last executing test programs: 43.582299405s ago: executing program 2 (id=708): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000), 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 43.483147373s ago: executing program 2 (id=709): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x40203, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) dup(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) 41.425189609s ago: executing program 2 (id=716): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfc}}, 0x0) 41.156630241s ago: executing program 2 (id=720): syz_clone(0x2802000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 40.982202004s ago: executing program 2 (id=722): r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'wg2\x00', {0x9}, 0x1}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000001080)=0x4, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0xecb6bcbdeffb5fd9, 0x17, 0x50, {0x50, 0x3b, "fc8c51a84c6fab6a95b70dac52e6631d6ee1d0296234ebdf023d2c738d4e39af11dcc3a9dc84ab97594baf578b849875b152fedf8eff0884f435fc06a41c6c3c75a67bdce35b76c28f07aafdd710"}}, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfd, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x0, 0x4, {@in6_addr=@mcast1}}}]}, 0x38}}, 0x20000050) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x7ffa, 0xba1c, 0x40, 0x0, 0x39) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000140)=0xfff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) r10 = syz_open_dev$mouse(&(0x7f0000000040), 0x372b3ccb, 0x40000) close_range(0xffffffffffffffff, r10, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) socket$inet6(0xa, 0x805, 0x0) 40.638797482s ago: executing program 2 (id=724): syz_io_uring_setup(0x18d7, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000800) close(0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x1}}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 40.448317438s ago: executing program 32 (id=724): syz_io_uring_setup(0x18d7, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000800) close(0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x1}}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.768263295s ago: executing program 1 (id=949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb984"], 0xfdef) 4.407151134s ago: executing program 1 (id=952): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) 4.114315378s ago: executing program 1 (id=954): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, 0x0) 2.47386609s ago: executing program 5 (id=969): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}, 0x400007}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) 2.460867731s ago: executing program 0 (id=970): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000110001040000000000000000f70a", @ANYRES32], 0x28}}, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, 0xffffffffffffffff, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)={{0x0, 0xdddd0000, 0xe, 0x1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0x3, 0x0, 0x6, 0x5}, {0xd000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x6000, 0xa, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x8000000, 0xd000, 0x10, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9f, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xeeeef004, 0x8000000, 0xd, 0x5, 0x3, 0x5, 0xa, 0x3, 0x54, 0xc, 0x2, 0x3}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x60000023, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x10, 0x1ff, 0xc5]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000403508"]) 2.321482432s ago: executing program 5 (id=975): syz_open_procfs(0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0xecb6bcbdeffb5fd9, 0x17, 0x50, {0x50, 0x3b, "fc8c51a84c6fab6a95b70dac52e6631d6ee1d0296234ebdf023d2c738d4e39af11dcc3a9dc84ab97594baf578b849875b152fedf8eff0884f435fc06a41c6c3c75a67bdce35b76c28f07aafdd710"}}, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x4, {@in6_addr=@mcast1}}}]}, 0x38}}, 0x20000050) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) 2.243242369s ago: executing program 4 (id=976): syz_open_dev$tty1(0xc, 0x4, 0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) close(0x3) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x67) 2.145247847s ago: executing program 0 (id=977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0xf0, 0x40, 0x9, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xe, 0x9, 0x8, 0x83, 0x6, 0x8, 0x5, 0xf, 0x6, 0xca}, {0xeeee0000, 0x80a0000, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0xeeee8000, 0xf000, 0x10, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0xdddd1000, 0xf, 0x9d, 0x1, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf9}, {0xffff1000, 0x1000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0xa5c}, 0x40010000, 0x0, 0xf000, 0x40201, 0x5, 0x100, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000003f08"]) 1.997723178s ago: executing program 0 (id=978): r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'wg2\x00', {0x9}, 0x1}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000001080)=0x4, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0xecb6bcbdeffb5fd9, 0x17, 0x50, {0x50, 0x3b, "fc8c51a84c6fab6a95b70dac52e6631d6ee1d0296234ebdf023d2c738d4e39af11dcc3a9dc84ab97594baf578b849875b152fedf8eff0884f435fc06a41c6c3c75a67bdce35b76c28f07aafdd710"}}, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfd, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x4, {@in6_addr=@mcast1}}}]}, 0x38}}, 0x20000050) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r9 = io_uring_setup(0x335e, 0x0) io_uring_enter(r4, 0x7ffa, 0xba1c, 0x40, 0x0, 0x39) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000140)=0xfff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) dup3(r1, r9, 0x80000) r10 = syz_open_dev$mouse(&(0x7f0000000040), 0x372b3ccb, 0x40000) close_range(0xffffffffffffffff, r10, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) socket$inet6(0xa, 0x805, 0x0) 1.557123344s ago: executing program 3 (id=980): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x10, 0x0, &(0x7f0000000080)=[@request_death], 0x0, 0x0, 0x0}) 1.474797291s ago: executing program 3 (id=981): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp(0xa, 0x2, 0x3a) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) pipe2$9p(&(0x7f00000001c0), 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x80000000, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x50f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1fe, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.47413133s ago: executing program 4 (id=982): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20000081, &(0x7f0000000240)={0x6, 0x1, 0x0, 0x1, 0xa4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.320275983s ago: executing program 4 (id=983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x311e, 0x47}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000010}, 0x40841) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x101002, 0x0, 0x2e}, 0x18) openat2(r2, &(0x7f0000000200)='.\x00', &(0x7f0000000240)={0x0, 0x1d, 0x2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x2) syz_genetlink_get_family_id$tipc2(0x0, r2) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000701, 0xee01, &(0x7f00000005c0)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r4, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x492}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x44041) bind$netlink(r2, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x804) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000a40)={0x2b}, 0x8) socketpair(0x1e, 0x6, 0xff, &(0x7f0000000a80)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) 1.23838423s ago: executing program 4 (id=984): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 1.144483007s ago: executing program 3 (id=985): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x1000000}], 0x0, 0x0, 0x0}) 1.077361003s ago: executing program 3 (id=986): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/kvm\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x50) 950.138083ms ago: executing program 3 (id=987): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010027bd7000000000000a8001"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4040050) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8000, 0x100000, 0x0, 0x0, 0x100, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x800, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 847.589521ms ago: executing program 3 (id=988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mouse(0x0, 0x0, 0x125000) connect$inet(r2, &(0x7f0000000680)={0x2, 0x4e21, @loopback}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2b, 0x64, 0x79, 0x10, 0x586, 0x1500, 0x2e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa, 0xbf, 0x40, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000100)=0x4) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f0000000140)={0xf000, 0x4000}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b37, &(0x7f0000000000)={'wlan0\x00'}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) readv(r3, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/188, 0xbc}, {&(0x7f0000000580)=""/98, 0x62}], 0x7) r4 = add_key$user(&(0x7f0000000700), &(0x7f0000001b40)={'syz', 0x1}, &(0x7f0000001b80)="84b7dfb1ab4a4577e649861ba7184c2da43105b0b2a838f99a35de3295ce95d000eca48ae58045a1e858f1e8fdce341101c2ef584582617ff928c60867612275386fede17b6db62c97dd3d67bd92996df6390ebdc62843742abc433d539ad3b1a92ed999c07af10bac128d644031b6e562a8a3235c990d99f4270f769a168d59a816", 0x82, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001c40)={0x0, 0x0, r4}, &(0x7f0000001c80)=""/95, 0x5f, 0x0) 797.458215ms ago: executing program 1 (id=989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0x4, 0x7, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 690.167174ms ago: executing program 4 (id=990): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r1, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfc}}, 0x0) 645.022097ms ago: executing program 4 (id=991): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7d, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00'}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xfd4a, &(0x7f0000000300)='\x00@\x00\x00\xfd\xff\bn\x10\xc1\x1c\xe5W\xdf\xad\x96\x14D\a\fK\x9d\xb1y$\xe7\xc5\x049\xf0\x89\x9f\x9b\x04\"R@|I\x1efm\xb6G\xd3\xc2\x9c\xaa7\x83pt\x7f\xab\xd8[&U\xe3\xcfe\xbf\x1a\xbe\x88\xee\x9fz\x87>\x9fR\xc9@v3f'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) ioprio_set$pid(0x0, 0x0, 0x4007) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r7, r6, &(0x7f0000002700)=0x1, 0x8) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x4, r10, 0x1, 0x80, 0x6, @remote}, 0x14) 643.119117ms ago: executing program 1 (id=992): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) 573.249263ms ago: executing program 1 (id=993): syz_open_dev$tty1(0xc, 0x4, 0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) close(0x3) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x67) 355.862201ms ago: executing program 5 (id=994): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) read$FUSE(r0, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) setuid(0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480), 0x100) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 258.217479ms ago: executing program 5 (id=995): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@llc_tr={0x11, {@llc={0xf4, 0xfe, "f75d", "9fd7bc41fc358b437507bb8ed39308696f36c1df7279538d82e037421170f0664721bfc48bea42d20fd83adc5d2c3ff6a898c09842b02194418c8d9250f0d52bc273900589c98f7af21ee536920e0b88b539a84444ba1fefe3c066b87ff949bd"}}}}}}, 0x14) 170.830046ms ago: executing program 5 (id=996): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x78e, 0x101, 0x182, 0x400000004, 0xffffffffffffffff, 0xf1, 0x5, 0xfffffffffffffd7e, 0x45, 0x80000000, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x10000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 125.2448ms ago: executing program 0 (id=997): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xb33, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x32, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000015}, 0x200400b1) 2.40133ms ago: executing program 0 (id=998): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000120019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000224effffffff", 0x58}], 0x1) 2.054749ms ago: executing program 5 (id=999): socket$nl_route(0x10, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8000, 0x100000, 0x0, 0x0, 0x100, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x800, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1000): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x9, 0x2, 0x3, 0x2}, 0x8) setuid(0xee00) syslog(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r4, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r4, 0x0) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de90000040"]) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): rface, different from the descriptor's value: 4 [ 177.920040][ T4227] usb 4-1: config 128 has no interface number 0 [ 177.920076][ T4227] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.920100][ T4227] usb 4-1: config 128 interface 127 has no altsetting 0 [ 178.019999][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'. [ 178.039315][ T1347] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 178.079231][ T4227] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 178.105455][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.132563][ T4227] usb 4-1: Product: syz [ 178.138074][ T4227] usb 4-1: Manufacturer: syz [ 178.158945][ T4227] usb 4-1: SerialNumber: syz [ 178.189439][ T4294] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 178.282580][ T1347] usb 3-1: Using ep0 maxpacket: 16 [ 178.399227][ T4294] usb 2-1: device descriptor read/64, error -71 [ 178.419301][ T1347] usb 3-1: config 0 interface 0 has no altsetting 0 [ 178.619366][ T1347] usb 3-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.9c [ 178.633576][ T4227] snd-usb-audio: probe of 4-1:128.127 failed with error -12 [ 178.636867][ T1347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.656604][ T1347] usb 3-1: Product: syz [ 178.661898][ T4227] usb 4-1: USB disconnect, device number 27 [ 178.661931][ T1347] usb 3-1: Manufacturer: syz [ 178.669137][ T4294] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 178.682490][ T1347] usb 3-1: SerialNumber: syz [ 178.706815][ T1347] usb 3-1: config 0 descriptor?? [ 178.720336][ T4291] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 178.756700][ T5799] tipc: Enabled bearer , priority 0 [ 178.761600][ T1347] usb 3-1: selecting invalid altsetting 1 [ 178.772992][ T1347] snd-usb-caiaq 3-1:0.0: can't set alt interface. [ 178.780480][ T1347] usb 3-1: unable to init card! (ret=-5) [ 178.786488][ T1347] snd-usb-caiaq: probe of 3-1:0.0 failed with error -5 [ 178.810799][ T5799] tipc: Resetting bearer [ 178.828247][ T5798] tipc: Disabling bearer [ 178.899035][ T4294] usb 2-1: device descriptor read/64, error -71 [ 178.934517][ T4717] udevd[4717]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.959124][ T4291] usb 5-1: Using ep0 maxpacket: 16 [ 179.019584][ T4294] usb usb2-port1: attempt power cycle [ 179.079058][ T4291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 179.098949][ T4291] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 179.118946][ T4291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 179.139568][ T4291] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 179.309697][ T4291] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 