last executing test programs: 9m19.87836337s ago: executing program 3 (id=225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x93}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20008040) 9m17.459270906s ago: executing program 3 (id=228): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x218, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x1ec, 0x2, [@TCA_U32_POLICE={0x90, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x6, 0x1ffe00, 0x2, 0x3, {0x6d, 0x0, 0x1000, 0x7, 0xfff5, 0x4}, {0x9, 0x2, 0xf10c, 0x4, 0xb95, 0x3}, 0xcac, 0x1, 0x79}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xffffffffffffffff, 0x667d, 0x6, 0x90, {0xe, 0x2, 0x6, 0xd9ca, 0x8001, 0x9f}, {0xfe, 0x1, 0x8001, 0x6, 0x6, 0xffffffff}, 0xfffffffd, 0x5, 0x7f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x144, 0x5, {0x10, 0xff, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x0, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x6, 0x8, 0x2, 0x1}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x5d14, 0x7f, 0x72}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x218}}, 0x24040084) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x2c, 0x51, 0x2e, 0x40, 0x12d1, 0x1433, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x85, 0x80, 0xff, [{{0x9, 0x4, 0x83, 0x5, 0x0, 0xd2, 0x50, 0xe3, 0x1}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf249", 0xd, 0xfffffffffffffffb) 9m13.922487564s ago: executing program 3 (id=234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0}, &(0x7f00000007c0)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, r3, 0x4, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['%\x00', '1![\xb0\xfd\x00', ',\'\x92*\x00', '+\x00'], 0xf}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) 9m11.579999469s ago: executing program 3 (id=238): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 9m11.213933416s ago: executing program 3 (id=241): syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f0000000080)=ANY=[@ANYBLOB='\"'], 0x1, 0x1536, &(0x7f00000004c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, 0x0, 0x0}, 0x94) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 9m8.364210041s ago: executing program 3 (id=245): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) 9m5.335411619s ago: executing program 0 (id=254): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 9m4.130047382s ago: executing program 0 (id=256): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1}, 0x9}], 0x2, 0x0, 0x0) 9m2.470574074s ago: executing program 0 (id=257): r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m1.518261202s ago: executing program 0 (id=259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x20, 0x0, 0x0) 9m0.135433388s ago: executing program 0 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 8m59.842576434s ago: executing program 0 (id=264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 8m53.159460442s ago: executing program 32 (id=245): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) 8m44.752408643s ago: executing program 33 (id=264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 2m37.912243354s ago: executing program 1 (id=1516): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_triestat\x00') read$FUSE(r1, &(0x7f0000000800)={0x2020}, 0x2020) creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000480)={0x5, 0x20, 0x6, 0x20, 0x7}, 0x48) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) ppoll(&(0x7f0000002280)=[{0xffffffffffffffff, 0x800}], 0x1, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x100000000a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2m35.034015999s ago: executing program 1 (id=1522): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) r2 = fanotify_init(0x1a, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x124) fanotify_mark(r2, 0x1, 0x4000001a, r3, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) truncate(0x0, 0x8000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) fchmodat(r4, &(0x7f0000000040)='./file1\x00', 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000006c0)}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 2m34.250800714s ago: executing program 1 (id=1524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xf000, 0x2f, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semget$private(0x0, 0x2, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x891d, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) 2m33.170478095s ago: executing program 1 (id=1529): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) 2m32.746679323s ago: executing program 1 (id=1534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="eb5974e8be09e387ab90b1569489ca152362cb44b1952d7a95d4e348dd0a24fdb5fbd2dc1f3ddba2f36dd88226e8ab7b58818a357b167f7671a57d73594a9107053189f3589268715fdfc605ce82d5053ca0394bd3ef6ccbdf534483f3c1d4f9ff65fb1863033c0b1caa3693e04df2ec20276f06deaacfacc12fcba68de29bde9a2ea9ba457ea429c807659f0625a5eb47b1ec44b0aa784104dfb70463705ab40799c86b2eb83432002fec798f0bdef9e3129d6fd289675b3398fa9f922160f45eade8d18b595a0fc72cd89e7ce9112fdd0994337ac9fdf91c43f4551bc2e594a4ed9151fe9bdfa478ce6047b4a2f3a6e1a2c24151a1", 0xf6}, {&(0x7f00000022c0)="c16c1cb56e011137d8fad178027b2faacf212c800a3de527f2d7063269c4571f027798da84ad51c859e750f5391da059f59e968f9dd2244b5fd4683b2b73e92a79bca3157f7af8988fc91c526b8e9200ca6b1784f45393c105404888f76dc03459d97a23d0d9bf29d87ad64a2d3535c2b73846a89f4001a2e174516afd324cb44dacd99f89f2d47476ee4cb3fe674ebf0d0028acae0ee0e083766a5f84ed4e2a6138340dceeb9c5ef49198e92ac562344a32d8fc9b59c995551e25a95330ac7b14940cf69fa391f9437cef06f764cbfea6baef017bdd7cc7864cd966089940405a8746af3d86c75e2465f6f1bf33583ed433d324056d6bf9dc8568e0fd335d146b7869b965be706d62bba2b8c02e8fb777b784c4a2662ac694b80d8b2a8aff93b9bbfea5ba817e161ce5249251bb9091ab2a3349f6a1458d1b79879dd987c75dba8bd71acb9dc8557a75a5a45095620211330f3ef2622e2169cee55d93259181d777c3a00151d971688032472596dfb36cfc9a5f9faead6dff1d23ce238bf3e6f9a4235a61af0266d50e9b704685d86fdc716044883f03074356e3744c85c048c904827f3d6540e9c6b253deb96ee952e8ebdd907f326392ba4de9a3d4c409ccb31ad8a5b907650851912f5fe358a29d4b8a5295c57c0f351a2c00d8516b4cad18de8df71be4c52de2ced61c0f8fc7591ea98506493e43b66bc2f7b6f4a5a4fdce5d228f4fde275f0f3bda10ae8bae4c09f30b5c57e6517dc6121b9e95b69e9ae576691ae8f996075f9811db3a0efbaf295b21ce197c4f51eae561f2ee088cbfda03023db0980792afb6e8a211a01a142b8af10ea469060a61845ea97572be246e2de97e3f039a061c3b47e8d8c2d060a303f7cddde779cb486eb29c0c7db5e22a05d61f0df07706554f125decc4e4e9859034c02c85fb613b3d4ac7e430af512b8086dfbe81d893d05fa94e03de868bb4e08977d2d127452a0f3b4b4c7aa3422b630ead6a3f5c3b0d909716d80a87c005f9c377e6baaa477ca2fb2c912f0df04a252adb879af0862467dfff3fa02b59ad408a3c05fcc449a44c2e5b095dba299252b754f1e59c384703ac217c57d9ee30a65abee918737d7d34e52d405b07c3e115e9ab00e9e094f9b619130360b54455d577e5f864c11d5439ff1a757b4f5637700b5f54e1db74b6e0d72026474660f3ae2707aa1b91e3171797e5d56fb4868d954357cc14d769c5043d1ed7042a36dcf2f28ce469c92ebf29c67173d8568a1ca1a9b24e5cfe96b16d0003579c0e610d5d4eccc0527d9280dcedece5b3219f755daa005ef4da75d7e0e29a5d4732c1853bbe7942eca24161b6bd3c7394605d0377808bc8ac428fc55d5760e12c2d103ec6c3ae5c17ad5c58315ebaa2ccf0816528532427e9207f55181341b1699eea62aa69b21a8ba134dd07dc2c8500e8f45e30c0c7a245e58bfbf82be8caf3b0a2146fe237865478578530a780e685238c09084c13c64e20c40eac93c886e2f8534e33aaaf27101ffac1fa8e6a7e4f0ece22e3cc92c9be92a3eb2b550ea93dd46dffbd76549d98974736ad97cbc6ca4414be163d77e6d27ba01ff228457184bbbd7998f19b3e1d929d7ce1a3d2d5759f10ac450cdb867b7129c6d00501806e8880e53d6fc22f9eade87b125fef0ce45be9640f9bfe65c7e42d49687efe8dffc84d29676b4e6964fe3cf93589570d1b6ca0ef6eb9fd7cdcf3bf7ca99e95ff43f40361fb455e7242788afe77f963dd970e571614e5d09ed31d02ac6b8e4b7f86b6761299e97faa224a5cbd9fdff77161bbca6ae98a2733f21e72948655df0a0b8c9dd4e7a79298c98a0f9b364377626e35dc06231d4c76e38f86e71c47808b6e452886cc8033cd70959d6709d925f793d24278790e324918964362a0face0aa9a9bb0fac1fd28e8e0736f01a875f6b646667bfb711673a3ad0de4ae2cf1322a0b974bb18d4278f594ff9d5041f68a079479dd36243f2851eb28c5495f4a6338bb9f4e5242b05404798c662c5eb7b7ccfc4bff0f09dc4a30a1263c85233863653454f", 0x5b0}, {&(0x7f0000000300)="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", 0x13d}, {&(0x7f0000000080)}, {&(0x7f0000000900)="ea47bc5a315cb2157880ce304c1abce402167fd4bedfea9bbcc20cf6de0308c26ade72d36e2f01eb0e20a7b506b3c21e39c540cd8c10f12cd3bcd024240058198d7b5ab8b13a401e", 0x48}, {&(0x7f00000009c0)="8465f974b3e02d242b46ef912928809312de5bdb9fc3efedeb11c99628cfeec4a7918887ba379f68ffaf7e88027baf179d50cd31c4faacfbaf87f7c30c6ffbed1bf304c2b3e2cf5e9351d8c861e3072379e113511a8199fffee0c171582cbc39f2c1c2c7b4dae0d4dc7b3a27d20275e14043b0b5ab1f0441460fa161056205fc9ac5e3c5dd17b8f61bb2ccea83db1750b23f3ed934b59119e9a36f6eca6c616191d55e82e44bbd4fcae0b21c627285185c78d86f573f56a6249e915b07c81d437b65", 0xc2}], 0x6, 0x0, 0x0, 0x20008014}], 0x1, 0x4814) recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000052c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x400101c3, 0x0) 2m30.980759547s ago: executing program 1 (id=1535): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001043, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) syz_open_dev$MSR(0x0, 0xbd, 0x0) r6 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, &(0x7f0000000000)=[r6], 0x1) 2m15.70083309s ago: executing program 34 (id=1535): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001043, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) syz_open_dev$MSR(0x0, 0xbd, 0x0) r6 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, &(0x7f0000000000)=[r6], 0x1) 12.138675188s ago: executing program 4 (id=1950): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) 11.473473331s ago: executing program 4 (id=1952): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, r3}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 11.266223335s ago: executing program 2 (id=1954): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x2, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f00000001c0)={0x8, 0x80000001, 0x80, 0x5}) 11.040865529s ago: executing program 4 (id=1955): r0 = socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x63) r2 = add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x1010000000000e1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) prctl$PR_SET_PTRACER(0x59616d61, r8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 8.957429659s ago: executing program 4 (id=1957): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r5, 0x0}) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 7.953769648s ago: executing program 5 (id=1961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="0f1c5ae8cb680700670f01350f000000baf80c66b8b0b0328166efbafc0ced66b80b0000000f23c00f21f8663502000d000f23f8360f013736abbaf80c66b86cae8a8b66efbafc0ced5f", 0x4a}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.492410627s ago: executing program 2 (id=1963): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 7.459004408s ago: executing program 5 (id=1964): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)=ANY=[]) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_perm_addr}) 6.769866381s ago: executing program 2 (id=1965): r0 = socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x63) r2 = add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x1010000000000e1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r8 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 5.411639017s ago: executing program 2 (id=1967): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) 5.089657033s ago: executing program 5 (id=1969): openat$adsp1(0xffffffffffffff9c, 0x0, 0x205200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX]) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.751226099s ago: executing program 4 (id=1970): capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000001080)) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 4.100550352s ago: executing program 6 (id=1971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x3c, r1, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 3.790606798s ago: executing program 4 (id=1972): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$rfkill(0xffffffffffffffff, 0x0, 0x21) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000180)={0x0, 0x465f, 0x1000, 0x2, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0xc, 0x0, @fd_index=0x5, 0xfff, {}, 0x6, 0x4, 0x1}) io_uring_enter(r2, 0x40f6, 0x4f7c, 0x8, 0x0, 0x0) 3.782381838s ago: executing program 5 (id=1973): r0 = socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x63) r2 = add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x1010000000000e1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.72153832s ago: executing program 6 (id=1974): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000140)) 3.438573265s ago: executing program 6 (id=1975): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x89, &(0x7f0000000640), &(0x7f0000000680)=0x4) 2.63709622s ago: executing program 5 (id=1976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000221100006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0xc, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d9", &(0x7f0000000040)=""/24, 0x6414}, 0x50) 2.539331592s ago: executing program 6 (id=1977): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)=ANY=[]) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_perm_addr}) 2.423272264s ago: executing program 5 (id=1978): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r5, 0x0}) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 1.506750122s ago: executing program 6 (id=1979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) userfaultfd(0x80001) prlimit64(0x0, 0x5, &(0x7f0000000000)={0x8, 0x400000000000008b}, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x2d, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 714.509407ms ago: executing program 2 (id=1980): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) 37.24507ms ago: executing program 6 (id=1981): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x81, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f228", 0x3) openat$rtc(0xffffffffffffff9c, 0x0, 0x40000, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000740)="93", 0x1}], 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) fsopen(&(0x7f0000000200)='nfs\x00', 0x0) socket(0x2b, 0x1, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) 0s ago: executing program 2 (id=1982): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) kernel console output (not intermixed with test programs): sb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.864481][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 292.900106][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 292.942928][ T8] usb 3-1: SerialNumber: syz [ 293.178353][ T8] usb 3-1: 0:2 : does not exist [ 293.374571][ T8] usb 3-1: USB disconnect, device number 12 [ 294.620125][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.803562][ T7865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.516'. [ 298.840070][ T7865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.516'. [ 303.085485][ T7899] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 307.339061][ T7942] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 307.339061][ T7942] program syz.4.534 not setting count and/or reply_len properly [ 308.141227][ T8] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 308.380675][ C1] sd 0:0:1:0: [sda] tag#718 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 308.391260][ C1] sd 0:0:1:0: [sda] tag#718 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 308.440296][ T8] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 308.450572][ T7957] block device autoloading is deprecated and will be removed. [ 308.464099][ T7954] tmpfs: Bad value for 'mpol' [ 308.688162][ T7957] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 308.725294][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.743926][ T7957] qnx6: wrong signature (magic) in superblock #1. [ 308.754492][ T7957] qnx6: unable to read the first superblock [ 309.007912][ T7961] netlink: 96 bytes leftover after parsing attributes in process `syz.4.536'. [ 309.086699][ T8] usb 2-1: config 0 descriptor?? [ 309.331307][ T8] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 309.354908][ T8] asix: probe of 2-1:0.0 failed with error -71 [ 309.389515][ T8] usb 2-1: USB disconnect, device number 5 [ 310.632567][ T1186] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 310.824893][ T1186] usb 6-1: config 162 has an invalid interface