last executing test programs: 7m28.369129928s ago: executing program 1 (id=932): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x3f00, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 7m27.928972698s ago: executing program 1 (id=935): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="001120"], 0x0, 0x0, 0x0, 0x0}) geteuid() syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 7m26.134983629s ago: executing program 1 (id=939): r0 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x21e2f, 0x7f, 0x1681bcd7, 0x0, 0x0, 0x400, 0x0, 0x6}) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000400)={0x0, 0x4b37, 0x10100, 0xfffffffc, 0x32e}, &(0x7f0000000480)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x23dad, 0x0, 0x2, 0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x4011, 0x0) 7m25.926821472s ago: executing program 1 (id=941): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 7m25.71973924s ago: executing program 1 (id=943): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30}, 0x30) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 7m25.31031808s ago: executing program 1 (id=946): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) read(r1, 0x0, 0x0) 7m24.606312014s ago: executing program 32 (id=946): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) read(r1, 0x0, 0x0) 6m19.273848159s ago: executing program 4 (id=1424): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6m17.51877897s ago: executing program 4 (id=1435): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x26004050}, 0x4) 6m17.337405168s ago: executing program 4 (id=1437): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d03"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 6m16.268395876s ago: executing program 4 (id=1442): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 6m15.331240739s ago: executing program 4 (id=1448): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000200)={{0xff, @local, 0xfffe, 0x1, 'lc\x00', 0x25}, {@multicast1, 0x0, 0x4, 0x0, 0x0, 0x400}}, 0x44) 6m15.027829187s ago: executing program 4 (id=1451): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f00000008c0)=""/181, 0xb5}, {&(0x7f0000000480)=""/72, 0x48}, {&(0x7f0000000980)=""/92, 0x5c}, {&(0x7f0000000a40)=""/12, 0xc}], 0x6}}], 0x1, 0x2021, 0x0) 6m14.581963725s ago: executing program 33 (id=1451): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f00000008c0)=""/181, 0xb5}, {&(0x7f0000000480)=""/72, 0x48}, {&(0x7f0000000980)=""/92, 0x5c}, {&(0x7f0000000a40)=""/12, 0xc}], 0x6}}], 0x1, 0x2021, 0x0) 5m16.025390905s ago: executing program 3 (id=1826): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r0, 0x1) 5m15.926645723s ago: executing program 3 (id=1827): openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) open(0x0, 0x14927e, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 5m14.816192295s ago: executing program 3 (id=1831): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1, 0xb}) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020069"], 0x0, 0x0}, 0x0) 5m7.63849735s ago: executing program 3 (id=1838): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 5m6.678244951s ago: executing program 3 (id=1840): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="ebe3a047e299f4e376fdba128280b37221", 0x11}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5m6.36380525s ago: executing program 3 (id=1842): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000001, &(0x7f00000059c0)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 5m5.835887735s ago: executing program 34 (id=1842): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000001, &(0x7f00000059c0)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 1m18.064677367s ago: executing program 7 (id=3509): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file1\x00', 0x4e480, 0xe7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) 1m16.990056261s ago: executing program 7 (id=3520): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x80) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xa0000009}) poll(&(0x7f0000000200)=[{r1, 0x1}], 0x1, 0x8001) r2 = fcntl$dupfd(r0, 0x0, r1) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0x101, 0xc00002, 0x2, 0x8000, 0xc205, 0x3, 0x0, 0x0, 0x2, 0xb9b}}, 0x50) 1m16.743765054s ago: executing program 7 (id=3522): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x5, 0x12}, 0x9c) r0 = syz_io_uring_setup(0x61bc, &(0x7f0000000840)={0x0, 0xf48d, 0x10100, 0x0, 0x10000004}, &(0x7f0000000900)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x51, 0x0, 0xffffffffffffff9c, 0x0, 0x0, r3, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m16.41373943s ago: executing program 7 (id=3525): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000000080)='./file0/file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 1m16.30161757s ago: executing program 6 (id=3528): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0xffd3) r1 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000079c0)={0x2020}, 0x2020) 1m16.080423967s ago: executing program 7 (id=3530): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) unshare(0x68040200) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x40, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x100, 0x1}]}}}}}}}, 0x0) 1m16.012666382s ago: executing program 6 (id=3531): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) dup3(r1, r2, 0x0) 1m15.854616295s ago: executing program 6 (id=3533): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x80ff, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r1], 0x38}}, 0x0) 1m15.676681175s ago: executing program 7 (id=3534): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) syz_emit_ethernet(0x66, &(0x7f0000000740)={@broadcast, @random="9d6f61fa0500", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}}}}}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841) 1m15.377100668s ago: executing program 35 (id=3534): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) syz_emit_ethernet(0x66, &(0x7f0000000740)={@broadcast, @random="9d6f61fa0500", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}}}}}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841) 1m15.364290792s ago: executing program 6 (id=3537): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m14.406138981s ago: executing program 6 (id=3544): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x88) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x8, 0x2, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8], [], [0x0, 0x0, 0x1]}) 1m13.702293808s ago: executing program 6 (id=3550): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 1m13.240450212s ago: executing program 36 (id=3550): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 7.044477165s ago: executing program 9 (id=3963): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x101) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 5.467721626s ago: executing program 9 (id=3967): unshare(0x6a040000) syz_pidfd_open(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000a004e2300000a11ff"], 0x10c) 4.724443106s ago: executing program 5 (id=3970): r0 = syz_io_uring_setup(0x13f7, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffffffff, 0x21a028b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) 4.684357011s ago: executing program 8 (id=3971): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010001fff010000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e0001006970366772657461700000002c000280140006002001000000000000000000000000000214000700fc00000000000000000000000000000108000a00", @ANYRES32=r3], 0x68}}, 0x0) 4.317678807s ago: executing program 5 (id=3972): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.952102424s ago: executing program 8 (id=3974): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.930463956s ago: executing program 5 (id=3975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002840)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x8}, {0x7, 0x3, 0x801a, 0x6, 0x1, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.454336834s ago: executing program 8 (id=3977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x5, 0x0, 0x0, 0x615, 0x3, 0x4, 0x3e, 0xa, '\x00', 0x7, 0x3}) 3.250535193s ago: executing program 5 (id=3978): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 3.222999896s ago: executing program 2 (id=3979): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x1000, 0xfffffffb, 0xfff, 0x49, 0x0, [{0x8, 0x6, 0xe, '\x00', 0x6}, {0x0, 0xa, 0x5, '\x00', 0x4}, {0x1, 0x7, 0x1}, {0xc7, 0x3, 0x5}, {0x0, 0x5, 0x13}, {0x9, 0x9, 0x7f, '\x00', 0x10}, {0x6, 0xfe, 0x8, '\x00', 0x38}, {0x6, 0xfe, 0x4, '\x00', 0x5}, {0x3, 0x4, 0xfa, '\x00', 0x6}, {0x60, 0x4, 0x6, '\x00', 0x5}, {0x5, 0x7, 0x8}, {0x5, 0xb7, 0x7, '\x00', 0x74}, {0x6, 0xf, 0x0, '\x00', 0xd2}, {0x9, 0x80, 0x7f, '\x00', 0x5}, {0x5c, 0x1f, 0x9, '\x00', 0x7f}, {0x8, 0x40, 0x7}, {0x7f, 0xc, 0xf3, '\x00', 0xfe}, {0x0, 0x1, 0x3, '\x00', 0xff}, {0xb7, 0x6, 0x7f, '\x00', 0x4}, {0x1, 0x9, 0xa, '\x00', 0xd}, {0x1, 0x2, 0x1, '\x00', 0x4}, {0x7, 0x4f, 0xf9, '\x00', 0x40}, {0x4, 0x8, 0xe0, '\x00', 0x40}, {0x6, 0x6, 0x98, '\x00', 0xb}]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d54549b}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.863903697s ago: executing program 8 (id=3980): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f0"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYRES64=r0], 0x0) 2.726062117s