ? get_signal+0x100e/0x1390 [ 1460.598144][T15704] ? lock_chain_count+0x20/0x20 [ 1460.603058][T15704] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1460.608357][T15704] do_group_exit+0x22d/0x2f0 [ 1460.612994][T15704] ? lockdep_hardirqs_on+0x98/0x150 [ 1460.618230][T15704] get_signal+0x12a6/0x1390 [ 1460.622791][T15704] arch_do_signal_or_restart+0xc2/0x7b0 [ 1460.628394][T15704] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1460.634392][T15704] ? get_sigframe_size+0x20/0x20 [ 1460.639385][T15704] ? exit_to_user_mode_loop+0x3b/0x110 [ 1460.644882][T15704] exit_to_user_mode_loop+0x70/0x110 [ 1460.650355][T15704] exit_to_user_mode_prepare+0xee/0x180 [ 1460.655958][T15704] syscall_exit_to_user_mode+0x1a/0x50 [ 1460.661462][T15704] do_syscall_64+0x61/0xb0 [ 1460.665927][T15704] ? clear_bhb_loop+0x40/0x90 [ 1460.670666][T15704] ? clear_bhb_loop+0x40/0x90 [ 1460.675432][T15704] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1460.681499][T15704] RIP: 0033:0x7f7e549a8fd9 [ 1460.685955][T15704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.705611][T15704] RSP: 002b:00007f7e557e30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1460.714075][T15704] RAX: fffffffffffffe00 RBX: 00007f7e54c25fa8 RCX: 00007f7e549a8fd9 [ 1460.722102][T15704] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7e54c25fa8 [ 1460.730134][T15704] RBP: 00007f7e54c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1460.738161][T15704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1460.746170][T15704] R13: 00007f7e54c26038 R14: 00007ffd47223960 R15: 00007ffd47223a48 [ 1460.754215][T15704] [ 1461.298027][T15710] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2398'. [ 1461.858252][T15711] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2398'. [ 1461.868488][T15711] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2398'. [ 1461.877859][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2398'. [ 1462.583400][T15715] block nbd7: not configured, cannot reconfigure [ 1462.957714][T12079] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1463.058457][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1463.147684][T12079] usb 6-1: Using ep0 maxpacket: 8 [ 1463.159817][T12079] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1463.167471][T12079] usb 6-1: can't read configurations, error -61 [ 1463.247808][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1463.255658][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.266401][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1463.280477][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1463.291091][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.300549][ T9] usb 3-1: Product: syz [ 1463.304979][ T9] usb 3-1: Manufacturer: syz [ 1463.311177][ T9] usb 3-1: SerialNumber: syz [ 1463.347829][T12079] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1463.546437][ T9] usb 3-1: 0:2 : does not exist [ 1463.548175][T12079] usb 6-1: Using ep0 maxpacket: 8 [ 1463.562412][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1463.574329][T12079] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1463.587499][T12079] usb 6-1: can't read configurations, error -61 [ 1463.597530][T12079] usb usb6-port1: attempt power cycle [ 1463.611254][ T9] usb 3-1: USB disconnect, device number 61 [ 1463.673144][T15095] udevd[15095]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1464.307943][T15735] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2409'. [ 1464.868879][T15736] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2409'. [ 1464.879144][T15736] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2409'. [ 1464.888699][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2409'. [ 1465.597769][T12079] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1465.829902][T12079] usb 6-1: device not accepting address 44, error -71 [ 1466.097890][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1466.178211][ T971] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1466.292697][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1466.306838][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.316346][ T9] usb 3-1: Product: syz [ 1466.326405][ T9] usb 3-1: Manufacturer: syz [ 1466.335164][ T9] usb 3-1: SerialNumber: syz [ 1466.352732][T15752] loop8: detected capacity change