number: 79 but max is 1 [ 310.833603][ T1186] usb 6-1: config 162 has an invalid interface number: 183 but max is 1 [ 310.842795][ T1186] usb 6-1: config 162 has no interface number 0 [ 310.852489][ T1186] usb 6-1: config 162 has no interface number 1 [ 310.867787][ T1186] usb 6-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 310.881129][ T1186] usb 6-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 310.893020][ T1186] usb 6-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 310.944622][ T1186] usb 6-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 310.956327][ T1186] usb 6-1: config 162 interface 183 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 310.978221][ T1186] usb 6-1: config 162 interface 183 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 310.992202][ T1186] usb 6-1: config 162 interface 183 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 311.134741][ T1186] usb 6-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 311.148625][ T1186] usb 6-1: config 162 interface 79 has no altsetting 0 [ 311.168230][ T1186] usb 6-1: config 162 interface 183 has no altsetting 0 [ 311.254119][ T1186] usb 6-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 311.270537][ T1186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.288075][ T1186] usb 6-1: Product: syz [ 311.296052][ T1186] usb 6-1: Manufacturer: syz [ 311.310033][ T1186] usb 6-1: SerialNumber: syz [ 311.574212][ T1186] pl2303 6-1:162.79: required endpoints missing [ 311.599303][ T1186] pl2303 6-1:162.183: required endpoints missing [ 311.663160][ T1186] usb 6-1: USB disconnect, device number 4 [ 313.202576][ T8] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 313.464964][ T8] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 313.502528][ T8] usb 5-1: config 0 has no interface number 0 [ 313.525381][ T8] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 313.552555][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.609725][ T8] usb 5-1: Product: syz [ 313.639565][ T8] usb 5-1: Manufacturer: syz [ 313.678507][ T8] usb 5-1: SerialNumber: syz [ 313.715051][ T8] usb 5-1: config 0 descriptor?? [ 314.172966][ T8] usb 5-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 314.388017][ T8033] netlink: 56 bytes leftover after parsing attributes in process `syz.4.551'. [ 315.680024][ T8] usb 5-1: failed to fetch extended address, random address set [ 315.854957][ T8] usb 5-1: USB disconnect, device number 10 [ 317.460688][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.467425][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.922272][ T8115] netlink: 36 bytes leftover after parsing attributes in process `syz.4.569'. [ 320.144888][ T8155] netlink: 96 bytes leftover after parsing attributes in process `syz.2.574'. [ 320.344635][ T8158] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 320.474007][ T8158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.667592][ T8162] bond1: (slave veth3): Enslaving as an active interface with a down link [ 320.879174][ T8158] bond1: (slave veth0_to_bond): making interface the new active one [ 320.944891][ T8158] veth0_to_bond: entered promiscuous mode [ 321.019168][ T8158] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 321.162868][ T8162] vlan2: entered allmulticast mode [ 321.173280][ T8162] veth1: entered allmulticast mode [ 321.193982][ T8162] veth1: entered promiscuous mode [ 321.209019][ T8162] veth1: left promiscuous mode [ 321.233442][ T8162] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 321.522582][ T5828] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 321.792525][ T5828] usb 6-1: Using ep0 maxpacket: 8 [ 321.809655][ T5828] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.850374][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 321.882492][ T5828] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 321.921053][ T5828] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 321.966249][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.048350][ T5828] usb 6-1: config 0 descriptor?? [ 322.292920][ T27] usb 6-1: USB disconnect, device number 5 [ 326.082731][ T1186] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 326.282671][ T1186] usb 5-1: Using ep0 maxpacket: 8 [ 326.301016][ T1186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.312695][ T1186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 326.324389][ T1186] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 326.371299][ T1186] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 326.383767][ T1186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.429241][ T1186] usb 5-1: config 0 descriptor?? [ 326.717638][ T1186] usb 5-1: USB disconnect, device number 11 [ 328.927800][ T8299] capability: warning: `syz.5.621' uses deprecated v2 capabilities in a way that may be insecure [ 329.851446][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 330.452553][ T1186] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 330.722601][ T1186] usb 2-1: Using ep0 maxpacket: 8 [ 330.750089][ T1186] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.822176][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 330.886512][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.942748][ T1186] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.001746][ T1186] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.069133][ T1186] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 331.122855][ T1186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.168606][ T1186] usb 2-1: config 0 descriptor?? [ 331.435410][ T1186] usb 2-1: USB disconnect, device number 6 [ 334.722563][ T5828] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 334.962514][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 334.984725][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.109847][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 335.162477][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.206415][ T5828] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.260620][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.327024][ T5828] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 335.357413][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.415071][ T5828] usb 2-1: config 0 descriptor?? [ 335.667868][ T5841] usb 2-1: USB disconnect, device number 7 [ 335.874739][ T42] veth0_to_bond: left promiscuous mode [ 336.444755][ T5877] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 336.683523][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.720303][ T5877] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 336.741507][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.775608][ T5877] usb 6-1: config 0 descriptor?? [ 336.800057][ T5877] pwc: Askey VC010 type 2 USB webcam detected. [ 337.193094][ T5877] pwc: recv_control_msg error -32 req 02 val 2b00 [ 337.245650][ T5877] pwc: recv_control_msg error -32 req 02 val 2700 [ 337.293478][ T5877] pwc: recv_control_msg error -32 req 02 val 2c00 [ 337.328371][ T5877] pwc: recv_control_msg error -32 req 04 val 1000 [ 337.356390][ T5877] pwc: recv_control_msg error -32 req 04 val 1300 [ 337.404960][ T5877] pwc: recv_control_msg error -32 req 04 val 1400 [ 337.639349][ T5877] pwc: recv_control_msg error -32 req 02 val 2000 [ 337.931330][ T5877] pwc: recv_control_msg error -32 req 02 val 2100 [ 338.226546][ T5877] pwc: recv_control_msg error -71 req 02 val 2500 [ 338.248973][ T5877] pwc: recv_control_msg error -71 req 02 val 2400 [ 338.281125][ T5877] pwc: recv_control_msg error -71 req 02 val 2600 [ 338.303155][ T5877] pwc: recv_control_msg error -71 req 02 val 2900 [ 338.469470][ T5877] pwc: recv_control_msg error -71 req 02 val 2800 [ 338.510967][ T5877] pwc: recv_control_msg error -71 req 04 val 1100 [ 339.289107][ T5877] pwc: recv_control_msg error -71 req 04 val 1200 [ 339.340340][ T5877] pwc: Registered as video103. [ 339.379029][ T5877] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 339.512607][ T5877] usb 6-1: USB disconnect, device number 6 [ 339.782447][ C1] sd 0:0:1:0: [sda] tag#723 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 339.792960][ C1] sd 0:0:1:0: [sda] tag#723 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 340.014853][ T5102] Bluetooth: hci1: command 0x0406 tx timeout [ 341.161753][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.681'. [ 341.183318][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 341.534074][ C1] sd 0:0:1:0: [sda] tag#728 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 341.544571][ C1] sd 0:0:1:0: [sda] tag#728 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 344.814356][ C1] sd 0:0:1:0: [sda] tag#756 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 344.824813][ C1] sd 0:0:1:0: [sda] tag#756 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 345.200626][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 346.495621][ T8597] netlink: 'syz.5.705': attribute type 1 has an invalid length. [ 346.503517][ T8597] netlink: 224 bytes leftover after parsing attributes in process `syz.5.705'. [ 347.842532][ T787] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 348.169073][ T787] usb 6-1: Using ep0 maxpacket: 8 [ 348.366475][ T787] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 348.419391][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.437907][ T787] usb 6-1: Product: syz [ 348.442145][ T787] usb 6-1: Manufacturer: syz [ 348.450079][ T787] usb 6-1: SerialNumber: syz [ 348.615233][ T787] usb 6-1: config 0 descriptor?? [ 348.643331][ T787] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 350.569299][ T8651] capability: warning: `syz.4.723' uses 32-bit capabilities (legacy support in use) [ 350.733159][ T5102] Bluetooth: hci0: command 0x0406 tx timeout [ 351.008864][ T8661] ptrace attach of "./syz-executor exec"[6785] was attempted by "./syz-executor exec"[8661] [ 351.528414][ T8666] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 351.857894][ T787] gspca_sonixj: reg_w1 err -71 [ 351.862949][ T787] sonixj: probe of 6-1:0.0 failed with error -71 [ 351.875986][ T787] usb 6-1: USB disconnect, device number 7 [ 354.508362][ T27] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 354.722601][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 354.870377][ T27] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 354.964380][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.268566][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.299001][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 355.482586][ T27] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 355.492769][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.527905][ T27] usb 5-1: config 0 descriptor?? [ 356.406965][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 356.513018][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.520366][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.542580][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.587454][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.605467][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.622015][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.626553][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 356.632654][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.651875][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.664897][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 356.670840][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.713530][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.725899][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.732532][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 356.743671][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.757783][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.758203][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.786404][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.800902][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.810287][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.823610][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.831004][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 356.831104][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.848245][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.855916][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.862721][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.863829][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.909820][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.939994][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.962562][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 356.964504][ T9] usb 3-1: config 0 descriptor?? [ 357.000103][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.042562][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.054962][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.062368][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.073296][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.081398][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.089110][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.096996][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.137898][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.157797][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.172668][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.248857][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.258114][ T9] usb 3-1: USB disconnect, device number 13 [ 357.266710][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.301415][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.342968][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.350172][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.383549][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.410866][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.418534][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.449012][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.469276][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.482587][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.490891][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.498469][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.530127][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.540261][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.556233][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.571377][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.592498][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.610090][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.622494][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.629748][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.863836][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.871584][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.879458][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 357.888752][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.366536][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.381444][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.396392][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.412254][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.441870][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.581965][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.603532][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.636704][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.665952][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.688657][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.721177][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.737053][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.765975][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.797524][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.850324][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.882844][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.912477][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.920488][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.975166][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.982960][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 358.990286][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 359.007410][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 359.935856][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 359.947193][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 359.954969][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 