last executing test programs: 3m4.729397261s ago: executing program 0 (id=1193): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)={0x0, 0xc, 0x4, "422530f5"}, 0x0, 0x0}) 3m2.847470916s ago: executing program 0 (id=1217): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x4000000) 3m2.594860315s ago: executing program 0 (id=1222): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4c000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000640)={r2, 0x4}, 0x8) 3m2.477321843s ago: executing program 0 (id=1223): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x2aa141a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 3m2.306164963s ago: executing program 0 (id=1227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 3m0.975795712s ago: executing program 0 (id=1240): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) 3m0.508207227s ago: executing program 32 (id=1240): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) 2m53.422390232s ago: executing program 4 (id=1332): r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_emit_vhci(0x0, 0xd) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000000)=""/135, 0x87}], 0x1) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x40, 0x8, 0xb, 0x8000, 0x12, "6c86c7deecbef948"}) close_range(r0, 0xffffffffffffffff, 0x0) 2m52.897747106s ago: executing program 4 (id=1339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) 2m52.443426157s ago: executing program 4 (id=1346): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r1, 0x0, 0x0) 2m52.334045172s ago: executing program 4 (id=1349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 2m52.133410636s ago: executing program 4 (id=1353): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) 2m51.881257831s ago: executing program 4 (id=1355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 2m36.756426503s ago: executing program 33 (id=1355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 2m29.569870483s ago: executing program 5 (id=1610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x3) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040007ff1f00000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2m29.270980758s ago: executing program 5 (id=1615): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20000600}}, 0x40000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xb, 0x83, 0xfffd, 0x9dff, 0xe, "96ca676bc0d8a891"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000000ac0)={0x2020}, 0x2020) 2m28.310087794s ago: executing program 5 (id=1626): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0x9, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x4c}]}, {0x0, [0x0, 0x2e, 0x61, 0x2e]}}, &(0x7f0000000280)=""/111, 0x2e, 0x6f, 0x1, 0xa60}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x20000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x2, 0x0, {{@in6=@empty, @in6=@empty, 0x1, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 2m28.040796612s ago: executing program 5 (id=1628): r0 = timerfd_create(0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(&(0x7f0000000700)=[{r0, 0x3041}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 2m27.365127934s ago: executing program 5 (id=1632): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x17, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m27.139275571s ago: executing program 5 (id=1636): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10018, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd243a432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)="6da8234fdc8e79", 0x7}], 0x1) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x18, 0x0, 0x6, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m11.991965578s ago: executing program 34 (id=1636): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10018, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd243a432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)="6da8234fdc8e79", 0x7}], 0x1) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x18, 0x0, 0x6, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.750943483s ago: executing program 6 (id=2696): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x14ba00, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x18001, 0x0, 0x2, 0x364b93, 0x3ff67}) 4.567261341s ago: executing program 6 (id=2700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80", @ANYRES64=r0], 0x110}}, 0x0) 4.41850508s ago: executing program 2 (id=2702): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 4.364244765s ago: executing program 6 (id=2703): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0)="b3", &(0x7f0000000140)=@udp6, 0x2}, 0x20) 4.32746762s ago: executing program 2 (id=2705): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001800)=@newtfilter={0x24, 0x2c, 0x1, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1}}}, 0x24}}, 0x0) 4.216211434s ago: executing program 2 (id=2707): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) socketpair(0x0, 0x2, 0xb5, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r4, &(0x7f00000059c0)={0x2020}, 0x2020) 4.175711765s ago: executing program 6 (id=2709): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 4.078700769s ago: executing program 6 (id=2711): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) madvise(&(0x7f00006bd000/0x4000)=nil, 0x4000, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000fff000/0x1000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='.\x00', &(0x7f00000001c0)='cramfs\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x3b) 3.822830697s ago: executing program 3 (id=2714): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0xb5, &(0x7f0000000000)) unshare(0x20000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r4, &(0x7f00000059c0)={0x2020}, 0x2020) 2.218151271s ago: executing program 2 (id=2716): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r4, &(0x7f00000059c0)={0x2020}, 0x2020) 1.86898507s ago: executing program 7 (id=2719): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) 1.853467829s ago: executing program 3 (id=2721): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x13, 0x0, &(0x7f00000000c0)) 1.835401627s ago: executing program 6 (id=2722): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x24, &(0x7f0000000140)={0x20, 0x13, 0x4, "68510fe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 927.481861ms ago: executing program 7 (id=2723): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000240)={0x16, 0x0, 0x0}) 927.364478ms ago: executing program 1 (id=2724): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 927.243854ms ago: executing program 3 (id=2725): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1028, 0x5, 0x11, r0, 0x83000000) 886.714998ms ago: executing program 2 (id=2726): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x3f00, 0x40, 0x2, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}}}}) 789.749615ms ago: executing program 2 (id=2727): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xc2, 0x40, 0x2, 0x40, 0x424, 0xb832, 0x2dff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x8, 0x20, 0x8, "", [{{0x9, 0x4, 0xc5, 0x0, 0x0, 0x45, 0x8d, 0x75, 0xf2}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x48, @string={0x48, 0x3, "4309ddb0c5e7561b284617268c4fb8889fa3fc96473e0802d8ac964a233de42788a85ed4bcf538d3c07cc212bacd4a7ada7df143bb8985928a61537d1da10084865a86db4cde"}}, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 707.540091ms ago: executing program 1 (id=2728): r0 = getpid() getpriority(0x0, r0) 707.417333ms ago: executing program 7 (id=2729): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 701.091468ms ago: executing program 3 (id=2730): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000008c0)={&(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008084}, 0x4000040) 596.550329ms ago: executing program 1 (id=2731): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0xb5, &(0x7f0000000000)) unshare(0x20000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r4, &(0x7f00000059c0)={0x2020}, 0x2020) 534.799184ms ago: executing program 3 (id=2732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x48004) 533.790894ms ago: executing program 7 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a30"], 0x118}}, 0x0) 432.191058ms ago: executing program 1 (id=2734): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x40005, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) 338.731392ms ago: executing program 1 (id=2735): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) madvise(&(0x7f00006bd000/0x4000)=nil, 0x4000, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000fff000/0x1000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='.\x00', &(0x7f00000001c0)='cramfs\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x3b) 333.931682ms ago: executing program 3 (id=2736): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r4, &(0x7f00000059c0)={0x2020}, 0x2020) 179.203546ms ago: executing program 7 (id=2737): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) 42.873099ms ago: executing program 1 (id=2738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023bd70008200000003000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x24046070}, 0x4000850) 0s ago: executing program 7 (id=2739): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r0, &(0x7f0000000040)=""/4096, 0x1000) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000001040)) kernel console output (not intermixed with test programs): 3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7442 comm="syz.2.660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11356ac819 code=0x0 [ 185.284092][ T5869] hid (null): unknown global tag 0xd [ 185.284115][ T5869] hid (null): unknown global tag 0xe [ 185.284162][ T5869] hid (null): global environment stack underflow [ 185.284175][ T5869] hid (null): unknown global tag 0xe6 [ 185.284204][ T5869] hid (null): unknown global tag 0xd [ 185.284216][ T5869] hid (null): unknown global tag 0xc [ 185.284228][ T5869] hid (null): unknown global tag 0xd [ 185.329044][ T5869] hid_parser_main: 28 callbacks suppressed [ 185.329061][ T5869] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 185.329081][ T5869] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 185.329099][ T5869] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 185.329117][ T5869] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 185.329134][ T5869] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 185.329152][ T5869] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 185.329170][ T5869] asus 0003:0B05:1ABE.0009: unknown global tag 0xd [ 185.329180][ T5869] asus 0003:0B05:1ABE.0009: item 0 1 1 13 parsing failed [ 185.368137][ T5869] asus 0003:0B05:1ABE.0009: Asus hid parse failed: -22 [ 185.368460][ T5869] asus 0003:0B05:1ABE.0009: probe with driver asus failed with error -22 [ 185.411485][ T5891] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 185.475636][ T5869] usb 5-1: USB disconnect, device number 12 [ 185.539934][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 185.573378][ T5891] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 185.573407][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.573432][ T5891] usb 1-1: Product: syz [ 185.573443][ T5891] usb 1-1: Manufacturer: syz [ 185.573453][ T5891] usb 1-1: SerialNumber: syz [ 185.699902][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 185.702230][ T31] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.702260][ T31] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.702297][ T31] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 185.702319][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.214835][ T31] mcp2221 0003:04D8:00DD.000A: item fetching failed at offset 0/5 [ 186.215520][ T31] mcp2221 0003:04D8:00DD.000A: can't parse reports [ 186.215608][ T31] mcp2221 0003:04D8:00DD.000A: probe with driver mcp2221 failed with error -22 [ 186.437408][ T31] usb 2-1: USB disconnect, device number 10 [ 186.557822][ T5891] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 186.557876][ T5891] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 186.557895][ T5891] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 186.631115][ T5891] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 186.654829][ T5891] usb 1-1: USB disconnect, device number 5 [ 187.009880][ T5891] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 187.159859][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 187.164056][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.164122][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.164151][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.164184][ T5891] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 187.164204][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.165371][ T5891] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 187.165395][ T5891] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 187.165413][ T5891] usb 1-1: Manufacturer: syz [ 187.175429][ T5891] usb 1-1: config 0 descriptor?? [ 187.479862][ T5891] rc_core: IR keymap rc-hauppauge not found [ 187.479880][ T5891] Registered IR keymap rc-empty [ 187.480420][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.499948][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.523644][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 187.526771][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 187.600923][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.629968][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.660061][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.663674][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 187.679930][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.710110][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.739961][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.770610][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.791330][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.819923][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.850059][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.883427][ T5891] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 187.883452][ T5891] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 187.889022][ T5891] usb 1-1: USB disconnect, device number 6 [ 188.206071][ T7501] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 189.499866][ T5869] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 189.660641][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.664447][ T5869] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 189.664496][ T5869] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 189.668979][ T5869] usb 2-1: string descriptor 0 read error: -22 [ 189.669117][ T5869] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 189.669143][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.809531][ T5869] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.956582][ T5869] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 190.008046][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'. [ 190.189914][ T5988] usb 2-1: USB disconnect, device number 11 [ 192.357043][ T7585] program syz.4.720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.461912][ T7586] netlink: 'syz.1.719': attribute type 2 has an invalid length. [ 193.193446][ T7605] program syz.1.729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.763369][ T7618] input: syz0 as /devices/virtual/input/input10 [ 194.097533][ T7629] netlink: 'syz.2.740': attribute type 15 has an invalid length. [ 194.131175][ T7629] netlink: 'syz.2.740': attribute type 15 has an invalid length. [ 194.168044][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.168124][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.708665][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 