from 0 to 16 [ 1466.378468][ T971] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1466.409565][T15752] erofs: (device loop8): mounted with root inode @ nid 36. [ 1466.428097][ T971] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1466.445686][T11724] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1466.458898][T15752] syz.8.2411: attempt to access beyond end of device [ 1466.458898][T15752] loop8: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1466.476286][ T971] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1466.496002][ T971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.512725][T15752] erofs: (device loop8): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 1466.523031][T15752] syz.8.2411: attempt to access beyond end of device [ 1466.523031][T15752] loop8: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 1466.543038][ T971] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 1466.564585][ T971] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 1466.579600][T15752] syz.8.2411: attempt to access beyond end of device [ 1466.579600][T15752] loop8: rw=524288, sector=8669626376, nr_sectors = 16 limit=16 [ 1466.612901][T15752] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4351] [ 1466.626046][T15752] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1466.642857][ T27] audit: type=1800 audit(1794485533.261:63): pid=15752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2411" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 1467.747974][T15761] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2419'. [ 1468.214907][T15762] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2419'. [ 1468.226485][T15762] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2419'. [ 1468.236302][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2419'. [ 1469.324495][T11724] usb 3-1: Service connection timeout for: 256 [ 1469.338416][T11724] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1469.403889][T11724] ath9k_htc: Failed to initialize the device [ 1469.453880][T11724] usb 3-1: ath9k_htc: USB layer deinitialized [ 1469.477421][ T9] usb 8-1: USB disconnect, device number 36 [ 1469.523374][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1469.542245][ T9] spcp8x5 8-1:1.0: device disconnected [ 1469.573101][ T57] usb 3-1: USB disconnect, device number 62 [ 1469.782027][T15772] tipc: Enabled bearer , priority 10 [ 1469.799080][T15771] tipc: Resetting bearer [ 1469.879418][T15771] tipc: Disabling bearer [ 1470.077829][ T9] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1470.324312][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1470.358044][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.397801][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1470.477871][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1470.477917][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.477939][ T9] usb 8-1: Product: syz [ 1470.477956][ T9] usb 8-1: Manufacturer: syz [ 1470.477972][ T9] usb 8-1: SerialNumber: syz [ 1470.519535][T15776] BUG: unable to handle page fault for address: fffff52004757200 [ 1470.519556][T15776] #PF: supervisor read access in kernel mode [ 1470.519567][T15776] #PF: error_code(0x0000) - not-present page [ 1470.519595][T15776] PGD 23ffed067 P4D 23ffed067 PUD 1ae4a067 PMD 0 [ 1470.519666][T15776] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1470.519799][T15776] CPU: 1 PID: 15776 Comm: syz.8.2425 Not tainted syzkaller #0 [ 1470.519821][T15776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1470.519834][T15776] RIP: 0010:sys_imageblit+0x1889/0x25d0 [ 1470.519939][T15776] Code: 89 74 24 10 0f 85 e8 02 00 00 0f b6 46 ff c1 e8 07 21 d0 8b 9c 84 c0 00 00 00 4c 8b 7c 24 30 4b 8d 3c 37 48 89 f8 48 c1 e8 03 <0f> b6 04 08 84 c0 0f 85 f8 02 00 00 43 89 1c 37 0f b6 46 ff c1 e8 [ 1470.519959][T15776] RSP: 0018:ffffc9000479f3a0 EFLAGS: 00010a06 [ 1470.519982][T15776] RAX: 1ffff92004757200 RBX: 0000000000000000 RCX: dffffc0000000000 [ 1470.519997][T15776] RDX: 0000000000000001 RSI: ffff88801cb2c001 RDI: ffffc90023ab9000 [ 1470.520012][T15776] RBP: ffffc9000479f520 R08: ffff8880281a9e00 R09: 0000000000000003 [ 1470.520027][T15776] R10: 0000000000000004 R11: 0000000000000002 R12: 0000000000000010 [ 1470.520038][T15776] R13: 1ffff11003965800 R14: 0000000000000000 R15: ffffc90023ab9000 [ 1470.520053][T15776] FS: 00007fb40c8766c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1470.520071][T15776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1470.520087][T15776] CR2: fffff52004757200 CR3: 000000005f47c000 CR4: 00000000003506e0 [ 1470.520106][T15776] DR0: 0000000000000008 DR1: 000000000000000b DR2: 0000000000000006 [ 1470.520119][T15776] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1470.520133][T15776] Call Trace: [ 1470.520141][T15776] [ 1470.520159][T15776] ? sys_copyarea+0x2530/0x2530 [ 1470.520196][T15776] ? try_to_wake_up+0x6c3/0x10e0 [ 1470.520223][T15776] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 1470.520295][T15776] ccw_putcs+0xf2a/0x11e0 [ 1470.520345][T15776] ? ccw_clear+0x250/0x250 [ 1470.520376][T15776] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 1470.520412][T15776] ? fb_get_color_depth+0x162/0x280 [ 1470.520456][T15776] fbcon_putcs+0x35c/0x520 [ 1470.520484][T15776] ? ccw_clear+0x250/0x250 [ 1470.520512][T15776] do_update_region+0x4e9/0x640 [ 1470.520540][T15776] ? __asan_memcpy+0x40/0x70 [ 1470.520579][T15776] ? hide_cursor+0x320/0x320 [ 1470.520604][T15776] redraw_screen+0xa30/0x1000 [ 1470.520631][T15776] ? clear_buffer_attributes+0x320/0x320 [ 1470.520653][T15776] ? vc_do_resize+0x1087/0x17f0 [ 1470.520677][T15776] vc_do_resize+0x1256/0x17f0 [ 1470.520714][T15776] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1470.520739][T15776] ? vc_resize+0x50/0x50 [ 1470.520769][T15776] vt_resizex+0x3f0/0x5a0 [ 1470.520828][T15776] ? vt_disallocate+0x90/0x90 [ 1470.520856][T15776] ? security_capable+0x89/0xb0 [ 1470.520885][T15776] vt_ioctl+0x125f/0x1f20 [ 1470.520915][T15776] ? __vt_event_wait+0x260/0x260 [ 1470.520949][T15776] ? __fget_files+0x28/0x460 [ 1470.520983][T15776] ? tty_jobctrl_ioctl+0x378/0xba0 [ 1470.521008][T15776] tty_ioctl+0x91e/0xdc0 [ 1470.521066][T15776] ? tty_get_icount+0xb0/0xb0 [ 1470.521088][T15776] __se_sys_ioctl+0xfd/0x170 [ 1470.521118][T15776] do_syscall_64+0x55/0xb0 [ 1470.521147][T15776] ? clear_bhb_loop+0x40/0x90 [ 1470.521177][T15776] ? clear_bhb_loop+0x40/0x90 [ 1470.521207][T15776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1470.521237][T15776] RIP: 0033:0x7fb40b9a8fd9 [ 1470.521256][T15776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1470.521274][T15776] RSP: 002b:00007fb40c876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1470.521298][T15776] RAX: ffffffffffffffda RBX: 00007fb40bc25fa0 RCX: 00007fb40b9a8fd9 [ 1470.521315][T15776] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000006 [ 1470.521329][T15776] RBP: 00007fb40ba37fed R08: 0000000000000000 R09: 0000000000000000 [ 1470.521343][T15776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1470.521356][T15776] R13: 00007fb40bc26038 R14: 00007fb40bc25fa0 R15: 00007ffdd1ae6038 [ 1470.521382][T15776] [ 1470.521403][T15776] Modules linked in: [ 1470.521423][T15776] CR2: fffff52004757200 [ 1470.521443][T15776] ---[ end trace 0000000000000000 ]--- [ 1470.521452][T15776] RIP: 0010:sys_imageblit+0x1889/0x25d0 [ 1470.521484][T15776] Code: 89 74 24 10 0f 85 e8 02 00 00 0f b6 46 ff c1 e8 07 21 d0 8b 9c 84 c0 00 00 00 4c 8b 7c 24 30 4b 8d 3c 37 48 89 f8 48 c1 e8 03 <0f> b6 04 08 84 c0 0f 85 f8 02 00 00 43 89 1c 37 0f b6 46 ff c1 e8 [ 1470.521503][T15776] RSP: 0018:ffffc9000479f3a0 EFLAGS: 00010a06 [ 1470.521520][T15776] RAX: 1ffff92004757200 RBX: 0000000000000000 RCX: dffffc0000000000 [ 1470.521535][T15776] RDX: 0000000000000001 RSI: ffff88801cb2c001 RDI: ffffc90023ab9000 [ 1470.521551][T15776] RBP: ffffc9000479f520 R08: ffff8880281a9e00 R09: 0000000000000003 [ 1470.521565][T15776] R10: 0000000000000004 R11: 0000000000000002 R12: 0000000000000010 [ 1470.521578][T15776] R13: 1ffff11003965800 R14: 0000000000000000 R15: ffffc90023ab9000 [ 1470.521593][T15776] FS: 00007fb40c8766c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1470.521612][T15776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1470.521627][T15776] CR2: fffff52004757200 CR3: 000000005f47c000 CR4: 00000000003506e0 [ 1470.521645][T15776] DR0: 0000000000000008 DR1: 000000000000000b DR2: 0000000000000006 [ 1470.521658][T15776] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1470.521704][T15776] Kernel panic - not syncing: Fatal exception [ 1470.522228][T15776] Kernel Offset: disabled