359.962172][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 359.969595][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.762140][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.846279][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.853565][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.860766][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.869137][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.877518][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.884836][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.892015][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.901648][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.909411][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.916676][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.923934][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.931107][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.938379][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.945628][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.953029][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.960276][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.967582][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.975832][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.983608][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.990799][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 360.998065][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.005293][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.012592][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.019815][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.052542][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.059842][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.102501][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.109742][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.122470][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.129691][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.137228][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.144726][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.151927][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.159269][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.170092][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.192544][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.234187][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.295540][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 361.304492][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.338844][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.400569][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.417675][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 361.428241][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 362.395174][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 362.512625][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 362.521275][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 362.529566][ T27] redragon 0003:0C45:760B.0002: unknown main item tag 0x0 [ 362.633588][ T27] redragon 0003:0C45:760B.0002: hidraw0: USB HID v0.04 Device [HID 0c45:760b] on usb-dummy_hcd.4-1/input0 [ 362.692555][ T27] usb 5-1: USB disconnect, device number 12 [ 363.090237][ T8771] fido_id[8771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 363.256454][ T8783] netlink: 'syz.5.771': attribute type 5 has an invalid length. [ 364.287907][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 364.722599][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 364.933355][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 364.947152][ T8] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 364.968016][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.988301][ T8] usb 6-1: Product: syz [ 364.998436][ T8] usb 6-1: Manufacturer: syz [ 365.008568][ T8] usb 6-1: SerialNumber: syz [ 365.060278][ T8] r8152-cfgselector 6-1: config 0 descriptor?? [ 365.071874][ T8825] ptrace attach of "./syz-executor exec"[5784] was attempted by "./syz-executor exec"[8825] [ 366.422660][ T8] r8152-cfgselector 6-1: Unknown version 0x0000 [ 367.065480][ T8] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 367.124764][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.790'. [ 367.335729][ T8843] fuse: Unknown parameter '0x0000000000000004' [ 367.472580][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 367.673052][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 367.684795][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 367.696943][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 367.717614][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 367.741315][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 367.771638][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 367.792533][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.851188][ T9] usb 5-1: config 0 descriptor?? [ 368.457024][ T787] usb 5-1: USB disconnect, device number 13 [ 369.912304][ T8896] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 371.933181][ T27] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 373.172467][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 373.314710][ T27] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 373.342486][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.350650][ T27] usb 6-1: Product: syz [ 373.380421][ T27] usb 6-1: Manufacturer: syz [ 373.392478][ T27] usb 6-1: SerialNumber: syz [ 373.409329][ T27] r8152-cfgselector 6-1: config 0 descriptor?? [ 373.774129][ T27] r8152-cfgselector 6-1: Needed 1 retries to read version [ 373.781991][ T27] r8152-cfgselector 6-1: Unknown version 0x0000 [ 373.800984][ T27] r8152-cfgselector 6-1: bad CDC descriptors [ 375.384673][ T27] r8152-cfgselector 6-1: Unknown version 0x0000 [ 375.393566][ T27] r8152-cfgselector 6-1: USB disconnect, device number 9 [ 375.675267][ T8963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.841'. [ 378.927820][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.934772][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.442679][ T787] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 379.632921][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 379.643923][ T787] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 379.659290][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.670793][ T787] usb 2-1: config 0 descriptor?? [ 379.680573][ T787] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 379.752566][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 380.173943][ T9] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 380.271403][ T9] usb 3-1: config 1 has no interface number 0 [ 380.535230][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8 [ 380.638468][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 380.651148][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.665805][ T9] usb 3-1: Product: syz [ 380.670502][ T9] usb 3-1: Manufacturer: syz [ 380.702202][ T9] usb 3-1: SerialNumber: syz [ 380.717253][ T9015] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 380.728394][ T9] usb 3-1: Error in usbnet_get_endpoints (-22) [ 380.737747][ T9029] trusted_key: encrypted_key: insufficient parameters specified [ 380.902679][ T27] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 381.106645][ T787] gspca_vc032x: reg_w err -71 [ 381.111512][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.134055][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.139427][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.147485][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.157165][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.167167][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.205357][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.232837][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.241300][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.268743][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.289607][ T27] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 381.310736][ T27] usb 6-1: can't read configurations, error -61 [ 381.317476][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.341006][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.352837][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.358162][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.376763][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.395070][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.421453][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.440019][ T787] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.467198][ T787] gspca_vc032x: Unknown sensor... [ 381.484125][ T787] vc032x: probe of 2-1:0.0 failed with error -22 [ 381.517304][ T787] usb 2-1: USB disconnect, device number 8 [ 381.623372][ T27] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 382.117839][ T27] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 382.125715][ T27] usb 6-1: can't read configurations, error -61 [ 382.137737][ T27] usb usb6-port1: attempt power cycle [ 382.467192][ T5118] usb 3-1: USB disconnect, device number 14 [ 382.563926][ T27] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 382.629951][ T27] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 382.638737][ T27] usb 6-1: can't read configurations, error -61 [ 382.792817][ T27] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 382.876488][ T27] usb 6-1: device descriptor read/8, error -71 [ 383.015253][ T27] usb usb6-port1: unable to enumerate USB device [ 384.661616][ T9063] input: syz1 as /devices/virtual/input/input18 [ 385.033454][ T5856] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 385.235959][ T5856] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 385.256239][ T5856] usb 3-1: config 0 has no interface number 0 [ 385.276227][ T5856] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 385.289566][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.308663][ T5856] usb 3-1: Product: syz [ 385.317878][ T5856] usb 3-1: Manufacturer: syz [ 385.332513][ T5856] usb 3-1: SerialNumber: syz [ 385.374168][ T5856] usb 3-1: config 0 descriptor?? [ 385.382717][ T27] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 385.522096][ T9089] misc userio: No port type given on /dev/userio [ 385.720091][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 385.731837][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.742420][ T27] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 385.752505][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.792151][ T27] usb 5-1: config 0 descriptor?? [ 386.008373][ T5856] usb 3-1: Firmware version (0.0) predates our first public release. [ 386.018692][ T5856] usb 3-1: Please update to version 0.2 or newer [ 386.064380][ T27] usbhid 5-1:0.0: can't add hid device: -71 [ 386.071770][ T27] usbhid: probe of 5-1:0.0 failed with error -71 [ 386.106722][ T27] usb 5-1: USB disconnect, device number 14 [ 386.212534][ T5856] usb 3-1: Firmware: build < [ 386.308456][ T9097] input: syz1 as /devices/virtual/input/input19 [ 386.715087][ T5856] usb 3-1: USB disconnect, device number 15 [ 386.869871][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 387.228742][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 387.483692][ T27] usb 2-1: config 6 has an invalid interface number: 158 but max is 0 [ 387.531176][ T27] usb 2-1: config 6 has no interface number 0 [ 387.589378][ T27] usb 2-1: config 6 interface 158 has no altsetting 0 [ 387.675163][ T27] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 387.694828][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.826355][ T9116] misc userio: No port type given on /dev/userio [ 387.921595][ T27] usb 2-1: Product: syz [ 387.926595][ T27] usb 2-1: Manufacturer: syz [ 387.931259][ T27] usb 2-1: SerialNumber: syz [ 388.874947][ T9125] input: syz1 as /devices/virtual/input/input20 [ 389.772674][ T9136] random: crng reseeded on system resumption [ 390.854631][ T27] rtsx_usb: probe of 2-1:6.158 failed with error -71 [ 390.866263][ T27] usb 2-1: USB disconnect, device number 9 [ 392.014459][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz.5.906'. [ 392.312742][ T787] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 392.512760][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 392.531364][ T787] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 392.555503][ C1] sd 0:0:1:0: [sda] tag#727 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 392.565869][ C1] sd 0:0:1:0: [sda] tag#727 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 392.574914][ T787] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 392.592503][ T787] usb 2-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 392.613803][ T787] usb 2-1: config 166 has no interface number 0 [ 392.620149][ T787] usb 2-1: config 166 has no interface number 1 [ 392.642542][ T787] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 392.662666][ T787] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 392.692509][ T787] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 392.727035][ T787] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 392.747960][ T787] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 392.768161][ T27] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 392.776120][ T787] usb 2-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 392.776160][ T787] usb 2-1: config 166 interface 177 has no altsetting 0 [ 392.776180][ T787] usb 2-1: config 166 interface 34 has no altsetting 0 [ 392.779259][ T787] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 392.844183][ T9159] misc userio: No port type given on /dev/userio [ 392.860674][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.860703][ T9158] input: syz1 as /devices/virtual/input/input21 [ 392.881565][ T787] usb 2-1: Product: syz [ 392.889564][ T787] usb 2-1: Manufacturer: syz [ 392.895138][ T787] usb 2-1: SerialNumber: syz [ 393.026587][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.051653][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.076247][ T27] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 393.106426][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.133905][ T27] usb 6-1: config 0 descriptor?? [ 393.154765][ T787] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 393.378834][ T787] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 393.725524][ T9175] random: crng reseeded on system resumption [ 394.926246][ T9178] netlink: 72 bytes leftover after parsing attributes in process `syz.4.916'. [ 395.348924][ T787] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 395.357285][ T787] usb 2-1: No valid video chain found. [ 395.476702][ T787] usb 2-1: USB disconnect, device number 10 [ 395.743646][ T27] usbhid 6-1:0.0: can't add hid device: -71 [ 395.749735][ T27] usbhid: probe of 6-1:0.0 failed with error -71 [ 395.796186][ T27] usb 6-1: USB disconnect, device number 14 [ 396.073549][ C1] sd 0:0:1:0: [sda] tag#732 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 396.084035][ C1] sd 0:0:1:0: [sda] tag#732 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 396.203971][ T9197] input: syz1 as /devices/virtual/input/input22 [ 397.323264][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 397.605391][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.615859][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.630574][ T27] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 397.639985][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 397.648409][ T27] usb 2-1: SerialNumber: syz [ 397.890219][ T27] usb 2-1: 0:2 : does not exist [ 397.957652][ T27] usb 2-1: USB disconnect, device number 11 [ 398.035472][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.212740][ T5828] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 398.452049][ T5828] usb 6-1: Using ep0 maxpacket: 32 [ 398.473198][ T5828] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 398.512504][ T5828] usb 6-1: config 0 has no interface number 0 [ 398.520330][ C1] sd 0:0:1:0: [sda] tag#733 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 398.530778][ C1] sd 0:0:1:0: [sda] tag#733 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 398.567233][ T5828] usb 6-1: config 0 interface 184 has no altsetting 0 [ 398.596129][ T5828] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 398.612792][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.631166][ T5828] usb 6-1: Product: syz [ 398.763440][ T5828] usb 6-1: Manufacturer: syz [ 398.783912][ T5828] usb 6-1: SerialNumber: syz [ 399.095914][ T5828] usb 6-1: config 0 descriptor?? [ 399.220610][ T5828] smsc75xx v1.0.0 [ 399.657634][ T5828] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 399.683932][ T5828] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 399.711032][ T5828] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 399.727031][ T9241] input: syz1 as /devices/virtual/input/input23 [ 399.740254][ T5828] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 399.798421][ T5828] usb 6-1: USB disconnect, device number 15 [ 403.276870][ T9273] overlayfs: missing 'lowerdir' [ 403.932930][ T5118] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 404.411306][ T5118] usb 3-1: Using ep0 maxpacket: 16 [ 404.616377][ T5118] usb 3-1: unable to get BOS descriptor or descriptor too short [ 404.711981][ T5118] usb 3-1: no configurations [ 404.729777][ T5118] usb 3-1: can't read configurations, error -22 [ 407.317479][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 408.432709][ T5118] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 409.327276][ T5118] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 409.342554][ T5118] usb 3-1: can't read configurations, error -61 [ 409.362250][ T9332] netlink: 148 bytes leftover after parsing attributes in process `syz.4.965'. [ 409.502688][ T5118] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 409.720657][ T5118] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 409.741139][ T5118] usb 3-1: can't read configurations, error -61 [ 409.754861][ T5118] usb usb3-port1: attempt power cycle [ 410.233549][ T5118] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 410.998734][ T5118] usb 3-1: device descriptor read/8, error -71 [ 413.927372][ T9368] netlink: 72 bytes leftover after parsing attributes in process `syz.5.980'. [ 414.144593][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 419.596340][ T5877] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 422.696256][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 422.722523][ T9412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.485866][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.995'. [ 424.199128][ T9412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.347972][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 427.694506][ T5856] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 427.892481][ T5856] usb 6-1: Using ep0 maxpacket: 16 [ 428.064921][ T5856] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 428.407477][ T5856] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 428.452940][ T5856] usb 6-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 428.478926][ T5856] usb 6-1: config 166 has no interface number 0 [ 428.485763][ T5856] usb 6-1: config 166 has no interface number 1 [ 428.492184][ T5856] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 428.515067][ T9484] input: syz0 as /devices/virtual/input/input24 [ 428.521851][ T5856] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 428.535664][ T5856] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 428.547963][ T5856] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 428.560631][ T5856] usb 6-1: config 166 interface 34 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 428.594654][ T5856] usb 6-1: config 166 interface 177 has no altsetting 0 [ 428.609555][ T5856] usb 6-1: config 166 interface 34 has no altsetting 0 [ 428.626790][ T5856] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 428.639442][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.648306][ T5856] usb 6-1: Product: syz [ 428.682717][ T5856] usb 6-1: Manufacturer: syz [ 428.692821][ T5856] usb 6-1: SerialNumber: syz [ 428.933215][ T5856] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 429.562762][ T9496] binder_alloc: 9488: binder_alloc_buf, no vma [ 430.056387][ T5856] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 430.152617][ T5828] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 430.187108][ T5856] usb 6-1: Found UVC 0.00 device syz (0bda:0138) [ 430.210132][ T5856] usb 6-1: No valid video chain found. [ 430.251173][ T5856] usb 6-1: USB disconnect, device number 16 [ 430.396509][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 430.442604][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 430.496950][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 430.605540][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 430.670716][ T5828] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 430.680334][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.688656][ T5828] usb 3-1: Product: syz [ 430.695299][ T5828] usb 3-1: Manufacturer: syz [ 430.700029][ T5828] usb 3-1: SerialNumber: syz [ 430.815916][ T5828] usb 3-1: config 0 descriptor?? [ 431.144939][ T5828] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 431.548782][ T5118] usb 3-1: USB disconnect, device number 22 [ 432.977543][ T8511] schedule_timeout: wrong timeout value ffffffffffffffa4 [ 432.987160][ T8511] CPU: 1 PID: 8511 Comm: vivid-000-vid-c Not tainted syzkaller #0 [ 432.995032][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 433.005144][ T8511] Call Trace: [ 433.008457][ T8511] [ 433.011445][ T8511] dump_stack_lvl+0x16c/0x230 [ 433.016184][ T8511] ? show_regs_print_info+0x20/0x20 [ 433.021428][ T8511] ? load_image+0x3b0/0x3b0 [ 433.025981][ T8511] schedule_timeout+0x215/0x280 [ 433.030871][ T8511] ? console_conditional_schedule+0x40/0x40 [ 433.036798][ T8511] ? __mutex_trylock_common+0x153/0x250 [ 433.042410][ T8511] ? prepare_to_wait_event+0x434/0x470 [ 433.047922][ T8511] vivid_thread_vid_cap+0xaaf/0x10c0 [ 433.053294][ T8511] ? vivid_start_generating_vid_cap+0x510/0x510 [ 433.059594][ T8511] ? wake_bit_function+0x200/0x200 [ 433.064749][ T8511] ? __kthread_parkme+0x7a/0x1c0 [ 433.069736][ T8511] kthread+0x2fa/0x390 [ 433.073823][ T8511] ? vivid_start_generating_vid_cap+0x510/0x510 [ 433.080096][ T8511] ? kthread_blkcg+0xd0/0xd0 [ 433.084714][ T8511] ret_from_fork+0x48/0x80 [ 433.089168][ T8511] ? kthread_blkcg+0xd0/0xd0 [ 433.093785][ T8511] ret_from_fork_asm+0x11/0x20 [ 433.098622][ T8511] [ 434.686221][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 434.704200][ T9543] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.713669][ T9543] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.722628][ T9543] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.731781][ T9543] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.848210][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 435.835534][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 435.987437][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 438.852975][ T5856] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 439.034489][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 439.072546][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 439.108989][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 439.140597][ T5856] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 439.159590][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.181031][ T5856] usb 2-1: Product: syz [ 439.191856][ T5856] usb 2-1: Manufacturer: syz [ 439.202268][ T5856] usb 2-1: SerialNumber: syz [ 439.225101][ T5856] usb 2-1: config 0 descriptor?? [ 440.344168][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.350696][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.458427][ T5856] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 440.822133][ T5856] usb 2-1: USB disconnect, device number 13 [ 441.985871][ T28] audit: type=1326 audit(1759636376.276:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c918eec9 code=0x7ffc0000 [ 442.060953][ T28] audit: type=1326 audit(1759636376.276:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c918eec9 code=0x7ffc0000 [ 442.160607][ T28] audit: type=1326 audit(1759636376.306:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe6c918eec9 code=0x7ffc0000 [ 442.252591][ T28] audit: type=1326 audit(1759636376.306:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c918eec9 code=0x7ffc0000 [ 442.318359][ T28] audit: type=1326 audit(1759636376.306:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c918eec9 code=0x7ffc0000 [ 442.417147][ T28] audit: type=1326 audit(1759636376.306:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fe6c918eec9 code=0x7ffc0000 [ 442.506989][ T28] audit: type=1326 audit(1759636376.306:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c918eec9 code=0x7ffc0000 [ 442.602206][ T28] audit: type=1326 audit(1759636376.306:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c918eec9 code=0x7ffc0000 [ 442.681649][ T28] audit: type=1326 audit(1759636376.306:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fe6c918eec9 code=0x7ffc0000 [ 442.778566][ T28] audit: type=1326 audit(1759636376.306:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c918eec9 code=0x7ffc0000 [ 446.304191][ T9671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1078'. [ 447.962693][ T5877] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 448.250871][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.435187][ T5877] usb 5-1: config 0 interface 0 has no altsetting 0 [ 448.609199][ T5877] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 448.737154][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.780360][ T5877] usb 5-1: Product: syz [ 448.794936][ T5877] usb 5-1: Manufacturer: syz [ 448.810013][ T5877] usb 5-1: SerialNumber: syz [ 448.843733][ T5877] usb 5-1: config 0 descriptor?? [ 448.896210][ T5877] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 448.983796][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 449.011231][ T5877] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 449.056546][ T5877] usb 5-1: media controller created [ 449.113289][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.212816][ T5792] Bluetooth: hci2: unexpected event for opcode 0x200c [ 449.391466][ T5877] DVB: Unable to find symbol tda10046_attach() [ 449.398031][ T5877] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 449.414496][ T5856] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 450.130900][ T5856] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.183056][ T5856] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.214793][ T5856] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 450.229555][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 450.260727][ T5856] usb 6-1: SerialNumber: syz [ 450.369561][ T5877] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 450.832764][ T23] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 450.935477][ T5856] usb 6-1: 0:2 : does not exist [ 451.222224][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 451.244348][ T5856] usb 6-1: USB disconnect, device number 17 [ 451.280279][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.355869][ T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 451.399008][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.421967][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.462533][ T5877] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 451.475245][ T23] usb 3-1: config 0 descriptor?? [ 451.482078][ T5877] usb 5-1: USB disconnect, device number 15 [ 452.037726][ T23] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 452.045694][ T23] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 452.052801][ T23] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 452.060017][ T23] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 452.066935][ T23] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 452.074087][ T23] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 452.081022][ T23] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 452.093150][ T23] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 452.715293][ T23] usb 3-1: USB disconnect, device number 23 [ 452.957862][ T9754] fido_id[9754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 454.884330][ T9761] Process accounting resumed [ 462.832561][ T1186] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 463.042716][ T1186] usb 2-1: Using ep0 maxpacket: 32 [ 463.051839][ T1186] usb 2-1: config 1 has an invalid interface number: 164 but max is 0 [ 463.071786][ T1186] usb 2-1: config 1 has no interface number 0 [ 463.084363][ T1186] usb 2-1: config 1 interface 164 has no altsetting 0 [ 463.108503][ T1186] usb 2-1: New USB device found, idVendor=3731, idProduct=0115, bcdDevice=7f.34 [ 463.118243][ T1186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.118989][ T9908] overlayfs: overlapping lowerdir path [ 463.127106][ T1186] usb 2-1: Product: syz [ 463.136999][ T1186] usb 2-1: Manufacturer: syz [ 463.141676][ T1186] usb 2-1: SerialNumber: syz [ 463.363731][ T1186] option 2-1:1.164: GSM modem (1-port) converter detected [ 463.379202][ T1186] usb 2-1: USB disconnect, device number 14 [ 463.387683][ T1186] option 2-1:1.164: device disconnected [ 464.211864][ T9928] fuse: root generation should be zero [ 471.815429][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 471.815463][ T28] audit: type=1107 audit(1759636405.986:21): pid=9970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Î_`' [ 476.812522][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 480.142447][ T5856] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 480.347794][ T5856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.387845][ T5856] usb 5-1: config 0 interface 0 has no altsetting 0 [ 480.405459][ T5856] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 480.423757][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.442477][ T5856] usb 5-1: Product: syz [ 480.449059][ T5856] usb 5-1: Manufacturer: syz [ 480.464055][ T5856] usb 5-1: SerialNumber: syz [ 480.489928][ T5856] usb 5-1: config 0 descriptor?? [ 480.517446][ T5856] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 480.562167][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 480.589099][ T5856] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 480.619024][ T5856] usb 5-1: media controller created [ 480.876602][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 481.799826][ T5856] DVB: Unable to find symbol tda10046_attach() [ 481.844683][ T5856] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 481.873523][ T5856] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 482.820152][ T5856] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 482.852796][ T5856] usb 5-1: USB disconnect, device number 16 [ 483.499596][T10111] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 485.727310][ T5792] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 489.757199][T10150] Process accounting resumed [ 489.774798][ T5792] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 489.783796][ T5792] Bluetooth: hci1: Injecting HCI hardware error event [ 489.793793][ T5102] Bluetooth: hci1: hardware error 0x00 [ 492.563585][ T5102] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 495.072740][T10183] __vm_enough_memory: pid: 10183, comm: syz.1.1253, not enough memory for the allocation [ 496.525220][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'. [ 496.535059][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 496.551663][T10206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.573115][T10206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.609931][T10206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.636285][T10206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.692635][T10206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.752566][T10206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.793092][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'. [ 496.817861][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 496.876129][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.887600][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.898876][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.909535][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.919444][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.929958][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.676026][ T5856] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 498.812515][ T5856] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 498.862379][ T5856] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 498.901934][ T5856] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 498.946947][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.011533][T10201] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 