194.708799][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 195.084240][ T7656] dummy0: entered promiscuous mode [ 195.084473][ T7656] macvtap1: entered allmulticast mode [ 195.084490][ T7656] dummy0: entered allmulticast mode [ 195.099261][ T7658] program syz.1.751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.170681][ T7656] dummy0: left allmulticast mode [ 195.170775][ T7656] dummy0: left promiscuous mode [ 195.408988][ T7660] tipc: Started in network mode [ 195.409022][ T7660] tipc: Node identity ac14140f, cluster identity 4711 [ 195.413525][ T7660] tipc: New replicast peer: 255.255.255.255 [ 195.416612][ T7660] tipc: Enabled bearer , priority 10 [ 197.020662][ T5988] tipc: Node number set to 2886997007 [ 197.197623][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 197.287880][ T37] audit: type=1326 audit(1775599938.822:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7678 comm="syz.0.758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb90f8c819 code=0x0 [ 197.566373][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 198.252939][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 198.299900][ T5869] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 198.716045][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 198.716094][ T5869] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 198.716117][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.742414][ T5869] usb 3-1: config 0 descriptor?? [ 200.293816][ T7713] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.551119][ T5869] usbhid 3-1:0.0: can't add hid device: -71 [ 200.551240][ T5869] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 200.589982][ T5869] usb 3-1: USB disconnect, device number 5 [ 200.866180][ T7726] syz.3.778 (7726) used greatest stack depth: 18192 bytes left [ 201.104529][ T7718] syz.4.775 (7718) used greatest stack depth: 17928 bytes left [ 201.284333][ T7736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.782'. [ 201.284520][ T7736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.782'. [ 201.499840][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 201.649938][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 201.656442][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.656484][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.656521][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 201.656543][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.678376][ T10] usb 4-1: config 0 descriptor?? [ 201.680730][ T5988] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 201.687925][ T10] hub 4-1:0.0: USB hub found [ 201.853231][ T5988] usb 3-1: Using ep0 maxpacket: 16 [ 201.856330][ T5988] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.856414][ T5988] usb 3-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 201.856442][ T5988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.856473][ T5988] usb 3-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 201.856495][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.910187][ T7756] netlink: 'syz.4.790': attribute type 39 has an invalid length. [ 202.734751][ T10] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 202.761694][ T5988] usb 3-1: config 0 descriptor?? [ 203.140689][ T7759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.791'. [ 203.191329][ T10] hid-generic 0003:046D:C31C.000B: item fetching failed at offset 0/1 [ 203.192090][ T10] hid-generic 0003:046D:C31C.000B: probe with driver hid-generic failed with error -22 [ 203.196213][ T5988] lenovo 0003:04B3:3105.000C: unknown main item tag 0x0 [ 203.196242][ T5988] lenovo 0003:04B3:3105.000C: unknown main item tag 0x0 [ 203.196264][ T5988] lenovo 0003:04B3:3105.000C: unknown main item tag 0x0 [ 203.196287][ T5988] lenovo 0003:04B3:3105.000C: unknown main item tag 0x0 [ 203.196309][ T5988] lenovo 0003:04B3:3105.000C: unknown main item tag 0x0 [ 203.196330][ T5988] lenovo 0003:04B3:3105.000C: unknown main item tag 0x0 [ 203.196349][ T5988] lenovo 0003:04B3:3105.000C: unknown main item tag 0x0 [ 203.196371][ T5988] lenovo 0003:04B3:3105.000C: unknown main item tag 0x0 [ 203.196394][ T5988] lenovo 0003:04B3:3105.000C: unknown main item tag 0x0 [ 203.196416][ T5988] lenovo 0003:04B3:3105.000C: unknown main item tag 0x0 [ 203.196638][ T5988] lenovo 0003:04B3:3105.000C: unbalanced collection at end of report description [ 203.197426][ T5988] lenovo 0003:04B3:3105.000C: hid_parse failed [ 203.197495][ T5988] lenovo 0003:04B3:3105.000C: probe with driver lenovo failed with error -22 [ 203.238925][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.792'. [ 203.381161][ T10] usb 4-1: USB disconnect, device number 4 [ 203.429924][ T810] usb 3-1: USB disconnect, device number 6 [ 206.030397][ T5869] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 206.223353][ T5869] usb 4-1: config 0 interface 0 has no altsetting 0 [ 206.223406][ T5869] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 206.223431][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.228783][ T5869] usb 4-1: config 0 descriptor?? [ 207.580566][ T5869] uclogic 0003:5543:0003.000D: hidraw0: USB HID v0.20 Device [HID 5543:0003] on usb-dummy_hcd.3-1/input0 [ 207.758999][ T5988] usb 4-1: USB disconnect, device number 5 [ 207.961855][ T7825] fido_id[7825]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 208.649859][ T5988] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 208.805846][ T5988] usb 5-1: Using ep0 maxpacket: 32 [ 208.842133][ T5988] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 208.842160][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.842177][ T5988] usb 5-1: Product: syz [ 208.842190][ T5988] usb 5-1: Manufacturer: syz [ 208.842203][ T5988] usb 5-1: SerialNumber: syz [ 208.856720][ T5988] usb 5-1: config 0 descriptor?? [ 209.229834][ T5869] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 209.311816][ T5988] airspy 5-1:0.0: Board ID: 00 [ 209.311836][ T5988] airspy 5-1:0.0: Firmware version: [ 209.359972][ T5869] usb 2-1: device descriptor read/64, error -71 [ 209.451390][ T7862] process 'syz.0.835' launched './file1' with NULL argv: empty string added [ 209.600043][ T5869] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 209.733793][ T5869] usb 2-1: device descriptor read/64, error -71 [ 209.850366][ T5869] usb usb2-port1: attempt power cycle [ 209.951763][ T5988] airspy 5-1:0.0: usb_control_msg() failed -71 request 12 [ 210.005334][ T5988] airspy 5-1:0.0: Registered as swradio24 [ 210.005357][ T5988] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 210.040306][ T5988] usb 5-1: USB disconnect, device number 13 [ 210.210522][ T5869] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 210.230514][ T5869] usb 2-1: device descriptor read/8, error -71 [ 210.375782][ T7883] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 210.469873][ T5869] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 210.490749][ T5869] usb 2-1: device descriptor read/8, error -71 [ 210.603950][ T5869] usb usb2-port1: unable to enumerate USB device [ 211.149875][ T5869] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 211.280365][ T5869] usb 4-1: device descriptor read/64, error -71 [ 211.352397][ T7922] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.863'. [ 211.534303][ T5869] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 211.605358][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 211.605389][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 211.606214][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 211.606224][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 211.659978][ T5869] usb 4-1: device descriptor read/64, error -71 [ 211.771499][ T5869] usb usb4-port1: attempt power cycle [ 212.120003][ T5869] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 212.144686][ T5869] usb 4-1: device descriptor read/8, error -71 [ 212.329868][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 212.379952][ T5869] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 212.403938][ T5869] usb 4-1: device descriptor read/8, error -71 [ 212.460247][ T7962] can0: slcan on pty24. [ 212.490116][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.490149][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.490170][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.490210][ T31] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 212.490231][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.514959][ T5869] usb usb4-port1: unable to enumerate USB device [ 212.535601][ T31] usb 5-1: config 0 descriptor?? [ 212.882119][ T7959] can0 (unregistered): slcan off pty24. [ 213.006599][ T31] kye 0003:0458:501A.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 213.007372][ T31] hid_parser_main: 23 callbacks suppressed [ 213.007391][ T31] kye 0003:0458:501A.000E: unknown main item tag 0x5 [ 213.067912][ T31] kye 0003:0458:501A.000E: hidraw0: USB HID vff.fc Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 213.067946][ T31] kye 0003:0458:501A.000E: tablet-enabling feature report not found [ 213.067959][ T31] kye 0003:0458:501A.000E: tablet enabling failed [ 213.219940][ T5869] usb 5-1: USB disconnect, device number 14 [ 213.489909][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 213.601574][ T7991] gretap0: entered promiscuous mode [ 213.601735][ T7991] macsec1: entered allmulticast mode [ 213.601750][ T7991] gretap0: entered allmulticast mode [ 213.629912][ T31] usb 3-1: device descriptor read/64, error -71 [ 213.650131][ T7991] gretap0: left allmulticast mode [ 213.650251][ T7991] gretap0: left promiscuous mode [ 213.869855][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 214.024666][ T31] usb 3-1: device descriptor read/64, error -71 [ 214.130371][ T31] usb usb3-port1: attempt power cycle [ 214.179835][ T5988] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 214.332412][ T5988] usb 5-1: Using ep0 maxpacket: 16 [ 214.334760][ T5988] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 214.334806][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.334831][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.334857][ T5988] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 214.334897][ T5988] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 214.334918][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.421361][ T5988] usb 5-1: config 0 descriptor?? [ 214.469886][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 214.490792][ T31] usb 3-1: device descriptor read/8, error -71 [ 214.749931][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 214.776526][ T31] usb 3-1: device descriptor read/8, error -71 [ 214.889922][ T31] usb usb3-port1: unable to enumerate USB device [ 214.895971][ T5988] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.000F/input/input12 [ 215.048936][ T5988] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.000F/input/input13 [ 215.090458][ T5988] kye 0003:0458:5013.000F: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 215.129344][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.895'. [ 215.410003][ T5988] usb 5-1: USB disconnect, device number 15 [ 215.531247][ T8032] fido_id[8032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 216.298895][ T8057] pimreg: entered allmulticast mode [ 216.319250][ T8055] pimreg: left allmulticast mode [ 217.850043][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 219.057446][ T8101] netlink: 236 bytes leftover after parsing attributes in process `syz.2.923'. [ 219.057488][ T8101] netlink: 236 bytes leftover after parsing attributes in process `syz.2.923'. [ 220.613544][ T8124] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 220.812777][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 220.962638][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 220.962668][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.996099][ T10] usb 4-1: config 0 descriptor?? [ 221.012616][ T10] cp210x 4-1:0.0: cp210x converter detected [ 221.089850][ T5988] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 221.249882][ T5988] usb 2-1: Using ep0 maxpacket: 32 [ 221.252867][ T5988] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 221.252891][ T5988] usb 2-1: config 0 has no interface number 0 [ 221.257034][ T5988] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 221.257062][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.257083][ T5988] usb 2-1: Product: syz [ 221.257098][ T5988] usb 2-1: Manufacturer: syz [ 221.257112][ T5988] usb 2-1: SerialNumber: syz [ 221.328196][ T5988] usb 2-1: config 0 descriptor?? [ 221.341333][ T5988] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 222.251360][ T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 222.326545][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 222.485740][ T5988] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 222.488588][ T31] usb 4-1: USB disconnect, device number 10 [ 222.540623][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 222.577030][ T5988] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 222.621440][ C0] quatech-serial ttyUSB1: qt2_process_read_urb - port change to invalid port: 75 [ 222.692750][ T31] cp210x 4-1:0.0: device disconnected [ 222.822593][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 222.826163][ T36] usb 2-1: USB disconnect, device number 16 [ 222.854570][ T36] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 222.891041][ T36] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 222.892751][ T36] quatech2 2-1:0.51: device disconnected [ 223.359947][ T5988] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 223.512405][ T5988] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 223.512436][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.548352][ T5988] usb 4-1: config 0 descriptor?? [ 224.394762][ T5988] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 224.686971][ T8178] netlink: 428 bytes leftover after parsing attributes in process `syz.2.956'. [ 224.687015][ T8178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.956'. [ 224.782698][ T8182] netlink: 44 bytes leftover after parsing attributes in process `syz.1.958'. [ 224.819182][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.861294][ T5988] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 224.897145][ T8184] netlink: 44 bytes leftover after parsing attributes in process `syz.1.958'. [ 224.897789][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.264164][ T5988] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 225.489576][ T5883] usb 4-1: USB disconnect, device number 11 [ 225.563566][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.971'. [ 225.680540][ T5988] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 225.747083][ T8211] netlink: 152 bytes leftover after parsing attributes in process `syz.2.973'. [ 225.839849][ T5988] usb 1-1: Using ep0 maxpacket: 32 [ 225.842847][ T5988] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 225.842872][ T5988] usb 1-1: config 0 has no interface number 0 [ 225.846300][ T5988] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 225.846326][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.846345][ T5988] usb 1-1: Product: syz [ 225.846359][ T5988] usb 1-1: Manufacturer: syz [ 225.846372][ T5988] usb 1-1: SerialNumber: syz [ 225.909807][ T5988] usb 1-1: config 0 descriptor?? [ 225.969933][ T810] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 226.079961][ T5883] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 226.239838][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 226.255703][ T5883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.255760][ T5883] usb 3-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.256205][ T5883] usb 3-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 32 [ 226.256232][ T5883] usb 3-1: config 1 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 