179.319301][ T4291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.327886][ T4291] usb 5-1: Product: syz [ 179.332640][ T4291] usb 5-1: Manufacturer: syz [ 179.337507][ T4291] usb 5-1: SerialNumber: syz [ 179.345394][ T4291] usb 5-1: config 0 descriptor?? [ 179.390311][ T4291] omninet 5-1:0.0: ZyXEL - omni.net usb converter detected [ 179.403772][ T4291] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 179.429115][ T4294] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 179.529199][ T4294] usb 2-1: device descriptor read/8, error -71 [ 179.809027][ T4294] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 179.909223][ T4294] usb 2-1: device descriptor read/8, error -71 [ 180.029644][ T4294] usb usb2-port1: unable to enumerate USB device [ 180.557451][ T5815] syz.0.507 (5815): drop_caches: 2 [ 180.685410][ T1347] usb 3-1: USB disconnect, device number 21 [ 181.209017][ T1347] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 181.399143][ T4291] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 181.464349][ T1111] usb 5-1: USB disconnect, device number 17 [ 181.507404][ T1111] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 181.531796][ T1111] omninet 5-1:0.0: device disconnected [ 181.606133][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 181.616965][ T1347] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 181.630353][ T1347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.649004][ T4291] usb 2-1: Using ep0 maxpacket: 32 [ 181.652052][ T1347] usb 3-1: config 0 descriptor?? [ 181.676060][ T26] audit: type=1326 audit(1755932232.529:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.0.512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccf2643be9 code=0x0 [ 181.678491][ T5834] tipc: Enabled bearer , priority 0 [ 181.731487][ T1347] gspca_main: spca508-2.14.0 probing 8086:0110 [ 181.784842][ T5834] tipc: Resetting bearer [ 181.800679][ T5833] tipc: Disabling bearer [ 181.819556][ T4291] usb 2-1: unable to get BOS descriptor or descriptor too short [ 181.911989][ T4291] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 181.926472][ T4291] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 181.952580][ T4291] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 181.978356][ T4291] usb 2-1: config 128 has no interface number 0 [ 181.988617][ T4291] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.005068][ T4291] usb 2-1: config 128 interface 127 has no altsetting 0 [ 182.169357][ T4291] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 182.188044][ T4291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.208979][ T4257] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 182.226473][ T4291] usb 2-1: Product: syz [ 182.235547][ T4291] usb 2-1: Manufacturer: syz [ 182.244698][ T4291] usb 2-1: SerialNumber: syz [ 182.469068][ T1347] gspca_spca508: reg_read err -110 [ 182.479183][ T4257] usb 4-1: Using ep0 maxpacket: 32 [ 182.489565][ T1347] gspca_spca508: reg_read err -32 [ 182.519116][ T1347] gspca_spca508: reg_read err -32 [ 182.539155][ T1347] gspca_spca508: reg_read err -32 [ 182.559246][ T1347] gspca_spca508: reg write: error -32 [ 182.572080][ T1347] spca508: probe of 3-1:0.0 failed with error -32 [ 182.659132][ T4257] usb 4-1: unable to get BOS descriptor or descriptor too short [ 182.732500][ T4291] snd-usb-audio: probe of 2-1:128.127 failed with error -12 [ 182.771372][ T4291] usb 2-1: USB disconnect, device number 27 [ 182.774639][ T4257] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 182.819148][ T4257] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 182.839798][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.896951][ T4257] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 182.919032][ T4257] usb 4-1: config 128 has no interface number 0 [ 182.947970][ T4257] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.973706][ T4257] usb 4-1: config 128 interface 127 has no altsetting 0 [ 183.099826][ T1347] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 183.118192][ T1347] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 183.185906][ T4257] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 183.204970][ T4257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.213862][ T4257] usb 4-1: Product: syz [ 183.222785][ T4257] usb 4-1: Manufacturer: syz [ 183.227893][ T4257] usb 4-1: SerialNumber: syz [ 183.399051][ T1347] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 183.699131][ T1347] usb 2-1: Using ep0 maxpacket: 16 [ 183.723404][ T4257] snd-usb-audio: probe of 4-1:128.127 failed with error -12 [ 183.747477][ T4257] usb 4-1: USB disconnect, device number 28 [ 183.786894][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.807965][ T1111] usb 3-1: USB disconnect, device number 22 [ 183.819216][ T1347] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.826133][ T4222] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 183.992986][ T1347] usb 2-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.9c [ 184.007926][ T1347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.027010][ T4222] usb 1-1: device descriptor read/64, error -71 [ 184.039042][ T1347] usb 2-1: Product: syz [ 184.043351][ T1347] usb 2-1: Manufacturer: syz [ 184.054217][ T1347] usb 2-1: SerialNumber: syz [ 184.057287][ T5858] syz.2.523 (5858): drop_caches: 2 [ 184.080424][ T1347] usb 2-1: config 0 descriptor?? [ 184.146428][ T1347] usb 2-1: selecting invalid altsetting 1 [ 184.164967][ T1347] snd-usb-caiaq 2-1:0.0: can't set alt interface. [ 184.179006][ T4291] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 184.182999][ T1347] usb 2-1: unable to init card! (ret=-5) [ 184.204565][ T1347] snd-usb-caiaq: probe of 2-1:0.0 failed with error -5 [ 184.309059][ T4222] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 184.499067][ T4222] usb 1-1: device descriptor read/64, error -71 [ 184.599194][ T4291] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 184.608629][ T4291] usb 5-1: config 0 has no interface number 0 [ 184.619261][ T4222] usb usb1-port1: attempt power cycle [ 184.648250][ T5866] tipc: Enabled bearer , priority 0 [ 184.666721][ T5866] tipc: Resetting bearer [ 184.679102][ T1111] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 184.687819][ T5865] tipc: Disabling bearer [ 184.799321][ T4291] usb 5-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 184.818929][ T4291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.827956][ T4291] usb 5-1: Product: syz [ 184.848954][ T4291] usb 5-1: Manufacturer: syz [ 184.853793][ T4291] usb 5-1: SerialNumber: syz [ 184.879740][ T4291] usb 5-1: config 0 descriptor?? [ 184.914869][ T26] audit: type=1326 audit(1755932235.769:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddbef46be9 code=0x0 [ 184.943855][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 185.029144][ T4222] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 185.075946][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 185.086612][ T1111] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 185.097778][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 185.109546][ T1111] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 185.120625][ T4222] usb 1-1: device descriptor read/8, error -71 [ 185.141524][ T5853] udc-core: couldn't find an available UDC or it's busy [ 185.149775][ T5853] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 185.159333][ T5853] udc-core: couldn't find an available UDC or it's busy [ 185.166934][ T5853] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 185.181334][ T5853] udc-core: couldn't find an available UDC or it's busy [ 185.189582][ T5853] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 185.219222][ T4291] kaweth 5-1:0.58: Firmware present in device. [ 185.240287][ T4291] kaweth 5-1:0.58: Error reading configuration (-71), no net device created [ 185.250384][ T4291] kaweth: probe of 5-1:0.58 failed with error -5 [ 185.267472][ T4291] usb 5-1: USB disconnect, device number 18 [ 185.279313][ T1111] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 185.289829][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.298835][ T1111] usb 3-1: Product: syz [ 185.304110][ T1111] usb 3-1: Manufacturer: syz [ 185.312792][ T1111] usb 3-1: SerialNumber: syz [ 185.332932][ T1111] usb 3-1: config 0 descriptor?? [ 185.371040][ T1111] omninet 3-1:0.0: ZyXEL - omni.net usb converter detected [ 185.383771][ T1111] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 185.393061][ T4222] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 185.489188][ T4222] usb 1-1: device descriptor read/8, error -71 [ 185.609151][ T4222] usb usb1-port1: unable to enumerate USB device [ 186.102768][ T4222] usb 2-1: USB disconnect, device number 28 [ 186.934234][ T5891] syz.4.534 (5891): drop_caches: 2 [ 186.999079][ T1111] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 187.045755][ T5902] netlink: 16 bytes leftover after parsing attributes in process `syz.4.539'. [ 187.179013][ T4227] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 187.379679][ T1111] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 187.394480][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.414204][ T4294] usb 3-1: USB disconnect, device number 23 [ 187.441408][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 187.453995][ T1111] usb 1-1: config 0 descriptor?? [ 187.455685][ T4294] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 187.477410][ T4294] omninet 3-1:0.0: device disconnected [ 187.511563][ T1111] gspca_main: spca508-2.14.0 probing 8086:0110 [ 187.639164][ T4227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.759293][ T4227] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 187.773599][ T4227] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 187.786156][ T4227] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 187.799432][ T4227] usb 4-1: config 128 has no interface number 0 [ 187.805948][ T4227] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.822111][ T4227] usb 4-1: config 128 interface 127 has no altsetting 0 [ 188.029368][ T4227] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 188.049055][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.058395][ T4227] usb 4-1: Product: syz [ 188.067982][ T4227] usb 4-1: Manufacturer: syz [ 188.075695][ T4227] usb 4-1: SerialNumber: syz [ 188.239337][ T1111] gspca_spca508: reg_read err -110 [ 188.259059][ T1111] gspca_spca508: reg_read err -32 [ 188.279088][ T1111] gspca_spca508: reg_read err -32 [ 188.309107][ T1111] gspca_spca508: reg_read err -32 [ 188.350755][ T1111] gspca_spca508: reg write: error -32 [ 188.363680][ T1111] spca508: probe of 1-1:0.0 failed with error -32 [ 188.623723][ T4227] snd-usb-audio: probe of 4-1:128.127 failed with error -12 [ 188.681028][ T4227] usb 4-1: USB disconnect, device number 29 [ 188.694310][ T5926] syz.1.550 (5926): drop_caches: 2 [ 188.732039][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.194855][ T5952] fuse: Bad value for 'fd' [ 189.675917][ T1111] usb 1-1: USB disconnect, device number 29 [ 189.751123][ T4227] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 190.150580][ T4227] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.177941][ T4227] usb 4-1: config 0 has no interface number 0 [ 190.215479][ T4227] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 190.248327][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.290082][ T4227] usb 4-1: config 0 descriptor?? [ 190.351853][ T4227] usb 4-1: selecting invalid altsetting 1 [ 190.376273][ T4227] dvb_ttusb_budget: ttusb_init_controller: error [ 190.402502][ T4227] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 190.609354][ T4227] DVB: Unable to find symbol cx22700_attach() [ 190.692537][ T4227] DVB: Unable to find symbol tda10046_attach() [ 190.718999][ T4227] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 190.767672][ T4227] usb 4-1: USB disconnect, device number 30 [ 190.833296][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 190.918360][ T5977] syz.4.565 (5977): drop_caches: 2 [ 191.443800][ T5973] input: syz1 as /devices/virtual/input/input22 [ 191.590289][ T4227] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 191.641873][ T4257] Bluetooth: hci3: command 0x0406 tx timeout [ 191.644416][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 191.687196][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 191.703320][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 191.722020][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 191.745934][ T5988] fuse: Bad value for 'fd' [ 191.871649][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 192.040996][ T4257] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 192.052872][ T5997] tipc: Enabled bearer , priority 0 [ 192.059251][ T4227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 192.064952][ T5997] device syzkaller0 entered promiscuous mode [ 192.115025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.124519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.146375][ T5996] tipc: Resetting bearer [ 192.189326][ T4227] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 192.203245][ T4227] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 192.219573][ T5996] tipc: Disabling bearer [ 192.242753][ T4227] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 192.286429][ T4227] usb 4-1: config 128 has no interface number 0 [ 192.308021][ T4227] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.348662][ T4227] usb 4-1: config 128 interface 127 has no altsetting 0 [ 192.419294][ T4257] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 192.459060][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.496479][ T4257] usb 2-1: config 0 descriptor?? [ 192.549178][ T4227] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 192.580614][ T4257] gspca_main: spca508-2.14.0 probing 8086:0110 [ 192.600614][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.636223][ T6000] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 192.674340][ T4227] usb 4-1: Product: syz [ 192.678848][ T4227] usb 4-1: Manufacturer: syz [ 192.718970][ T4227] usb 4-1: SerialNumber: syz [ 193.229201][ T4222] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 193.273124][ T4227] snd-usb-audio: probe of 4-1:128.127 failed with error -12 [ 193.304182][ T4227] usb 4-1: USB disconnect, device number 31 [ 193.319077][ T4257] gspca_spca508: reg_read err -110 [ 193.339279][ T4257] gspca_spca508: reg_read err -32 [ 193.369199][ T4257] gspca_spca508: reg_read err -32 [ 193.399170][ T4257] gspca_spca508: reg_read err -32 [ 193.429571][ T4257] gspca_spca508: reg write: error -32 [ 193.451601][ T4257] spca508: probe of 2-1:0.0 failed with error -32 [ 193.569795][ T4717] udevd[4717]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.669168][ T4222] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 193.687307][ T4222] usb 5-1: can't read configurations, error -61 [ 193.880886][ T4222] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 193.966290][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 194.299291][ T4222] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 194.324462][ T4222] usb 5-1: can't read configurations, error -61 [ 194.344002][ T4222] usb usb5-port1: attempt power cycle [ 194.468425][ T6020] input: syz1 as /devices/virtual/input/input23 [ 194.530974][ T6024] fuse: Bad value for 'fd' [ 194.681017][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.688822][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.710277][ T6026] tipc: Enabled bearer , priority 0 [ 194.718225][ T1347] usb 2-1: USB disconnect, device number 29 [ 194.752875][ T6025] tipc: Disabling bearer [ 194.763052][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 194.779202][ T4222] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 195.099183][ T4222] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 195.124812][ T4222] usb 5-1: can't read configurations, error -61 [ 195.262107][ T6046] syz.1.590 (6046): drop_caches: 2 [ 195.309112][ T4222] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 195.599050][ T4222] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 195.617817][ T4222] usb 5-1: can't read configurations, error -61 [ 195.641685][ T4222] usb usb5-port1: unable to enumerate USB device [ 195.669384][ T6052] l2tp_ppp: sess 2/0: no socket in recv [ 195.929049][ T7] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 196.094352][ T6061] tipc: Enabled bearer , priority 0 [ 196.111208][ T6061] device syzkaller0 entered promiscuous mode [ 196.133097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.142882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.189193][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 196.209674][ T6060] tipc: Resetting bearer [ 196.261821][ T6060] tipc: Disabling bearer [ 196.369571][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 196.469234][ T7] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 196.489378][ T7] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 196.512947][ T7] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 196.543616][ T7] usb 2-1: config 128 has no interface number 0 [ 196.551180][ T1111] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 196.569215][ T7] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.602311][ T7] usb 2-1: config 128 interface 127 has no altsetting 0 [ 196.779085][ T4222] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 196.809413][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 196.838917][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.868044][ T7] usb 2-1: Product: syz [ 196.878973][ T7] usb 2-1: Manufacturer: syz [ 196.909134][ T7] usb 2-1: SerialNumber: syz [ 196.979683][ T1111] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 197.002985][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.047239][ T1111] usb 5-1: config 0 descriptor?? [ 197.054731][ T4222] usb 3-1: Using ep0 maxpacket: 32 [ 197.110262][ T1111] gspca_main: spca508-2.14.0 probing 8086:0110 [ 197.185696][ T4222] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 197.209045][ T4222] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 197.238759][ T4222] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.289143][ T4222] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 197.345442][ T7] snd-usb-audio: probe of 2-1:128.127 failed with error -12 [ 197.364228][ T4222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.387511][ T7] usb 2-1: USB disconnect, device number 30 [ 197.398459][ T4222] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 197.414476][ T4222] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 197.432145][ T4222] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 197.452536][ T4222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.509643][ T4222] usb 3-1: config 0 descriptor?? [ 197.630358][ T4717] udevd[4717]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.754903][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 197.803815][ T4227] usb 3-1: USB disconnect, device number 24 [ 197.846483][ T26] audit: type=1326 audit(1755932248.699:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 197.870028][ T1111] gspca_spca508: reg_read err -110 [ 197.889218][ T1111] gspca_spca508: reg_read err -32 [ 197.909040][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 197.928704][ T26] audit: type=1326 audit(1755932248.699:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 197.969069][ T1111] gspca_spca508: reg_read err -32 [ 198.009299][ T1111] gspca_spca508: reg_read err -32 [ 198.029188][ T1111] gspca_spca508: reg write: error -32 [ 198.052224][ T1111] spca508: probe of 5-1:0.0 failed with error -32 [ 198.059035][ T26] audit: type=1326 audit(1755932248.819:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 198.184359][ T26] audit: type=1326 audit(1755932248.819:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 198.266508][ T26] audit: type=1326 audit(1755932248.819:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 198.419785][ T1111] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 198.514632][ T6084] input: syz1 as /devices/virtual/input/input24 [ 198.567172][ T6098] tipc: Enabled bearer , priority 0 [ 198.598376][ T6098] device syzkaller0 entered promiscuous mode [ 198.631461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.640656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.657468][ T6097] tipc: Resetting bearer [ 198.671956][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 198.723922][ T6097] tipc: Disabling bearer [ 198.811706][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 198.846528][ T1111] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 198.884688][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 198.902267][ T1111] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 199.080458][ T1111] usb 1-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 199.119476][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.166865][ T1111] usb 1-1: Product: syz [ 199.192936][ T1111] usb 1-1: Manufacturer: syz [ 199.207548][ T1111] usb 1-1: SerialNumber: syz [ 199.233491][ T1111] usb 1-1: config 0 descriptor?? [ 199.280087][ T1111] omninet 1-1:0.0: ZyXEL - omni.net usb converter detected [ 199.313093][ T1111] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 199.342009][ T21] usb 5-1: USB disconnect, device number 23 [ 199.345704][ T6112] tipc: Enabling of bearer rejected, failed to enable media [ 200.246353][ T6138] tipc: Enabled bearer , priority 0 [ 200.259135][ T1111] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 200.327621][ T6140] device syzkaller0 entered promiscuous mode [ 200.355017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.364239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.378074][ T6137] tipc: Resetting bearer [ 200.403809][ T6137] tipc: Disabling bearer [ 200.519085][ T1111] usb 5-1: Using ep0 maxpacket: 32 [ 200.649113][ T1111] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 200.662623][ T1111] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 200.721560][ T1111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.777511][ T1111] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 200.814833][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.865096][ T1111] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 200.886115][ T1111] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 200.939366][ T1111] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 201.002172][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.094537][ T21] usb 1-1: USB disconnect, device number 30 [ 201.111285][ T1111] usb 5-1: config 0 descriptor?? [ 201.162374][ T21] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 201.212800][ T21] omninet 1-1:0.0: device disconnected [ 201.375335][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 201.400154][ T7] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 201.473588][ T21] usb 5-1: USB disconnect, device number 24 [ 201.675302][ T6172] tipc: Enabling of bearer rejected, failed to enable media [ 201.845155][ T7] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 201.869619][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.920419][ T7] usb 3-1: config 0 descriptor?? [ 201.981282][ T7] gspca_main: spca508-2.14.0 probing 8086:0110 [ 202.239374][ T6189] syz.0.635 (6189): drop_caches: 2 [ 202.368993][ T21] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 202.440015][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.636'. [ 202.648976][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 202.719067][ T7] gspca_spca508: reg_read err -110 [ 202.749171][ T7] gspca_spca508: reg_read err -32 [ 202.789076][ T7] gspca_spca508: reg_read err -32 [ 202.829083][ T7] gspca_spca508: reg_read err -32 [ 202.829227][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 202.869208][ T7] gspca_spca508: reg write: error -32 [ 202.879821][ T7] spca508: probe of 3-1:0.0 failed with error -32 [ 202.999179][ T21] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 203.022686][ T21] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 203.108967][ T21] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 203.167719][ T21] usb 5-1: config 128 has no interface number 0 [ 203.198762][ T21] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.267091][ T21] usb 5-1: config 128 interface 127 has no altsetting 0 [ 203.439224][ T21] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 203.481635][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.523697][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 203.541001][ T21] usb 5-1: Product: syz [ 203.569096][ T21] usb 5-1: Manufacturer: syz [ 203.597859][ T21] usb 5-1: SerialNumber: syz [ 203.970527][ T1111] usb 3-1: USB disconnect, device number 25 [ 204.122362][ T21] snd-usb-audio: probe of 5-1:128.127 failed with error -12 [ 204.198570][ T21] usb 5-1: USB disconnect, device number 25 [ 204.420661][ T6218] tipc: Enabling of bearer rejected, failed to enable media [ 204.499903][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.637182][ T6225] syz.0.646 (6225): drop_caches: 2 [ 204.645285][ T6227] tipc: Enabled bearer , priority 0 [ 204.713315][ T6232] device syzkaller0 entered promiscuous mode [ 204.774788][ T6224] tipc: Resetting bearer [ 204.777140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.789176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.833014][ T6205] input: syz1 as /devices/virtual/input/input25 [ 204.934054][ T6224] tipc: Disabling bearer [ 205.287777][ T6251] sctp: [Deprecated]: syz.1.653 (pid 6251) Use of int in max_burst socket option deprecated. [ 205.287777][ T6251] Use struct sctp_assoc_value instead [ 205.307274][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.839001][ T1111] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 205.847426][ T4227] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 205.952084][ T6270] syz.1.659 (6270): drop_caches: 2 [ 206.010404][ T6272] tipc: Enabling of bearer rejected, failed to enable media [ 206.068468][ T6275] tipc: Enabled bearer , priority 0 [ 206.076696][ T6275] device syzkaller0 entered promiscuous mode [ 206.089078][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 206.111610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.120128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.206114][ T6273] tipc: Resetting bearer [ 206.212711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.212759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.232741][ T1111] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 206.243940][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.254747][ T1111] usb 4-1: config 0 descriptor?? [ 206.269278][ T4227] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.288533][ T6273] tipc: Disabling bearer [ 206.307028][ T1111] gspca_main: spca508-2.14.0 probing 8086:0110 [ 206.369233][ T4227] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 206.379307][ T4227] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 206.391674][ T4227] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 206.420797][ T4227] usb 3-1: config 128 has no interface number 0 [ 206.428336][ T4227] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.440192][ T4227] usb 3-1: config 128 interface 127 has no altsetting 0 [ 206.469083][ T4291] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 206.583999][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 206.639107][ T4227] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 206.659036][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.667768][ T4227] usb 3-1: Product: syz [ 206.677904][ T4227] usb 3-1: Manufacturer: syz [ 206.688047][ T4227] usb 3-1: SerialNumber: syz [ 206.849090][ T4291] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.861772][ T4291] usb 1-1: config 0 has no interface number 0 [ 206.874294][ T4291] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.897203][ T4291] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 206.933598][ T4291] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.962408][ T4291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.996397][ T4291] usb 1-1: config 0 descriptor?? [ 206.999121][ T1111] gspca_spca508: reg_read err -71 [ 207.028925][ T1111] gspca_spca508: reg_read err -71 [ 207.029251][ T6283] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 207.064786][ T4291] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 207.101628][ T1111] gspca_spca508: reg_read err -71 [ 207.139126][ T1111] gspca_spca508: reg_read err -71 [ 207.169194][ T1111] gspca_spca508: reg write: error -71 [ 207.174685][ T1111] spca508: probe of 4-1:0.0 failed with error -71 [ 207.191182][ T1111] usb 4-1: USB disconnect, device number 32 [ 207.242498][ T4227] snd-usb-audio: probe of 3-1:128.127 failed with error -12 [ 207.287635][ T4227] usb 3-1: USB disconnect, device number 26 [ 207.318230][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.365073][ T21] usb 1-1: USB disconnect, device number 31 [ 207.440205][ T6295] input: syz1 as /devices/virtual/input/input26 [ 207.826521][ T6313] syz.1.672 (6313): drop_caches: 2 [ 207.859159][ T6317] tipc: Enabling of bearer rejected, failed to enable media [ 207.978970][ T4227] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 208.246961][ T21] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 208.255120][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 208.389180][ T4227] usb 3-1: config 0 has no interfaces? [ 208.395568][ T4227] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 208.425722][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.447871][ T4227] usb 3-1: config 0 descriptor?? [ 208.529019][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 208.538959][ T7] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 208.659149][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 208.680055][ T21] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 208.701243][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 208.721535][ T4257] usb 3-1: USB disconnect, device number 27 [ 208.729018][ T21] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 208.800349][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 208.955326][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 208.968374][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 208.969203][ T21] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 209.037760][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.059091][ T21] usb 2-1: Product: syz [ 209.063648][ T21] usb 2-1: Manufacturer: syz [ 209.064324][ T7] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 209.079291][ T21] usb 2-1: SerialNumber: syz [ 209.111795][ T21] usb 2-1: config 0 descriptor?? [ 209.119039][ T7] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 209.160636][ T21] omninet 2-1:0.0: ZyXEL - omni.net usb converter detected [ 209.161121][ T7] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 209.201832][ T21] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 209.230825][ T7] usb 4-1: config 128 has no interface number 0 [ 209.289115][ T7] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.335413][ T7] usb 4-1: config 128 interface 127 has no altsetting 0 [ 209.479704][ T6353] input: syz1 as /devices/virtual/input/input27 [ 209.549555][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 209.570512][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.619194][ T7] usb 4-1: Product: syz [ 209.628665][ T6363] syz.2.686 (6363): drop_caches: 2 [ 209.649223][ T7] usb 4-1: Manufacturer: syz [ 209.654225][ T7] usb 4-1: SerialNumber: syz [ 209.814905][ T1111] usb 2-1: USB disconnect, device number 31 [ 209.853331][ T1111] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 209.879198][ T1111] omninet 2-1:0.0: device disconnected [ 210.036560][ T6369] tipc: Enabling of bearer rejected, failed to enable media [ 210.191933][ T7] snd-usb-audio: probe of 4-1:128.127 failed with error -12 [ 210.244204][ T7] usb 4-1: USB disconnect, device number 33 [ 210.277824][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.090348][ T26] audit: type=1326 audit(1755932261.949:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb408e70be9 code=0x7ffc0000 [ 211.314758][ T6412] syz.2.697 (6412): drop_caches: 2 [ 211.988991][ T7] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 212.259005][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 212.379278][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 212.441030][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 212.577917][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 212.628583][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 212.852076][ T6429] tipc: Enabling of bearer rejected, failed to enable media [ 212.922885][ T7] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 212.962790][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.014896][ T7] usb 5-1: Product: syz [ 213.037083][ T7] usb 5-1: Manufacturer: syz [ 213.055469][ T7] usb 5-1: SerialNumber: syz [ 213.078587][ T7] usb 5-1: config 0 descriptor?? [ 213.088974][ T21] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 213.130482][ T7] omninet 5-1:0.0: ZyXEL - omni.net usb converter detected [ 213.155575][ T7] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 213.369017][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 213.465229][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 213.522941][ T6450] syz.2.708 (6450): drop_caches: 2 [ 213.549436][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 213.679931][ T21] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 213.696742][ T21] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 213.727221][ T21] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 213.754743][ T21] usb 1-1: config 128 has no interface number 0 [ 213.775823][ T21] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.815995][ T21] usb 1-1: config 128 interface 127 has no altsetting 0 [ 213.862807][ T6446] input: syz1 as /devices/virtual/input/input28 [ 213.999360][ T21] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 214.022125][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.057085][ T21] usb 1-1: Product: syz [ 214.075699][ T21] usb 1-1: Manufacturer: syz [ 214.095432][ T21] usb 1-1: SerialNumber: syz [ 214.109822][ T4291] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 214.605803][ T21] snd-usb-audio: probe of 1-1:128.127 failed with error -12 [ 214.639299][ T4291] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 214.665402][ T4291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.676217][ T21] usb 1-1: USB disconnect, device number 32 [ 214.696551][ T4291] usb 3-1: Product: syz [ 214.704616][ T4291] usb 3-1: Manufacturer: syz [ 214.713530][ T4291] usb 3-1: SerialNumber: syz [ 214.759674][ T4294] usb 5-1: USB disconnect, device number 26 [ 214.778090][ T4291] usb 3-1: config 0 descriptor?? [ 214.806992][ T4294] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 214.827654][ T4294] omninet 5-1:0.0: device disconnected [ 214.900344][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.010887][ T6466] tipc: Enabled bearer , priority 0 [ 215.029052][ T4227] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 215.058375][ T6466] tipc: Resetting bearer [ 215.070086][ T4291] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 215.141342][ T6464] tipc: Disabling bearer [ 215.179355][ T4291] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 215.200572][ T4291] usb 3-1: USB disconnect, device number 28 [ 215.289124][ T4227] usb 2-1: Using ep0 maxpacket: 32 [ 215.368995][ T4294] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 215.385587][ T6471] futex_wake_op: syz.3.714 tries to shift op by -1; fix this program [ 215.425342][ T6473] tipc: Enabling of bearer rejected, failed to enable media [ 215.489203][ T4227] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.595303][ T4227] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 215.607768][ T4227] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 215.639037][ T4227] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 215.648733][ T4227] usb 2-1: config 128 has no interface number 0 [ 215.669005][ T4227] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.681258][ T4227] usb 2-1: config 128 interface 127 has no altsetting 0 [ 215.709563][ T21] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 215.799889][ T4294] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 215.816025][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.841099][ T4294] usb 5-1: config 0 descriptor?? [ 215.881348][ T4294] gspca_main: spca508-2.14.0 probing 8086:0110 [ 215.899105][ T4227] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 215.908280][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.944221][ T4227] usb 2-1: Product: syz [ 215.948447][ T4227] usb 2-1: Manufacturer: syz [ 215.969119][ T4227] usb 2-1: SerialNumber: syz [ 216.013159][ T6494] syz.0.719 (6494): drop_caches: 2 [ 216.019444][ T21] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 216.109980][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.127682][ T21] usb 4-1: config 0 has no interfaces? [ 216.219271][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.230206][ T21] usb 4-1: config 0 has no interfaces? [ 216.321078][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.364922][ T21] usb 4-1: config 0 has no interfaces? [ 216.428188][ T4227] snd-usb-audio: probe of 2-1:128.127 failed with error -12 [ 216.436304][ T4291] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 216.467478][ T4227] usb 2-1: USB disconnect, device number 32 [ 216.474744][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.489381][ T21] usb 4-1: config 0 has no interfaces? [ 216.526577][ T4260] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.579304][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.591952][ T21] usb 4-1: config 0 has no interfaces? [ 216.630595][ T4260] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.642222][ T4294] gspca_spca508: reg_read err -110 [ 216.669157][ T4294] gspca_spca508: reg_read err -32 [ 216.696326][ T4260] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.707790][ T4294] gspca_spca508: reg_read err -32 [ 216.713325][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.724832][ T21] usb 4-1: config 0 has no interfaces? [ 216.725176][ T4717] udevd[4717]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.749358][ T4294] gspca_spca508: reg_read err -32 [ 216.754864][ T4291] usb 1-1: Using ep0 maxpacket: 32 [ 216.779228][ T4294] gspca_spca508: reg write: error -32 [ 216.785003][ T4294] spca508: probe of 5-1:0.0 failed with error -32 [ 216.809593][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.826803][ T21] usb 4-1: config 0 has no interfaces? [ 216.827471][ T4260] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.899449][ T4291] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 216.916941][ T4291] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 216.926493][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.952589][ T21] usb 4-1: config 0 has no interfaces? [ 216.970028][ T4291] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.986911][ T4291] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 216.998443][ T4291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.034348][ T4291] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 217.052328][ T4291] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 217.068793][ T4291] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 217.105639][ T4291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.134768][ T4291] usb 1-1: config 0 descriptor?? [ 217.159208][ T21] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 217.179435][ T21] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 217.201432][ T21] usb 4-1: Product: syz [ 217.208601][ T21] usb 4-1: Manufacturer: syz [ 217.234996][ T21] usb 4-1: SerialNumber: syz [ 217.247350][ T6503] dhcpcd-run-hook (6503) used greatest stack depth: 21200 bytes left [ 217.296811][ T21] usb 4-1: config 0 descriptor?? [ 217.326622][ T6501] chnl_net:caif_netlink_parms(): no params data found [ 217.416823][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 217.434543][ T6511] tipc: Enabled bearer , priority 0 [ 217.494452][ T4291] usb 1-1: USB disconnect, device number 33 [ 217.515716][ T4260] tipc: Left network mode [ 217.526675][ T6511] tipc: Resetting bearer [ 217.566242][ T6510] tipc: Disabling bearer [ 217.595821][ T4222] usb 4-1: USB disconnect, device number 34 [ 217.668653][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.677072][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.689482][ T6501] device bridge_slave_0 entered promiscuous mode [ 217.739964][ T6501] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.752082][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.773694][ T6501] device bridge_slave_1 entered promiscuous mode [ 217.807071][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 217.895174][ T21] usb 5-1: USB disconnect, device number 27 [ 217.931346][ T6501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.988990][ T6501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.221908][ T6501] team0: Port device team_slave_0 added [ 218.241629][ T6538] syz.4.731 (6538): drop_caches: 2 [ 218.271265][ T6501] team0: Port device team_slave_1 added [ 218.440322][ T4260] IPVS: stopping master sync thread 6000 ... [ 218.441308][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.499382][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.527677][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.549920][ T6501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.676732][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.699417][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.727753][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.800168][ T4291] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 218.819343][ T6501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.830407][ T4222] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 218.908991][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 218.939689][ T6564] tipc: Enabled bearer , priority 0 [ 219.025014][ T6501] device hsr_slave_0 entered promiscuous mode [ 219.078984][ T4291] usb 4-1: Using ep0 maxpacket: 32 [ 219.079490][ T6501] device hsr_slave_1 entered promiscuous mode [ 219.091463][ T4222] usb 1-1: Using ep0 maxpacket: 32 [ 219.134108][ T6501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.149099][ T6501] Cannot create hsr debugfs directory [ 219.166346][ T6564] tipc: Disabling bearer [ 219.245337][ T4291] usb 4-1: unable to get BOS descriptor or descriptor too short [ 219.292638][ T4222] usb 1-1: unable to get BOS descriptor or descriptor too short [ 219.320459][ T4260] device hsr_slave_0 left promiscuous mode [ 219.329517][ T4260] device hsr_slave_1 left promiscuous mode [ 219.337223][ T4260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.345671][ T4260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.354332][ T4260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.362246][ T4291] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 219.372189][ T4260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.380102][ T4291] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 219.391786][ T4291] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 219.399060][ T4222] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 219.403858][ T4291] usb 4-1: config 128 has no interface number 0 [ 219.416209][ T4222] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 219.417393][ T4291] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.429394][ T4222] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 219.439363][ T4291] usb 4-1: config 128 interface 127 has no altsetting 0 [ 219.455805][ T4222] usb 1-1: config 128 has no interface number 0 [ 219.464164][ T4222] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.464787][ T4260] device bridge_slave_1 left promiscuous mode [ 219.487269][ T4222] usb 1-1: config 128 interface 127 has no altsetting 0 [ 219.489216][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.514464][ T4260] device bridge_slave_0 left promiscuous mode [ 219.521791][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.541910][ T4260] device veth1_macvtap left promiscuous mode [ 219.549218][ T4260] device veth0_macvtap left promiscuous mode [ 219.556105][ T4260] device veth1_vlan left promiscuous mode [ 219.564285][ T4260] device veth0_vlan left promiscuous mode [ 219.619072][ T4291] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 219.637216][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.647101][ T4291] usb 4-1: Product: syz [ 219.651937][ T4291] usb 4-1: Manufacturer: syz [ 219.657538][ T4291] usb 4-1: SerialNumber: syz [ 219.669275][ T4222] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 219.679310][ T1111] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 219.687835][ T4222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.697131][ T4222] usb 1-1: Product: syz [ 219.702744][ T4222] usb 1-1: Manufacturer: syz [ 219.708120][ T4222] usb 1-1: SerialNumber: syz [ 219.826256][ T4260] team0 (unregistering): Port device team_slave_1 removed [ 219.846685][ T4260] team0 (unregistering): Port device team_slave_0 removed [ 219.862968][ T4260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.878484][ T4260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.949140][ T1111] usb 5-1: Using ep0 maxpacket: 32 [ 219.951845][ T4260] bond0 (unregistering): Released all slaves [ 220.014792][ T6572] device veth1_macvtap left promiscuous mode [ 220.079085][ T1111] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 220.088105][ T1111] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 220.109138][ T1111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.127646][ T1111] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 220.139067][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.151889][ T1111] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 220.162920][ T1111] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 220.177318][ T1111] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 220.188837][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.198254][ T4291] snd-usb-audio: probe of 4-1:128.127 failed with error -12 [ 220.201380][ T1111] usb 5-1: config 0 descriptor?? [ 220.224071][ T4291] usb 4-1: USB disconnect, device number 35 [ 220.277255][ T4385] udevd[4385]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.366640][ T4222] snd-usb-audio: probe of 1-1:128.127 failed with error -12 [ 220.396571][ T4222] usb 1-1: USB disconnect, device number 34 [ 220.473324][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 220.546477][ T4291] usb 5-1: USB disconnect, device number 28 [ 220.610236][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.667495][ T6501] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.741555][ T6501] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.766115][ T6501] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.812298][ T6501] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.988970][ T4254] Bluetooth: hci4: command 0x041b tx timeout [ 221.158627][ T6605] syz.1.745 (6605): drop_caches: 2 [ 221.199328][ T6501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.223191][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.241877][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.293619][ T6501] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.321417][ T6615] tipc: Enabling of bearer rejected, failed to enable media [ 221.399149][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.433147][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.490006][ T4885] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.498271][ T4885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.530952][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.545466][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.592974][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.636548][ T4885] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.644109][ T4885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.706167][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.757109][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.827298][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.866471][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.906348][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.917201][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.977207][ T6501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.989515][ T6501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.047410][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.066538][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.089946][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.109687][ T7] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 222.128124][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.166290][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.209017][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.359681][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 222.546216][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 222.637876][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.659230][ T7] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 222.668798][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.683226][ T6501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.691652][ T7] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 222.730274][ T7] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 222.775001][ T7] usb 4-1: config 128 has no interface number 0 [ 222.789764][ T7] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.841815][ T7] usb 4-1: config 128 interface 127 has no altsetting 0 [ 222.859055][ T4254] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 223.035346][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 223.050977][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.069539][ T4294] Bluetooth: hci4: command 0x040f tx timeout [ 223.078905][ T7] usb 4-1: Product: syz [ 223.085009][ T7] usb 4-1: Manufacturer: syz [ 223.099212][ T7] usb 4-1: SerialNumber: syz [ 223.118970][ T4254] usb 1-1: Using ep0 maxpacket: 32 [ 223.159464][ T4291] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 223.265968][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.279252][ T4254] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.279920][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.319280][ T6672] syz.4.759 (6672): drop_caches: 2 [ 223.370316][ T4254] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 223.383172][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.391664][ T4254] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 223.402718][ T4291] usb 2-1: Using ep0 maxpacket: 32 [ 223.416066][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.419331][ T4254] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 223.437278][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.454612][ T4254] usb 1-1: config 128 has no interface number 0 [ 223.455491][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.469177][ T4254] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.488978][ T6501] device veth0_vlan entered promiscuous mode [ 223.514299][ T6501] device veth1_vlan entered promiscuous mode [ 223.537319][ T4254] usb 1-1: config 128 interface 127 has no altsetting 0 [ 223.545299][ T4291] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 223.559181][ T4291] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 223.568631][ T4291] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.608925][ T4291] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 223.618578][ T4291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.633920][ T4291] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 223.654304][ T4291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 223.655595][ T7] snd-usb-audio: probe of 4-1:128.127 failed with error -12 [ 223.692454][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.708697][ T7] usb 4-1: USB disconnect, device number 36 [ 223.719425][ T4291] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 223.732737][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.756468][ T4291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.766012][ T4254] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 223.780517][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.803709][ T4254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.815379][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.851314][ T4254] usb 1-1: Product: syz [ 223.851692][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.855729][ T4254] usb 1-1: Manufacturer: syz [ 223.855746][ T4254] usb 1-1: SerialNumber: syz [ 223.865210][ T4291] usb 2-1: config 0 descriptor?? [ 223.894116][ T6501] device veth0_macvtap entered promiscuous mode [ 223.915875][ T6501] device veth1_macvtap entered promiscuous mode [ 223.992271][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.044096][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.064318][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.078364][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.110664][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.137445][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.161377][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 224.193617][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.200116][ T2265] usb 2-1: USB disconnect, device number 33 [ 224.217454][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.260904][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.288177][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.340119][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.371385][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.397958][ T4254] snd-usb-audio: probe of 1-1:128.127 failed with error -12 [ 224.419840][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.434350][ T4254] usb 1-1: USB disconnect, device number 35 [ 224.468487][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.526315][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.546252][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.557904][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.568510][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.580285][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.595706][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.607777][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.640476][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.657045][ T6695] device syzkaller0 entered promiscuous mode [ 224.730151][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.769418][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.814685][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.829834][ T6501] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.851535][ T6501] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.866982][ T6501] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.878589][ T6501] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.112533][ T4888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.138699][ T4888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.149062][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 225.186560][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.219012][ T297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.265688][ T297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.290728][ T6725] syz.0.769 (6725): drop_caches: 2 [ 225.324016][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.359064][ T1111] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 225.629029][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 225.758973][ T4294] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 225.769103][ T1111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.796084][ T1111] usb 5-1: config 0 has no interfaces? [ 225.829530][ T4222] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 225.979179][ T1111] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 226.005228][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.029580][ T4294] usb 4-1: Using ep0 maxpacket: 32 [ 226.061821][ T1111] usb 5-1: Product: syz [ 226.075553][ T1111] usb 5-1: Manufacturer: syz [ 226.091596][ T1111] usb 5-1: SerialNumber: syz [ 226.109041][ T4222] usb 1-1: Using ep0 maxpacket: 32 [ 226.142937][ T1111] usb 5-1: config 0 descriptor?? [ 226.149210][ T4294] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 226.158246][ T4294] usb 4-1: config 0 has no interface number 0 [ 226.215896][ T4294] usb 4-1: config 0 interface 12 has no altsetting 0 [ 226.309348][ T4222] usb 1-1: unable to get BOS descriptor or descriptor too short [ 226.409164][ T4294] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 226.429597][ T4222] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 226.429788][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.455625][ T4222] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 226.488966][ T4294] usb 4-1: Product: syz [ 226.498162][ T4222] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 226.499217][ T4294] usb 4-1: Manufacturer: syz [ 226.536978][ T4294] usb 4-1: SerialNumber: syz [ 226.542022][ T4222] usb 1-1: config 128 has no interface number 0 [ 226.562749][ T4294] usb 4-1: config 0 descriptor?? [ 226.578058][ T4222] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.602443][ T26] audit: type=1326 audit(1755932277.459:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 226.647455][ T4222] usb 1-1: config 128 interface 127 has no altsetting 0 [ 226.660294][ T4294] f81534 4-1:0.12: required endpoints missing [ 226.695601][ T26] audit: type=1326 audit(1755932277.489:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 226.795352][ T26] audit: type=1326 audit(1755932277.489:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 226.904831][ T26] audit: type=1326 audit(1755932277.489:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 226.929180][ T4222] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 226.944555][ T4222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.955055][ T26] audit: type=1326 audit(1755932277.489:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd07d436550 code=0x7ffc0000 [ 227.026734][ T4222] usb 1-1: Product: syz [ 227.034820][ T4222] usb 1-1: Manufacturer: syz [ 227.053074][ T26] audit: type=1326 audit(1755932277.489:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 227.085112][ T4222] usb 1-1: SerialNumber: syz [ 227.185693][ T26] audit: type=1326 audit(1755932277.499:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 227.284550][ T26] audit: type=1326 audit(1755932277.499:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 227.468412][ T26] audit: type=1326 audit(1755932277.499:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 227.624445][ T4222] snd-usb-audio: probe of 1-1:128.127 failed with error -12 [ 227.656396][ T26] audit: type=1326 audit(1755932277.499:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07d437be9 code=0x7ffc0000 [ 227.672153][ T4222] usb 1-1: USB disconnect, device number 36 [ 227.708714][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.885751][ T4294] usb 4-1: USB disconnect, device number 37 [ 228.000123][ T6770] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.775'. [ 228.123425][ T6776] device syzkaller0 entered promiscuous mode [ 228.129403][ T4254] usb 5-1: USB disconnect, device number 29 [ 228.383423][ T4294] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 228.478083][ T6791] syz.0.781 (6791): drop_caches: 2 [ 228.651061][ T4294] usb 4-1: Using ep0 maxpacket: 32 [ 228.859116][ T4294] usb 4-1: unable to get BOS descriptor or descriptor too short [ 228.944306][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.788'. [ 228.959367][ T4294] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 228.974263][ T4294] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 228.988646][ T4294] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 229.008391][ T4294] usb 4-1: config 128 has no interface number 0 [ 229.017160][ T4294] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.034391][ T4294] usb 4-1: config 128 interface 127 has no altsetting 0 [ 229.035299][ T6823] binder: 6819:6823 ioctl c0306201 2000000002c0 returned -14 [ 229.079254][ T4254] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 229.130300][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.144605][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.155138][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.172793][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.188581][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.205204][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.222603][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.233345][ T6818] input: syz1 as /devices/virtual/input/input29 [ 229.243571][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.249074][ T4294] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 229.262275][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.273907][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.275547][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.293249][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.298069][ T4294] usb 4-1: Product: syz [ 229.303414][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.317097][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.317144][ T4294] usb 4-1: Manufacturer: syz [ 229.332261][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.339062][ T4254] usb 1-1: Using ep0 maxpacket: 32 [ 229.349062][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.354670][ T4294] usb 4-1: SerialNumber: syz [ 229.368330][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.385649][ T1111] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 229.411637][ T1111] hid-generic 0006:0004:0009.000E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 229.519178][ T4254] usb 1-1: unable to get BOS descriptor or descriptor too short [ 229.601295][ T6832] fido_id[6832]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 229.619135][ T4254] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 229.628094][ T4254] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 229.664596][ T4254] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 229.689510][ T4254] usb 1-1: config 128 has no interface number 0 [ 229.706123][ T4254] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.744904][ T4254] usb 1-1: config 128 interface 127 has no altsetting 0 [ 229.765011][ T6820] binder: 6819:6820 ioctl c0306201 200000000240 returned -14 [ 229.929972][ T4254] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 229.956018][ T4294] snd-usb-audio: probe of 4-1:128.127 failed with error -12 [ 229.982026][ T4254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.008510][ T4254] usb 1-1: Product: syz [ 230.026320][ T4294] usb 4-1: USB disconnect, device number 38 [ 230.037850][ T4254] usb 1-1: Manufacturer: syz [ 230.066996][ T4254] usb 1-1: SerialNumber: syz [ 230.347816][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.367424][ T4257] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 230.401213][ T4257] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 230.592477][ T4254] snd-usb-audio: probe of 1-1:128.127 failed with error -12 [ 230.611698][ T4254] usb 1-1: USB disconnect, device number 37 [ 230.718506][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 230.855980][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.982974][ T6882] input: syz1 as /devices/virtual/input/input30 [ 231.234627][ T4254] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 231.359768][ T1111] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 231.405394][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 231.477380][ T6911] APIC base relocation is unsupported by KVM [ 231.519005][ T4294] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 231.595485][ T6917] device syzkaller0 entered promiscuous mode [ 231.639366][ T4254] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.650736][ T4254] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 231.660250][ T4254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.678122][ T4254] usb 1-1: config 0 descriptor?? [ 231.729197][ T1111] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.744828][ T1111] usb 2-1: config 0 has no interfaces? [ 231.799173][ T4294] usb 6-1: Using ep0 maxpacket: 32 [ 231.909144][ T1111] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 231.920864][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.929100][ T4294] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 231.930390][ T1111] usb 2-1: Product: syz [ 231.943712][ T1111] usb 2-1: Manufacturer: syz [ 231.943922][ T4294] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 231.949300][ T1111] usb 2-1: SerialNumber: syz [ 231.964361][ T4294] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.975927][ T1111] usb 2-1: config 0 descriptor?? [ 231.979773][ T4294] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 231.991414][ T4294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.001822][ T21] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 232.011078][ T4294] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 232.024573][ T4294] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 232.040928][ T4294] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 232.051307][ T4294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.066250][ T4294] usb 6-1: config 0 descriptor?? [ 232.171226][ T4254] lenovo 0003:17EF:6047.0010: item fetching failed at offset 3/5 [ 232.180733][ T4254] lenovo 0003:17EF:6047.0010: hid_parse failed [ 232.187989][ T4254] lenovo: probe of 0003:17EF:6047.0010 failed with error -22 [ 232.227768][ T1111] usb 2-1: USB disconnect, device number 34 [ 232.269245][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 232.313378][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.809'. [ 232.329001][ T4254] usb 6-1: USB disconnect, device number 2 [ 232.377377][ T4222] usb 1-1: USB disconnect, device number 38 [ 232.439210][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 232.519110][ T21] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 232.530648][ T21] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 232.542866][ T21] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 232.553574][ T21] usb 5-1: config 128 has no interface number 0 [ 232.560542][ T21] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 232.572491][ T21] usb 5-1: config 128 interface 127 has no altsetting 0 [ 232.739247][ T21] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 232.756524][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.764954][ T21] usb 5-1: Product: syz [ 232.775657][ T21] usb 5-1: Manufacturer: syz [ 232.780997][ T21] usb 5-1: SerialNumber: syz [ 232.839231][ T6919] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 233.062722][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'. [ 233.256159][ T6943] input: syz1 as /devices/virtual/input/input31 [ 233.297816][ T21] usb 5-1: USB disconnect, device number 30 [ 233.701730][ T6962] binder: 6961:6962 ioctl c0306201 200000000080 returned -14 [ 233.798961][ T4294] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 233.920056][ T4222] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 234.049229][ T2265] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 234.159138][ T4294] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.168939][ T4222] usb 5-1: Using ep0 maxpacket: 32 [ 234.178214][ T4294] usb 4-1: config 0 has no interfaces? [ 234.289227][ T2265] usb 6-1: Using ep0 maxpacket: 32 [ 234.309728][ T4222] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 234.322790][ T4222] usb 5-1: config 0 has no interface number 0 [ 234.339246][ T4294] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 234.358231][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.367208][ T4294] usb 4-1: Product: syz [ 234.373237][ T4294] usb 4-1: Manufacturer: syz [ 234.378518][ T4294] usb 4-1: SerialNumber: syz [ 234.390151][ T4294] usb 4-1: config 0 descriptor?? [ 234.405632][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 234.409233][ T2265] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 234.424177][ T2265] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 234.435093][ T2265] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.446351][ T2265] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 234.456509][ T2265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.472943][ T2265] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 234.486340][ T2265] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 234.506535][ T2265] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 234.509259][ T4222] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 234.517104][ T2265] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.544060][ T4222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.554785][ T4222] usb 5-1: Product: syz [ 234.559522][ T4222] usb 5-1: Manufacturer: syz [ 234.563308][ T2265] usb 6-1: config 0 descriptor?? [ 234.569242][ T4222] usb 5-1: SerialNumber: syz [ 234.571529][ T4222] usb 5-1: config 0 descriptor?? [ 234.642199][ T4222] smsc95xx v2.0.0 [ 234.658045][ T2265] usb 4-1: USB disconnect, device number 39 [ 234.701521][ T6985] input: syz1 as /devices/virtual/input/input32 [ 234.902396][ T2265] usb 6-1: USB disconnect, device number 3 [ 235.089750][ T4257] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 235.339097][ T4257] usb 2-1: Using ep0 maxpacket: 32 [ 235.509260][ T4257] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.529361][ T4222] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 235.550521][ T4222] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 235.599300][ T4257] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 235.609437][ T4257] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 235.621164][ T4257] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 235.632839][ T4257] usb 2-1: config 128 has no interface number 0 [ 235.643857][ T4257] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 235.656296][ T4257] usb 2-1: config 128 interface 127 has no altsetting 0 [ 235.819228][ T4222] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 235.831509][ T4257] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 235.841638][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.851601][ T4222] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 235.858569][ T4257] usb 2-1: Product: syz [ 235.863182][ T4257] usb 2-1: Manufacturer: syz [ 235.878267][ T4222] usb 5-1: USB disconnect, device number 31 [ 235.884854][ T4257] usb 2-1: SerialNumber: syz [ 235.919480][ T6992] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 236.049076][ T1111] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 236.299139][ T1111] usb 1-1: Using ep0 maxpacket: 32 [ 236.353250][ T4257] usb 2-1: USB disconnect, device number 35 [ 236.410030][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.469170][ T1111] usb 1-1: unable to get BOS descriptor or descriptor too short [ 236.569464][ T1111] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 236.578498][ T1111] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 236.589737][ T1111] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 236.599516][ T1111] usb 1-1: config 128 has no interface number 0 [ 236.606311][ T1111] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 139, changing to 11 [ 236.621027][ T1111] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.633270][ T1111] usb 1-1: config 128 interface 127 has no altsetting 0 [ 236.809223][ T1111] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 236.845086][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.859871][ T1111] usb 1-1: Product: syz [ 236.869934][ T1111] usb 1-1: Manufacturer: syz [ 236.875007][ T1111] usb 1-1: SerialNumber: syz [ 237.189005][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 237.314760][ T1111] usb 1-1: USB disconnect, device number 39 [ 237.459061][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 237.529029][ T4257] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 237.553098][ T4383] udevd[4383]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.579337][ T7] usb 6-1: config 0 has no interfaces? [ 237.749180][ T7] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 237.767825][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.776543][ T7] usb 6-1: Product: syz [ 237.780927][ T7] usb 6-1: Manufacturer: syz [ 237.785539][ T7] usb 6-1: SerialNumber: syz [ 237.802473][ T7] usb 6-1: config 0 descriptor?? [ 237.919160][ T4294] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 237.919222][ T4257] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.938314][ T4257] usb 5-1: config 0 has no interfaces? [ 238.066763][ T7] usb 6-1: USB disconnect, device number 4 [ 238.099151][ T4257] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 238.109354][ T4257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.117797][ T4257] usb 5-1: Product: syz [ 238.122481][ T4257] usb 5-1: Manufacturer: syz [ 238.127400][ T4257] usb 5-1: SerialNumber: syz [ 238.134914][ T4257] usb 5-1: config 0 descriptor?? [ 238.178962][ T4294] usb 1-1: Using ep0 maxpacket: 32 [ 238.299164][ T4294] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 238.308779][ T4294] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 238.324926][ T4294] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.336372][ T4294] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 238.351770][ T4294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.363957][ T4294] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.376202][ T4294] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 238.399614][ T4294] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 238.411237][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.426643][ T2265] usb 5-1: USB disconnect, device number 32 [ 238.442440][ T4294] usb 1-1: config 0 descriptor?? [ 238.664100][ T7061] device syzkaller0 entered promiscuous mode [ 238.705866][ T4257] usb 1-1: USB disconnect, device number 40 [ 238.769135][ T21] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 238.805146][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 238.847102][ T7063] input: syz1 as /devices/virtual/input/input33 [ 238.949836][ T7069] fuse: Bad value for 'fd' [ 239.069534][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 239.248978][ T2265] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 239.259065][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 239.339411][ T4257] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 239.369273][ T21] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 239.378809][ T21] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 239.391169][ T21] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 239.408230][ T21] usb 4-1: config 128 has no interface number 0 [ 239.415081][ T21] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 239.433264][ T21] usb 4-1: config 128 interface 127 has no altsetting 0 [ 239.523688][ T7] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 239.579096][ T4257] usb 6-1: Using ep0 maxpacket: 32 [ 239.639245][ T21] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 239.654660][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.665419][ T21] usb 4-1: Product: syz [ 239.673932][ T21] usb 4-1: Manufacturer: syz [ 239.681756][ T21] usb 4-1: SerialNumber: syz [ 239.699213][ T4257] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 239.704416][ T2265] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 239.718331][ T4257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.718823][ T7056] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 239.739565][ T4257] usb 6-1: config 0 descriptor?? [ 239.741177][ T2265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.761679][ T2265] usb 5-1: config 0 descriptor?? [ 239.769271][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 239.929178][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.022786][ T7] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 240.036956][ T7] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 240.049567][ T7] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 240.059880][ T7] usb 1-1: config 128 has no interface number 0 [ 240.066984][ T7] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 139, changing to 11 [ 240.080472][ T7] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.097941][ T7] usb 1-1: config 128 interface 127 has no altsetting 0 [ 240.191559][ T21] usb 4-1: USB disconnect, device number 40 [ 240.221741][ T4257] hid-picolcd 0003:04D8:F002.0011: item fetching failed at offset 1/5 [ 240.246193][ T4257] hid-picolcd 0003:04D8:F002.0011: device report parse failed [ 240.266367][ T4257] hid-picolcd: probe of 0003:04D8:F002.0011 failed with error -22 [ 240.275466][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 240.302329][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.315520][ T7] usb 1-1: Product: syz [ 240.323715][ T7] usb 1-1: Manufacturer: syz [ 240.328794][ T7] usb 1-1: SerialNumber: syz [ 240.423590][ T1111] usb 6-1: USB disconnect, device number 5 [ 240.494137][ T4385] udevd[4385]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.526949][ T7150] netlink: 'syz.3.865': attribute type 12 has an invalid length. [ 240.738138][ T7] usb 1-1: USB disconnect, device number 41 [ 240.959583][ T4383] udevd[4383]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.004329][ T7162] binder: 7161:7162 ioctl c0306201 200000000080 returned -14 [ 241.389296][ T4291] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 241.619154][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 241.669348][ T4257] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 241.759176][ T4291] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.770382][ T4291] usb 1-1: config 0 has no interfaces? [ 241.919167][ T4257] usb 4-1: Using ep0 maxpacket: 32 [ 241.949359][ T4291] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 241.962329][ T4291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.971172][ T4291] usb 1-1: Product: syz [ 241.975485][ T4291] usb 1-1: Manufacturer: syz [ 241.980948][ T4291] usb 1-1: SerialNumber: syz [ 241.987514][ T4291] usb 1-1: config 0 descriptor?? [ 242.009255][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.020771][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.033401][ T7] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 242.048592][ T4257] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 242.058658][ T4257] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 242.070080][ T4257] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.081942][ T4257] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 242.093849][ T4257] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.104988][ T4257] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.116422][ T4257] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 242.132259][ T4257] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 242.142286][ T4257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.162776][ T4257] usb 4-1: config 0 descriptor?? [ 242.209378][ T2265] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 242.209509][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.225812][ T2265] asix: probe of 5-1:0.0 failed with error -71 [ 242.230743][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.241021][ T2265] usb 5-1: USB disconnect, device number 33 [ 242.258148][ T7] usb 6-1: Product: syz [ 242.263994][ T7] usb 6-1: Manufacturer: syz [ 242.269240][ T7] usb 6-1: SerialNumber: syz [ 242.278230][ T4257] usb 1-1: USB disconnect, device number 42 [ 242.310034][ T7] cdc_mbim 6-1:1.0: skipping garbage [ 242.405603][ T4291] usb 4-1: USB disconnect, device number 41 [ 242.959177][ T7] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS [ 242.966083][ T7] cdc_mbim 6-1:1.0: bind() failure [ 242.992525][ T7] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 243.014326][ T7] cdc_ncm 6-1:1.1: bind() failure [ 243.032491][ T7] usb 6-1: USB disconnect, device number 6 [ 243.226538][ T1111] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 243.478962][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 243.606110][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.627877][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.648096][ T1111] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 243.657618][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.674900][ T1111] usb 1-1: config 0 descriptor?? [ 243.693074][ T6284] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 243.939217][ T6284] usb 2-1: Using ep0 maxpacket: 32 [ 244.103414][ T6284] usb 2-1: unable to get BOS descriptor or descriptor too short [ 244.163026][ T1111] sony 0003:054C:05C4.0012: hidraw0: USB HID v80.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 244.185264][ T1111] sony 0003:054C:05C4.0012: failed to claim input [ 244.199016][ T6284] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 244.218773][ T6284] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 244.248378][ T6284] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 244.274767][ T6284] usb 2-1: config 128 has no interface number 0 [ 244.294439][ T6284] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.321190][ T6284] usb 2-1: config 128 interface 127 has no altsetting 0 [ 244.489117][ T6284] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 244.505547][ T6284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.528986][ T6284] usb 2-1: Product: syz [ 244.534142][ T6284] usb 2-1: Manufacturer: syz [ 244.548979][ T6284] usb 2-1: SerialNumber: syz [ 244.766258][ T7252] udc-core: couldn't find an available UDC or it's busy [ 244.784716][ T7252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 244.805082][ T4291] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 245.006450][ T6284] usb 2-1: USB disconnect, device number 36 [ 245.069149][ T4291] usb 5-1: Using ep0 maxpacket: 32 [ 245.209210][ T4291] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 245.218294][ T4291] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 245.238227][ T4291] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.249341][ T4383] udevd[4383]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.266849][ T4291] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 245.278103][ T4291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.289248][ T4291] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 245.299717][ T4291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 245.313815][ T4291] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 245.324190][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.364827][ T4291] usb 5-1: config 0 descriptor?? [ 245.614419][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 245.642850][ T4291] usb 5-1: USB disconnect, device number 34 [ 245.864469][ T1111] usb 1-1: USB disconnect, device number 43 [ 246.384636][ T7303] overlayfs: failed to resolve './file1': -2 [ 246.391795][ T1111] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 246.659005][ T4291] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 246.709109][ T6284] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 246.759385][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.771573][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.782228][ T1111] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 246.791986][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.803486][ T1111] usb 1-1: config 0 descriptor?? [ 246.909052][ T4291] usb 4-1: Using ep0 maxpacket: 32 [ 246.949030][ T6284] usb 5-1: Using ep0 maxpacket: 16 [ 247.079681][ T4291] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.099112][ T6284] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 247.112333][ T6284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.123207][ T6284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.166310][ T4291] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 247.184882][ T4291] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 247.203671][ T4291] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 247.213980][ T4291] usb 4-1: config 128 has no interface number 0 [ 247.220781][ T4291] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.232089][ T4291] usb 4-1: config 128 interface 127 has no altsetting 0 [ 247.281396][ T1111] hid-generic 0003:1038:12B6.0013: unknown main item tag 0x0 [ 247.291030][ T1111] hid-generic 0003:1038:12B6.0013: unknown main item tag 0x0 [ 247.298647][ T1111] hid-generic 0003:1038:12B6.0013: unknown main item tag 0x0 [ 247.307149][ T1111] hid-generic 0003:1038:12B6.0013: unknown main item tag 0x0 [ 247.315610][ T1111] hid-generic 0003:1038:12B6.0013: unknown main item tag 0x0 [ 247.324020][ T1111] hid-generic 0003:1038:12B6.0013: unknown main item tag 0x0 [ 247.332943][ T6284] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.342600][ T1111] hid-generic 0003:1038:12B6.0013: unknown main item tag 0x0 [ 247.350624][ T6284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.361653][ T1111] hid-generic 0003:1038:12B6.0013: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 247.374408][ T6284] usb 5-1: Product: syz [ 247.379928][ T6284] usb 5-1: Manufacturer: syz [ 247.385288][ T6284] usb 5-1: SerialNumber: syz [ 247.399199][ T4291] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 247.416760][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.426131][ T4291] usb 4-1: Product: syz [ 247.437230][ T4291] usb 4-1: Manufacturer: syz [ 247.442673][ T4291] usb 4-1: SerialNumber: syz [ 247.509201][ T4254] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 247.749112][ T4254] usb 2-1: Using ep0 maxpacket: 32 [ 247.869487][ T4254] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 247.878079][ T4254] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 247.879179][ T6284] usb 5-1: 0:2 : does not exist [ 247.887640][ T4254] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.903557][ T4254] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 247.912919][ T4254] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.923483][ T4254] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.933814][ T4254] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 247.947391][ T4254] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 247.957005][ T4254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.971131][ T4254] usb 2-1: config 0 descriptor?? [ 248.213442][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'. [ 248.250514][ T4254] usb 2-1: USB disconnect, device number 37 [ 248.899712][ T7345] device syzkaller0 entered promiscuous mode [ 248.989162][ T6284] usb 5-1: USB disconnect, device number 35 [ 249.022125][ T1111] usb 1-1: USB disconnect, device number 44 [ 249.116802][ T4291] usb 4-1: USB disconnect, device number 42 [ 249.119798][ T4383] udevd[4383]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.519302][ T4291] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 249.599128][ T1111] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 249.678931][ T21] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 249.769041][ T4291] usb 4-1: Using ep0 maxpacket: 8 [ 249.819019][ T6284] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 249.882446][ T1111] usb 1-1: Using ep0 maxpacket: 32 [ 249.889073][ T4291] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 249.898086][ T4291] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 249.909234][ T4291] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.939094][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 250.059054][ T6284] usb 2-1: Using ep0 maxpacket: 32 [ 250.069353][ T1111] usb 1-1: unable to get BOS descriptor or descriptor too short [ 250.082130][ T21] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 250.091812][ T21] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 250.101197][ T4291] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.111151][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.122185][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.130811][ T4291] usb 4-1: Product: syz [ 250.135424][ T4291] usb 4-1: Manufacturer: syz [ 250.140488][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 250.149213][ T1111] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 250.150171][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.165021][ T1111] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 250.168954][ T4291] usb 4-1: SerialNumber: syz [ 250.169701][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 250.186771][ T1111] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 250.195751][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 250.211602][ T1111] usb 1-1: config 128 has no interface number 0 [ 250.220251][ T21] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 250.232653][ T6284] usb 2-1: unable to get BOS descriptor or descriptor too short [ 250.236703][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.245144][ T4222] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 250.261791][ T1111] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.265507][ T21] usb 5-1: config 0 descriptor?? [ 250.273800][ T1111] usb 1-1: config 128 interface 127 has no altsetting 0 [ 250.349408][ T6284] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 250.358167][ T6284] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 250.370634][ T6284] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 250.380787][ T6284] usb 2-1: config 128 has no interface number 0 [ 250.387368][ T6284] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.399171][ T6284] usb 2-1: config 128 interface 127 has no altsetting 0 [ 250.450246][ T1111] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 250.460140][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.468250][ T1111] usb 1-1: Product: syz [ 250.472709][ T1111] usb 1-1: Manufacturer: syz [ 250.481321][ T1111] usb 1-1: SerialNumber: syz [ 250.544854][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 250.559938][ T6284] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 250.569797][ T6284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.583106][ T6284] usb 2-1: Product: syz [ 250.583434][ T21] usb 5-1: USB disconnect, device number 36 [ 250.587498][ T6284] usb 2-1: Manufacturer: syz [ 250.587516][ T6284] usb 2-1: SerialNumber: syz [ 250.629873][ T4222] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 250.641455][ T4222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.652377][ T4222] usb 6-1: config 0 descriptor?? [ 250.692227][ T4222] gspca_main: spca508-2.14.0 probing 8086:0110 [ 250.759266][ T4291] usb 4-1: 0:2 : does not exist [ 250.770735][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 250.790002][ T4291] usb 4-1: USB disconnect, device number 43 [ 250.913996][ T1111] usb 1-1: USB disconnect, device number 45 [ 251.001792][ T6284] snd-usb-audio: probe of 2-1:128.127 failed with error -12 [ 251.012916][ T6284] usb 2-1: USB disconnect, device number 38 [ 251.030314][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.120266][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.220879][ T4717] udevd[4717]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.439454][ T4222] gspca_spca508: reg_read err -110 [ 251.459081][ T4222] gspca_spca508: reg_read err -32 [ 251.489233][ T4222] gspca_spca508: reg_read err -32 [ 251.519481][ T4222] gspca_spca508: reg_read err -32 [ 251.541892][ T4222] gspca_spca508: reg write: error -32 [ 251.554446][ T4222] spca508: probe of 6-1:0.0 failed with error -32 [ 251.787044][ T7406] device syzkaller0 entered promiscuous mode [ 252.180594][ T7410] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 252.227645][ T7415] netlink: 277 bytes leftover after parsing attributes in process `syz.1.946'. [ 252.236687][ T7410] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 252.619021][ T1111] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 252.858967][ T4222] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 252.868946][ T1111] usb 4-1: Using ep0 maxpacket: 32 [ 252.882416][ T7431] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 252.921844][ T7431] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 252.932297][ T4291] usb 6-1: USB disconnect, device number 7 [ 252.969844][ T7434] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 252.978500][ T7434] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 253.029156][ T1111] usb 4-1: unable to get BOS descriptor or descriptor too short [ 253.106698][ T7439] device syzkaller0 entered promiscuous mode [ 253.119731][ T1111] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 253.128753][ T4222] usb 5-1: Using ep0 maxpacket: 32 [ 253.144127][ T1111] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 253.168626][ T1111] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 253.185967][ T1111] usb 4-1: config 128 has no interface number 0 [ 253.194374][ T1111] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.215484][ T1111] usb 4-1: config 128 interface 127 has no altsetting 0 [ 253.299186][ T4222] usb 5-1: unable to get BOS descriptor or descriptor too short [ 253.355947][ T7445] netlink: 'syz.5.957': attribute type 27 has an invalid length. [ 253.379296][ T1111] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 