499.075948][ T5856] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 501.803375][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.810988][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.004901][ T8] usb 6-1: USB disconnect, device number 18 [ 502.070819][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 502.102598][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 502.167611][T10250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.242536][T10250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.303836][T10250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.366782][T10250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.443633][T10250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.746766][T10250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.970791][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 503.003025][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 503.023325][T10252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.034076][T10252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.044927][T10252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.080935][T10252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.111474][T10252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.132515][T10252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.527915][ T1186] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 503.732860][ T1186] usb 2-1: Using ep0 maxpacket: 8 [ 503.774089][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 503.844520][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 503.885858][ T8511] schedule_timeout: wrong timeout value ffffffffffffffff [ 503.892405][ T1186] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 503.949893][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 503.959256][ T8511] CPU: 0 PID: 8511 Comm: vivid-000-vid-c Not tainted syzkaller #0 [ 503.969005][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 503.979099][ T8511] Call Trace: [ 503.982307][ T1186] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 503.982424][ T1186] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 503.992481][ T8511] [ 503.992497][ T8511] dump_stack_lvl+0x16c/0x230 [ 503.992533][ T8511] ? show_regs_print_info+0x20/0x20 [ 503.992561][ T8511] ? load_image+0x3b0/0x3b0 [ 504.013922][ T1186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.014446][ T8511] schedule_timeout+0x215/0x280 [ 504.031841][ T8511] ? console_conditional_schedule+0x40/0x40 [ 504.037772][ T8511] ? __mutex_trylock_common+0x153/0x250 [ 504.043375][ T8511] ? prepare_to_wait_event+0x434/0x470 [ 504.048900][ T8511] vivid_thread_vid_cap+0xaaf/0x10c0 [ 504.054288][ T8511] ? vivid_start_generating_vid_cap+0x510/0x510 [ 504.060597][ T8511] ? wake_bit_function+0x200/0x200 [ 504.065765][ T8511] ? __kthread_parkme+0x7a/0x1c0 [ 504.070771][ T8511] kthread+0x2fa/0x390 [ 504.074884][ T8511] ? vivid_start_generating_vid_cap+0x510/0x510 [ 504.078464][ T1186] usb 2-1: config 0 descriptor?? [ 504.081154][ T8511] ? kthread_blkcg+0xd0/0xd0 [ 504.090739][ T8511] ret_from_fork+0x48/0x80 [ 504.095201][ T8511] ? kthread_blkcg+0xd0/0xd0 [ 504.098452][T10267] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 504.099810][ T8511] ret_from_fork_asm+0x11/0x20 [ 504.111757][ T8511] [ 504.922965][T10280] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 504.934190][ T5102] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 504.935658][ T8] usb 2-1: USB disconnect, device number 15 [ 505.317041][T10280] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 505.331134][T10280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.384575][T10280] usb 3-1: Product: syz [ 505.389290][T10280] usb 3-1: Manufacturer: syz [ 505.404789][T10280] usb 3-1: SerialNumber: syz [ 505.445885][T10280] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 505.495940][ T5841] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 506.121088][ T787] usb 3-1: USB disconnect, device number 24 [ 506.591435][ T5841] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 506.638426][ T5841] ath9k_htc: Failed to initialize the device [ 506.886771][ T787] usb 3-1: ath9k_htc: USB layer deinitialized [ 509.497011][T10348] block device autoloading is deprecated and will be removed. [ 509.497121][T10347] block device autoloading is deprecated and will be removed. [ 517.032578][ T5841] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 517.252656][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 517.267160][T10422] __vm_enough_memory: pid: 10422, comm: syz.5.1330, not enough memory for the allocation [ 518.171175][ T5841] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 518.204745][ T5841] usb 2-1: config 0 has no interface number 0 [ 518.221060][ T5841] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 518.230946][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.239325][ T5841] usb 2-1: Product: syz [ 518.243612][ T5841] usb 2-1: Manufacturer: syz [ 518.248308][ T5841] usb 2-1: SerialNumber: syz [ 518.673716][ T5841] usb 2-1: config 0 descriptor?? [ 518.692184][ T5841] usb 2-1: can't set config #0, error -71 [ 518.725591][ T5841] usb 2-1: USB disconnect, device number 16 [ 522.564106][T10454] syz.5.1338 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 526.409530][ T28] audit: type=1326 audit(1759636460.696:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.1.1351" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50f5b8eec9 code=0x0 [ 526.501169][T10500] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1351'. [ 532.874323][T10572] fuse: Unknown parameter '0xffffffffffffffff' [ 533.459136][ T1186] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 533.662824][ T1186] usb 3-1: Using ep0 maxpacket: 16 [ 533.685051][ T1186] usb 3-1: unable to get BOS descriptor or descriptor too short [ 533.704251][ T1186] usb 3-1: config 15 has an invalid interface number: 174 but max is 0 [ 533.722471][ T1186] usb 3-1: config 15 has no interface number 0 [ 533.742390][ T1186] usb 3-1: config 15 interface 174 has no altsetting 0 [ 533.763943][ T1186] usb 3-1: language id specifier not provided by device, defaulting to English [ 533.775602][ T1186] usb 3-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 533.792382][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.811067][ T1186] usb 3-1: Product: syz [ 533.820944][ T1186] usb 3-1: Manufacturer: syz [ 533.828322][ T1186] usb 3-1: SerialNumber: syz [ 534.209403][ T1186] sierra 3-1:15.174: Sierra USB modem converter detected [ 534.507602][ T1186] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 534.551329][ T1186] usb 3-1: USB disconnect, device number 25 [ 534.600673][ T1186] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 534.630653][ T1186] sierra 3-1:15.174: device disconnected [ 539.807204][T10651] fuse: Unknown parameter '0x0000000000000005' [ 539.854644][ T5792] Bluetooth: hci3: unexpected event for opcode 0x080f [ 539.899925][T10651] nbd1: detected capacity change from 0 to 63 [ 540.686765][ T5792] block nbd1: Receive control failed (result -104) [ 542.369985][T10662] Driver unsupported XDP return value 0 on prog (id 142) dev N/A, expect packet loss! [ 543.947172][T10700] 9pnet_fd: Insufficient options for proto=fd [ 544.013421][ T5792] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 544.022858][ T5792] Bluetooth: hci3: Injecting HCI hardware error event [ 544.039446][ T5792] Bluetooth: hci3: hardware error 0x00 [ 546.551991][ T5792] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 546.990804][ T5856] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 547.278914][T10737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.382817][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 547.942252][ T5856] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 547.964552][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.800123][ T5856] usb 2-1: Product: syz [ 548.830593][ T5856] usb 2-1: Manufacturer: syz [ 548.962000][ T5856] usb 2-1: SerialNumber: syz [ 549.023863][ T5856] usb 2-1: config 0 descriptor?? [ 549.167674][ T28] audit: type=1804 audit(1759636483.456:23): pid=10744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1422" name="/newroot/354/file1" dev="fuse" ino=1 res=1 errno=0 [ 549.232484][ T28] audit: type=1800 audit(1759636483.486:24): pid=10744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1422" name="/" dev="fuse" ino=1 res=0 errno=0 [ 549.282573][ T28] audit: type=1800 audit(1759636483.486:25): pid=10744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1422" name="/" dev="fuse" ino=1 res=0 errno=0 [ 549.479329][ T5856] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 549.501436][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 549.522076][ T5856] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 549.537127][ T5856] usb 2-1: media controller created [ 549.999851][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 550.396273][ T5856] zl10353_read_register: readreg error (reg=127, ret==0) [ 550.499061][ T5856] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 550.525310][ T5856] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 550.692969][ T5856] usb 2-1: USB disconnect, device number 17 [ 550.929421][ T5856] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 551.822803][ T5856] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 551.856692][ T9] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 551.881297][T10768] syz_tun: entered allmulticast mode [ 551.906805][T10767] syz_tun: left allmulticast mode [ 552.054719][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.064985][ T5856] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 552.074028][ T5856] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 552.083251][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.099763][ T5856] usb 2-1: config 0 descriptor?? [ 552.102954][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 552.120402][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 552.130012][ T9] usb 5-1: config 128 has an invalid interface number: 160 but max is 0 [ 552.138877][ T9] usb 5-1: config 128 has no interface number 0 [ 552.145901][ T9] usb 5-1: config 128 interface 160 has no altsetting 0 [ 552.157123][ T9] usb 5-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=48.03 [ 552.166818][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.175354][ T9] usb 5-1: Product: syz [ 552.179643][ T9] usb 5-1: Manufacturer: syz [ 552.184531][ T9] usb 5-1: SerialNumber: syz [ 552.404054][ T9] usb 5-1: active config #128 != 1 ?? [ 552.413648][ T9] usb 5-1: USB disconnect, device number 17 [ 552.513171][ T5856] Bluetooth: Can't get state to change to load configuration err [ 552.521032][ T5856] Bluetooth: Loading sysconfig file failed [ 552.528040][ T5856] ath3k: probe of 2-1:0.0 failed with error -16 [ 552.544044][ T5856] usb 2-1: USB disconnect, device number 18 [ 555.282736][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 555.783549][T10794] netlink: 'syz.5.1441': attribute type 4 has an invalid length. [ 555.862620][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 556.140929][ T9] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 556.192660][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.259006][ T9] usb 5-1: Product: syz [ 556.270409][ T9] usb 5-1: Manufacturer: syz [ 556.279542][ T9] usb 5-1: SerialNumber: syz [ 556.304141][ T9] usb 5-1: config 0 descriptor?? [ 556.802579][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 556.835198][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 556.880683][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 556.906130][ T9] usb 5-1: media controller created [ 557.236858][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 557.318064][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 557.350962][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 557.385739][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 557.482604][ T9] usb 5-1: USB disconnect, device number 18 [ 557.571298][ T5792] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 557.657569][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 561.060442][T10849] netlink: 'syz.1.1452': attribute type 4 has an invalid length. [ 562.047890][T10856] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 562.169496][T10856] bridge_slave_0: left allmulticast mode [ 562.192752][T10856] bridge_slave_0: left promiscuous mode [ 562.198626][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.252017][T10856] bridge_slave_1: left allmulticast mode [ 562.270592][T10856] bridge_slave_1: left promiscuous mode [ 562.293872][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.317382][T10856] bond0: (slave bond_slave_0): Releasing backup interface [ 562.375620][T10856] bond0: (slave bond_slave_1): Releasing backup interface [ 562.432461][ T5118] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 562.463459][T10856] team0: Port device team_slave_0 removed [ 562.508963][T10856] team0: Port device team_slave_1 removed [ 562.526678][T10856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.541004][T10856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.554942][T10856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.571760][T10856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.601453][T10862] netlink: 'syz.5.1456': attribute type 10 has an invalid length. [ 562.610827][T10862] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 562.691398][ T5118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 562.753831][ T5118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 562.776202][T10862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.866315][T10862] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 562.925040][ T5118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 563.070196][ T5118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 563.218456][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.225055][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.307308][ T5118] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 563.346390][ T5118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.362546][ T5118] usb 5-1: Product: syz [ 563.373837][ T5118] usb 5-1: Manufacturer: syz [ 563.382672][ T5118] usb 5-1: SerialNumber: syz [ 563.398909][ T5118] usb 5-1: config 0 descriptor?? [ 563.659945][ T5118] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 563.914594][ T5118] usb 5-1: USB disconnect, device number 19 [ 564.382542][T10280] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 564.602120][T10280] usb 2-1: Using ep0 maxpacket: 8 [ 564.610070][T10280] usb 2-1: unable to get BOS descriptor or descriptor too short [ 564.621253][T10280] usb 2-1: config 4 interface 0 has no altsetting 0 [ 564.645444][T10280] usb 2-1: string descriptor 0 read error: -22 [ 564.655854][T10280] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 564.791853][T10280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.931352][T10280] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 565.053395][T10280] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 565.067911][T10280] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 565.078590][T10280] usb 2-1: media controller created [ 565.275225][T10280] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.748826][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1471'. [ 566.611486][ T23] usb 2-1: USB disconnect, device number 19 [ 566.872536][ T28] audit: type=1326 audit(1759636501.016:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.4.1474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ba98eec9 code=0x0 [ 569.059459][T10930] random: crng reseeded on system resumption [ 570.622563][ T95] block nbd1: Possible stuck request ffff888021a48000: control (read@0,1024B). Runtime 30 seconds [ 570.634099][ T95] block nbd1: Possible stuck request ffff888021a48200: control (read@1024,1024B). Runtime 30 seconds [ 570.646863][ T95] block nbd1: Possible stuck request ffff888021a48400: control (read@2048,1024B). Runtime 30 seconds [ 570.661512][ T95] block nbd1: Possible stuck request ffff888021a48600: control (read@3072,1024B). Runtime 30 seconds [ 571.157086][T10280] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 571.372536][T10280] usb 3-1: Using ep0 maxpacket: 8 [ 571.549585][T10280] usb 3-1: unable to get BOS descriptor or descriptor too short [ 571.781857][T10280] usb 3-1: config 4 interface 0 has no