226.256277][ T5883] usb 3-1: config 1 interface 0 has no altsetting 0 [ 226.259478][ T5883] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.309480][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 226.309504][ T5883] usb 3-1: SerialNumber: syz [ 226.353682][ T810] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 226.353710][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.353729][ T810] usb 5-1: Product: syz [ 226.353743][ T810] usb 5-1: Manufacturer: syz [ 226.353766][ T810] usb 5-1: SerialNumber: syz [ 226.354450][ T5988] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 226.354475][ T5988] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 226.437980][ T8215] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 226.456734][ T5883] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 226.456756][ T5883] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 226.457016][ T5883] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 226.637355][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 226.651899][ T8222] loop8: detected capacity change from 0 to 4096 [ 226.691800][ T31] usb 3-1: USB disconnect, device number 11 [ 226.772502][ T5988] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 226.773090][ T5988] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 226.832551][ T5988] usb 1-1: USB disconnect, device number 7 [ 226.881916][ T810] rtl8150 5-1:1.0: couldn't reset the device [ 226.882221][ T810] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 226.937952][ T810] usb 5-1: USB disconnect, device number 16 [ 227.320637][ T8230] loop5: detected capacity change from 0 to 7 [ 227.345059][ T8230] Dev loop5: unable to read RDB block 7 [ 227.345095][ T8230] loop5: unable to read partition table [ 227.345237][ T8230] loop5: partition table beyond EOD, truncated [ 227.345260][ T8230] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 227.380002][ T8227] syz.4.979 uses obsolete (PF_INET,SOCK_PACKET) [ 228.091316][ T8241] netlink: 44 bytes leftover after parsing attributes in process `syz.3.985'. [ 228.150586][ T810] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 228.301059][ T810] usb 3-1: Using ep0 maxpacket: 32 [ 228.309133][ T810] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 228.309161][ T810] usb 3-1: config 0 has no interface number 0 [ 228.309208][ T810] usb 3-1: config 0 interface 184 has no altsetting 0 [ 228.342109][ T810] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 228.342138][ T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.342157][ T810] usb 3-1: Product: syz [ 228.342170][ T810] usb 3-1: Manufacturer: syz [ 228.342183][ T810] usb 3-1: SerialNumber: syz [ 228.393774][ T810] usb 3-1: config 0 descriptor?? [ 228.429857][ T5988] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 228.591911][ T5988] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 228.591966][ T5988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.591992][ T5988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.592013][ T5988] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.592050][ T5988] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.592070][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.709195][ T5988] usb 4-1: config 0 descriptor?? [ 229.075972][ T810] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 229.076005][ T810] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 229.146728][ T5988] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 229.182147][ T5988] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 229.281133][ T810] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 229.281166][ T810] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 229.281186][ T810] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 229.281204][ T810] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 229.281506][ T810] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 229.397939][ T810] usb 3-1: USB disconnect, device number 12 [ 229.440401][ T31] usb 4-1: USB disconnect, device number 12 [ 230.285641][ T8314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.300036][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 230.396209][ T8314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.469938][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 230.472881][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.472904][ T31] usb 3-1: config 0 has no interfaces? [ 230.477867][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 230.477886][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.477899][ T31] usb 3-1: Product: syz [ 230.477909][ T31] usb 3-1: Manufacturer: syz [ 230.477918][ T31] usb 3-1: SerialNumber: syz [ 230.502155][ T31] usb 3-1: config 0 descriptor?? [ 230.758434][ T5883] usb 3-1: USB disconnect, device number 13 [ 231.407154][ T8343] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1030'. [ 231.939275][ T8355] netlink: 'syz.4.1037': attribute type 1 has an invalid length. [ 231.939297][ T8355] netlink: 'syz.4.1037': attribute type 2 has an invalid length. [ 232.362991][ T8360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1040'. [ 232.783342][ T8368] input: syz0 as /devices/virtual/input/input15 [ 233.799919][ T5883] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 233.952020][ T5883] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.969519][ T5883] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 233.969549][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 233.969568][ T5883] usb 4-1: Product: syz [ 233.969581][ T5883] usb 4-1: Manufacturer: syz [ 233.969594][ T5883] usb 4-1: SerialNumber: syz [ 234.198366][ T5883] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 234.311887][ T8400] netlink: 'syz.4.1057': attribute type 3 has an invalid length. [ 234.339851][ T1078] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 234.463102][ C1] usblp0: nonzero write bulk status received: -71 [ 234.465039][ T5883] usb 4-1: USB disconnect, device number 13 [ 234.499498][ T1078] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 234.499529][ T1078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.523962][ T5883] usblp0: removed [ 234.548053][ T1078] usb 3-1: config 0 descriptor?? [ 234.574535][ T1078] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 235.314236][ T8421] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1067'. [ 235.314412][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'. [ 235.389888][ T1078] gspca_stv06xx: I2C: Read error writing address: -71 [ 235.413243][ T1078] usb 3-1: USB disconnect, device number 14 [ 235.645089][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1071'. [ 235.789823][ T5891] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 235.945264][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.945295][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.945314][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.945359][ T5891] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.945380][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.011130][ T5891] usb 2-1: config 0 descriptor?? [ 236.029845][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 236.181930][ T31] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 236.181958][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.211197][ T31] usb 5-1: config 0 descriptor?? [ 236.461643][ T5891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 236.461678][ T5891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 236.461705][ T5891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 236.461730][ T5891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 236.461754][ T5891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 236.461777][ T5891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 236.461798][ T5891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 236.461825][ T5891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 236.461886][ T5891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 236.461912][ T5891] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 236.558112][ T5891] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 236.729854][ T5883] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 236.765823][ T810] usb 2-1: USB disconnect, device number 17 [ 236.889828][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 236.892260][ T5883] usb 4-1: config 0 has no interfaces? [ 236.895031][ T5883] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 236.895064][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.895082][ T5883] usb 4-1: Product: syz [ 236.895095][ T5883] usb 4-1: Manufacturer: syz [ 236.895109][ T5883] usb 4-1: SerialNumber: syz [ 236.952976][ T5883] usb 4-1: config 0 descriptor?? [ 237.173132][ T8451] netlink: 'syz.3.1081': attribute type 83 has an invalid length. [ 237.176985][ T5891] usb 4-1: USB disconnect, device number 14 [ 237.260981][ T37] audit: type=1326 audit(2000000000.870:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb90f8c819 code=0x7ffc0000 [ 237.261811][ T37] audit: type=1326 audit(2000000000.870:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb90f8c819 code=0x7ffc0000 [ 237.262902][ T37] audit: type=1326 audit(2000000000.870:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7feb90f8c819 code=0x7ffc0000 [ 237.264127][ T37] audit: type=1326 audit(2000000000.870:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb90f8c819 code=0x7ffc0000 [ 237.264730][ T37] audit: type=1326 audit(2000000000.870:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb90f8c819 code=0x7ffc0000 [ 237.265364][ T37] audit: type=1326 audit(2000000000.870:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb90f8c819 code=0x7ffc0000 [ 237.304484][ T37] audit: type=1326 audit(2000000000.900:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb90f8c819 code=0x7ffc0000 [ 237.306910][ T37] audit: type=1326 audit(2000000000.910:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb90f8c819 code=0x7ffc0000 [ 237.323653][ T37] audit: type=1326 audit(2000000000.920:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feb90f8c819 code=0x7ffc0000 [ 237.454622][ T31] usb 5-1: Cannot set autoneg [ 237.455289][ T31] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 237.530377][ T31] usb 5-1: USB disconnect, device number 17 [ 237.556655][ T37] audit: type=1326 audit(2000000001.160:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb90f8c819 code=0x7ffc0000 [ 237.708803][ T8480] netlink: 'syz.0.1093': attribute type 21 has an invalid length. [ 237.708826][ T8480] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1093'. [ 237.708924][ T8480] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1093'. [ 237.716376][ T8480] netlink: 'syz.0.1093': attribute type 21 has an invalid length. [ 237.716425][ T8480] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1093'. [ 237.716577][ T8480] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1093'. [ 238.127204][ T8494] input: syz1 as /devices/virtual/input/input16 [ 238.339067][ T8501] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.1103'. [ 238.806800][ T8513] netlink: 'syz.2.1109': attribute type 2 has an invalid length. [ 239.357951][ T8537] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.413840][ T8539] netlink: 'syz.2.1121': attribute type 3 has an invalid length. [ 239.439896][ T810] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 239.598715][ T810] usb 1-1: Using ep0 maxpacket: 8 [ 239.616119][ T810] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 239.616174][ T810] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.616196][ T810] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.616219][ T810] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.616241][ T810] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.616281][ T810] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.616302][ T810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.720719][ T8545] loop2: detected capacity change from 0 to 7 [ 239.726806][ T5944] Dev loop2: unable to read RDB block 7 [ 239.726846][ T5944] loop2: unable to read partition table [ 239.727095][ T5944] loop2: partition table beyond EOD, truncated [ 239.768648][ T8545] Dev loop2: unable to read RDB block 7 [ 239.768690][ T8545] loop2: unable to read partition table [ 239.782286][ T8545] loop2: partition table beyond EOD, truncated [ 239.782326][ T8545] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 239.917088][ T810] usb 1-1: usb_control_msg returned -32 [ 239.917136][ T810] usbtmc 1-1:16.0: can't read capabilities [ 240.163060][ T5891] usb 1-1: USB disconnect, device number 8 [ 240.669874][ T5891] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 240.839918][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 240.846229][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.846258][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.846279][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.846310][ T5891] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 240.846331][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.930056][ T5891] usb 4-1: config 0 descriptor?? [ 240.935110][ T8576] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 241.105688][ T8576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.160469][ T8584] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1139'. [ 241.180805][ T8580] bond2: (slave geneve2): making interface the new active one [ 241.213460][ T8580] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 241.356869][ T5891] hid (null): unknown global tag 0xd [ 241.356902][ T5891] hid (null): report_id 1341611109 is invalid [ 241.356938][ T5891] hid (null): unknown global tag 0xc [ 242.072902][ T5883] usb 4-1: USB disconnect, device number 15 [ 242.919896][ T5891] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 242.969857][ T5883] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 243.102210][ T5891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 243.104064][ T5891] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 243.104100][ T5891] usb 1-1: can't read configurations, error -71 [ 243.132637][ T5883] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 243.134128][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.134193][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.134220][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.136322][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.136373][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.136400][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.137787][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.137833][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.137857][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.139104][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.139150][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.139174][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.257724][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.257778][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.257806][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.259075][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.259123][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.259148][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.291924][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.291979][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.292008][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.300661][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.300712][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 243.300738][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.383191][ T5883] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 243.383222][ T5883] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 