253.387520][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.397213][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.406681][ T4222] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 253.420542][ T4222] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 253.431711][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.436550][ T1111] usb 4-1: Product: syz [ 253.444994][ T4222] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 253.460740][ T1111] usb 4-1: Manufacturer: syz [ 253.466254][ T1111] usb 4-1: SerialNumber: syz [ 253.472298][ T7445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.477163][ T4222] usb 5-1: config 128 has no interface number 0 [ 253.505927][ T4222] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.528612][ T4222] usb 5-1: config 128 interface 127 has no altsetting 0 [ 253.689268][ T4222] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 253.699699][ T4222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.708107][ T4222] usb 5-1: Product: syz [ 253.713102][ T4222] usb 5-1: Manufacturer: syz [ 253.718224][ T4222] usb 5-1: SerialNumber: syz [ 253.942206][ T1111] snd-usb-audio: probe of 4-1:128.127 failed with error -12 [ 253.955067][ T7404] syz.4.942 (7404) used greatest stack depth: 21120 bytes left [ 253.970275][ T1111] usb 4-1: USB disconnect, device number 44 [ 254.006308][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'. [ 254.037218][ T7451] input: syz1 as /devices/virtual/input/input34 [ 254.166166][ T4222] snd-usb-audio: probe of 5-1:128.127 failed with error -12 [ 254.178134][ T4222] usb 5-1: USB disconnect, device number 37 [ 254.206696][ T4717] udevd[4717]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.348577][ T7462] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294950908 (17179803632 ns) > initial count (352 ns). Using initial count to start timer. [ 254.446227][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.676219][ T7476] netlink: 277 bytes leftover after parsing attributes in process `syz.4.971'. [ 254.744120][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 254.762710][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 254.778214][ T7483] input: syz1 as /devices/virtual/input/input35 [ 255.079200][ T4222] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 255.319007][ T4222] usb 6-1: Using ep0 maxpacket: 32 [ 255.349230][ T4254] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 255.499251][ T4222] usb 6-1: unable to get BOS descriptor or descriptor too short [ 255.589084][ T4254] usb 1-1: Using ep0 maxpacket: 32 [ 255.589213][ T4222] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 255.616885][ T4222] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 255.629337][ T4222] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 255.651447][ T4222] usb 6-1: config 128 has no interface number 0 [ 255.658532][ T4222] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.669355][ T4222] usb 6-1: config 128 interface 127 has no altsetting 0 [ 255.749322][ T4254] usb 1-1: unable to get BOS descriptor or descriptor too short [ 255.829186][ T4254] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 255.838792][ T4254] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 255.849800][ T4254] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 255.860642][ T4254] usb 1-1: config 128 has no interface number 0 [ 255.867041][ T4254] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.874232][ T4222] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 255.878451][ T4254] usb 1-1: config 128 interface 127 has no altsetting 0 [ 255.905542][ T4222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.924426][ T4222] usb 6-1: Product: syz [ 255.928762][ T4222] usb 6-1: Manufacturer: syz [ 255.935286][ T4222] usb 6-1: SerialNumber: syz [ 255.975605][ T7510] binder: 7509:7510 ioctl c0306201 200000000080 returned -14 [ 256.054537][ T7512] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 256.059317][ T4254] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 256.081305][ T4254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.099046][ T4254] usb 1-1: Product: syz [ 256.119515][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.126187][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.137086][ T4254] usb 1-1: Manufacturer: syz [ 256.142306][ T4254] usb 1-1: SerialNumber: syz [ 256.160822][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 256.182351][ T7514] input: syz1 as /devices/virtual/input/input36 [ 256.342023][ T7520] device syzkaller0 entered promiscuous mode [ 256.375681][ T7522] fuse: Bad value for 'fd' [ 256.422143][ T4222] snd-usb-audio: probe of 6-1:128.127 failed with error -12 [ 256.473123][ T4222] usb 6-1: USB disconnect, device number 8 [ 256.558967][ T4291] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 256.597083][ T4254] snd-usb-audio: probe of 1-1:128.127 failed with error -12 [ 256.614172][ T4254] usb 1-1: USB disconnect, device number 46 [ 256.799212][ T4291] usb 4-1: Using ep0 maxpacket: 16 [ 256.805618][ T4717] udevd[4717]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.843134][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.939117][ T4291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 256.960358][ T4291] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 256.976737][ T4291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 256.977920][ T7535] kvm: pic: non byte read [ 256.987155][ T4291] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 256.993451][ T7535] kvm: pic: non byte read [ 257.117260][ T7543] input: syz1 as /devices/virtual/input/input37 [ 257.145744][ T4833] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.146040][ T7544] [ 257.155414][ T7544] ====================================================== [ 257.162796][ T7544] WARNING: possible circular locking dependency detected [ 257.170029][ T7544] 5.15.189-syzkaller #0 Not tainted [ 257.175327][ T7544] ------------------------------------------------------ [ 257.183405][ T7544] syz.0.1000/7544 is trying to acquire lock: [ 257.190339][ T7544] ffff8880193e4c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 257.202085][ T7544] [ 257.202085][ T7544] but task is already holding lock: [ 257.210941][ T7544] ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 257.220961][ T7544] [ 257.220961][ T7544] which lock already depends on the new lock. [ 257.220961][ T7544] [ 257.231806][ T7544] [ 257.231806][ T7544] the existing dependency chain (in reverse order) is: [ 257.241180][ T7544] [ 257.241180][ T7544] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 257.249603][ T7544] __mutex_lock_common+0x1eb/0x2390 [ 257.255519][ T7544] mutex_lock_nested+0x17/0x20 [ 257.260813][ T7544] rfkill_register+0x33/0x8a0 [ 257.266091][ T7544] hci_register_dev+0x452/0x970 [ 257.271821][ T7544] vhci_create_device+0x32c/0x5c0 [ 257.277773][ T7544] vhci_write+0x391/0x450 [ 257.282903][ T7544] vfs_write+0x712/0xd00 [ 257.288337][ T7544] ksys_write+0x14d/0x250 [ 257.293710][ T7544] do_syscall_64+0x4c/0xa0 [ 257.299086][ T7544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.306101][ T7544] [ 257.306101][ T7544] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 257.314099][ T7544] __mutex_lock_common+0x1eb/0x2390 [ 257.320701][ T7544] mutex_lock_nested+0x17/0x20 [ 257.326492][ T7544] vhci_send_frame+0x88/0x100 [ 257.331754][ T7544] hci_send_frame+0x1a9/0x2e0 [ 257.337185][ T7544] hci_tx_work+0x9f9/0x1710 [ 257.342558][ T7544] process_one_work+0x863/0x1000 [ 257.348509][ T7544] worker_thread+0xaa8/0x12a0 [ 257.354087][ T7544] kthread+0x436/0x520 [ 257.358762][ T7544] ret_from_fork+0x1f/0x30 [ 257.363786][ T7544] [ 257.363786][ T7544] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 257.373501][ T7544] __flush_work+0xdd/0x1b0 [ 257.378530][ T7544] hci_dev_do_close+0x1e7/0x1030 [ 257.384462][ T7544] hci_unregister_dev+0x2d7/0x580 [ 257.390477][ T7544] vhci_release+0x73/0xc0 [ 257.395611][ T7544] __fput+0x234/0x930 [ 257.400324][ T7544] task_work_run+0x125/0x1a0 [ 257.405848][ T7544] do_exit+0x61e/0x20a0 [ 257.410625][ T7544] do_group_exit+0x12e/0x300 [ 257.416064][ T7544] get_signal+0x6ca/0x12c0 [ 257.421226][ T7544] arch_do_signal_or_restart+0xc1/0x1300 [ 257.427586][ T7544] exit_to_user_mode_loop+0x9e/0x130 [ 257.433800][ T7544] exit_to_user_mode_prepare+0xb1/0x140 [ 257.439965][ T7544] syscall_exit_to_user_mode+0x16/0x40 [ 257.445950][ T7544] do_syscall_64+0x58/0xa0 [ 257.451169][ T7544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.458471][ T7544] [ 257.458471][ T7544] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 257.466696][ T7544] __mutex_lock_common+0x1eb/0x2390 [ 257.472909][ T7544] mutex_lock_nested+0x17/0x20 [ 257.479102][ T7544] bg_scan_update+0x44/0x3b0 [ 257.484979][ T7544] process_one_work+0x863/0x1000 [ 257.490697][ T7544] worker_thread+0xaa8/0x12a0 [ 257.497073][ T7544] kthread+0x436/0x520 [ 257.502045][ T7544] ret_from_fork+0x1f/0x30 [ 257.507360][ T7544] [ 257.507360][ T7544] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 257.517940][ T7544] __lock_acquire+0x2c33/0x7c60 [ 257.523718][ T7544] lock_acquire+0x197/0x3f0 [ 257.529503][ T7544] __flush_work+0xdd/0x1b0 [ 257.534796][ T7544] __cancel_work_timer+0x3ac/0x520 [ 257.541062][ T7544] hci_request_cancel_all+0xcc/0x300 [ 257.547535][ T7544] hci_dev_do_close+0x4e/0x1030 [ 257.553022][ T7544] hci_rfkill_set_block+0x10a/0x190 [ 257.559289][ T7544] rfkill_set_block+0x1c6/0x420 [ 257.565199][ T7544] rfkill_fop_write+0x458/0x560 [ 257.571693][ T7544] vfs_write+0x300/0xd00 [ 257.576535][ T7544] ksys_write+0x14d/0x250 [ 257.581659][ T7544] do_syscall_64+0x4c/0xa0 [ 257.586963][ T7544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.594135][ T7544] [ 257.594135][ T7544] other info that might help us debug this: [ 257.594135][ T7544] [ 257.605431][ T7544] Chain exists of: [ 257.605431][ T7544] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 257.605431][ T7544] [ 257.624709][ T7544] Possible unsafe locking scenario: [ 257.624709][ T7544] [ 257.632834][ T7544] CPU0 CPU1 [ 257.638720][ T7544] ---- ---- [ 257.644754][ T7544] lock(rfkill_global_mutex); [ 257.649963][ T7544] lock(&data->open_mutex); [ 257.657794][ T7544] lock(rfkill_global_mutex); [ 257.665552][ T7544] lock((work_completion)(&hdev->bg_scan_update)); [ 257.672870][ T7544] [ 257.672870][ T7544] *** DEADLOCK *** [ 257.672870][ T7544] [ 257.681720][ T7544] 1 lock held by syz.0.1000/7544: [ 257.687061][ T7544] #0: ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 257.697891][ T7544] [ 257.697891][ T7544] stack backtrace: [ 257.703970][ T7544] CPU: 1 PID: 7544 Comm: syz.0.1000 Not tainted 5.15.189-syzkaller #0 [ 257.712792][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.723955][ T7544] Call Trace: [ 257.727435][ T7544] [ 257.730404][ T7544] dump_stack_lvl+0x168/0x230 [ 257.735179][ T7544] ? load_image+0x3b0/0x3b0 [ 257.739959][ T7544] ? show_regs_print_info+0x20/0x20 [ 257.745355][ T7544] ? print_circular_bug+0x12b/0x1a0 [ 257.750977][ T7544] check_noncircular+0x274/0x310 [ 257.756625][ T7544] ? add_chain_block+0x940/0x940 [ 257.761778][ T7544] ? lockdep_lock+0x141/0x1e0 [ 257.766744][ T7544] ? __lock_acquire+0x12d9/0x7c60 [ 257.772133][ T7544] ? lockdep_lock+0x1e0/0x1e0 [ 257.777120][ T7544] ? mark_lock+0x94/0x320 [ 257.781626][ T7544] __lock_acquire+0x2c33/0x7c60 [ 257.786682][ T7544] ? verify_lock_unused+0x140/0x140 [ 257.792325][ T7544] ? psi_task_switch+0x495/0x810 [ 257.797362][ T7544] ? verify_lock_unused+0x140/0x140 [ 257.803273][ T7544] lock_acquire+0x197/0x3f0 [ 257.807954][ T7544] ? __flush_work+0xc1/0x1b0 [ 257.812643][ T7544] ? __lock_acquire+0x7c60/0x7c60 [ 257.817956][ T7544] ? read_lock_is_recursive+0x10/0x10 [ 257.823636][ T7544] ? start_flush_work+0x776/0x820 [ 257.829695][ T7544] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 257.836135][ T7544] ? _raw_spin_unlock+0x40/0x40 [ 257.841437][ T7544] __flush_work+0xdd/0x1b0 [ 257.846314][ T7544] ? __flush_work+0xc1/0x1b0 [ 257.851230][ T7544] ? flush_work+0x20/0x20 [ 257.856030][ T7544] ? try_to_grab_pending+0xf3/0x7e0 [ 257.861239][ T7544] ? lockdep_hardirqs_off+0x70/0x100 [ 257.866919][ T7544] ? mark_lock+0x94/0x320 [ 257.871517][ T7544] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 257.877605][ T7544] ? lock_chain_count+0x20/0x20 [ 257.882466][ T7544] ? mark_lock+0x94/0x320 [ 257.886912][ T7544] ? __cancel_work_timer+0x331/0x520 [ 257.892466][ T7544] __cancel_work_timer+0x3ac/0x520 [ 257.898566][ T7544] ? cancel_work_sync+0x20/0x20 [ 257.904198][ T7544] ? __cancel_work+0x1f4/0x2d0 [ 257.909057][ T7544] ? lockdep_hardirqs_on+0x94/0x140 [ 257.914524][ T7544] ? __cancel_work+0x26f/0x2d0 [ 257.919379][ T7544] ? cancel_work+0x20/0x20 [ 257.924068][ T7544] ? lock_chain_count+0x20/0x20 [ 257.929442][ T7544] hci_request_cancel_all+0xcc/0x300 [ 257.934920][ T7544] hci_dev_do_close+0x4e/0x1030 [ 257.940029][ T7544] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 257.946098][ T7544] ? _raw_spin_unlock+0x40/0x40 [ 257.951071][ T7544] hci_rfkill_set_block+0x10a/0x190 [ 257.956379][ T7544] ? rcu_lock_release+0x20/0x20 [ 257.961743][ T7544] rfkill_set_block+0x1c6/0x420 [ 257.966678][ T7544] rfkill_fop_write+0x458/0x560 [ 257.971526][ T7544] ? rfkill_fop_read+0x4b0/0x4b0 [ 257.976629][ T7544] ? common_file_perm+0x150/0x1c0 [ 257.982058][ T7544] ? fsnotify_perm+0x5d/0x560 [ 257.986781][ T7544] ? security_file_permission+0x75/0xa0 [ 257.992586][ T7544] ? rfkill_fop_read+0x4b0/0x4b0 [ 257.997811][ T7544] vfs_write+0x300/0xd00 [ 258.002167][ T7544] ? file_end_write+0x250/0x250 [ 258.007406][ T7544] ? __fget_files+0x40f/0x480 [ 258.012279][ T7544] ? __fdget_pos+0x1e2/0x370 [ 258.016895][ T7544] ? ksys_write+0x71/0x250 [ 258.021400][ T7544] ksys_write+0x14d/0x250 [ 258.025733][ T7544] ? __ia32_sys_read+0x80/0x80 [ 258.030618][ T7544] ? lockdep_hardirqs_on+0x94/0x140 [ 258.035850][ T7544] do_syscall_64+0x4c/0xa0 [ 258.040770][ T7544] ? clear_bhb_loop+0x30/0x80 [ 258.045842][ T7544] ? clear_bhb_loop+0x30/0x80 [ 258.050527][ T7544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.056537][ T7544] RIP: 0033:0x7fccf2643be9 [ 258.061314][ T7544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.082208][ T7544] RSP: 002b:00007fccf08ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.091251][ T7544] RAX: ffffffffffffffda RBX: 00007fccf286afa0 RCX: 00007fccf2643be9 [ 258.099698][ T7544] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 258.107947][ T7544] RBP: 00007fccf26c6e19 R08: 0000000000000000 R09: 0000000000000000 [ 258.116008][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.124261][ T7544] R13: 00007fccf286b038 R14: 00007fccf286afa0 R15: 00007ffffcabf888 [ 258.133229][ T7544] [ 258.189145][ T4291] usb 4-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 258.200625][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.209900][ T4291] usb 4-1: Product: syz [ 258.214719][ T4291] usb 4-1: Manufacturer: syz [ 258.222076][ T4291] usb 4-1: SerialNumber: syz [ 258.229517][ T4291] usb 4-1: config 0 descriptor?? [ 258.270404][ T4291] omninet 4-1:0.0: ZyXEL - omni.net usb converter detected [ 258.282159][ T4291] usb 4-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 259.149042][ T1111] Bluetooth: hci5: command 0x1003 tx timeout [ 259.156777][ T4188] Bluetooth: hci5: sending frame failed (-49) [ 259.547182][ T1111] usb 4-1: USB disconnect, device number 45 [ 259.560448][ T1111] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 259.574400][ T1111] omninet 4-1:0.0: device disconnected [ 261.229100][ T4257] Bluetooth: hci5: command 0x1001 tx timeout [ 261.235702][ T4188] Bluetooth: hci5: sending frame failed (-49) [ 263.309125][ T1111] Bluetooth: hci5: command 0x1009 tx timeout