altsetting 0 [ 572.699282][T10280] usb 3-1: string descriptor 0 read error: -22 [ 572.705777][T10280] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 572.767860][T10280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.807183][T10280] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 572.847960][T10280] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 572.874077][T10280] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 572.881608][T10280] usb 3-1: media controller created [ 572.916655][T10280] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.479085][ T5841] usb 3-1: USB disconnect, device number 26 [ 574.573511][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 575.713691][T10996] sp0: Synchronizing with TNC [ 575.735674][T10997] block nbd5: shutting down sockets [ 575.820287][T10996] [U] è [ 576.113437][ T5118] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 576.312559][ T5118] usb 3-1: Using ep0 maxpacket: 8 [ 576.333041][ T5118] usb 3-1: unable to get BOS descriptor or descriptor too short [ 576.360343][ T5118] usb 3-1: config 4 interface 0 has no altsetting 0 [ 576.406363][ T5118] usb 3-1: string descriptor 0 read error: -22 [ 576.421160][ T5118] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 576.451406][ T5118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.518248][T11011] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1505'. [ 577.449982][ T5118] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 578.301992][ T5118] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 578.456512][ T5118] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 578.715344][ T5118] usb 3-1: media controller created [ 578.928471][ T5118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 579.010953][ T5118] zl10353_read_register: readreg error (reg=127, ret==0) [ 579.158184][ T5118] usb 3-1: USB disconnect, device number 27 [ 580.056515][T11033] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 582.642999][ T9] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 582.951736][ T9] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 582.986472][ T5118] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 583.131210][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.234280][ T9] usb 3-1: Product: syz [ 583.270501][ T9] usb 3-1: Manufacturer: syz [ 583.322464][ T9] usb 3-1: SerialNumber: syz [ 583.337675][ T9] usb 3-1: config 0 descriptor?? [ 583.402423][ T5118] usb 5-1: Using ep0 maxpacket: 8 [ 583.410021][ T5118] usb 5-1: unable to get BOS descriptor or descriptor too short [ 583.419758][ T5118] usb 5-1: config 4 interface 0 has no altsetting 0 [ 583.430581][ T5118] usb 5-1: string descriptor 0 read error: -22 [ 583.437402][ T5118] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 583.470565][ T5118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.517293][ T5118] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 583.561555][ T5118] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 583.590765][ T9] usb 3-1: ignoring: not an USB2CAN converter [ 583.607939][ T5118] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 583.637694][ T5118] usb 5-1: media controller created [ 583.676765][T11066] tmpfs: Bad value for 'nr_blocks' [ 583.733702][ T5118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.796302][ T9] usb 3-1: USB disconnect, device number 28 [ 584.450875][ T5118] zl10353_read_register: readreg error (reg=127, ret==0) [ 584.632964][T11072] netlink: 'syz.5.1528': attribute type 1 has an invalid length. [ 584.684110][ T5118] usb 5-1: USB disconnect, device number 20 [ 590.277433][ T5118] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 590.482667][ T5118] usb 5-1: Using ep0 maxpacket: 8 [ 590.564526][ T5118] usb 5-1: unable to get BOS descriptor or descriptor too short [ 590.626769][ T5118] usb 5-1: config 4 interface 0 has no altsetting 0 [ 590.812740][ T5118] usb 5-1: string descriptor 0 read error: -22 [ 590.825328][ T5118] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 590.850647][ T5118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.884782][ T5118] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 590.943851][ T5118] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 590.998263][ T5118] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 591.021755][ T5118] usb 5-1: media controller created [ 591.056211][ T5118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 591.156617][ T5118] zl10353_read_register: readreg error (reg=127, ret==0) [ 591.428999][ T5118] usb 5-1: USB disconnect, device number 21 [ 594.421758][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 596.932440][ T787] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 597.122845][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 597.146141][ T787] usb 3-1: unable to get BOS descriptor or descriptor too short [ 597.206594][ T787] usb 3-1: config 4 interface 0 has no altsetting 0 [ 597.235004][ T787] usb 3-1: string descriptor 0 read error: -22 [ 597.251714][ T787] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 597.273438][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.328936][ T787] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 597.374331][ T787] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 597.411557][ T787] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 597.442486][ T787] usb 3-1: media controller created [ 598.035894][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 598.093896][ T787] zl10353_read_register: readreg error (reg=127, ret==0) [ 598.272091][ T787] usb 3-1: USB disconnect, device number 29 [ 598.327607][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 599.662651][T11215] netlink: 'syz.2.1563': attribute type 10 has an invalid length. [ 599.783566][T11215] batman_adv: batadv0: Adding interface: wlan0 [ 599.789997][T11215] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.817158][T11215] batman_adv: batadv0: Interface activated: wlan0 [ 600.987242][ T95] block nbd1: Possible stuck request ffff888021a48000: control (read@0,1024B). Runtime 60 seconds [ 600.998683][ T95] block nbd1: Possible stuck request ffff888021a48200: control (read@1024,1024B). Runtime 60 seconds [ 601.009910][ T95] block nbd1: Possible stuck request ffff888021a48400: control (read@2048,1024B). Runtime 60 seconds [ 601.035185][ T95] block nbd1: Possible stuck request ffff888021a48600: control (read@3072,1024B). Runtime 60 seconds [ 601.754221][T11239] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 601.761479][T11239] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 601.814063][T11239] vhci_hcd vhci_hcd.0: Device attached [ 601.847108][T11240] vhci_hcd: connection closed [ 601.861073][ T42] vhci_hcd: stop threads [ 601.880899][ T42] vhci_hcd: release socket [ 601.887336][ T42] vhci_hcd: disconnect device [ 603.794535][T10703] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 603.809515][T10703] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 603.820337][T10703] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 603.828881][T10703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 603.837211][T10703] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 603.844833][T10703] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 605.864883][T11258] chnl_net:caif_netlink_parms(): no params data found [ 605.937968][ T5792] Bluetooth: hci4: command tx timeout [ 606.043180][T11258] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.050570][T11258] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.068367][T11258] bridge_slave_0: entered allmulticast mode [ 606.078600][T11258] bridge_slave_0: entered promiscuous mode [ 606.098688][T11258] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.108724][T11258] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.127534][T11258] bridge_slave_1: entered allmulticast mode [ 606.139982][T11258] bridge_slave_1: entered promiscuous mode [ 606.297945][T11258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.344963][T11258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.512602][T11258] team0: Port device team_slave_0 added [ 606.547178][T11258] team0: Port device team_slave_1 added [ 606.620934][T11258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.637437][T11258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.712350][T11258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.758749][T11258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.788685][T11258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.885882][T11258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.509930][T11258] hsr_slave_0: entered promiscuous mode [ 607.528494][T11258] hsr_slave_1: entered promiscuous mode [ 607.536086][T11258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 607.550450][T11258] Cannot create hsr debugfs directory [ 607.556583][T11293] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1585'. [ 608.013157][ T5792] Bluetooth: hci4: command tx timeout [ 608.660309][T11258] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 608.679807][T11258] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 608.703673][T11258] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 608.720089][T11258] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 608.853365][T11258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.899389][T11258] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.919874][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.927181][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.952814][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.959992][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.527795][T11258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.092758][ T5792] Bluetooth: hci4: command tx timeout [ 610.398772][T11258] veth0_vlan: entered promiscuous mode [ 610.461423][T11258] veth1_vlan: entered promiscuous mode [ 610.687186][T11258] veth0_macvtap: entered promiscuous mode [ 611.050175][T11258] veth1_macvtap: entered promiscuous mode [ 611.117647][T11258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.173217][T11258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.197152][T11258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.243595][T11258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.275695][T11258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.377821][T11258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.458338][T11258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.984003][T11258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.026633][T11258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.037713][T11258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.053394][T11258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.085423][T11258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.118085][T11258] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.141472][T11258] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.173806][ T5792] Bluetooth: hci4: command tx timeout [ 612.178662][T11258] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.225896][T11258] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.532150][T11258] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 612.562365][T11258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.617141][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.671139][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.879558][ T1298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.446417][ T1298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.254896][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1600'. [ 616.615224][T11384] tipc: Started in network mode [ 616.621527][T11384] tipc: Node identity 361a340518da, cluster identity 4711 [ 616.631217][T11384] tipc: Enabled bearer , priority 0 [ 616.640573][T11384] syzkaller0: entered promiscuous mode [ 616.653218][T11384] syzkaller0: entered allmulticast mode [ 617.628030][ T1186] tipc: Node number set to 784348165 [ 619.801518][ T5158] udevd[5158]: worker [10238] /devices/virtual/block/nbd1 is taking a long time [ 619.930556][T11376] tipc: Resetting bearer [ 620.150426][T11376] tipc: Disabling bearer [ 622.386172][T11435] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1622'. [ 623.367070][T11426] bridge0: entered promiscuous mode [ 623.374658][T11426] macsec1: entered promiscuous mode [ 623.380369][T11426] bridge0: port 1(macsec1) entered blocking state [ 623.386994][T11426] bridge0: port 1(macsec1) entered disabled state [ 623.393631][T11426] macsec1: entered allmulticast mode [ 623.398941][T11426] bridge0: entered allmulticast mode [ 623.406618][T11426] macsec1: left allmulticast mode [ 623.411717][T11426] bridge0: left allmulticast mode [ 623.418373][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 623.427347][T11426] bridge0: left promiscuous mode [ 623.654279][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 623.677086][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 623.688054][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.746092][ T9] usb 7-1: config 0 descriptor?? [ 623.964802][T11434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.974561][T11434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.661425][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.670101][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.051703][T11452] ======================================================= [ 625.051703][T11452] WARNING: The mand mount option has been deprecated and [ 625.051703][T11452] and is ignored by this kernel. Remove the mand [ 625.051703][T11452] option from the mount to silence this warning. [ 625.051703][T11452] ======================================================= [ 625.192758][T10280] usb 7-1: USB disconnect, device number 2 [ 625.299876][T11457] overlayfs: overlapping lowerdir path [ 625.332669][ T5841] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 625.572984][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 625.597447][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.613042][ T5841] usb 5-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 625.626208][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.665072][ T5841] usb 5-1: config 0 descriptor?? [ 625.975123][ T5841] usbhid 5-1:0.0: can't add hid device: -71 [ 625.987940][ T5841] usbhid: probe of 5-1:0.0 failed with error -71 [ 626.021351][ T5841] usb 5-1: USB disconnect, device number 22 [ 628.416524][T11494] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1640'. [ 628.425613][T11494] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 628.896496][T11496] tty tty33: ldisc open failed (-12), clearing slot 32 [ 629.043674][T11494] 0ªî{X¹¦: entered allmulticast mode [ 629.050595][T11494] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 629.882779][T11520] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1650'. [ 629.891870][T11520] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1650'. [ 629.905084][T11520] netlink: 'syz.4.1650': attribute type 6 has an invalid length. [ 629.939423][ T23] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 629.949582][T11520] netlink: 'syz.4.1650': attribute type 6 has an invalid length. [ 630.914664][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.925103][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 630.936372][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 630.954816][ T23] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 630.964790][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.977110][T11509] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 631.004895][ T23] hub 6-1:1.0: bad descriptor, ignoring hub [ 631.010982][ T23] hub: probe of 6-1:1.0 failed with error -5 [ 631.082133][ T95] block nbd1: Possible stuck request ffff888021a48000: control (read@0,1024B). Runtime 90 seconds [ 631.093693][ T95] block nbd1: Possible stuck request ffff888021a48200: control (read@1024,1024B). Runtime 90 seconds [ 631.106387][ T95] block nbd1: Possible stuck request ffff888021a48400: control (read@2048,1024B). Runtime 90 seconds [ 631.117386][ T23] cdc_wdm 6-1:1.0: skipping garbage [ 631.117438][ T23] cdc_wdm 6-1:1.0: skipping garbage [ 631.128524][ T95] block nbd1: Possible stuck request ffff888021a48600: control (read@3072,1024B). Runtime 90 seconds [ 631.154523][ T23] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 631.229883][T11530] netlink: 'syz.4.1651': attribute type 33 has an invalid length. [ 