243.383244][ T5883] usb 3-1: Product: syz [ 243.383258][ T5883] usb 3-1: Manufacturer: syz [ 243.383273][ T5883] usb 3-1: SerialNumber: syz [ 243.388283][ T5883] usb 3-1: config 0 descriptor?? [ 243.419995][ T810] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 243.467313][ T5883] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 243.569892][ T810] usb 5-1: Using ep0 maxpacket: 32 [ 243.572167][ T810] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 243.572194][ T810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.587233][ T810] usb 5-1: config 0 descriptor?? [ 243.643666][ T810] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 243.724429][ T36] usb 3-1: USB disconnect, device number 15 [ 243.802288][ T36] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 244.438095][ T8685] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 244.438592][ T8685] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1187'. [ 244.654633][ T810] gspca_vc032x: reg_w err -71 [ 244.654662][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654673][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654682][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654690][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654712][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654720][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654727][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654735][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654742][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654750][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654757][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654765][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654773][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654780][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654788][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654796][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654804][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654811][ T810] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.654919][ T810] gspca_vc032x: Unknown sensor... [ 244.654996][ T810] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 244.693542][ T810] usb 5-1: USB disconnect, device number 18 [ 245.269854][ T5891] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 245.424494][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.424545][ T5891] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 245.424566][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.473836][ T5891] usb 1-1: config 0 descriptor?? [ 245.497222][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 245.909246][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00 [ 246.118420][ T5891] pwc: recv_control_msg error -71 req 02 val 2c00 [ 246.126879][ T5891] pwc: recv_control_msg error -71 req 04 val 1000 [ 246.131198][ T5891] pwc: recv_control_msg error -71 req 04 val 1300 [ 246.132293][ T5891] pwc: recv_control_msg error -71 req 04 val 1400 [ 246.133407][ T5891] pwc: recv_control_msg error -71 req 02 val 2000 [ 246.146195][ T5891] pwc: recv_control_msg error -71 req 02 val 2100 [ 246.157920][ T5891] pwc: recv_control_msg error -71 req 04 val 1500 [ 246.161535][ T5891] pwc: recv_control_msg error -71 req 02 val 2500 [ 246.170843][ T5891] pwc: recv_control_msg error -71 req 02 val 2400 [ 246.175600][ T5891] pwc: recv_control_msg error -71 req 02 val 2600 [ 246.186976][ T5891] pwc: recv_control_msg error -71 req 02 val 2900 [ 246.190149][ T5891] pwc: recv_control_msg error -71 req 02 val 2800 [ 246.202980][ T5891] pwc: recv_control_msg error -71 req 04 val 1100 [ 246.203775][ T5891] pwc: recv_control_msg error -71 req 04 val 1200 [ 246.208755][ T5891] pwc: Registered as video103. [ 246.250242][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 246.301871][ T5891] usb 1-1: USB disconnect, device number 11 [ 246.927534][ T8757] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1217'. [ 246.927559][ T8757] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 247.360803][ T1078] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 247.509997][ T1078] usb 4-1: Using ep0 maxpacket: 32 [ 247.514600][ T1078] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 247.514627][ T1078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.514645][ T1078] usb 4-1: Product: syz [ 247.514657][ T1078] usb 4-1: Manufacturer: syz [ 247.514671][ T1078] usb 4-1: SerialNumber: syz [ 247.538899][ T1078] usb 4-1: config 0 descriptor?? [ 247.847262][ T1078] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 016 [ 247.872457][ T810] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 247.986947][ T8788] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1234'. [ 248.026362][ T810] usb 3-1: Using ep0 maxpacket: 32 [ 248.028111][ T810] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 248.028131][ T810] usb 3-1: config 0 has no interface number 0 [ 248.028175][ T810] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.028195][ T810] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 248.028217][ T810] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 248.028241][ T810] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 1160, setting to 1024 [ 248.028266][ T810] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.077619][ T810] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 248.077650][ T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.077670][ T810] usb 3-1: Product: syz [ 248.077685][ T810] usb 3-1: Manufacturer: syz [ 248.077705][ T810] usb 3-1: SerialNumber: syz [ 248.146129][ T810] usb 3-1: config 0 descriptor?? [ 248.175460][ T810] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input18 [ 248.627341][ T1078] usb 3-1: USB disconnect, device number 16 [ 249.295899][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.304860][ T8813] Bluetooth: MGMT ver 1.23 [ 249.428791][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.447758][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.448958][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.453092][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.454433][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.841000][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.092083][ T8764] i2c i2c-1: failure reading data [ 250.127010][ T1078] usb 4-1: USB disconnect, device number 16 [ 250.272749][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.658257][ T8846] netlink: 'syz.2.1260': attribute type 1 has an invalid length. [ 250.658281][ T8846] netlink: 'syz.2.1260': attribute type 2 has an invalid length. [ 250.869928][ T36] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 250.978163][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.031818][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.031849][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 251.031872][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.031928][ T36] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 251.031950][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.108580][ T36] usb 4-1: config 0 descriptor?? [ 251.109330][ T8857] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 251.519892][ T5811] Bluetooth: hci3: command tx timeout [ 251.550832][ T36] hid (null): unknown global tag 0xe [ 251.550853][ T36] hid (null): unknown global tag 0xe [ 251.600311][ T36] hid_parser_main: 5 callbacks suppressed [ 251.600335][ T36] corsair-psu 0003:1B1C:1C1F.0013: unknown main item tag 0x3 [ 251.600364][ T36] corsair-psu 0003:1B1C:1C1F.0013: unknown global tag 0xe [ 251.600379][ T36] corsair-psu 0003:1B1C:1C1F.0013: item 0 1 1 14 parsing failed [ 251.604313][ T36] corsair-psu 0003:1B1C:1C1F.0013: probe with driver corsair-psu failed with error -22 [ 251.769914][ T1078] usb 4-1: USB disconnect, device number 17 [ 252.107790][ T13] bridge_slave_1: left allmulticast mode [ 252.107938][ T13] bridge_slave_1: left promiscuous mode [ 252.149834][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.303050][ T13] bridge_slave_0: left allmulticast mode [ 252.303088][ T13] bridge_slave_0: left promiscuous mode [ 252.303344][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.044765][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 253.292095][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032316000: rx timeout, send abort [ 253.599856][ T5811] Bluetooth: hci3: command tx timeout [ 253.768903][ T13] smc: removing net device bond0 with user defined pnetid SYZ2 [ 253.793448][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028423800: rx timeout, send abort [ 253.794193][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032316000: abort rx timeout. Force session deactivation [ 253.821797][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.891881][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.941191][ T13] bond0 (unregistering): Released all slaves [ 254.293526][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888028423800: abort rx timeout. Force session deactivation [ 254.349328][ T13] tipc: Disabling bearer [ 254.363122][ T13] tipc: Left network mode [ 254.365663][ T8814] chnl_net:caif_netlink_parms(): no params data found [ 254.519846][ T5916] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 254.669814][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 254.680236][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.680265][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 254.680288][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 254.680328][ T5916] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.680349][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.756457][ T5916] usb 3-1: config 0 descriptor?? [ 254.757258][ T8971] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 254.828768][ T5916] hub 3-1:0.0: USB hub found [ 254.976500][ T5916] hub 3-1:0.0: 1 port detected [ 255.606738][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.606796][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.679860][ T5811] Bluetooth: hci3: command tx timeout [ 256.141855][ T9028] netlink: 'syz.3.1329': attribute type 10 has an invalid length. [ 256.274943][ T5891] usb 3-1: USB disconnect, device number 17 [ 256.419627][ T8814] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.427231][ T8814] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.427452][ T8814] bridge_slave_0: entered allmulticast mode [ 256.453555][ T8814] bridge_slave_0: entered promiscuous mode [ 256.510086][ T5916] usb 3-1-port1: config error [ 256.568268][ T9028] team0: Port device dummy0 added [ 256.588295][ T8814] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.588415][ T8814] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.588589][ T8814] bridge_slave_1: entered allmulticast mode [ 256.612412][ T8814] bridge_slave_1: entered promiscuous mode [ 257.010466][ T13] hsr_slave_0: left promiscuous mode [ 257.084957][ T13] hsr_slave_1: left promiscuous mode [ 257.086202][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.086284][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.146599][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.146624][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.337945][ T13] veth1_macvtap: left promiscuous mode [ 257.338210][ T13] veth0_macvtap: left promiscuous mode [ 257.338492][ T13] veth1_vlan: left promiscuous mode [ 257.338849][ T13] veth0_vlan: left promiscuous mode [ 257.412042][ T5916] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 257.559921][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 257.562222][ T5916] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 257.562246][ T5916] usb 4-1: config 179 has no interface number 0 [ 257.562297][ T5916] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 257.562322][ T5916] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 257.562348][ T5916] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 257.562372][ T5916] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 257.562396][ T5916] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 257.562433][ T5916] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 257.562453][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.667634][ T9064] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.759968][ T5811] Bluetooth: hci3: command tx timeout [ 257.953030][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 257.953034][ T5883] usb 4-1: USB disconnect, device number 18 [ 257.953112][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 258.860895][ T13] team0 (unregistering): Port device team_slave_1 removed [ 258.931867][ T13] team0 (unregistering): Port device team_slave_0 removed [ 259.459128][ T8814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.547631][ T8814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.689886][ T8814] team0: Port device team_slave_0 added [ 259.748856][ T8814] team0: Port device team_slave_1 added [ 259.810466][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'. [ 259.810500][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'. [ 259.987592][ T8814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.987607][ T8814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.987632][ T8814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.012396][ T9144] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 260.013342][ T8814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.013385][ T8814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.013469][ T8814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.324351][ T9159] binder: 9155:9159 ioctl c0306201 0 returned -14 [ 260.441776][ T8814] hsr_slave_0: entered promiscuous mode [ 260.458435][ T8814] hsr_slave_1: entered promiscuous mode [ 262.333787][ T8814] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 262.375010][ T8814] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 262.427265][ T8814] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 262.777493][ T8814] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.136628][ T9258] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 263.136745][ T9258] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 263.259378][ T9258] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.268630][ T8814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.285517][ T9258] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 263.336825][ T8814] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.363416][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.364955][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.411284][ T201] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.411544][ T201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.447259][ T9258] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.447372][ T9258] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 263.544547][ T9258] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 263.544634][ T9258] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 263.570987][ T9270] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 263.621412][ T9258] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 263.735918][ T9258] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.736004][ T9258] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 263.737205][ T9273] bond1: (slave geneve2): making interface the new active one [ 263.738013][ T9273] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 263.764181][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 263.799856][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 263.802245][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 263.803681][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 263.878979][ T9258] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 264.384784][ T8814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.653098][ T36] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 264.801947][ T36] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 264.802032][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.833040][ T36] usb 3-1: config 0 descriptor?? [ 264.838791][ T36] cp210x 3-1:0.0: cp210x converter detected [ 265.079995][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 265.113661][ T8814] veth0_vlan: entered promiscuous mode [ 265.156741][ T8814] veth1_vlan: entered promiscuous mode [ 265.199895][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 265.229852][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 265.239365][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 265.239454][ T10] usb 4-1: no configurations [ 265.239468][ T10] usb 4-1: can't read configurations, error -22 [ 265.271241][ T36] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 265.287915][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 265.321966][ T36] usb 3-1: cp210x converter now attached to ttyUSB0 [ 265.384613][ T8814] veth0_macvtap: entered promiscuous mode [ 265.400773][ T8814] veth1_macvtap: entered promiscuous mode [ 265.402401][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 265.433099][ T8814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.448257][ T8814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.484663][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.484712][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.484750][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.484788][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.526694][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 265.551833][ T36] usb 3-1: USB disconnect, device number 18 [ 265.569994][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 265.572746][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 265.574283][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 265.574362][ T10] usb 4-1: no configurations [ 265.574371][ T10] usb 4-1: can't read configurations, error -22 [ 265.581818][ T10] usb usb4-port1: attempt power cycle [ 265.600253][ T5811] Bluetooth: hci4: command 0x0405 tx timeout [ 265.724257][ T36] cp210x 3-1:0.0: device disconnected [ 265.759878][ T5811] Bluetooth: hci3: command 0x0c1a tx timeout [ 265.906339][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.906392][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.992065][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.992086][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.010155][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 266.043642][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 266.056020][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 266.056097][ T10] usb 4-1: no configurations [ 266.056109][ T10] usb 4-1: can't read configurations, error -22 [ 266.201693][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 266.220993][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 266.260239][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 266.260335][ T10] usb 4-1: no configurations [ 266.260349][ T10] usb 4-1: can't read configurations, error -22 [ 266.261087][ T10] usb usb4-port1: unable to enumerate USB device [ 267.284708][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 267.360162][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 267.608941][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 267.680011][ T5811] Bluetooth: hci4: command 0x0405 tx timeout [ 267.839949][ T5811] Bluetooth: hci3: command 0x0c1a tx timeout [ 269.079077][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1497'. [ 269.181002][ T9442] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1499'. [ 269.356123][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.415864][ T9438] bridge_slave_1 (unregistering): left allmulticast mode [ 269.415893][ T9438] bridge_slave_1 (unregistering): left promiscuous mode [ 269.419495][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.760284][ T5811] Bluetooth: hci4: command 0x0405 tx timeout [ 269.926546][ T5811] Bluetooth: hci3: command 0x0c1a tx timeout [ 270.219973][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 270.372458][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 270.507925][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 270.517792][ T31] usb 3-1: config 11 has an invalid interface number: 208 but max is 0 [ 270.517810][ T31] usb 3-1: config 11 has no interface number 0 [ 270.517831][ T31] usb 3-1: config 11 interface 208 has no altsetting 0 [ 270.537498][ T31] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=1f.bf [ 270.537523][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.537542][ T31] usb 3-1: Product: syz [ 270.537555][ T31] usb 3-1: Manufacturer: syz [ 270.537568][ T31] usb 3-1: SerialNumber: syz [ 271.041207][ T31] snd-usb-6fire 3-1:11.208: unable to receive device firmware state. [ 271.041436][ T31] snd-usb-6fire 3-1:11.208: probe with driver snd-usb-6fire failed with error -71 [ 271.072777][ T31] usb 3-1: USB disconnect, device number 19 [ 271.590003][ T810] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 271.739849][ T810] usb 4-1: Using ep0 maxpacket: 8 [ 271.743805][ T810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.743829][ T810] usb 4-1: config 0 has no interfaces? [ 271.746459][ T810] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 271.746484][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.746503][ T810] usb 4-1: Product: syz [ 271.746517][ T810] usb 4-1: Manufacturer: syz [ 271.746531][ T810] usb 4-1: SerialNumber: syz [ 271.759389][ T810] usb 4-1: config 0 descriptor?? [ 272.439249][ T36] usb 4-1: USB disconnect, device number 23 [ 273.467225][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.481788][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.485981][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.487326][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.488072][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.607664][ T5811] Bluetooth: hci5: command tx timeout [ 275.676796][ T201] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.208997][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'. [ 276.209020][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'. [ 276.366225][ T201] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.512563][ T9535] chnl_net:caif_netlink_parms(): no params data found [ 276.905808][ T201] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.248557][ T201] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.689466][ T5811] Bluetooth: hci5: command tx timeout [ 278.035216][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.035335][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.035529][ T9535] bridge_slave_0: entered allmulticast mode [ 278.037899][ T9535] bridge_slave_0: entered promiscuous mode [ 278.097301][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.097410][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.097588][ T9535] bridge_slave_1: entered allmulticast mode [ 278.114035][ T9535] bridge_slave_1: entered promiscuous mode [ 278.552222][ T9535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.556164][ T9535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.789539][ T201] bridge_slave_1: left allmulticast mode [ 278.789568][ T201] bridge_slave_1: left promiscuous mode [ 278.791681][ T201] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.886053][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1589'. [ 279.044420][ T201] bridge_slave_0: left allmulticast mode [ 279.044447][ T201] bridge_slave_0: left promiscuous mode [ 279.044654][ T201] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.759906][ T5811] Bluetooth: hci5: command tx timeout [ 279.835205][ T9722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 280.323684][ T201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.451800][ T201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.487160][ T201] bond0 (unregistering): Released all slaves [ 280.553805][ T9535] team0: Port device team_slave_0 added [ 280.759877][ T5869] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 280.875014][ T9535] team0: Port device team_slave_1 added [ 280.913697][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.913747][ T5869] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 280.913771][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.985890][ T5869] usb 4-1: config 0 descriptor?? [ 281.212868][ T5869] usbhid 4-1:0.0: can't add hid device: -71 [ 281.212978][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 281.242034][ T5869] usb 4-1: USB disconnect, device number 24 [ 281.605291][ T9770] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1624'. [ 281.607588][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.607604][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.607632][ T9535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.694777][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.694794][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.694820][ T9535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.740017][ T5869] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 281.839876][ T5811] Bluetooth: hci5: command tx timeout [ 281.914331][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.914377][ T5869] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.914399][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.935892][ T5869] usb 4-1: config 0 descriptor?? [ 282.162505][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.163670][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.180867][ T5869] usbhid 4-1:0.0: can't add hid device: -71 [ 282.181341][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 282.208154][ T5869] usb 4-1: USB disconnect, device number 25 [ 282.693033][ T5869] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 282.863454][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 282.985643][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.985678][ T5869] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 282.985693][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.994394][ T5869] usb 4-1: config 0 descriptor?? [ 283.153968][ T201] hsr_slave_0: left promiscuous mode [ 283.231383][ T201] hsr_slave_1: left promiscuous mode [ 283.232411][ T201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.232428][ T201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.297108][ T201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.297128][ T201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.509302][ T5869] mcp2221 0003:04D8:00DD.0014: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 283.564793][ T201] veth1_macvtap: left promiscuous mode [ 283.664513][ T201] veth0_macvtap: left promiscuous mode [ 283.666428][ T201] veth1_vlan: left promiscuous mode [ 283.685775][ T201] veth0_vlan: left promiscuous mode [ 283.731957][ C1] usb 4-1: input irq status -75 received [ 284.375714][ T5869] usb 4-1: USB disconnect, device number 26 [ 286.061025][ T201] team0 (unregistering): Port device team_slave_1 removed [ 286.111107][ T201] team0 (unregistering): Port device team_slave_0 removed [ 286.512042][ T9535] hsr_slave_0: entered promiscuous mode [ 286.515187][ T9535] hsr_slave_1: entered promiscuous mode [ 286.516184][ T9535] debugfs: 'hsr0' already exists in 'hsr' [ 286.516221][ T9535] Cannot create hsr debugfs directory [ 286.870215][ T9870] dvmrp0: entered allmulticast mode [ 288.304890][ T9535] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 288.337369][ T9535] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 288.420494][ T9535] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 288.450150][ T9888] syz.3.1666 (9888) used greatest stack depth: 16760 bytes left [ 288.484349][ T9535] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 288.849973][ T810] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 288.958270][ T9535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.001105][ T810] usb 4-1: Using ep0 maxpacket: 16 [ 289.006744][ T810] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 289.006770][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.006793][ T810] usb 4-1: Product: syz [ 289.006803][ T810] usb 4-1: Manufacturer: syz [ 289.006812][ T810] usb 4-1: SerialNumber: syz [ 289.116126][ T9535] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.176988][ T201] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.177749][ T201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.223453][ T201] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.223673][ T201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.272286][ T810] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 289.304278][ T810] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 289.304659][ T810] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 289.304711][ T810] usb 4-1: media controller created [ 289.365731][ T810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.764583][ T810] zl10353_read_register: readreg error (reg=127, ret==-71) [ 289.986359][ T810] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 290.037227][ T810] usb 4-1: USB disconnect, device number 27 [ 290.058235][ T5944] udevd[5944]: setting owner of /dev/bus/usb/004/027 to uid=0, gid=0 failed: No such file or directory [ 290.226933][ T9535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.204118][ T9535] veth0_vlan: entered promiscuous mode [ 291.236311][ T5883] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 291.254348][ T9535] veth1_vlan: entered promiscuous mode [ 291.296104][ T9535] veth0_macvtap: entered promiscuous mode [ 291.311420][ T9535] veth1_macvtap: entered promiscuous mode [ 291.336786][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.364786][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.384337][ T5883] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 291.384361][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.384377][ T5883] usb 4-1: Product: syz [ 291.384388][ T5883] usb 4-1: Manufacturer: syz [ 291.384399][ T5883] usb 4-1: SerialNumber: syz [ 291.433373][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.436822][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.437394][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.437623][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.814930][ T5883] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 291.814989][ T5883] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 292.036422][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.036443][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.210685][ T1412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.210708][ T1412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.257924][ T5883] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 293.257980][ T5883] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 293.259421][ T5883] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 293.314682][ T5883] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 293.359529][ T5883] usb 4-1: USB disconnect, device number 28 [ 293.992179][T10051] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.033566][T10051] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.033714][T10051] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.033846][T10051] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.033976][T10051] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.034106][T10051] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.034239][T10051] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.034355][T10051] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 297.339790][ T810] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 297.522795][ T810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.522826][ T810] usb 4-1: config 0 has no interfaces? [ 297.525717][ T810] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 297.525744][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.525763][ T810] usb 4-1: Product: syz [ 297.525777][ T810] usb 4-1: Manufacturer: syz [ 297.525790][ T810] usb 4-1: SerialNumber: syz [ 298.006850][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.063012][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.064458][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.065703][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.066525][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.672802][T10164] loop3: detected capacity change from 0 to 7 [ 298.676750][ T5853] Dev loop3: unable to read RDB block 7 [ 298.676793][ T5853] loop3: unable to read partition table [ 298.677024][ T5853] loop3: partition table beyond EOD, truncated [ 298.952147][ T810] usb 4-1: config 0 descriptor?? [ 298.975326][T10164] Dev loop3: unable to read RDB block 7 [ 298.975367][T10164] loop3: unable to read partition table [ 298.975557][T10164] loop3: partition table beyond EOD, truncated [ 298.975586][T10164] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 299.062303][T10149] chnl_net:caif_netlink_parms(): no params data found [ 299.180281][ T810] usb 4-1: USB disconnect, device number 29 [ 299.429205][T10179] batman_adv: batadv0: Adding interface: dummy0 [ 299.429224][T10179] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.429254][T10179] batman_adv: batadv0: Interface activated: dummy0 [ 299.598620][T10176] net_ratelimit: 2489 callbacks suppressed [ 299.598640][T10176] batadv0: mtu less than device minimum [ 299.628132][T10176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.646170][T10176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.664104][T10176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.683649][T10176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.703501][T10176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.720884][T10176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.745325][T10176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.768780][T10176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.789929][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 299.794950][T10176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 300.021837][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.021991][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.022168][T10149] bridge_slave_0: entered allmulticast mode [ 300.056701][T10149] bridge_slave_0: entered promiscuous mode [ 300.071664][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.071784][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.071973][T10149] bridge_slave_1: entered allmulticast mode [ 300.076758][T10149] bridge_slave_1: entered promiscuous mode [ 300.150352][T10149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.157210][T10149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.170176][ T5811] Bluetooth: hci2: command tx timeout [ 300.258772][T10149] team0: Port device team_slave_0 added [ 300.278538][T10149] team0: Port device team_slave_1 added [ 300.375789][T10149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.375802][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.375821][T10149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.430288][T10149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.430305][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.430334][T10149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.541305][T10149] hsr_slave_0: entered promiscuous mode [ 300.542659][T10149] hsr_slave_1: entered promiscuous mode [ 300.543648][T10149] debugfs: 'hsr0' already exists in 'hsr' [ 300.543673][T10149] Cannot create hsr debugfs directory [ 301.299902][ T5869] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 301.452324][ T5869] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.452372][ T5869] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.454971][ T5869] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 301.454996][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.455015][ T5869] usb 7-1: Product: syz [ 301.455028][ T5869] usb 7-1: Manufacturer: syz [ 301.455041][ T5869] usb 7-1: SerialNumber: syz [ 302.010420][ T5811] Bluetooth: hci6: command 0x1003 tx timeout [ 302.010578][ T5806] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 302.239824][ T5806] Bluetooth: hci2: command tx timeout [ 302.340140][ T5869] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.340203][ T5869] usb 7-1: MIDIStreaming interface descriptor not found [ 302.408812][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1778'. [ 302.555069][T10149] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 302.615044][T10149] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 302.662090][T10149] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 302.736293][T10240] netlink: 'syz.2.1781': attribute type 4 has an invalid length. [ 302.736535][T10149] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 302.797451][T10245] netlink: 'syz.2.1781': attribute type 4 has an invalid length. [ 302.831408][ T5869] usb 7-1: USB disconnect, device number 2 [ 303.017484][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.105742][T10149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.181497][T10149] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.234799][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.252922][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.282565][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.282699][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.330008][ T5806] Bluetooth: hci2: command tx timeout [ 306.023064][T10314] syzkaller0: entered promiscuous mode [ 306.023091][T10314] syzkaller0: entered allmulticast mode [ 306.028764][T10149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.371537][T10330] netlink: 'syz.3.1806': attribute type 83 has an invalid length. [ 306.400029][ T5806] Bluetooth: hci2: command tx timeout [ 306.729223][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1812'. [ 306.729258][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1812'. [ 306.797124][T10341] bridge0: entered promiscuous mode [ 306.808295][T10341] ip6gretap0: entered promiscuous mode [ 306.963216][T10149] veth0_vlan: entered promiscuous mode [ 306.990012][T10149] veth1_vlan: entered promiscuous mode [ 307.047515][T10149] veth0_macvtap: entered promiscuous mode [ 307.058791][T10149] veth1_macvtap: entered promiscuous mode [ 307.115307][T10149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.169405][T10149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.288262][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.310461][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.311895][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.368594][ T40] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.831469][ T5891] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 307.979830][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 308.056727][ T5891] usb 3-1: unable to get BOS descriptor or descriptor too short [ 308.057770][ T5891] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 308.057802][ T5891] usb 3-1: can't read configurations, error -71 [ 308.116037][ T1412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.116057][ T1412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.129097][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.129116][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.688199][T10471] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 313.305586][T10482] syzkaller0: entered promiscuous mode [ 313.305612][T10482] syzkaller0: entered allmulticast mode [ 313.436103][T10483] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 313.485228][T10483] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 313.505975][T10483] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 313.539459][T10483] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 313.540156][T10483] kvm: requested 143314 ns i8254 timer period limited to 200000 ns [ 313.540486][T10483] kvm: requested 134095 ns i8254 timer period limited to 200000 ns [ 313.541288][T10483] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 313.545441][T10483] kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 313.545871][T10483] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 313.602224][T10483] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 314.884624][T10512] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 315.777669][T10515] netlink: 'syz.6.1867': attribute type 1 has an invalid length. [ 315.872475][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1867'. [ 317.060839][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.060904][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.901673][T10565] kernel read not supported for file /e_1 (pid: 10565 comm: syz.7.1882) [ 317.909791][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 317.909810][ T37] audit: type=1800 audit(2000000337.511:67): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1882" name="e_1" dev="mqueue" ino=28192 res=0 errno=0 [ 317.957253][T10573] 9p: Bad value for 'rfdno' [ 318.190599][T10591] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 319.983559][T10610] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1894'. [ 320.214500][T10620] syz_tun: entered allmulticast mode [ 325.296776][T10713] random: crng reseeded on system resumption [ 326.433127][T10730] binder: BINDER_SET_CONTEXT_MGR already set [ 326.433139][T10730] binder: 10729:10730 ioctl 4018620d 200000004a80 returned -16 [ 328.724291][T10262] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 328.876888][T10262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.876941][T10262] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 328.876962][T10262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.937421][T10262] usb 4-1: config 0 descriptor?? [ 328.960711][T10262] pwc: Askey VC010 type 2 USB webcam detected. [ 329.166606][T10262] pwc: send_video_command error -71 [ 329.166623][T10262] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 329.166731][T10262] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 329.242863][T10262] usb 4-1: USB disconnect, device number 30 [ 329.689866][T10262] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 329.863009][T10262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.863081][T10262] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 329.863107][T10262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.878149][T10262] usb 4-1: config 0 descriptor?? [ 329.906785][T10262] pwc: Askey VC010 type 2 USB webcam detected. [ 330.458029][T10262] pwc: recv_control_msg error -32 req 02 val 2b00 [ 330.510465][T10262] pwc: recv_control_msg error -32 req 02 val 2700 [ 330.577586][T10262] pwc: recv_control_msg error -32 req 02 val 2c00 [ 330.620707][T10262] pwc: recv_control_msg error -32 req 04 val 1000 [ 330.664536][T10262] pwc: recv_control_msg error -32 req 04 val 1300 [ 330.703829][T10262] pwc: recv_control_msg error -32 req 04 val 1400 [ 330.708271][T10262] pwc: recv_control_msg error -32 req 02 val 2000 [ 330.708908][T10262] pwc: recv_control_msg error -32 req 02 val 2100 [ 330.729299][T10262] pwc: recv_control_msg error -32 req 04 val 1500 [ 330.736492][T10262] pwc: recv_control_msg error -32 req 02 val 2500 [ 330.737187][T10262] pwc: recv_control_msg error -32 req 02 val 2400 [ 330.938515][T10262] pwc: recv_control_msg error -71 req 02 val 2900 [ 330.939059][T10262] pwc: recv_control_msg error -71 req 02 val 2800 [ 330.956567][T10262] pwc: recv_control_msg error -71 req 04 val 1100 [ 330.957048][T10262] pwc: recv_control_msg error -71 req 04 val 1200 [ 330.978313][T10262] pwc: Registered as video103. [ 331.030935][T10262] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 331.058632][T10262] usb 4-1: USB disconnect, device number 31 [ 332.893089][T10828] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 334.322615][T10858] syzkaller0: entered promiscuous mode [ 334.322650][T10858] syzkaller0: entered allmulticast mode [ 334.363194][T10860] net_ratelimit: 10 callbacks suppressed [ 334.363215][T10860] Set syz1 is full, maxelem 1029 reached [ 335.089851][ T5891] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 335.419820][ T5891] usb 7-1: Using ep0 maxpacket: 32 [ 335.422383][ T5891] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.422409][ T5891] usb 7-1: config 0 has no interface number 0 [ 335.424990][ T5891] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 335.425014][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.425032][ T5891] usb 7-1: Product: syz [ 335.425045][ T5891] usb 7-1: Manufacturer: syz [ 335.425058][ T5891] usb 7-1: SerialNumber: syz [ 335.519902][ T5891] usb 7-1: config 0 descriptor?? [ 335.535537][ T5891] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 335.535580][ T5891] usb 7-1: selecting invalid altsetting 1 [ 335.535595][ T5891] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 335.563411][ T5891] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 335.563987][ T5891] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 335.564038][ T5891] usb 7-1: media controller created [ 335.605497][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.733832][ T5891] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 336.733915][ T5891] zl10353_read_register: readreg error (reg=127, ret==-110) [ 337.466068][ T5891] usb 7-1: USB disconnect, device number 3 [ 343.757412][T10973] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 343.764771][T10973] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 343.764905][T10973] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 343.765232][T10973] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 343.765349][T10973] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 343.765397][T10973] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 343.877103][T10973] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 343.962028][T10973] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 343.962087][T10973] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 344.046682][T10973] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 345.932846][ T5811] Bluetooth: hci5: command 0x0c1a tx timeout [ 345.934138][ T5811] Bluetooth: hci4: command 0x0405 tx timeout [ 345.954239][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 346.011573][ T5811] Bluetooth: hci2: command 0x0c1a tx timeout [ 346.157961][ T5811] Bluetooth: hci3: command 0x0c1a tx timeout [ 346.158006][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 346.306547][T10262] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 346.739873][T10262] usb 4-1: Using ep0 maxpacket: 32 [ 347.685396][T10870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.685418][T10870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.785722][T10262] usb 4-1: device descriptor read/all, error -71 [ 348.110065][ T5806] Bluetooth: hci5: command 0x0c1a tx timeout [ 348.110100][ T5806] Bluetooth: hci2: command 0x0c1a tx timeout [ 349.349547][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2065'. [ 350.160405][ T5810] Bluetooth: hci2: command 0x0c1a tx timeout [ 350.160519][ T5810] Bluetooth: hci5: command 0x0c1a tx timeout [ 352.030473][ T5869] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 352.179806][ T5869] usb 3-1: device descriptor read/64, error -71 [ 352.419836][ T5869] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 352.549933][ T5869] usb 3-1: device descriptor read/64, error -71 [ 352.661517][ T5869] usb usb3-port1: attempt power cycle [ 352.999862][ T5869] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 353.024129][ T5869] usb 3-1: device descriptor read/8, error -71 [ 353.259869][ T5869] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 353.280504][ T5869] usb 3-1: device descriptor read/8, error -71 [ 353.392197][ T5869] usb usb3-port1: unable to enumerate USB device [ 353.958434][T11141] syz_tun: entered allmulticast mode [ 353.965244][T11138] syz_tun: left allmulticast mode [ 355.584165][T11113] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 363.389915][ T5869] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 363.569871][ T5869] usb 4-1: device descriptor read/64, error -71 [ 363.814540][ T5869] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 363.958618][ T5869] usb 4-1: device descriptor read/64, error -71 [ 364.063286][ T5869] usb usb4-port1: attempt power cycle [ 365.049851][ T5869] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 365.070915][ T5869] usb 4-1: device descriptor read/8, error -71 [ 365.430278][ T5869] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 365.450583][ T5869] usb 4-1: device descriptor read/8, error -71 [ 365.560070][ T5869] usb usb4-port1: unable to enumerate USB device [ 365.720673][ T5891] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 365.906387][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 365.911014][ T5891] usb 3-1: config 0 has no interfaces? [ 365.929915][ T5891] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 365.929942][ T5891] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 365.929956][ T5891] usb 3-1: Manufacturer: syz [ 365.936254][ T5891] usb 3-1: config 0 descriptor?? [ 368.259839][ T36] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 368.429795][ T36] usb 7-1: Using ep0 maxpacket: 16 [ 368.692720][ T36] usb 7-1: config 0 has no interfaces? [ 368.696251][ T36] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 368.696270][ T36] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 368.696295][ T36] usb 7-1: Manufacturer: syz [ 368.754713][ T36] usb 7-1: config 0 descriptor?? [ 370.668883][ T5869] usb 3-1: USB disconnect, device number 26 [ 370.820819][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2154'. [ 371.990190][ T5891] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 372.150198][ T5891] usb 4-1: device descriptor read/64, error -71 [ 372.419850][ T5891] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 372.550671][ T5891] usb 4-1: device descriptor read/64, error -71 [ 372.577282][ T5988] usb 7-1: USB disconnect, device number 4 [ 372.663479][ T5891] usb usb4-port1: attempt power cycle [ 373.201608][ T5891] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 373.238737][ T5891] usb 4-1: device descriptor read/8, error -71 [ 373.335045][T11356] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2169'. [ 373.900790][ T5891] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 374.296076][ T5891] usb 4-1: device descriptor read/8, error -71 [ 374.403650][ T5891] usb usb4-port1: unable to enumerate USB device [ 375.312618][T11371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2175'. [ 378.679938][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.679994][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.300037][T11416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.219351][T11416] io-wq is not configured for unbound workers [ 382.446031][ T37] audit: type=1326 audit(2000000402.001:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0640c819 code=0x7ffc0000 [ 382.446072][ T37] audit: type=1326 audit(2000000402.001:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fcb0640c819 code=0x7ffc0000 [ 382.446104][ T37] audit: type=1326 audit(2000000402.001:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0640c819 code=0x7ffc0000 [ 382.446136][ T37] audit: type=1326 audit(2000000402.001:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcb0640c819 code=0x7ffc0000 [ 382.446167][ T37] audit: type=1326 audit(2000000402.011:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0640c819 code=0x7ffc0000 [ 382.446219][ T37] audit: type=1326 audit(2000000402.011:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fcb0640c819 code=0x7ffc0000 [ 382.446251][ T37] audit: type=1326 audit(2000000402.011:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0640c819 code=0x7ffc0000 [ 382.446282][ T37] audit: type=1326 audit(2000000402.011:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb063cd04e code=0x7ffc0000 [ 382.446312][ T37] audit: type=1326 audit(2000000402.021:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb063cd04e code=0x7ffc0000 [ 382.446345][ T37] audit: type=1326 audit(2000000402.021:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0640c819 code=0x7ffc0000 [ 384.437668][T11442] dlm: non-version read from control device 0 [ 385.840483][ T5891] IPVS: starting estimator thread 0... [ 386.510494][T11456] IPVS: using max 11 ests per chain, 26400 per kthread [ 389.816502][T11477] delete_channel: no stack [ 390.716747][T11491] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 390.719083][T11491] cramfs: wrong magic [ 393.366341][ T5891] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 394.303586][ T5891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 394.304931][ T5891] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.304955][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.304976][ T5891] usb 4-1: config 1 has no interface number 0 [ 394.305021][ T5891] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 394.305047][ T5891] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 394.305070][ T5891] usb 4-1: config 1 interface 1 has no altsetting 2 [ 394.309384][ T5891] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 394.309413][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.309434][ T5891] usb 4-1: Product: syz [ 394.309449][ T5891] usb 4-1: Manufacturer: syz [ 394.309463][ T5891] usb 4-1: SerialNumber: syz [ 394.717146][ T5891] usb 4-1: USB disconnect, device number 42 [ 397.259805][ T5876] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 397.415250][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.415306][ T5876] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 397.415330][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.420365][ T996] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 397.465055][ T5876] usb 4-1: config 0 descriptor?? [ 397.473863][ T5876] usb 4-1: bad CDC descriptors [ 397.602129][ T996] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.630279][ T996] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 397.630310][ T996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.630337][ T996] usb 3-1: Product: syz [ 397.630351][ T996] usb 3-1: Manufacturer: syz [ 397.630364][ T996] usb 3-1: SerialNumber: syz [ 397.642210][ T996] usb 3-1: config 0 descriptor?? [ 397.690930][ T5869] usb 4-1: USB disconnect, device number 43 [ 397.694204][ T996] ims_pcu 3-1:0.0: Zero length descriptor [ 397.694277][ T996] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 397.871439][ T996] usb 3-1: USB disconnect, device number 27 [ 399.529802][ T5869] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 399.659803][ T5869] usb 4-1: device descriptor read/64, error -71 [ 400.083199][ T5869] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 400.339870][ T5869] usb 4-1: device descriptor read/64, error -71 [ 400.510726][ T5869] usb usb4-port1: attempt power cycle [ 400.781358][T11651] overlay: Unknown parameter 'fsuuid' [ 400.849911][ T5869] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 400.870474][ T5869] usb 4-1: device descriptor read/8, error -71 [ 401.159782][ T5988] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 401.502463][ T5869] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 402.063953][ T5869] usb 4-1: device descriptor read/8, error -71 [ 402.112123][ T5988] usb 7-1: unable to get BOS descriptor or descriptor too short [ 402.113656][ T5988] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 402.113684][ T5988] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 402.113706][ T5988] usb 7-1: config 63 has no interface number 0 [ 402.113738][ T5988] usb 7-1: config 63 interface 66 has no altsetting 0 [ 402.116183][ T5988] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 402.116209][ T5988] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.116229][ T5988] usb 7-1: Product: syz [ 402.116243][ T5988] usb 7-1: Manufacturer: syz [ 402.116257][ T5988] usb 7-1: SerialNumber: syz [ 402.193024][ T5869] usb usb4-port1: unable to enumerate USB device [ 402.495954][ T5988] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 402.496062][ T5988] uvcvideo 7-1:63.66: No valid video chain found. [ 402.529900][ T5988] usb 7-1: USB disconnect, device number 5 [ 403.157880][T11700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2300'. [ 403.416945][T11712] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00 [ 403.417026][T11712] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00 [ 403.460079][ T5891] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00 [ 404.114590][ T5876] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 404.272423][ T5876] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 404.272452][ T5876] usb 4-1: config 0 has no interface number 0 [ 404.272501][ T5876] usb 4-1: config 0 interface 41 has no altsetting 0 [ 404.275902][ T5876] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 404.276014][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.276037][ T5876] usb 4-1: Product: syz [ 404.276053][ T5876] usb 4-1: Manufacturer: syz [ 404.276068][ T5876] usb 4-1: SerialNumber: syz [ 404.340874][ T5891] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00 [ 404.366667][ T5876] usb 4-1: config 0 descriptor?? [ 404.399320][T11744] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 404.598552][ T5876] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 404.662080][ T5876] usb 4-1: USB disconnect, device number 48 [ 404.738123][T11750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.989919][ T996] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 406.122162][ T996] usb 3-1: device descriptor read/64, error -71 [ 406.360073][ T996] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 406.500765][ T996] usb 3-1: device descriptor read/64, error -71 [ 406.635800][ T996] usb usb3-port1: attempt power cycle [ 407.209800][ T996] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 407.231071][ T996] usb 3-1: device descriptor read/8, error -71 [ 407.469942][ T996] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 407.495449][ T996] usb 3-1: device descriptor read/8, error -71 [ 407.602999][ T996] usb usb3-port1: unable to enumerate USB device [ 407.649908][ T5891] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 407.812493][ T5891] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 407.812524][ T5891] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 407.812546][ T5891] usb 4-1: config 0 has no interface number 0 [ 407.816323][ T5891] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 407.816353][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.816375][ T5891] usb 4-1: Product: syz [ 407.816397][ T5891] usb 4-1: Manufacturer: syz [ 407.816410][ T5891] usb 4-1: SerialNumber: syz [ 407.883387][ T5891] usb 4-1: config 0 descriptor?? [ 408.292323][ T5891] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 408.292372][ T5891] uvcvideo 4-1:0.64: No valid video chain found. [ 408.320210][ T5891] usb 4-1: USB disconnect, device number 49 [ 408.960705][T11901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2406'. [ 409.811146][T11923] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 410.080135][T10262] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 410.229736][T10262] usb 7-1: Using ep0 maxpacket: 16 [ 410.232572][T10262] usb 7-1: unable to get BOS descriptor or descriptor too short [ 410.234157][T10262] usb 7-1: config 127 has an invalid interface number: 21 but max is 0 [ 410.234185][T10262] usb 7-1: config 127 has no interface number 0 [ 410.234218][T10262] usb 7-1: config 127 interface 21 has no altsetting 0 [ 410.277962][T10262] usb 7-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=a3.d0 [ 410.277991][T10262] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.278011][T10262] usb 7-1: Product: syz [ 410.278025][T10262] usb 7-1: Manufacturer: syz [ 410.278038][T10262] usb 7-1: SerialNumber: syz [ 410.554091][T10262] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 410.583618][T10262] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 410.586739][T10262] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 410.586793][T10262] usb 7-1: media controller created [ 410.643315][T10262] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 410.693505][T10262] dvb-usb: bulk message failed: -22 (6/0) [ 410.693819][T10262] dvb-usb: bulk message failed: -22 (6/0) [ 410.695576][T10262] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 410.849760][T10262] rc_core: IR keymap rc-avermedia-m135a not found [ 410.849779][T10262] Registered IR keymap rc-empty [ 410.851396][T10262] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 410.885165][T10262] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input21 [ 410.888592][T10262] dvb-usb: schedule remote query interval to 150 msecs. [ 410.888612][T10262] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 410.928375][T10262] usb 7-1: USB disconnect, device number 6 [ 411.104369][T10262] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 411.219847][T11971] tmpfs: Bad value for 'mpol' [ 411.636756][T11991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.789903][T11997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2449'. [ 412.539806][T10262] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 412.691659][T10262] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 412.691691][T10262] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.691712][T10262] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 412.691762][T10262] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.691790][T10262] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.694068][T10262] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 412.694099][T10262] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 412.694120][T10262] usb 7-1: Product: syz [ 412.694135][T10262] usb 7-1: Manufacturer: syz [ 412.816821][T10262] cdc_wdm 7-1:1.0: skipping garbage [ 412.816841][T10262] cdc_wdm 7-1:1.0: skipping garbage [ 412.850359][T10262] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 412.850387][T10262] cdc_wdm 7-1:1.0: Unknown control protocol [ 413.031822][T12051] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2476'. [ 413.031850][T12051] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2476'. [ 413.031883][T12051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2476'. [ 413.039792][ T10] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 413.071360][T12025] cdc_wdm 7-1:1.0: Error submitting int urb - -90 [ 413.086333][ T5891] usb 7-1: USB disconnect, device number 7 [ 413.203099][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 413.203155][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 128, setting to 64 [ 413.214771][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 413.214849][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.214900][ T10] usb 3-1: Product: syz [ 413.214939][ T10] usb 3-1: Manufacturer: syz [ 413.214977][ T10] usb 3-1: SerialNumber: syz [ 413.289570][ T10] usb 3-1: config 0 descriptor?? [ 413.301505][T12043] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 413.301716][T12043] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 413.363457][ C0] port100 3-1:0.0: NFC: Urb failure (status -71) [ 413.385319][ C0] port100 