ago: executing program 0 (id=3981): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 2.715179694s ago: executing program 9 (id=3982): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) close(r0) 2.634125617s ago: executing program 5 (id=3983): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r4, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400", r4}) 2.275720181s ago: executing program 0 (id=3984): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) landlock_restrict_self(r0, 0x1) fcntl$notify(r2, 0x402, 0x8000003d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 2.11663519s ago: executing program 0 (id=3985): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f00000004c0)=""/21, 0x15}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000380)=""/57, 0x39}, {&(0x7f0000000600)=""/223, 0xdf}], 0x6}}], 0x2, 0x60, 0x0) 1.880940479s ago: executing program 0 (id=3986): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.762175342s ago: executing program 2 (id=3987): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0xfffffeef) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x3, 0x8695c3813a9bd78d, 0x0, 0xfffc, 0xbad, 0x0, 0x0, 0x0, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000b1c0)="02cbda572ec32cf73bdbc52bfa4e157261eb6cbd0d1d50c9d937a19739fcb9f8697bf69c0e2e526012185f1b86989056f9c2d38906e8a47b9b5fde55a777a6357ac40c211de6325f496fd86dac09bb38b62b37d715d06e3c61b172aa4a662cefc7810ba37161c637a9b56a7c7b022426826076f1d2bf3c3b6f92ab9c27d691385c3efc354f1423d01d6a49d534fca3f2bf518cd645cf18b4ac2d2ac4c5c29ba487c9d27bb488a73146d5b9e21427af37dee4a276646eb2519e4f6c76cce2f7bf7e708d5180959f71d3797220101849c5144ef8338a5a2079ecce466000cf290d4df42e82865512fb5fb01fb655613cf1c469682edd86a4bef86aa23240ca6a2ff38b59339f7530e8a8027aee0628e0f81b2f5c661b149d780f20ec54c8d3d42c0c49f83b1c0d4bec94bc9221e6fc7c75ebd3b68081df207721584055baeaf6429616d57cb35d2977d45971d209e4c45dfe3c5c105e0e2b49fc8685b4945f31c9468f3c950fcf70a8f45e5a3be62f73c228a6a34a99b6f584b42c50506a6c14187f44887270011cc98d7e5e258df533411c8d39bfa9e27014912ed9e9696fd4074fbefcd4817a344be5ea348f4a7a34733a5bc5674b1bcd39404d5a458d1e19b6d4bdb4e23403154249b5798dea7b60bbf0c09c25027a4efd49d36cbe65b7450c0bde580d356ad4e3cc7a9a57e6ac0b542592617869e57d9bed28f0590241bdeb51fa775aa8806a55df2c795a61146bdbe38eb7a716180bb9b728696bb0e78ff11f89b17c7e7fe9b14ea976ccd9991f01f5d0c4620053d0b5ce42af76591fd0706494b91a6dfc43560f9a9538ada19825ffe3a7cc7a56b755d46ae1189b1f1ac729d9938ad48a066624c1b28003a9d193b4b34c4ab2609949df96f693389f27dd3e1f42b178eb17079c1448d7e9fac30ddb53ce8e5a157db8296cd3069d332bad0528ae56a6db41ba84699b85f225a78a33879512a5f0b795fc58957ef6766afcf546fe36c8125276eeaac9d647b2459c164aae86a2703e85d4f552a0647cb4bdfaecf6ec3a264a6b6892a9a1ba08a9055e98b49edc4e1f8010f63f601a8251921df70e15011116c471a70a0580b1789bcff471dcc95ad209a44ca2453d58d3ea4c71e0383db68adf332a497a84faada33f18bd3cd79ff9d6809409769b02a66cf524534ab7134e3066eef904d8961195d9cdc396a012bb3bc1b1ccd60317d08cb059174642aa3f60584e58e7417c1736f6863fae9e7103158711167a53d7d5deddacee6958fd4c2e0672b8dd90b41512b1f59fc49099633860dd6902c1df3d5924b1cf81ec848d51129b3eddea619129e961390d65d2243d400a1e30e524eeee1a701da5e21598acf457947bad693892a2989097ecbe9607a33ffb33425ccac5e19ebd1f88bf3acc03331adf9697bed04b33ac9fceaa3bdc9a417b12108e10f9c45b6d36181099056a448689da4ef68beee35f5930ce4a5712cbed98239a674c5883d6a5e0df9c1cbe1eda8dc19d14c4abe896e3b28bb3d4b2a0e9ae31ca07b9819825f3a6ab82c5501becf023a656cbff569dbc3035ae3c585747fb459581629051286b170b679b683a0b2eea6ef3b41a68012e5f4d64f689c2b909cfd06d37c0a802be2d882351bffeddef1373d8cbafa10fefbc28b31a70b6e912fc61257aa76a0f0dc1d3ef72d2f61517a359053c3dcb7d49d8a4da61bcf3b3dafc0528bb037cec0d986b3949fff38a21dab6b8a3a167bacf067c5f7842ebebcc1bd54776b2e54a098303c6331beb16e42d0669a518af2d173405786439d739b813c145c4f9f98a537b1065bf4636c76e38b71943815a6d1227d0a6965dffc37c00444aebd2ec19286b83443902dba1354a69377e97070a79151e64711111bf3e0a755b0fb1a1d5d009fdf61b665b41a3b7dbd0655236360141c52b93bc907b0672743973c30d6c9ece47fa1fe3625cc8acbe305156012ef1c5ea140be70b804887be593f25faa13ee4ea2d9821d23c3e047d74ad4f7de4d95d275ea3e6c87479f1badfcef002ebc7020b581a096abac1a80ef6ff476a01b01f7c0fb1239fcc182f74e5b5965412c0f4170432af15daf457143b1f41422b8a7f9b81c15a156ddef9af95955090d013cd52aa66ebfbc87c8030e7f86b52aadaa2e63c261185eed7c46b5f8d56e8301a9cc1578aff77b42419a5eb2e263207ef259f4da6ca6466ac9326a633b39e005028c07c9aedf17a70e638d7ed84638406e6028be879fd0fe491152e181d5527933950eb67a52cf155d5c845a6425e41a47b44d9905de26e5132c8d594c1bf6d4f12dbcb96d7431a56546800275623679d6c189e0cebd1fb8063140b89d42da60ed06206d329c29841e69c820428bcde53c998bee0380a816d080b36f64574718b84e0ecafbfd2b9981f4886df258dbf1cfdb148b171516500572a7086516fd519bc861878ec2fceb6872229ff1e9782720e590d8ef4691fa9c4c54bfcc843015913a2ed40bf37048151d17b44365f7f8d3b816d1b1cd40dc5dda6ab8f637b5f6bae92580f1c269c9231c9a79d58d43208be7622147db352b1294260eeab12409f5b5ee94d99548640634bc9479a6e6e06cc8838bf85d9bd95452eaf8ad3cf6c070aac36a7d38fe23cebfaba46c74a6c5c98b1b5243edfe405161b8c3ea0cdb1bcb4e1041fc62451a6094b0c56ee2ed29520b87228959bc01a9a9f54d214704bd321b152a0e88d0646e99a92a390dfa6bc2c34d418e5e900a3b641ab34a5fd8de751bfb3253b7aae3948d871892d7b76b351b073a93f3ad82b0c59bc49ed922c8d63f8d12c14ce1912bf877bc7877f619b03d09200836c775675e0614efabfd5665c3bf12e6131a7232639729b79ac1c5e807246d30934b0f63b31a06c4722278299949c7785d796b6d3d4a5f2fa652b7fe8be447cafe93fcb07167f3ef16b94261fc3a9d22a57a7aac56562a231d79dbf3bdc1f436206337ff0f8e019d76b823c5976ee23ba4e553ec62d261bdc7da90fee46d3472cc267a7a74b88112ef765091df03bb59cf303feaa0149b371a7bdd75c0187ce842dd1e4cdaf7fc0f5ef7ffb559c535f19100ba653728cd936987731d5ac99cb9ef772975b17b2aff8b872df0d189c7944d63ed66cfce8ee92e7a1082c2a501007aacbe0011e6c32489bcb888e1c464bec59902d940d81136c543098a60104bcfd0f4e7c27cb114ff42e8d31fe09a4bcc21cae5ef2f8e4890bd8139fff1b1b2a39e29eaf2e5d2fb810ea37a13e6d2105a6c2ccd03fc110c6f9063e2433e1450dc8ebd8ede0445af662cf7ee705003630ab7d9fc6ed30169ed674dda2802d519e3b49016c6f11612ae53230b062281ddf7a678784516c3d177857f8bdbec7910af8c81333e471bd8a973ce858a14756ef6ec85498714fe8e1e6600023804004b968eea42c410bf0f5c5b2471835454f20230a6d342f96f71a2e64f54b838e5cd939d7a651d402fd60a8a2a081de0c536d5b81345d92165e79fa65140b91c23cdb5829db55f1f93b88bb43a355e9304a17355851d52c0d745b611a30eb400044dce6ac742bcce9df9583b827514af8a2ed4a04553817ba6ea22e9beaba65d32189a5c2bf65a09d2c8a8798c0645fb24157a4e71be7889fe65c34869d8852b21661407feed92afb0bfe582693a21c050e5adce1fe97755b0be276c36b81b89700b99d23d315a64f7e115eacdb3ade725cb3cfe36c27a5e2addad60290b022a9fc26132b5ec3b5f1d884399fd992525a3e17e18e7ee6078a64b7efc3bbd116e5c305d8ad935baff18ed94c7a8720e729132e110f986991a3ad21cc637282f55588b12756895e2d10afce85b1a04fc271b217278f156c7ffb1ed9dd52b18fc8b153802fc329dca81b278d715f6e31fbcc77d8ce5c2786573bacac30791aff5771fece44063d1e84abcd6a4ae016858893605eecf253c79e59c2152efbe9fdfee3c441e4bc9cb14fc96a675aa17bf7d2024d665fe3982b61888bbe7129a1ec8fafc3480170c71d05f5d22ef7ff0e2ca598fd02bbd0ad82e6ab0e775388bf3aa421c20b6a2a5e256386abff1103f46a8b5c54c2d54b81c50d8bd98aea724bda55f99d95956e939b85d59abdc50ea4cf1d44afa3e8dffc9d84c6b7d28b78c40d7498670602b97c5e2a6281c7876dabc1d14d156e827873818bc590644d2a1d084d39c84e78127b087bf2cd9353fd13d4ab12350318aedadaca6a2728267e6f5f16547caadf3ac2fade3c86b516c6ab53d61ea1c148835b9a2c91fd0ded7283ef720086dfc7728968924731715f78915045a69122d8b23a6db47cc6fccf402b9913e46c9a36924327ca9bba6bb8cf7cc80952501fc2181a2ec7ae4364cc6eac0cba0edda68f3b398a249d114702147f8b1cd9c7f8a15345f42a7a50334928eb4e2de974e4ae2ffb796bc640922f7ada0933460e0c0fc06276dfd228da9bfbbe5a3eade6f98594b0226339156022aad7aa8c9650417cb1551b3b6b31ce436396f68134a6ef23d6b926988fc410f81e1ae01282f244e70051f1b93644f78af3ef6359d106b291568e1ad00ad6ee102964fb7aaaec9732e43a21ea28cda496e4ae367ea738482e777290cca2ef61c8ff10c1b9546b5d395d21c98542f37578d297c13899247a6fdcdf0b8cba6b498875926a19852f97ef60dc1a0c4069fdd4d1fb87a6cd58b8786210687d644a4bad6f8fee0bc5fb94294cffc323e97597be6a5e457a5dd27fe2ebf5c34aef3bb5c43ba0a7d931e7ab02b7c290c5d04a41c01d14d6fc1ba80bfedf71caa0f7e59b135fad73e28d4861d601f79ad32edc6f8d1978d8ecf787f3c9ac71b2404939827b16f3915c8b1445dd1ec012aaeff88789c396665a50df52b244ce5b100d9a29ce52903b8f7f3662c0d0599fd1a7071798b759be02d58e5c6e4626b477653655fb7f5d7bc0ad94dbfe131c9ba5a994c1605c03b9f5173f8205c580bff685e693b23ab4cc7b2e4b21282b14f65684747ad98c0d855a205a6e17b5bb4c2b07097ae32393690e4e07a7f3e25d6bd01c1fb973a67edfa4e1d4a7a96b68570dd9d3bdfbe8a5a69adbd17167533ddbd2a58d70ca1ccea6428770dbcfeb47ddffa99e8b5e69bd34641c1f1a033e86215447fd2927482b12a85f11ae1d8b2054d7f642a9ba526e5a7d8e3d81bd394c264666f4b4dc3ff9c1584f277ff31a29c1358d9a953e0ae2822a3d174a0ce3da386083ae06f02723aea03931a38116a8e4afbc36fb9c094eb340214881a6f838f8d66141e451b9a1bd250363e591bc4ac566123a379272c08c0511e29e1dd1bc06869f3fd151bada9b28a6a71970ae3580d5bb0ab76b38068f504659bc335be1bb2a285329f749303600211d6ef7e151ad861b946d99f36d20074d65426f68a6758270ff946dd387ed3b150199fd81fd2e76a70a2fe2d7a2f8899079068ce48c5380db7e69a1a91f244ed32400e8d9e3097ec2065570dbde88faaee4a938f0b4cc20f31f175df62bf6cd88968ef7e24912dbbf91869eb9b34498d7f6000ef9a62c9441f4177ab5da1428d647b6e3cea1ca8a91b1a1246c2e048654e350cbf3dd4daaaa2558ff9c505ce0fcbcf93601a725289c38724290cffddf87e5345b43a66eb5f9fef718b0df4bcfe82c466017c3d8f0bbfd5544ff2d834a6e653ae789561df44281c8510b4bad838d04ab4a8e84fc4fc022bbe8454b36273cec843731c1df6fce42947a029f61e030990c0002b6f2c9c552227c8785c0b53683de3e518123548e332d25f2b270f595aad389951d