631.238071][T11530] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1651'. [ 631.343690][ T23] cdc_wdm 6-1:1.0: Unknown control protocol [ 631.973695][ T9] usb 6-1: USB disconnect, device number 19 [ 632.226481][T11509] cdc_wdm 6-1:1.0: Error autopm - -16 [ 632.642481][ T9] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 632.852750][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.889902][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 632.942665][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 633.023427][ T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 633.074865][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.297561][ T9] usb 6-1: can't set config #1, error -71 [ 633.421665][ T9] usb 6-1: USB disconnect, device number 20 [ 636.684863][T11627] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1663'. [ 636.695633][T11627] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 637.264768][T11627] 0ªî{X¹¦: entered allmulticast mode [ 637.270626][T11627] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 639.191947][T11655] usb usb9: usbfs: process 11655 (syz.4.1673) did not claim interface 3 before use [ 645.804525][T11730] bridge0: entered allmulticast mode [ 645.853333][T11730] pim6reg: entered allmulticast mode [ 646.312666][T11727] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 646.344286][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1703'. [ 646.605724][T11728] bridge0 (unregistering): left allmulticast mode [ 649.086989][T11757] ieee802154 phy0 wpan0: encryption failed: -22 [ 650.253028][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 650.337282][T11775] binder: 11774:11775 unknown command 0 [ 650.353234][T11775] binder: 11774:11775 ioctl c0306201 200000000080 returned -22 [ 650.369006][T11775] binder: 11774:11775 ioctl c0306201 2000000003c0 returned -14 [ 650.452543][ T9] usb 5-1: device descriptor read/64, error -71 [ 650.722682][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 650.922451][ T9] usb 5-1: device descriptor read/64, error -71 [ 651.062657][ T9] usb usb5-port1: attempt power cycle [ 651.214179][ T2932] wlan1: Trigger new scan to find an IBSS to join [ 651.524326][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 651.601166][ T9] usb 5-1: device descriptor read/8, error -71 [ 651.656449][T11794] nbd6: detected capacity change from 0 to 63 [ 651.678619][T11796] block nbd6: NBD_DISCONNECT [ 651.700038][T11796] block nbd6: Disconnected due to user request. [ 651.710466][ T24] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.715514][T11796] block nbd6: shutting down sockets [ 651.726146][ T24] Buffer I/O error on dev nbd6, logical block 0, async page read [ 651.756283][ T24] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 651.777801][ T24] Buffer I/O error on dev nbd6, logical block 1, async page read [ 651.785711][ T24] Buffer I/O error on dev nbd6, logical block 2, async page read [ 651.794393][ T24] Buffer I/O error on dev nbd6, logical block 3, async page read [ 651.882886][ T95] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 651.893064][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 651.901450][ T95] Buffer I/O error on dev nbd6, logical block 0, async page read [ 651.909777][ T95] Buffer I/O error on dev nbd6, logical block 1, async page read [ 651.918131][ T95] Buffer I/O error on dev nbd6, logical block 2, async page read [ 651.926087][ T95] Buffer I/O error on dev nbd6, logical block 3, async page read [ 651.934302][ T95] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 651.943401][ T95] Buffer I/O error on dev nbd6, logical block 0, async page read [ 651.951230][ T95] Buffer I/O error on dev nbd6, logical block 1, async page read [ 651.959469][ T95] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 651.968951][ T95] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 651.978499][ T95] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 651.988063][ T95] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 651.998520][ T95] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 652.008472][T10239] ldm_validate_partition_table(): Disk read failed. [ 652.016587][ T95] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.045527][T10239] Dev nbd6: unable to read RDB block 0 [ 652.061249][T10239] nbd6: unable to read partition table [ 652.083874][T10239] ldm_validate_partition_table(): Disk read failed. [ 652.105829][T10239] Dev nbd6: unable to read RDB block 0 [ 652.115394][T10239] nbd6: unable to read partition table [ 652.915822][ T9] usb 5-1: device descriptor read/8, error -71 [ 653.640408][ T9] usb usb5-port1: unable to enumerate USB device [ 653.692816][T11805] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 654.329263][T11817] bridge0: entered allmulticast mode [ 654.357753][T11817] pim6reg: entered allmulticast mode [ 655.275095][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 655.302636][T11818] bridge_slave_1: left allmulticast mode [ 655.316303][T11818] bridge_slave_1: left promiscuous mode [ 655.327809][T11818] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.405372][T11818] bridge_slave_0: left allmulticast mode [ 655.421562][T11818] bridge_slave_0: left promiscuous mode [ 655.451521][T11818] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.653767][T11818] bridge0 (unregistering): left allmulticast mode [ 656.183226][T11573] wlan1: Trigger new scan to find an IBSS to join [ 657.934923][T11573] wlan1: Creating new IBSS network, BSSID 0a:ff:8d:00:00:00 [ 658.197014][T11868] binder: 11866:11868 unknown command 0 [ 658.224693][T11868] binder: 11866:11868 ioctl c0306201 200000000080 returned -22 [ 658.980988][T11868] binder: 11866:11868 ioctl c0306201 2000000003c0 returned -14 [ 661.003293][ T8] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 661.132634][ T95] block nbd1: Possible stuck request ffff888021a48000: control (read@0,1024B). Runtime 120 seconds [ 661.144323][ T95] block nbd1: Possible stuck request ffff888021a48200: control (read@1024,1024B). Runtime 120 seconds [ 661.155834][ T95] block nbd1: Possible stuck request ffff888021a48400: control (read@2048,1024B). Runtime 120 seconds [ 661.168374][ T95] block nbd1: Possible stuck request ffff888021a48600: control (read@3072,1024B). Runtime 120 seconds [ 661.246407][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 661.468108][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.650228][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.661861][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 661.675840][ T8] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 661.711741][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.779832][ T8] usb 6-1: config 0 descriptor?? [ 662.456810][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 662.482400][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 662.502871][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 662.527250][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 662.565835][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 662.606506][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 662.617785][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 662.627424][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 662.637206][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 662.650341][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 662.810476][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 662.856508][ T8] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 663.397227][T11944] vivid-002: disconnect [ 663.428491][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0004/input/input27 [ 664.087148][T11937] vivid-002: reconnect [ 664.379687][ T8] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 664.451505][ T8] usb 6-1: USB disconnect, device number 21 [ 665.062379][ T23] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 665.253946][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 665.262191][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.292605][ T23] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 665.320971][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.342643][ T23] usb 6-1: config 0 descriptor?? [ 665.610132][T11967] input: syz0 as /devices/virtual/input/input28 [ 665.738468][ T5856] usb 6-1: USB disconnect, device number 22 [ 666.449755][ T5841] batman_adv: batadv0: Interface deactivated: wlan0 [ 668.016596][T11999] netlink: 'syz.5.1784': attribute type 33 has an invalid length. [ 668.024685][T11999] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1784'. [ 668.158347][T12008] binder: 12004:12008 unknown command 0 [ 668.165030][T12008] binder: 12004:12008 ioctl c0306201 200000000080 returned -22 [ 669.148488][T12008] binder: 12004:12008 ioctl c0306201 2000000003c0 returned -14 [ 669.302613][ T27] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 669.562532][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 669.582517][ T27] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.594155][ T27] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.601297][ T27] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 669.616151][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.702934][ T27] usb 6-1: config 0 descriptor?? [ 670.611661][ T27] usbhid 6-1:0.0: can't add hid device: -71 [ 670.623331][ T27] usbhid: probe of 6-1:0.0 failed with error -71 [ 670.662923][ T27] usb 6-1: USB disconnect, device number 23 [ 670.695633][ T8511] schedule_timeout: wrong timeout value ffffffffffffffff [ 670.790188][ T8511] CPU: 1 PID: 8511 Comm: vivid-000-vid-c Not tainted syzkaller #0 [ 670.798082][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 670.808178][ T8511] Call Trace: [ 670.811495][ T8511] [ 670.814460][ T8511] dump_stack_lvl+0x16c/0x230 [ 670.819202][ T8511] ? show_regs_print_info+0x20/0x20 [ 670.824464][ T8511] ? load_image+0x3b0/0x3b0 [ 670.829122][ T8511] schedule_timeout+0x215/0x280 [ 670.834027][ T8511] ? console_conditional_schedule+0x40/0x40 [ 670.839987][ T8511] ? prepare_to_wait_event+0x434/0x470 [ 670.845508][ T8511] vivid_thread_vid_cap+0xaaf/0x10c0 [ 670.850879][ T8511] ? vivid_start_generating_vid_cap+0x510/0x510 [ 670.857195][ T8511] ? wake_bit_function+0x200/0x200 [ 670.862363][ T8511] ? __kthread_parkme+0x7a/0x1c0 [ 670.867448][ T8511] kthread+0x2fa/0x390 [ 670.871539][ T8511] ? vivid_start_generating_vid_cap+0x510/0x510 [ 670.877809][ T8511] ? kthread_blkcg+0xd0/0xd0 [ 670.882426][ T8511] ret_from_fork+0x48/0x80 [ 670.886871][ T8511] ? kthread_blkcg+0xd0/0xd0 [ 670.891486][ T8511] ret_from_fork_asm+0x11/0x20 [ 670.896287][ T8511] [ 671.473323][T12045] binder: 12044:12045 unknown command 0 [ 671.647072][T12045] binder: 12044:12045 ioctl c0306201 200000000080 returned -22 [ 671.668054][T12045] binder: 12044:12045 ioctl c0306201 2000000003c0 returned -14 [ 671.753482][T12051] netlink: 'syz.5.1796': attribute type 33 has an invalid length. [ 671.761464][T12051] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1796'. [ 672.702392][T12060] netlink: set zone limit has 8 unknown bytes [ 672.934076][T12060] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1799'. [ 674.089966][T12068] cgroup: fork rejected by pids controller in /syz5 [ 674.624354][T12068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1800'. [ 676.099413][T12060] syz.2.1799 (12060): drop_caches: 2 [ 676.389794][T12187] netlink: 'syz.6.1807': attribute type 33 has an invalid length. [ 676.397909][T12187] netlink: 51 bytes leftover after parsing attributes in process `syz.6.1807'. [ 678.682435][ T5877] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 678.902748][ T5877] usb 7-1: Using ep0 maxpacket: 16 [ 678.921927][ T5877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.193703][ T5877] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 679.203497][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.335329][ T5877] usb 7-1: config 0 descriptor?? [ 681.109604][ T8] usb 7-1: USB disconnect, device number 3 [ 682.104078][T12244] netlink: 'syz.6.1817': attribute type 33 has an invalid length. [ 682.112154][T12244] netlink: 51 bytes leftover after parsing attributes in process `syz.6.1817'. [ 682.988997][T12271] sg_write: process 1067 (syz.4.1828) changed security contexts after opening file descriptor, this is not allowed. [ 683.284400][T12279] binder: 12278:12279 unknown command 1074553619 [ 683.307719][T12279] binder: 12278:12279 ioctl c0306201 200000000040 returned -22 [ 684.741648][T12294] netlink: 'syz.5.1832': attribute type 33 has an invalid length. [ 684.749776][T12294] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1832'. [ 685.837898][ T8] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 686.074069][T12301] tmpfs: Too small a size for current use [ 686.112448][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 686.116455][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.124188][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.163947][ T8] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 686.212434][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.248992][ T8] usb 5-1: Product: syz [ 686.256481][ T8] usb 5-1: Manufacturer: syz [ 686.292166][ T8] usb 5-1: SerialNumber: syz [ 686.394067][ T8] usb 5-1: config 0 descriptor?? [ 686.448160][ T8] usb 5-1: selecting invalid altsetting 3 [ 686.469724][ T8] comedi comedi5: could not set alternate setting 3 in high speed [ 686.512500][ T8] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 686.533403][ T8] usbdux: probe of 5-1:0.0 failed with error -22 [ 686.671680][ T8] usb 5-1: USB disconnect, device number 27 [ 687.912043][T12334] netlink: 'syz.2.1843': attribute type 33 has an invalid length. [ 687.920143][T12334] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1843'. [ 690.045333][T12362] loop7: detected capacity change from 0 to 16384 [ 690.079342][T12363] IPv6: Can't replace route, no match found [ 690.615802][T12365] loop7: detected capacity change from 16384 to 16367 [ 690.804486][T12365] Dev loop7: unable to read RDB block 8 [ 690.810363][T12365] loop7: unable to read partition table [ 690.968415][T12365] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 691.214031][ T95] block nbd1: Possible stuck request ffff888021a48000: control (read@0,1024B). Runtime 150 seconds [ 691.225115][ T95] block nbd1: Possible stuck request ffff888021a48200: control (read@1024,1024B). Runtime 150 seconds [ 691.236392][ T95] block nbd1: Possible stuck request ffff888021a48400: control (read@2048,1024B). Runtime 150 seconds [ 691.248195][ T95] block nbd1: Possible stuck request ffff888021a48600: control (read@3072,1024B). Runtime 150 seconds [ 692.972901][T12391] netlink: 'syz.2.1857': attribute type 33 has an invalid length. [ 692.980908][T12391] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1857'. [ 699.678451][T12439] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1872'. [ 701.680171][T12450] tmpfs: Too small a size for current use [ 704.731045][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 706.173534][ T8511] schedule_timeout: wrong timeout value ffffffffffffffe2 [ 706.198596][ T8511] CPU: 0 PID: 8511 Comm: vivid-000-vid-c Not tainted syzkaller #0 [ 706.206478][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 706.216547][ T8511] Call Trace: [ 706.219836][ T8511] [ 706.222794][ T8511] dump_stack_lvl+0x16c/0x230 [ 706.227491][ T8511] ? show_regs_print_info+0x20/0x20 [ 706.232702][ T8511] ? load_image+0x3b0/0x3b0 [ 706.237224][ T8511] schedule_timeout+0x215/0x280 [ 706.242087][ T8511] ? console_conditional_schedule+0x40/0x40 [ 706.248004][ T8511] ? prepare_to_wait_event+0x434/0x470 [ 706.253486][ T8511] vivid_thread_vid_cap+0xaaf/0x10c0 [ 706.259152][ T8511] ? vivid_start_generating_vid_cap+0x510/0x510 [ 706.265421][ T8511] ? wake_bit_function+0x200/0x200 [ 706.270560][ T8511] ? __kthread_parkme+0x7a/0x1c0 [ 706.275540][ T8511] kthread+0x2fa/0x390 [ 706.279627][ T8511] ? vivid_start_generating_vid_cap+0x510/0x510 [ 706.285898][ T8511] ? kthread_blkcg+0xd0/0xd0 [ 706.290499][ T8511] ret_from_fork+0x48/0x80 [ 706.295277][ T8511] ? kthread_blkcg+0xd0/0xd0 [ 706.299877][ T8511] ret_from_fork_asm+0x11/0x20 [ 706.304668][ T8511] [ 706.339543][T12518] netlink: 'syz.6.1900': attribute type 21 has an invalid length. [ 706.357344][T12518] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1900'. [ 706.378737][T12518] netlink: 'syz.6.1900': attribute type 5 has an invalid length. [ 706.394151][T12518] netlink: 'syz.6.1900': attribute type 6 has an invalid length. [ 