3-1:0.0: NFC: Urb failure (status -71) [ 413.399032][ T10] port100 3-1:0.0: NFC: Could not get supported command types [ 413.508064][ T10] usb 3-1: USB disconnect, device number 32 [ 413.843855][T12085] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 414.039809][T10262] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 414.192085][T10262] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.192115][T10262] usb 7-1: config 0 has no interfaces? [ 414.195002][T10262] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 414.195029][T10262] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.195048][T10262] usb 7-1: Product: syz [ 414.195064][T10262] usb 7-1: Manufacturer: syz [ 414.195079][T10262] usb 7-1: SerialNumber: syz [ 414.249064][T10262] usb 7-1: config 0 descriptor?? [ 414.470648][T10262] usb 7-1: USB disconnect, device number 8 [ 414.653605][T12121] tmpfs: Bad value for 'mpol' [ 414.759068][T12127] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2513'. [ 414.759167][T12127] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2513'. [ 414.759184][T12127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2513'. [ 415.249823][ T5891] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 415.387149][ T5891] usb 4-1: device descriptor read/64, error -71 [ 415.629744][ T5891] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 415.759856][ T5891] usb 4-1: device descriptor read/64, error -71 [ 415.870233][ T5891] usb usb4-port1: attempt power cycle [ 416.209749][ T5891] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 416.241111][ T5891] usb 4-1: device descriptor read/8, error -71 [ 416.499844][ T5876] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 416.510433][ T5891] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 416.550566][ T5891] usb 4-1: device descriptor read/8, error -71 [ 416.639920][ T5876] usb 7-1: device descriptor read/64, error -71 [ 416.663359][ T5891] usb usb4-port1: unable to enumerate USB device [ 416.879768][ T5876] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 417.052302][ T5876] usb 7-1: device descriptor read/64, error -71 [ 417.160360][ T5876] usb usb7-port1: attempt power cycle [ 417.499882][ T5876] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 417.521975][ T5876] usb 7-1: device descriptor read/8, error -71 [ 417.693563][T12239] tmpfs: Bad value for 'mpol' [ 417.760687][ T5876] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 417.781324][ T5876] usb 7-1: device descriptor read/8, error -71 [ 417.890200][ T5876] usb usb7-port1: unable to enumerate USB device [ 419.270081][T12318] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 421.212167][T12408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2650'. [ 421.212211][T12408] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2650'. [ 421.399785][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 421.549752][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 421.552078][ T10] usb 3-1: config 5 has an invalid interface number: 168 but max is 0 [ 421.552105][ T10] usb 3-1: config 5 has no interface number 0 [ 421.552148][ T10] usb 3-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 421.552175][ T10] usb 3-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 421.552199][ T10] usb 3-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 421.552223][ T10] usb 3-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 421.552244][ T10] usb 3-1: config 5 interface 168 has no altsetting 0 [ 421.555059][ T10] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 421.555086][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.555168][ T10] usb 3-1: Product: syz [ 421.555183][ T10] usb 3-1: Manufacturer: syz [ 421.555197][ T10] usb 3-1: SerialNumber: syz [ 421.671962][T12402] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 421.861150][T12430] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2661'. [ 421.899741][ T10] pn533_usb 3-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 421.933915][ T10] usb 3-1: USB disconnect, device number 33 [ 422.693103][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2670'. [ 424.967577][T12507] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 425.199054][T12517] netlink: 'syz.3.2701': attribute type 5 has an invalid length. [ 425.379448][T12527] usb usb5: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 426.906176][T12546] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 427.420464][T12546] cramfs: wrong magic [ 428.979794][ T5988] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 429.099767][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 429.132539][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2732'. [ 429.156125][ T5988] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 429.156156][ T5988] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.156175][ T5988] usb 7-1: Product: syz [ 429.156189][ T5988] usb 7-1: Manufacturer: syz [ 429.156204][ T5988] usb 7-1: SerialNumber: syz [ 429.199895][ T5988] r8152-cfgselector 7-1: Unknown version 0x0000 [ 429.199921][ T5988] r8152-cfgselector 7-1: config 0 descriptor?? [ 429.290213][ T10] usb 3-1: config 4 has an invalid interface number: 197 but max is 0 [ 429.290245][ T10] usb 3-1: config 4 has no interface number 0 [ 429.296823][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=b832, bcdDevice=2d.ff [ 429.296851][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.296871][ T10] usb 3-1: Product: syz [ 429.296885][ T10] usb 3-1: Manufacturer: syz [ 429.296899][ T10] usb 3-1: SerialNumber: syz [ 429.763331][ T38] INFO: task syz.5.1636:9811 blocked for more than 143 seconds. [ 429.763361][ T38] Tainted: G L syzkaller #0 [ 429.763373][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.763381][ T38] task:syz.5.1636 state:D stack:24832 pid:9811 tgid:9811 ppid:8814 task_flags:0x400040 flags:0x00080003 [ 429.763446][ T38] Call Trace: [ 429.763452][ T38] [ 429.763464][ T38] __schedule+0x1553/0x5240 [ 429.763493][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 429.763525][ T38] ? rt_spin_lock+0x1e0/0x400 [ 429.763553][ T38] ? __pfx___schedule+0x10/0x10 [ 429.763579][ T38] ? schedule+0x90/0x360 [ 429.763599][ T38] schedule+0x164/0x360 [ 429.763619][ T38] __fuse_simple_request+0x121f/0x1c60 [ 429.763659][ T38] ? __pfx___fuse_simple_request+0x10/0x10 [ 429.763688][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 429.763727][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 429.763765][ T38] fuse_flush+0x673/0x8b0 [ 429.763801][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 429.763825][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 429.763848][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 429.763892][ T38] ? rt_spin_lock+0x1e0/0x400 [ 429.763922][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 429.763949][ T38] ? rt_spin_unlock+0x14f/0x200 [ 429.763975][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 429.764001][ T38] filp_flush+0xc0/0x190 [ 429.764027][ T38] filp_close+0x1d/0x40 [ 429.764049][ T38] __se_sys_close_range+0x3d7/0x900 [ 429.764081][ T38] ? __pfx___se_sys_close_range+0x10/0x10 [ 429.764103][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 429.764147][ T38] do_syscall_64+0x14d/0xf80 [ 429.764169][ T38] ? trace_irq_disable+0x3b/0x150 [ 429.764191][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.764211][ T38] ? clear_bhb_loop+0x40/0x90 [ 429.764247][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.764265][ T38] RIP: 0033:0x7fb20087c819 [ 429.764287][ T38] RSP: 002b:00007ffdfa351468 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 429.764305][ T38] RAX: ffffffffffffffda RBX: 00007ffdfa351550 RCX: 00007fb20087c819 [ 429.764318][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 429.764330][ T38] RBP: 0000000000044e6f R08: 0000000000000001 R09: 0000000000000000 [ 429.764352][ T38] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007ffdfa351590 [ 429.764363][ T38] R13: 00007fb200af5fac R14: 0000000000044fbb R15: 00007fb200af5fa0 [ 429.764388][ T38] [ 429.764419][ T38] [ 429.764419][ T38] Showing all locks held in the system: [ 429.764427][ T38] 5 locks held by kworker/0:1/10: [ 429.764437][ T38] #0: ffff888021afa138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 429.764492][ T38] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 429.764538][ T38] #2: ffff888029716210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 429.764581][ T38] #3: ffff888063478210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 429.764625][ T38] #4: ffff888019db3318 (&(&priv->bus_notifier)->rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 429.764668][ T38] 1 lock held by khungtaskd/38: [ 429.764678][ T38] #0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 429.764727][ T38] 3 locks held by kworker/u8:7/201: [ 429.764739][ T38] 2 locks held by kworker/u8:8/721: [ 429.764750][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 429.764804][ T38] #1: ffffc900045d7c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 429.764865][ T38] 2 locks held by kworker/u8:9/1222: [ 429.764877][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 429.764932][ T38] #1: ffffc9000582fc40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 429.764988][ T38] 5 locks held by kworker/u8:11/1412: [ 429.765013][ T38] 2 locks held by getty/5558: [ 429.765024][ T38] #0: ffff88823bec28a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 429.765084][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 429.765142][ T38] 2 locks held by syz-executor/5785: [ 429.765154][ T38] 1 lock held by syz-executor/5797: [ 429.765168][ T38] 4 locks held by udevd/5853: [ 429.765178][ T38] #0: ffff8880388b2db0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 429.765227][ T38] #1: ffff88803b629878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 429.765278][ T38] #2: ffff88805e882c38 (kn->active#31){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 429.765329][ T38] #3: ffff888063478210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 429.765382][ T38] 2 locks held by udevd/5862: [ 429.765401][ T38] 9 locks held by syz-executor/10149: [ 429.765415][ T38] [ 429.765420][ T38] ============================================= [ 429.765420][ T38] [ 429.765436][ T38] NMI backtrace for cpu 1 [ 429.765461][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 429.765486][ T38] Tainted: [L]=SOFTLOCKUP [ 429.765493][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.765506][ T38] Call Trace: [ 429.765513][ T38] [ 429.765521][ T38] dump_stack_lvl+0xe8/0x150 [ 429.765553][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 429.765582][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 429.765614][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 429.765646][ T38] sys_info+0x135/0x170 [ 429.765671][ T38] watchdog+0xfd9/0x1030 [ 429.765703][ T38] ? watchdog+0x21a/0x1030 [ 429.765735][ T38] kthread+0x388/0x470 [ 429.765756][ T38] ? __pfx_watchdog+0x10/0x10 [ 429.765779][ T38] ? __pfx_kthread+0x10/0x10 [ 429.765802][ T38] ret_from_fork+0x51e/0xb90 [ 429.765833][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 429.765861][ T38] ? __switch_to+0xc7d/0x1450 [ 429.765889][ T38] ? __pfx_kthread+0x10/0x10 [ 429.765911][ T38] ret_from_fork_asm+0x1a/0x30 [ 429.765944][ T38] [ 429.765952][ T38] Sending NMI from CPU 1 to CPUs 0: [ 429.765976][ C0] NMI backtrace for cpu 0 [ 429.765991][ C0] CPU: 0 UID: 0 PID: 5797 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 429.766015][ C0] Tainted: [L]=SOFTLOCKUP [ 429.766021][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.766031][ C0] RIP: 0010:unwind_next_frame+0x21f/0x23c0 [ 429.766050][ C0] Code: 44 39 f8 0f 86 78 04 00 00 44 89 f8 4c 8d 2c 85 7c 93 9b 90 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 48 89 eb 0f 85 25 1c 00 00 <45> 8b 6d 00 44 89 f8 ff c0 48 8d 2c 85 7c 93 9b 90 48 89 e8 48 c1 [ 429.766065][ C0] RSP: 0018:ffffc90004727778 EFLAGS: 00000246 [ 429.766079][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000080000000 [ 429.766091][ C0] RDX: 00000000000a28d4 RSI: ffffffff8ba67a60 RDI: ffffffff8ba67a20 [ 429.766104][ C0] RBP: dffffc0000000000 R08: ffffffff81767a25 R09: ffffffff8ddcb980 [ 429.766116][ C0] R10: ffffc900047278f8 R11: fffff520008e4f21 R12: ffffffff816d1022 [ 429.766129][ C0] R13: ffffffff909d47bc R14: ffffc900047278a8 R15: 0000000000006d10 [ 429.766142][ C0] FS: 000055555da53500(0000) GS:ffff888126332000(0000) knlGS:0000000000000000 [ 429.766157][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.766168][ C0] CR2: 00007fff8fceac80 CR3: 00000000385dc000 CR4: 00000000003526f0 [ 429.766184][ C0] Call Trace: [ 429.766189][ C0] [ 429.766200][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 429.766217][ C0] ? arch_stack_walk+0xe3/0x150 [ 429.766236][ C0] __unwind_start+0x5b8/0x760 [ 429.766254][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 429.766278][ C0] arch_stack_walk+0xe3/0x150 [ 429.766297][ C0] ? arch_stack_walk+0xe3/0x150 [ 429.766314][ C0] stack_trace_save+0xa9/0x100 [ 429.766336][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 429.766364][ C0] kasan_save_track+0x3e/0x80 [ 429.766416][ C0] kasan_save_free_info+0x46/0x50 [ 429.766436][ C0] __kasan_slab_free+0x5c/0x80 [ 429.766461][ C0] kfree+0x1c1/0x6c0 [ 429.766484][ C0] ? security_sk_free+0xa4/0x180 [ 429.766499][ C0] ? css_put+0x57/0x290 [ 429.766519][ C0] security_sk_free+0xa4/0x180 [ 429.766535][ C0] __sk_destruct+0x5dd/0x880 [ 429.766556][ C0] inet_release+0x143/0x190 [ 429.766573][ C0] sock_close+0xc3/0x240 [ 429.766595][ C0] ? __pfx_sock_close+0x10/0x10 [ 429.766617][ C0] __fput+0x461/0xa90 [ 429.766643][ C0] fput_close_sync+0x11f/0x240 [ 429.766664][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 429.766691][ C0] __x64_sys_close+0x7e/0x110 [ 429.766714][ C0] do_syscall_64+0x14d/0xf80 [ 429.766732][ C0] ? trace_irq_disable+0x3b/0x150 [ 429.766751][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.766768][ C0] ? clear_bhb_loop+0x40/0x90 [ 429.766787][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.766803][ C0] RIP: 0033:0x7f7527e8d04e [ 429.766818][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 429.766832][ C0] RSP: 002b:00007fff8fcec368 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 429.766848][ C0] RAX: ffffffffffffffda RBX: 000055555da53500 RCX: 00007f7527e8d04e [ 429.766860][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 429.766870][ C0] RBP: 00007fff8fcec40c R08: 0000000000000000 R09: 0000000000000000 [ 429.766880][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000003f3 [ 429.766897][ C0] R13: 00000000000927c0 R14: 0000000000068ce4 R15: 00007fff8fcec460 [ 429.766918][ C0] [ 429.766984][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 429.767003][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 429.767029][ T38] Tainted: [L]=SOFTLOCKUP [ 429.767036][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.767047][ T38] Call Trace: [ 429.767055][ T38] [ 429.767062][ T38] vpanic+0x56c/0xa60 [ 429.767097][ T38] ? __pfx_vpanic+0x10/0x10 [ 429.767144][ T38] panic+0xc5/0xd0 [ 429.767175][ T38] ? __pfx_panic+0x10/0x10 [ 429.767202][ T38] ? printk_trigger_flush+0x117/0x180 [ 429.767233][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.767263][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 429.767296][ T38] watchdog+0x1023/0x1030 [ 429.767329][ T38] ? watchdog+0x21a/0x1030 [ 429.767361][ T38] kthread+0x388/0x470 [ 429.767383][ T38] ? __pfx_watchdog+0x10/0x10 [ 429.767407][ T38] ? __pfx_kthread+0x10/0x10 [ 429.767430][ T38] ret_from_fork+0x51e/0xb90 [ 429.767462][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 429.767490][ T38] ? __switch_to+0xc7d/0x1450 [ 429.767520][ T38] ? __pfx_kthread+0x10/0x10 [ 429.767542][ T38] ret_from_fork_asm+0x1a/0x30 [ 429.767578][ T38] [ 429.768049][ T38] Kernel Offset: disabled