1edbb9c6fb14cb4e479acff1ffac191da3d80a696b8be5919710c9137ecc0ca383d8666e30a356759a5299f44c2bfcd03a8df33de0e27d6038a9551cfc5ff43de0d42a6d033bf15f3a44d52f8a71554d1a2efb78042c1c9957256d7ea06b7751b40668feefff205c74f0f947ae0920aa746f17027bbef312708bf72fb23c12d0dcf6493584c1bdd0b5780017c038bc23fb6c25c560bb6da3775cf03502c07b987e64f8a2b84a870b5dd90c6aea7fad3d0a3ee46fda953dc085d272ee5855104b8bab8ed8bfd3338e75eb9ad8118f25c7e580fec613e30cf3eb7059e06d9be015709ba6c9de9dc9b6df8228b13f0439fa8d530aa9a4dc1d44abc3191c159a8816e7368fc5c6a0e57eb881d734c7a5459ba3be1b8a17b5ee6777ee42e962aee199f35ee2c2d4a39275e1dd6a8546daadc7ceab2c90667ad48c75bc7008ec2d7daa57562260d6d4509e67850e988b640569c050d3bedbd6c2de9b4f466e2d0c6f83c3c2392a5adcce1523e89f730a84f8cad28f84d1a0991f44aa4714f93088ec2a2836766d73569c7b0c1f70a067a3f0dff1d01661937aecb39e3d0f8e0ea282cffebbfdac63196eb13c4e53f144fc66a82cc0590f1d6d249c333420c24db92177c89cf0869346c34147dab6c3b94c325ef635d0e6d75c23906e71a7940e13364aef81b97108a4b209d372558d3bb0424ecb6a9a9ee28f7d1585c8af6f1256c812eb48515feda309a08f1a2954039ff0a60a2ab75717d2eb93024586837e552942eb63e0d6735d01258eb4dac6209370c109c1a1763dd742f3551276768648919f9093fd4e0cedff9442ac404e463eaea0ffe58a5085c987c093fd30e121218123457916ced3a7250a796a40451a4729125bce2ba5b6406e6626ecfb1d3f16287ba238feb575f60eba96443c60252d5927b81b73574ff1b7d424623b6cff5ce0d1b31b3d199c85da27f8736d990063f09dfef93402d880b2c5d7a9cdf45cbb4d1baf95be490f3dc9998c2c7ccfcc6e6395e7e09e6c44865834cd3e0968ffcc1d0f54406b55a8952cd8096e8968cdca3632b71546192c76472a66c4a8584eb748c1b3c30d52e8699adbef91329aefbf94d251d0b82bf42a648f73020881a914ea7c529802772b4b60617e9c1d9712a31d0ec3e92af4b97f50ec96e794486101a9e15daf8b7f13078d22767dc3b57bc0431ef39b3ca12b2932aa585bc856e8cf5496d78eaa50f06b483f416b31f78767bd25e260042e84c10e9cf9bb53a3f4fce11d703e90004949b55044907242f8eddef627cfc9642f4a828476074c298ea2d7b07ddb7b4a2b9f8f1e5a32fac7d105c5a12186da19ef5f6475763ee19aa670e7b45f37248fdfa796d6ae761dd77955851faa33675ee22e8174e0a126ac58b9998ccb5e4d12c3e00165533ddf710bf0ab0edf6ba1fecf9548ca1618fd980a4f9a35eeb5c1aa329a288378b9b5ed54b56075810cd22abf0c06ce0f1054805410375d6e41564b71b86cab6929c5c1cedb72e0b1237fdad44edbcfd326312caa49ed0c8f7c5a33986c89245fec75d0f9a34f744bf74d6e0f901c12ea25edd60c43d22f6644fa294534cac1c581b0cbf5d9765fc18fe6c223dcff4a85c7eeaf4cb1a9a889c236778b85e69d50d482743664bdeade11b4ced78c3d0b62ba07f98a898c6e89241ed6522fdfc430b75593673d43d695082b0114b25f231c8a141be953290b1a3855adc0146adee0b784fce2cf8243838bdcdbcf4e0dbcc2a9945deea1d02858a9e9dc54f0e818b81d024bd9b2e052a73fb59d037ab526c78faadfcdecc15f2a1d843e84aabc403e84b2fefbfbec982f22b89a2be560002d45ae12a8a2d00f0a3f55e26789a593fb8bdf20efb8a51e3d0dad9ad2caec39ea7392c58eebebc7201c78276f0127e43d5c8efef6e17ca522d69586a9e096efe80844c38841640238584936d8a96c0ba41dc0dc96a11623ff1e70ef54a9c43ec3cd0359dfdf55c8f8c306110d833d7de7a35f015369bf6d92b3b6f0f7dc717c84e51ce475df451b9a6a91c8d564aeb389267082b9cea77f09c6c6490084da3820f80d3e62bbd41a6540591c6c5cf2a18e4e829b82a6780b6b1f66d96fcfb1639a335a78f8c3ecf381148b2625859e514d35eb8c4acc98f7f8220e1827d7745f1f054691eeb1625e2d238ae03c93991058c1567be4938de2e60537749ee81f327f1f1e586ee3af4ccf53b29741c1bb0e774a1d27672ec27b43719d3710e9fd8634213738d98844717c8b1f707bd42f4077c9e59eb539f9cb32c11b47bcb7cb3efd3bf4994e90166a5ae380c821d2640fa99df59978e9b7e50f0b830943de787b1bf99e14edcdfe8565556ae2a8c0552d67898fd13551c007eb779edb60e85210a418cf0a4a41764fe9ece74f5d8000d168fab61588c5549113e8d8a059f17699d976fc7dc68cfd0ec404ef0c7eca459fbad1c40317d81b95a94b037cf96ba677697cfdce4c2c4e02cea296f25e556c02381ca891ddb6adcb0535e262b26290000c542e7616d63b211c16f86048079ca5167598aece3288f86658249e939cb6b59b6cdd3fce0e9ea81a3bb3f88908c600ea031b0028f12632d7ac2f81e54f7e7eb70ba70bc937571b242c4ef228f801b6a4376d11eabadaebb1322823eb30faf6cf21a8b38a769824e8b7009ff278f80ac2af39f0943a29458d127eabae81d2915557b09e3c49f8c22564edea93e8717306fb198dcc92eb3c9212f03dac94fa3fa1fa4e1dbd2119e024639f0ddc87cd906d3317c6ebc6e698257f73912ff46fe8d9adbd3f57ecc78cea5c1eb04ac5fd1bb79a53921fddaffd2d34f444b54208096cbd2aa3e26ca01359b05c10ff36e98e1ac97d51380c99e1b685928eced0d2f1e754001e7023d2473596feb7c7601619277dd7e844bd5544e7e360f8e4223fbd9e24b3fb69a34ced39bf7590fb853e44031d075fe647190ac7811522c73a6c6033457c14c415e4a84663d2540784a1cbb4a398f1d8612f4f3d334576c99d5721bbeac95cc34d18080e3b1365b6844152b8259c8d4618597f291f2b9e8812ab7729e108a8d44487f8993faabf6c6a8f49db727f17cdfec43b34c39cfdd3916fa6953e34f316100368c7b2836c11dcd4710986980356b7ec4ba23fab5cc5a8c6cacb61cc65570231407ca647946393031986cf4736280ed2d7976d66618fc240191455ae405f1d62145297179c040a707093fb8f60f5a3738b8bf78bbdf952478da7e9d3c892af5b83cd9dd4f00fcfa13beb9e6988e3c4b4e5300e3757a93efaef9023fb9d7442cb1a49d7efdec32ac1f98e6227cad38538f6383c3b6efca2fda7c101ec548c3549e7ac5e737478343ca47cdcd65acb71e0eade28c684b69785ae1fe31aaec713834b6635938d7d66426e965498978e4b467f6132daa6026c39dcbf95656b9be5c074badc18b5a74e12967b45e23099fa765ea5c8c18f0feae94755827e494f251ae96882b5c5f6d54713de02501faef1fcb59bf0d66f9d0cd3a493b139237aefdbd402a3df9dd5beb2887a055261a08047be52fa51f61636255870366e837f20d0f83b8557fa4a003647152ee27bd34b5af52743d4c431ff4a116ae1184c810e8397ef2a056845c6e3b5c0beafbf8f78488102412e04e47fb87be9a9ddc075ab519f424ebf821da659b18ae3b61a7b243ff94e3d1ba420cb342db7b8060937749892a7954d3ba5e63017703f5224602616ff6d3fec42444b2524f97dfa467d9db91681dce08de5ccb1ac2bf6cb5e6c1d586b2fc62e78b0bc23e1924a4f023adb39803fd6c3d52c40b13df9c6f54bb2b4ef88f5d0ffdfef13ae46dbf75aa6457da3bdc1781dc814b0b69debee7456aa7f75571caef87f624ef703fea75f136cc7f90af0ae558cf3de5e8cc92f3e803bd46e05f42e4167af8136db6982ad26a52778e1fefcbabe61a57f00cbf04e3c82445c04bbd8832b8bb9a7cb854a22f98cd7b422a7abafe6a00571539802e56f036d5a26d79a86cb100b90ae168d2406c2c0b9c5274ad69298e7983f4b30e006cf4882e90ca8af4e445dc06d0639231638dd39929065d920af913cc7284619fcacab0023893352468eec73d7014407e5d4bca9e49d412ffb12e68610c26206de0b3282e925b83389cbdfbc41cf279440a13838a1431ea4f1a371b6b143b914238773d171bc7b44c07729e8723fe51b8180fc9c9be6694477132cb82b22b2512518266781e687fcd460995ed581059d3c692ecbdc8daf3c76e5a5bc8e57973fed5fb3465a3dcb5557f92dba1e212f9bda66fc4829e10ce3e8b6c117b1214cb246211c861eaabf8ccaa94aedd58349399e619c2dc587719d7901d2cd85ced669d0ea898c4f127d1a4cf274aa0405d225605edf425dc9b7375c8ac2940bb369eec586097f0cc07940ecc8bd400976b9b36027a040be6e64a2fa4f7ba5d59ce9b4f76192d260d665290b20faa3a6a941939a0b3042ef4d8f9b980c71a13496b104965e1c3dab25cb46147bca6170baa0237c8a5cd1c437e43a50302490462585410f65e03186df5fc2c5bcd89f6d6a4ac34c971f0579070ab6e9a6a84159b2910a7ba797fb09dbd3ab88c23951b1a91df8cfc2d13de85dc715e2a111458acc4d640a59c199faa2bb28ec3309864fd8a6997ac89833853101a08198aa6ab3e5167b4e8e55843efae1ecd3fc6507f3a97bf2f8c4c4da4896c788a17a5fe8d8c3f79fe41dd7f4497380f1ffc8f8d6cc2c2dead697e4947cfe680a0e2b5100743444536134cde4378b0b1fe6ddc09dfe8d618f93edffeb7d097a37a19248be0bf9c4f536a484a5fc96f18f2eb4f6462b20bee241ce16b4790c854bca10914e3ba98eb0970765571a8ad45baba39d20b8c1bbb7c65717e265f5fc5edefb130aada09aa7f2c50c45de6de7327faef192977f499b7aed9e73c2ecb97f7256f89fc8b4834670f798438fac5a5045d61a7f429eba77de37517b984b0acfbd6f494a1414b0fc040244bb62a19150e0c15e5315b2618d05429263dd1847accc5de9baca08edc921ed9a0af00175c118ab801da9980098fc4a2bf16ba73e580000b49129a5fba00a1f2c45c0d0939be83ad93569dd61330913e8b381f9aff6d6a584862d636c1a4989dd3fd14853bf033be56f21a3cf1eb95d7df7c6436ff3d5a8f472bf4a3fa8b0b0741d953d9644e0ec801d4154336357d2d1492c6d336b9101827c1401898ecdca5a66c6f727d23d3ebb95530ecfee0f7649c221d2c131e56d37a8d422b0803ed0d623a2de36e9279c3c1c806654fbce9305cbb44210e282fa53c72f813440fd0cbfff492716c4a06cf99f4809481d51a03a88911f48f25db6784e16f3a251d5fb75fca164911e4a88d1b904b5372d8660d309f347dce2810552a4789af371f3e67418433cdb0d69a4fc562514cb396141f31312fab85f68c1ecd9d03ba37b40934535cc3e53c71a3a51663a479eca63dc5c15a387e5753cfa806402b6426b8dcaace2553d219b2ae02bd45fd4fde6e3e1bd6370d3e8d558aea69854381f1dad0fe2bbf1a73043f03aafe81c3a3d386c758abcb45cc537bf40d459e138f418802ec61abcad5e333389d74ea941eb5f26b25ed7642e0135fd8e3e2fc998613023dd5b804e2cf1a80ea60b353535b1446e3ebb542c1c15d87c6f5a4716455c8a9f52380161a5d23e9678417fe7ed64760e14c1390bcf73e1d531bb3548d7b9df25b6f85512667af396fad73110d1ab69a8ecdddaf29dc3701a5d927e599f5c2af293a6b276da7a5c917298ea24c2366d5e91593605fcbc4d6462", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x4, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0xfffffe01, 0x8000, 0xfff, 0x0, 0xee00, 0x0, 0xc3fa}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.size\x00', 0x0, 0x0) 1.71876496s ago: executing program 0 (id=3988): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x3, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x2, 0x0, @tick=0x401, {}, {}, @connect}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) 1.544331s ago: executing program 5 (id=3989): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f00000008c0)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.446272933s ago: executing program 0 (id=3990): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.338386173s ago: executing program 2 (id=3991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x5b, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x13c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x10c, 0x2, [@TCA_FLOW_ACT={0x108, 0x9, 0x0, 0x1, [@m_mirred={0x84, 0x1, 0x0, 0x0, {{0xb}, {0xfe04}, {0xd8, 0x6, "d980dc8c97069d87ac0890dd3e8b5fe53744906eb99a72606d4dc65b3071ff8d7581ea3e086dc8cdefbb33817181d71f92bf2f98ffa484b6edee0feb6b268607b8b542c2d11c310f985efa0a41aa2e970e4836e41161c085c1a908d63837c79dacc779ea3a46f84f859d7fda89dac89a4efd8db7828683c214bddfdf66fbf565e7f98a368a5bf074353234121689c3a4f8454b77ef769587d64917af338977014036a6b9e6f7bf7a872e9fd4fa4d3bd7c90ee2214ba299c99a759a662128ff66395d1ba9e13962fc3de5d678e77c2ea7dba5efbc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x13c}}, 0x0) 1.002602098s ago: executing program 8 (id=3992): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8500, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac", 0x21, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7fff, 0x0, 0x0, 0x40}) 768.347635ms ago: executing program 2 (id=3993): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat(r0, &(0x7f0000000080)='.