706.414409][T12518] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1900'. [ 706.462369][ T5841] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 707.530467][ T5841] usb 3-1: Using ep0 maxpacket: 8 [ 707.566795][ T5841] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 707.597610][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 707.606294][ T5841] usb 3-1: Product: syz [ 707.610596][ T5841] usb 3-1: Manufacturer: syz [ 707.621197][ T5841] usb 3-1: SerialNumber: syz [ 707.663496][ T5841] usb 3-1: config 0 descriptor?? [ 707.783830][ T5841] gspca_main: sq905-2.14.0 probing 2770:9120 [ 709.058996][ T5841] gspca_sq905: bulk read fail (-22) len 0/4 [ 709.081120][ T5841] sq905: probe of 3-1:0.0 failed with error -5 [ 709.289235][ T787] usb 3-1: USB disconnect, device number 30 [ 711.962629][ T5841] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 712.252508][ T5841] usb 7-1: Using ep0 maxpacket: 32 [ 712.277553][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.304455][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.321532][ T5841] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 712.331354][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.354116][ T5841] usb 7-1: config 0 descriptor?? [ 712.738292][T12570] netlink: 'syz.2.1918': attribute type 33 has an invalid length. [ 712.746383][T12570] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1918'. [ 713.317787][ T5841] ft260 0003:0403:6030.0005: unknown main item tag 0x7 [ 713.533630][ T5841] ft260 0003:0403:6030.0005: chip code: 6424 8183 [ 714.419499][ T8] usb 7-1: USB disconnect, device number 4 [ 718.713744][ T8] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 719.735320][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.756012][ T8] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 719.795060][ T8] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 719.804475][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.812970][ T8] usb 6-1: Product: syz [ 719.819662][ T8] usb 6-1: Manufacturer: syz [ 719.841299][ T8] usb 6-1: SerialNumber: syz [ 720.057276][ T8] usb 6-1: config 0 descriptor?? [ 720.433603][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.941573][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.971130][ T5841] usb 6-1: USB disconnect, device number 24 [ 721.392584][ T95] block nbd1: Possible stuck request ffff888021a48000: control (read@0,1024B). Runtime 180 seconds [ 721.404168][ T95] block nbd1: Possible stuck request ffff888021a48200: control (read@1024,1024B). Runtime 180 seconds [ 721.419047][ T95] block nbd1: Possible stuck request ffff888021a48400: control (read@2048,1024B). Runtime 180 seconds [ 721.430294][ T95] block nbd1: Possible stuck request ffff888021a48600: control (read@3072,1024B). Runtime 180 seconds [ 721.529550][T12643] netlink: 'syz.4.1940': attribute type 33 has an invalid length. [ 721.537654][T12643] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1940'. [ 723.502482][ T787] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 723.704885][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 723.727318][ T787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 723.762521][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 723.964663][ T787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 724.001717][ T787] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 724.050675][T12663] netlink: 'syz.5.1946': attribute type 33 has an invalid length. [ 724.059025][T12663] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1946'. [ 724.090900][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.375887][ T787] usb 3-1: config 0 descriptor?? [ 724.645596][ T787] hdpvr 3-1:0.0: firmware version 0x0 dated [ 724.765227][ T787] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 725.232891][ T787] hdpvr 3-1:0.0: Could not setup controls [ 725.239824][ T787] hdpvr 3-1:0.0: registering videodev failed [ 725.309107][ T787] hdpvr: probe of 3-1:0.0 failed with error -71 [ 725.392713][ T787] usb 3-1: USB disconnect, device number 31 [ 727.082878][ T787] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 727.405501][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.735789][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.746246][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 727.759355][ T787] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 727.771558][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.872864][T12693] netlink: 'syz.4.1955': attribute type 33 has an invalid length. [ 727.880853][T12693] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1955'. [ 728.779812][ T787] usb 3-1: config 0 descriptor?? [ 729.205506][ T787] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 729.278320][T12701] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1958'. [ 729.294538][ T787] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 729.386171][ T787] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 729.520292][ T787] usb 3-1: USB disconnect, device number 32 [ 729.631547][T12703] fido_id[12703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 731.749933][T12729] netlink: 'syz.2.1965': attribute type 33 has an invalid length. [ 731.758111][T12729] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1965'. [ 732.782799][ T787] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 733.021246][ T787] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 733.767886][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.782573][ T787] usb 3-1: Product: syz [ 733.786812][ T787] usb 3-1: Manufacturer: syz [ 733.795338][ T787] usb 3-1: SerialNumber: syz [ 733.803020][ T787] usb 3-1: config 0 descriptor?? [ 734.202934][ T787] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 734.329595][T12752] netlink: 'syz.5.1973': attribute type 33 has an invalid length. [ 734.337860][T12752] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1973'. [ 736.288282][T12766] binder: 12765:12766 ioctl c0306201 0 returned -14 [ 736.695851][ T787] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 736.840319][ T787] usb 3-1: USB disconnect, device number 33 [ 737.013900][T12766] binder: 12765:12766 ioctl c0306201 2000000003c0 returned -14 [ 737.022476][T12766] binder: 12765:12766 ioctl c0306201 0 returned -14 [ 737.932545][ T29] INFO: task syz.1.1535:11094 blocked for more than 145 seconds. [ 737.940345][ T29] Not tainted syzkaller #0 [ 737.963826][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.004473][ T29] task:syz.1.1535 state:D stack:24496 pid:11094 ppid:5789 flags:0x00004006 [ 738.031579][ T29] Call Trace: [ 738.063509][ T29] [ 738.069976][ T29] __schedule+0x14d2/0x44d0 [ 738.109452][ T29] ? asan.module_dtor+0x20/0x20 [ 738.138070][ T29] ? mark_lock+0x94/0x320 [ 738.152044][ T29] ? lock_chain_count+0x20/0x20 [ 738.181594][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 738.191470][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 738.197782][ T29] schedule+0xbd/0x170 [ 738.202153][ T29] io_schedule+0x80/0xd0 [ 738.206756][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 738.213825][ T29] ? folio_wait_bit+0x30/0x30 [ 738.218785][ T29] ? do_raw_spin_trylock+0xac/0x180 [ 738.224489][ T29] ? _compound_head+0x120/0x120 [ 738.229528][ T29] ? compact_zone+0x44b0/0x44b0 [ 738.234998][ T29] migrate_pages_batch+0x1364/0x3430 [ 738.240540][ T29] ? compaction_alloc+0x2800/0x2800 [ 738.247424][ T29] ? compact_zone+0x44b0/0x44b0 [ 738.254799][ T29] ? migrate_pages+0x2920/0x2920 [ 738.260111][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 738.266286][ T29] ? __might_sleep+0xe0/0xe0 [ 738.271257][ T29] ? compaction_alloc+0x2800/0x2800 [ 738.277000][ T29] migrate_pages+0x2085/0x2920 [ 738.282521][ T29] ? compaction_alloc+0x2800/0x2800 [ 738.289105][ T29] ? compact_zone+0x44b0/0x44b0 [ 738.296018][ T29] ? folio_detach_private+0x3d0/0x3d0 [ 738.301735][ T29] ? isolate_migratepages_range+0x250/0x250 [ 738.308447][ T29] ? __pageblock_pfn_to_page+0xc0/0x3d0 [ 738.314644][ T29] compact_zone+0x21df/0x44b0 [ 738.319767][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 738.325569][ T29] ? folio_flags+0x130/0x130 [ 738.330690][ T29] ? sysctl_compaction_handler+0x8c/0x1a0 [ 738.337797][ T29] ? __lock_acquire+0x7c80/0x7c80 [ 738.343568][ T29] compact_node+0x167/0x2b0 [ 738.348389][ T29] ? compact_store+0x130/0x130 [ 738.354019][ T29] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 738.360022][ T29] sysctl_compaction_handler+0xf9/0x1a0 [ 738.366492][ T29] proc_sys_call_handler+0x45d/0x6d0 [ 738.379441][ T29] ? proc_sys_open+0x260/0x260 [ 738.384864][ T29] do_iter_write+0x79a/0xc70 [ 738.389995][ T29] ? vfs_iter_write+0xa0/0xa0 [ 738.400001][ T29] ? __asan_memset+0x22/0x40 [ 738.406659][ T29] ? iov_iter_bvec+0xd4/0x1b0 [ 738.411766][ T29] ? vfs_iter_write+0x6e/0xa0 [ 738.422046][ T29] iter_file_splice_write+0x66f/0xc50 [ 738.428055][ T29] ? splice_from_pipe+0x150/0x150 [ 738.437422][ T29] ? splice_shrink_spd+0xc0/0xc0 [ 738.442838][ T29] ? common_file_perm+0x198/0x1f0 [ 738.448262][ T29] ? splice_from_pipe+0x150/0x150 [ 738.457789][ T29] direct_splice_actor+0xe8/0x130 [ 738.463743][ T29] splice_direct_to_actor+0x2f0/0x870 [ 738.469451][ T29] ? direct_file_splice_eof+0xb0/0xb0 [ 738.485597][ T29] ? warn_unsupported+0xc0/0xc0 [ 738.490778][ T29] ? fsnotify_perm+0x5d/0x5e0 [ 738.500516][ T29] ? security_file_permission+0x79/0xa0 [ 738.511336][ T29] do_splice_direct+0x1b7/0x2c0 [ 738.543449][ T29] ? splice_direct_to_actor+0x870/0x870 [ 738.552423][ T29] ? rcu_read_lock_any_held+0xb4/0x120 [ 738.563614][ T29] ? do_splice_direct+0x2c0/0x2c0 [ 738.573205][ T29] do_sendfile+0x5dc/0xf70 [ 738.582092][ T29] ? __might_fault+0xaa/0x120 [ 738.594316][ T29] ? do_pwritev+0x340/0x340 [ 738.603532][ T29] ? __might_fault+0xaa/0x120 [ 738.614000][ T29] ? __might_fault+0xc6/0x120 [ 738.627022][ T29] ? __might_fault+0xaa/0x120 [ 738.669980][ T29] __se_sys_sendfile64+0xda/0x190 [ 738.703889][ T29] ? lock_chain_count+0x20/0x20 [ 738.708851][ T29] ? __x64_sys_sendfile64+0xb0/0xb0 [ 738.745048][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 738.750587][ T29] do_syscall_64+0x55/0xb0 [ 738.755803][ T29] ? clear_bhb_loop+0x40/0x90 [ 738.760762][ T29] ? clear_bhb_loop+0x40/0x90 [ 738.765896][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.772056][ T29] RIP: 0033:0x7f50f5b8eec9 [ 738.776948][ T29] RSP: 002b:00007f50f6aa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 738.786025][ T29] RAX: ffffffffffffffda RBX: 00007f50f5de5fa0 RCX: 00007f50f5b8eec9 [ 738.794694][ T29] RDX: 00002000000000c0 RSI: 0000000000000005 RDI: 0000000000000006 [ 738.808698][ T29] RBP: 00007f50f5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 738.853625][ T29] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 738.861740][ T29] R13: 00007f50f5de6038 R14: 00007f50f5de5fa0 R15: 00007ffd3082cd08 [ 738.908678][ T29] [ 738.928019][ T29] [ 738.928019][ T29] Showing all locks held in the system: [ 738.973118][ T29] 1 lock held by khungtaskd/29: [ 738.978047][ T29] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 739.034836][ T29] 2 locks held by getty/5550: [ 739.045494][ T29] #0: ffff88802c97c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 739.072467][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 739.113219][ T29] 1 lock held by udevd/10238: [ 739.128670][ T29] #0: ffff888141ba94c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 739.163252][ T29] 1 lock held by syz.1.1535/11094: [ 739.174987][ T29] #0: ffff888023444418 (sb_writers#3){.+.+}-{0:0}, at: do_sendfile+0x5b9/0xf70 [ 739.248878][ T29] 2 locks held by kworker/u4:14/11573: [ 739.262590][ T29] #0: ffff888140a86938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 739.294678][ T29] #1: ffffc9000ba9fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 739.317067][ T29] [ 739.319541][ T29] ============================================= [ 739.319541][ T29] [ 739.335269][ T29] NMI backtrace for cpu 0 [ 739.339638][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 739.346855][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 739.356951][ T29] Call Trace: [ 739.360258][ T29] [ 739.363234][ T29] dump_stack_lvl+0x16c/0x230 [ 739.367952][ T29] ? show_regs_print_info+0x20/0x20 [ 739.373273][ T29] ? load_image+0x3b0/0x3b0 [ 739.377843][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 739.382837][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 739.389037][ T29] ? _printk+0xd0/0x110 [ 739.393231][ T29] ? load_image+0x3b0/0x3b0 [ 739.397770][ T29] ? load_image+0x3b0/0x3b0 [ 739.402353][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 739.408444][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 739.414459][ T29] watchdog+0xf41/0xf80 [ 739.418661][ T29] ? watchdog+0x1e1/0xf80 [ 739.423050][ T29] kthread+0x2fa/0x390 [ 739.427149][ T29] ? hungtask_pm_notify+0x90/0x90 [ 739.432219][ T29] ? kthread_blkcg+0xd0/0xd0 [ 739.436852][ T29] ret_from_fork+0x48/0x80 [ 739.441321][ T29] ? kthread_blkcg+0xd0/0xd0 [ 739.445959][ T29] ret_from_fork_asm+0x11/0x20 [ 739.450790][ T29] [ 739.454521][ T29] Sending NMI from CPU 0 to CPUs 1: [ 739.459791][ C1] NMI backtrace for cpu 1 [ 739.459801][ C1] CPU: 1 PID: 2947 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 739.459818][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 739.459829][ C1] Workqueue: bat_events batadv_nc_worker [ 739.459857][ C1] RIP: 0010:check_preemption_disabled+0x60/0x110 [ 739.459878][ C1] Code: 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <74> cc 65 4c 8b 3d 86 38 95 75 41 f6 47 2f 04 74 0a 41 83 bf 10 04 [ 739.459892][ C1] RSP: 0018:ffffc9000c1c7a08 EFLAGS: 00000046 [ 739.459905][ C1] RAX: 0000000000000001 RBX: ffff88802b6d28dc RCX: 0000000080000000 [ 739.459917][ C1] RDX: 0000000000000000 RSI: ffffffff8aaac9c0 RDI: ffffffff8afc63c0 [ 739.459928][ C1] RBP: ffffc9000c1c7b50 R08: ffffffff8e4a82ef R09: 1ffffffff1c9505d [ 739.459940][ C1] R10: dffffc0000000000 R11: fffffbfff1c9505e R12: ffffffff8a36c2a2 [ 739.459952][ C1] R13: dffffc0000000000 R14: ffff88802b6d1e00 R15: 1ffff92001838f54 [ 739.459964][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 739.459978][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 739.459989][ C1] CR2: 00007f06271b4198 CR3: 000000001a6b5000 CR4: 00000000003506e0 [ 739.460004][ C1] Call Trace: [ 739.460010][ C1] [ 739.460019][ C1] lock_release+0x155/0x8b0 [ 739.460041][ C1] ? batadv_nc_worker+0xd2/0x610 [ 739.460063][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 739.460082][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 739.460101][ C1] ? batadv_nc_worker+0xd2/0x610 [ 739.460123][ C1] ? batadv_nc_worker+0xd2/0x610 [ 739.460145][ C1] batadv_nc_worker+0x291/0x610 [ 739.460169][ C1] ? process_scheduled_works+0x957/0x15b0 [ 739.460189][ C1] process_scheduled_works+0xa45/0x15b0 [ 739.460225][ C1] ? assign_work+0x400/0x400 [ 739.460248][ C1] ? assign_work+0x39e/0x400 [ 739.460299][ C1] worker_thread+0xa55/0xfc0 [ 739.460320][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 739.460337][ C1] ? _raw_spin_unlock+0x40/0x40 [ 739.460352][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 739.460379][ C1] kthread+0x2fa/0x390 [ 739.460394][ C1] ? pr_cont_work+0x560/0x560 [ 739.460413][ C1] ? kthread_blkcg+0xd0/0xd0 [ 739.460428][ C1] ret_from_fork+0x48/0x80 [ 739.460447][ C1] ? kthread_blkcg+0xd0/0xd0 [ 739.460462][ C1] ret_from_fork_asm+0x11/0x20 [ 739.460493][ C1] [ 739.466218][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 739.466233][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 739.466257][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 739.466270][ T29] Call Trace: [ 739.466280][ T29] [ 739.466290][ T29] dump_stack_lvl+0x16c/0x230 [ 739.466329][ T29] ? show_regs_print_info+0x20/0x20 [ 739.466365][ T29] ? load_image+0x3b0/0x3b0 [ 739.466403][ T29] panic+0x2c0/0x710 [ 739.466424][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 739.466460][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 739.466482][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 739.466514][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 739.466567][ T29] watchdog+0xf80/0xf80 [ 739.466599][ T29] ? watchdog+0x1e1/0xf80 [ 739.466635][ T29] kthread+0x2fa/0x390 [ 739.466658][ T29] ? hungtask_pm_notify+0x90/0x90 [ 739.466687][ T29] ? kthread_blkcg+0xd0/0xd0 [ 739.466714][ T29] ret_from_fork+0x48/0x80 [ 739.466740][ T29] ? kthread_blkcg+0xd0/0xd0 [ 739.466762][ T29] ret_from_fork_asm+0x11/0x20 [ 739.466809][ T29] [ 739.473619][ T29] Kernel Offset: disabled [ 739.811421][ T29] Rebooting in 86400 seconds..