\x00', 0x40000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0xd) fcntl$notify(r1, 0x402, 0xd) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 765.925636ms ago: executing program 9 (id=3994): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @loopback, 0x3b00}, 0x5c) 523.695857ms ago: executing program 2 (id=3995): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_submit(r0, 0x0, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 432.320196ms ago: executing program 9 (id=3996): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x2c020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000340), 0xffff, r3}, 0x38) 416.933659ms ago: executing program 8 (id=3997): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES32=r0], 0x0) 114.003875ms ago: executing program 2 (id=3998): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a80)=ANY=[], 0x77c}}, 0x8010) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000815) 0s ago: executing program 9 (id=3999): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80842, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000010040"]) kernel console output (not intermixed with test programs): 3][ T5886] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 519.295577][ T5886] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 519.330742][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3018'. [ 519.336054][ T5886] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.366067][T15342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3018'. [ 519.373326][ T5886] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.395657][ T5886] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 519.405097][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.419312][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3019'. [ 519.596668][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 519.650327][ T5886] usb 7-1: GET_CAPABILITIES returned 0 [ 519.668498][ T5886] usbtmc 7-1:16.0: can't read capabilities [ 519.787013][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 519.807946][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 519.850484][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.901680][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.951837][ T5870] usb 7-1: USB disconnect, device number 22 [ 519.980305][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 520.009666][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.037766][ T10] usb 1-1: Product: syz [ 520.045849][ T10] usb 1-1: Manufacturer: syz [ 520.062077][T15355] netlink: 'syz.7.3024': attribute type 4 has an invalid length. [ 520.065259][ T10] usb 1-1: SerialNumber: syz [ 520.117966][T15355] netlink: 'syz.7.3024': attribute type 4 has an invalid length. [ 520.527751][ T10] usb 1-1: 0:2 : does not exist [ 520.555285][ T5870] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 520.743823][ T5870] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.755238][ T5870] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 520.774448][ T5870] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65296, setting to 64 [ 520.793802][ T5870] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.819428][ T5870] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 520.845223][ T5870] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 520.865186][ T5870] usb 8-1: Manufacturer: syz [ 520.874269][ T5870] usb 8-1: config 0 descriptor?? [ 521.211846][ T5870] rc_core: IR keymap rc-hauppauge not found [ 521.234221][ T5870] Registered IR keymap rc-empty [ 521.266363][ T5870] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 521.318402][ T5870] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 521.359587][ T5870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 521.419094][ T5870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input57 [ 521.478677][ T5870] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 521.505426][ T5886] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 521.547351][ T5870] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 521.576224][ T10] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 521.578709][ T5870] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 521.628261][ T10] usb 1-1: USB disconnect, device number 41 [ 521.637437][ T5870] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 521.701969][ T5870] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 521.737479][ T5886] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.758896][ T8773] udevd[8773]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.760856][ T5886] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 521.789106][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.814118][ T5870] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 521.826370][ T5886] usb 7-1: config 0 descriptor?? [ 521.855389][ T5890] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 521.858669][ T5870] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 521.869451][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 521.911351][ T5870] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 521.945507][ T5870] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 521.975624][ T5870] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 522.008724][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 522.019392][ T5870] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 522.023138][ T5890] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 522.057910][ T5870] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 522.083017][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.099230][ T5890] usb 6-1: Product: syz [ 522.101336][ T5870] usb 8-1: USB disconnect, device number 20 [ 522.119576][ T5890] usb 6-1: Manufacturer: syz [ 522.124267][ T5890] usb 6-1: SerialNumber: syz [ 522.180115][ T5890] usb 6-1: config 0 descriptor?? [ 522.227757][ T5890] gspca_main: se401-2.14.0 probing 047d:5003 [ 522.306443][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 522.354208][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 522.388989][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 522.406616][ T5886] pwc: recv_control_msg error -32 req 04 val 1000 [ 522.630035][ T5890] gspca_se401: Frame size: 0x2 1/4th janggu [ 522.649774][ T5886] pwc: recv_control_msg error -71 req 04 val 1400 [ 522.660713][ T5890] gspca_se401: Frame size: 0x127 bayer [ 522.690631][ T5890] gspca_se401: Frame size: 256x0 bayer [ 522.700653][ T5886] pwc: recv_control_msg error -71 req 02 val 2000 [ 522.710749][ T5890] gspca_se401: Frame size: 0x0 1/16th janggu [ 522.721314][ T5886] pwc: recv_control_msg error -71 req 02 val 2100 [ 522.728403][ T5890] gspca_se401: Frame size: 0x4 bayer [ 522.754123][ T5886] pwc: recv_control_msg error -71 req 04 val 1500 [ 522.781554][ T5886] pwc: recv_control_msg error -71 req 02 val 2500 [ 522.817474][ T5886] pwc: recv_control_msg error -71 req 02 val 2400 [ 522.849095][ T5890] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input58 [ 522.863215][ T5886] pwc: recv_control_msg error -71 req 02 val 2600 [ 522.889669][ T5886] pwc: recv_control_msg error -71 req 02 val 2900 [ 522.926723][ T5890] usb 6-1: USB disconnect, device number 40 [ 522.936906][ T5886] pwc: recv_control_msg error -71 req 02 val 2800 [ 522.997959][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 523.035489][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 523.042069][ T5886] videodev: could not get a free minor [ 523.088580][ T5886] pwc: Failed to register as video device (-23). [ 523.107781][ T5886] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -23 [ 523.162646][ T5886] usb 7-1: USB disconnect, device number 23 [ 523.744096][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3043'. [ 524.280292][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3047'. [ 524.311098][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3047'. [ 525.587479][T15449] netlink: 'syz.6.3060': attribute type 1 has an invalid length. [ 525.841539][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 525.847850][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 526.898736][T15479] syzkaller0: entered promiscuous mode [ 526.904473][T15479] syzkaller0: entered allmulticast mode [ 528.075394][ T979] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 528.285270][ T979] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.313645][ T979] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.343896][ T979] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 528.367017][ T979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 528.375080][ T979] usb 8-1: SerialNumber: syz [ 528.640191][ T979] usb 8-1: 0:2 : does not exist [ 528.718896][ T979] usb 8-1: USB disconnect, device number 21 [ 528.810304][ T8773] udevd[8773]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.603083][T15521] binder: 15520:15521 ioctl c0306201 80000640 returned -22 [ 529.797712][T15527] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3088'. [ 530.697572][T15540] loop2: detected capacity change from 0 to 7 [ 530.710900][T15540] Dev loop2: unable to read RDB block 7 [ 530.717608][T15540] loop2: unable to read partition table [ 530.723597][T15540] loop2: partition table beyond EOD, truncated [ 530.738573][T15540] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 530.755064][T15536] syzkaller0: entered promiscuous mode [ 530.787022][T15536] syzkaller0: entered allmulticast mode [ 530.882114][T15544] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 532.157745][ T30] audit: type=1326 audit(1748339294.269:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15566 comm="syz.5.3103" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x0 [ 533.263678][T15582] kvm: Disabled LAPIC found during irq injection [ 533.655466][ T5890] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 533.706258][T15591] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3113'. [ 533.840975][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.856341][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.871243][ T5890] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 533.880597][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.899875][ T5890] usb 6-1: config 0 descriptor?? [ 534.355658][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 534.402869][ T5890] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 534.442082][T15598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.456386][ T5890] cp2112 0003:10C4:EA90.0034: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 534.532747][ T5890] cp2112 0003:10C4:EA90.0034: Part Number: 0x82 Device Version: 0xFE [ 534.913741][T15608] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 535.445255][ T43] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 535.488437][ T5890] usb 6-1: USB disconnect, device number 41 [ 535.645745][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 535.662824][ T43] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 535.681138][ T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.696128][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.708361][ T43] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 535.745377][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.768317][ T43] usb 7-1: Product: syz [ 535.792923][ T43] usb 7-1: Manufacturer: syz [ 535.814534][ T43] usb 7-1: SerialNumber: syz [ 535.837313][T15629] sctp: [Deprecated]: syz.7.3129 (pid 15629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 535.837313][T15629] Use struct sctp_sack_info instead [ 536.200209][ T30] audit: type=1326 audit(1748339298.319:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 536.269807][ T30] audit: type=1326 audit(1748339298.319:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 536.302926][ T30] audit: type=1326 audit(1748339298.379:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 536.325794][ T30] audit: type=1326 audit(1748339298.379:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 536.348854][ T43] usb 7-1: 0:2 : does not exist [ 536.354031][ T30] audit: type=1326 audit(1748339298.379:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 536.378210][ T30] audit: type=1326 audit(1748339298.379:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 536.489166][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 536.525195][ T30] audit: type=1326 audit(1748339298.379:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 536.613664][ T30] audit: type=1326 audit(1748339298.379:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 536.701204][ T30] audit: type=1326 audit(1748339298.379:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 537.165198][ T30] kauditd_printk_skb: 325 callbacks suppressed [ 537.165218][ T30] audit: type=1326 audit(1748339299.279:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 537.395540][ T30] audit: type=1326 audit(1748339299.279:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 537.495279][ T30] audit: type=1326 audit(1748339299.279:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 537.563866][ T43] usb 7-1: USB disconnect, device number 24 [ 537.649661][ T30] audit: type=1326 audit(1748339299.309:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 537.709526][ T8773] udevd[8773]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.825281][ T30] audit: type=1326 audit(1748339299.319:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 537.955342][ T30] audit: type=1326 audit(1748339299.319:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 538.115659][ T30] audit: type=1326 audit(1748339299.319:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 538.231006][ T30] audit: type=1326 audit(1748339299.319:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 538.394459][ T30] audit: type=1326 audit(1748339299.319:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 538.497786][ T30] audit: type=1326 audit(1748339299.319:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.5.3131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 539.477910][ T5149] Bluetooth: hci0: command 0x0406 tx timeout [ 540.487201][T15688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3154'. [ 540.562007][T15693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3154'. [ 543.034807][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 543.150556][T15760] bond1: entered allmulticast mode [ 543.156542][T15760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.189948][T15762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.251403][T15762] batadv_slave_0: entered promiscuous mode [ 543.276584][T15762] batadv_slave_0: entered allmulticast mode [ 543.319891][T15762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.396436][T15762] bond1: (slave batadv_slave_0): making interface the new active one [ 543.428294][T15762] bond1: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 543.475596][ T43] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 543.662441][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.714617][ T43] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 543.750138][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.794142][ T43] usb 7-1: config 0 descriptor?? [ 544.021581][ T43] usbhid 7-1:0.0: can't add hid device: -71 [ 544.035532][ T43] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 544.036320][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 544.062490][ T43] usb 7-1: USB disconnect, device number 25 [ 544.240340][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.252813][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.263395][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 544.279857][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 544.296547][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.305634][ T5886] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 544.322264][ T10] usb 3-1: config 0 descriptor?? [ 544.475561][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 544.494101][ T5886] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 544.516770][ T5886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 544.535551][ T43] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 544.545719][ T5886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 544.558626][ T5886] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.581742][ T5886] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.592113][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.705395][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 544.713091][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.724841][ T43] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 544.734709][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.762143][ T43] usb 7-1: config 0 descriptor?? [ 544.763630][ T10] plantronics 0003:047F:FFFF.0035: reserved main item tag 0xd [ 544.806408][ T10] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 544.806652][ T43] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 544.848657][ T5886] usb 1-1: GET_CAPABILITIES returned 0 [ 544.854234][ T5886] usbtmc 1-1:16.0: can't read capabilities [ 544.875852][ T43] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 544.891593][ T10] plantronics 0003:047F:FFFF.0035: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 545.007692][ T5886] usb 3-1: USB disconnect, device number 36 [ 545.063519][T15793] fido_id[15793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 545.108781][ T5869] usb 1-1: USB disconnect, device number 42 [ 545.213420][ T30] kauditd_printk_skb: 376 callbacks suppressed [ 545.213440][ T30] audit: type=1326 audit(1748339307.329:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15794 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 545.254636][ T30] audit: type=1326 audit(1748339307.329:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15794 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 545.281042][ T30] audit: type=1326 audit(1748339307.329:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15794 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 545.309903][ T30] audit: type=1326 audit(1748339307.329:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15794 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 545.355256][T15765] ldusb 7-1:0.0: Read buffer overflow, 297 bytes dropped [ 545.378176][ T5886] usb 7-1: USB disconnect, device number 26 [ 545.406216][ T30] audit: type=1326 audit(1748339307.329:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15794 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 545.429152][ T5886] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 545.446038][T15799] random: crng reseeded on system resumption [ 545.447330][ T30] audit: type=1326 audit(1748339307.339:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15794 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7ffc0000 [ 545.492505][ T30] audit: type=1326 audit(1748339307.339:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15794 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7ffc0000 [ 545.529290][ T30] audit: type=1326 audit(1748339307.339:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15794 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7ffc0000 [ 545.563422][ T30] audit: type=1326 audit(1748339307.339:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15794 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7ffc0000 [ 545.693159][ T30] audit: type=1326 audit(1748339307.339:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15794 comm="syz.7.3197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7ffc0000 [ 546.140841][T15807] syz_tun: entered allmulticast mode [ 546.193684][T15806] syz_tun: left allmulticast mode [ 546.371335][T15811] netlink: 'syz.0.3204': attribute type 4 has an invalid length. [ 546.750519][ T5886] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 546.945368][ T5886] usb 7-1: Using ep0 maxpacket: 16 [ 546.963343][ T5886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.038819][ T5886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 547.148024][ T5886] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 547.190691][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.239858][ T5886] usb 7-1: Product: syz [ 547.244098][ T5886] usb 7-1: Manufacturer: syz [ 547.290313][ T5886] usb 7-1: SerialNumber: syz [ 547.425346][ T43] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 547.606225][ T43] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 547.668156][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 547.698076][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 547.750622][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 547.764657][ T5886] usb 7-1: 0:2 : does not exist [ 547.776706][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 547.817743][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 547.866648][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 547.887420][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 547.914769][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 547.939632][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 547.984392][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 548.021963][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 548.053676][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 548.074778][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 548.104353][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 548.140379][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 548.178463][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 548.181093][ T5886] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 548.224921][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 548.260235][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 548.279937][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 548.284429][ T5886] usb 7-1: USB disconnect, device number 27 [ 548.329564][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 548.350662][ T8773] udevd[8773]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.351562][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 548.442056][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 548.461288][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 548.493526][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 548.518853][ T43] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 548.559161][ T43] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 548.577454][ T43] usb 1-1: Product: syz [ 548.595435][ T43] usb 1-1: Manufacturer: syz [ 548.602536][ T43] usb 1-1: SerialNumber: syz [ 548.646357][ T43] usb 1-1: config 0 descriptor?? [ 548.668229][ T43] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 549.091005][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 549.101196][ T43] usb 1-1: USB disconnect, device number 43 [ 549.119557][ T43] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 549.816705][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3228'. [ 549.868915][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3228'. [ 549.894612][T15881] random: crng reseeded on system resumption [ 549.901554][T15875] erspan0: entered promiscuous mode [ 549.921294][T15875] macvtap1: entered promiscuous mode [ 549.930250][T15875] macvtap1: entered allmulticast mode [ 549.936097][T15875] erspan0: entered allmulticast mode [ 551.155391][ T5869] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 551.165675][ T9] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 551.347721][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 551.354164][ T9] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 551.363656][ T5869] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 551.383044][ T5869] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.385488][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 551.404081][ T5869] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.420448][ T5869] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 551.432245][ T5869] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.443166][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 551.452153][ T5869] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 551.463917][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.485015][ T9] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 551.518808][ T9] usb 1-1: Product: syz [ 551.535987][ T9] usb 1-1: Manufacturer: syz [ 551.542052][ T9] usb 1-1: SerialNumber: syz [ 551.708545][ T5869] usb 6-1: GET_CAPABILITIES returned 0 [ 551.720216][ T5869] usbtmc 6-1:16.0: can't read capabilities [ 551.885346][ T5869] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 552.047020][ T5869] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.063233][T15917] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 552.065958][ T5869] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 552.070375][ T5886] usb 6-1: USB disconnect, device number 42 [ 552.079259][ T5869] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.103470][T15943] usbtmc 6-1:16.0: usb_control_msg returned -19 [ 552.126321][ T5869] usb 8-1: config 0 descriptor?? [ 552.214000][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 552.283788][ T43] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 552.298394][ T43] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 552.365609][ T5869] usbhid 8-1:0.0: can't add hid device: -71 [ 552.386658][ T5869] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 552.421552][ T5869] usb 8-1: USB disconnect, device number 22 [ 552.727586][ T9] usb 1-1: USB disconnect, device number 44 [ 552.761607][ T9] usblp0: removed [ 552.806645][ T49] bridge_slave_1: left allmulticast mode [ 552.822555][ T49] bridge_slave_1: left promiscuous mode [ 552.842447][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.877541][ T49] bridge_slave_0: left allmulticast mode [ 552.883334][ T49] bridge_slave_0: left promiscuous mode [ 552.915262][ T5869] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 552.942858][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.100859][ T5869] usb 8-1: Using ep0 maxpacket: 32 [ 553.116896][ T5869] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.155307][ T5869] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 553.197404][ T5869] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.245638][ T5869] usb 8-1: config 0 descriptor?? [ 553.284709][ T5869] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 553.354197][ T5869] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 553.902186][ T10] usb 8-1: USB disconnect, device number 23 [ 553.953918][ T10] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 554.061341][ T49] erspan0 (unregistering): left promiscuous mode [ 554.175366][ T49] gretap0 (unregistering): left promiscuous mode [ 554.638713][T16002] loop4: detected capacity change from 0 to 7 [ 554.655818][T16002] Dev loop4: unable to read RDB block 7 [ 554.665181][T16002] loop4: AHDI p3 p4 [ 554.674496][T16002] loop4: partition table partially beyond EOD, truncated [ 554.701544][T16002] loop4: p3 start 4294967295 is beyond EOD, truncated [ 554.969032][ T49] bond0 (unregistering): (slave 0): Releasing backup interface [ 555.018740][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.065806][ T49] bond0 (unregistering): Released all slaves [ 555.347125][ T49] bond1 (unregistering): Released all slaves [ 555.375683][ T49] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 555.397876][ T49] bond2 (unregistering): Released all slaves [ 555.838032][T16031] sctp: [Deprecated]: syz.2.3290 (pid 16031) Use of struct sctp_assoc_value in delayed_ack socket option. [ 555.838032][T16031] Use struct sctp_sack_info instead [ 556.414456][ T49] hsr_slave_0: left promiscuous mode [ 556.463097][ T49] hsr_slave_1: left promiscuous mode [ 556.492973][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.537400][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.566821][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.574308][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.735273][ T49] veth1_macvtap: left promiscuous mode [ 556.745279][ T49] veth0_macvtap: left promiscuous mode [ 556.751222][ T49] veth1_vlan: left promiscuous mode [ 556.761275][ T49] veth0_vlan: left promiscuous mode [ 557.110002][T16060] netlink: 'syz.5.3300': attribute type 1 has an invalid length. [ 558.032790][ T49] team0 (unregistering): Port device team_slave_1 removed [ 558.045450][ T979] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 558.104669][ T49] team0 (unregistering): Port device team_slave_0 removed [ 558.200689][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 558.226295][ T979] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 558.252475][ T979] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 558.268817][ T979] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 558.280912][ T979] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.294235][ T979] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 558.304198][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.537384][ T979] usb 3-1: GET_CAPABILITIES returned 0 [ 558.544103][ T979] usbtmc 3-1:16.0: can't read capabilities [ 558.730938][T16060] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 558.768138][ T979] usb 3-1: USB disconnect, device number 37 [ 559.247236][T16094] loop8: detected capacity change from 0 to 7 [ 559.266163][T16094] Dev loop8: unable to read RDB block 7 [ 559.282077][T16094] loop8: AHDI p3 [ 559.288992][T16094] loop8: partition table partially beyond EOD, truncated [ 559.328840][ T8773] Dev loop8: unable to read RDB block 7 [ 559.358093][ T8773] loop8: AHDI p3 [ 559.361812][ T8773] loop8: partition table partially beyond EOD, truncated [ 559.405367][T16095] Dev loop8: unable to read RDB block 7 [ 559.429619][T16095] loop8: AHDI p3 [ 559.435880][T16095] loop8: partition table partially beyond EOD, truncated [ 559.735554][ T43] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 559.927569][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 559.965504][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 559.999047][ T43] usb 3-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 560.022437][ T43] usb 3-1: Manufacturer: syz [ 560.042661][ T43] usb 3-1: config 0 descriptor?? [ 560.062013][ T43] hub 3-1:0.0: USB hub found [ 560.279780][ T43] hub 3-1:0.0: 1 port detected [ 560.376816][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3325'. [ 560.386101][T16123] tipc: Started in network mode [ 560.391009][T16123] tipc: Node identity 1, cluster identity 4711 [ 560.401731][T16123] tipc: Node number set to 1 [ 560.904648][T16138] bridge: RTM_NEWNEIGH with invalid ether address [ 560.976910][ T30] kauditd_printk_skb: 1998 callbacks suppressed [ 560.976930][ T30] audit: type=1326 audit(1748339323.099:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 561.053187][ T43] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 561.084669][ T30] audit: type=1326 audit(1748339323.139:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 561.108927][ T30] audit: type=1326 audit(1748339323.139:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 561.181000][ T30] audit: type=1326 audit(1748339323.139:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 561.186756][ T5890] usb 3-1: USB disconnect, device number 38 [ 561.209449][ T979] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 561.235636][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 561.265834][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.291014][ T30] audit: type=1326 audit(1748339323.139:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 561.324015][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.389232][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 561.406236][ T43] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 561.421418][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.433451][ T30] audit: type=1326 audit(1748339323.139:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 561.491629][ T30] audit: type=1326 audit(1748339323.139:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 561.492494][ T43] usb 8-1: config 0 descriptor?? [ 561.516325][ T30] audit: type=1326 audit(1748339323.139:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 561.554728][ T30] audit: type=1326 audit(1748339323.139:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 561.582856][ T30] audit: type=1326 audit(1748339323.139:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f23558 code=0x7ffc0000 [ 562.153371][ T43] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.0037/input/input60 [ 562.216122][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3343'. [ 562.242258][ T43] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.0037/input/input61 [ 562.330522][ T43] kye 0003:0458:5011.0037: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.7-1/input0 [ 563.001622][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.011908][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.097469][T16192] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3351'. [ 563.175460][ T43] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 563.265483][ C1] kye 0003:0458:5011.0037: usb_submit_urb(ctrl) failed: -1 [ 563.356095][ T43] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 563.364771][ T43] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 563.382322][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 563.394127][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 563.435356][ T979] usb 8-1: reset high-speed USB device number 24 using dummy_hcd [ 563.457976][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 563.487323][ T43] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 563.507826][ T43] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 563.518050][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3356'. [ 563.525062][ T43] usb 6-1: Product: syz [ 563.531737][ T43] usb 6-1: Manufacturer: syz [ 563.569281][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 563.574552][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 563.592352][ T43] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 563.600429][ T43] cdc_wdm 6-1:1.0: Unknown control protocol [ 563.805776][ T43] usb 6-1: USB disconnect, device number 43 [ 564.236776][ T5869] usb 8-1: USB disconnect, device number 24 [ 564.535178][ T5886] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 564.698934][ T5886] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 564.708832][ T5886] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 564.721084][ T5886] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 564.730616][ T5886] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 564.742068][ T5886] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 564.760295][ T5886] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 564.769775][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 564.777920][ T5886] usb 6-1: Product: syz [ 564.782207][ T5886] usb 6-1: Manufacturer: syz [ 564.796340][ T5886] cdc_wdm 6-1:1.0: skipping garbage [ 564.801612][ T5886] cdc_wdm 6-1:1.0: skipping garbage [ 564.808349][ T5886] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 564.814274][ T5886] cdc_wdm 6-1:1.0: Unknown control protocol [ 565.023322][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.029084][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.035563][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.041275][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.047829][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.054288][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.060376][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.066264][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.072131][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.077847][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.083640][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.089501][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.095858][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.101562][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.110848][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.116555][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.122336][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.128028][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.133891][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.139582][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.145381][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.151090][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.157232][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.162933][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.168991][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.174693][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.180432][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.186285][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.192150][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.198044][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.203914][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.209787][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.215792][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.221686][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.227569][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.233272][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.239554][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.245270][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.251467][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.257268][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.264787][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.270500][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.276534][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.282229][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.288152][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.293858][ C1] cdc_wdm 6-1:1.0: Cannot schedule work [ 565.300356][ C1] cdc_wdm 6-1:1.0: Stall on int endpoint [ 565.306092][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 565.343523][ T5869] usb 6-1: USB disconnect, device number 44 [ 565.808234][ T5886] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 565.987923][ T5886] usb 8-1: Using ep0 maxpacket: 16 [ 566.009756][ T5886] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 566.051269][ T5886] usb 8-1: config 0 has no interface number 0 [ 566.074081][ T5886] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 566.111440][ T5886] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 566.124560][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3380'. [ 566.142454][ T5886] usb 8-1: config 0 interface 41 has no altsetting 0 [ 566.145522][T16263] netlink: 13 bytes leftover after parsing attributes in process `syz.5.3380'. [ 566.161103][ T5886] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 566.191735][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.220083][ T5886] usb 8-1: Product: syz [ 566.224558][ T5886] usb 8-1: Manufacturer: syz [ 566.234746][ T5886] usb 8-1: SerialNumber: syz [ 566.251093][ T5886] usb 8-1: config 0 descriptor?? [ 566.259102][T16248] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 566.270607][T16248] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 566.285860][ T5869] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 566.477000][ T5869] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 566.509156][ T5869] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 566.513529][T16248] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 566.559538][ T5869] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 566.567361][T16248] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 566.596343][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.651704][T16265] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 566.678373][ T5869] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 566.968434][ T5869] usb 7-1: USB disconnect, device number 28 [ 567.151287][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3387'. [ 567.172822][T16281] macvtap2: entered promiscuous mode [ 567.179902][T16281] macvtap2: entered allmulticast mode [ 567.252484][ T5886] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 567.435494][ T5890] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 567.599183][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 567.618715][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.636047][ T5890] usb 1-1: config 0 descriptor?? [ 567.666453][ T5890] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 567.679288][ T5886] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 567.691622][ T5886] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 567.701723][ T5886] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 567.719014][ T5886] usb 8-1: USB disconnect, device number 25 [ 568.238895][ T979] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 568.421102][ T979] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.445183][ T979] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.477138][ T979] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 568.501317][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 568.528974][ T979] usb 7-1: SerialNumber: syz [ 568.714315][ T5890] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 568.789422][ T979] usb 7-1: 0:2 : does not exist [ 568.810181][ T979] usb 7-1: unit 5: unexpected type 0x09 [ 568.871012][ T979] usb 7-1: USB disconnect, device number 29 [ 568.986649][ T5890] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 568.990482][ T8773] udevd[8773]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.038087][ T5890] usb 1-1: USB disconnect, device number 45 [ 569.925530][ T5869] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 570.100049][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 570.124945][T16346] loop2: detected capacity change from 0 to 7 [ 570.140934][T13358] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 570.155994][T13358] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 570.162864][T13358] Dev loop2: unable to read RDB block 7 [ 570.171540][T13358] loop2: unable to read partition table [ 570.180728][T13358] loop2: partition table beyond EOD, truncated [ 570.191252][T16346] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 570.208759][T16346] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 570.219458][T16346] Dev loop2: unable to read RDB block 7 [ 570.225732][T16346] loop2: unable to read partition table [ 570.237198][T16346] loop2: partition table beyond EOD, truncated [ 570.245514][T16346] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 570.294050][ T5869] usb 6-1: unable to get BOS descriptor or descriptor too short [ 570.314558][ T5869] usb 6-1: too many configurations: 105, using maximum allowed: 8 [ 570.331325][ T5869] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 570.354700][ T5869] usb 6-1: can't read configurations, error -71 [ 570.595870][ T5890] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 570.765634][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 570.789360][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.807542][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.820132][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 570.842161][ T5890] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 570.853248][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.892159][ T5890] usb 1-1: config 0 descriptor?? [ 571.331462][ T5890] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 571.361167][ T5890] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 571.380475][ T5890] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 571.413628][ T5890] kovaplus 0003:1E7D:2D50.0038: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 571.732839][ T5890] kovaplus 0003:1E7D:2D50.0038: couldn't init struct kovaplus_device [ 571.750161][ T5890] kovaplus 0003:1E7D:2D50.0038: couldn't install mouse [ 571.773616][ T5890] kovaplus 0003:1E7D:2D50.0038: probe with driver kovaplus failed with error -71 [ 571.825593][ T5890] usb 1-1: USB disconnect, device number 46 [ 571.877322][ T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 571.942785][T16407] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3441'. [ 571.997501][T16407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3441'. [ 572.015621][T16407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3441'. [ 572.035683][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 572.061795][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 572.102052][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 572.151914][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.185214][ T9] usb 8-1: Product: syz [ 572.189441][ T9] usb 8-1: Manufacturer: syz [ 572.194064][ T9] usb 8-1: SerialNumber: syz [ 572.243697][ T9] usb 8-1: config 0 descriptor?? [ 572.254662][ T9] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 572.264468][ T9] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 572.876801][ T9] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 573.132796][T16442] syzkaller1: entered promiscuous mode [ 573.146490][T16442] syzkaller1: entered allmulticast mode [ 573.155658][ T979] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 573.342030][ T979] usb 7-1: Using ep0 maxpacket: 16 [ 573.367952][ T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.391003][ T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.435027][ T979] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 573.471471][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.506400][ T979] usb 7-1: config 0 descriptor?? [ 573.518855][ T9] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 573.547987][ T9] em28xx 8-1:0.0: board has no eeprom [ 573.627053][ T9] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 573.640633][ T9] em28xx 8-1:0.0: dvb set to bulk mode. [ 573.649333][ T5886] em28xx 8-1:0.0: Binding DVB extension [ 573.685702][ T9] usb 8-1: USB disconnect, device number 26 [ 573.699924][ T9] em28xx 8-1:0.0: Disconnecting em28xx [ 573.776439][ T121] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 573.816747][ T5886] em28xx 8-1:0.0: Registering input extension [ 573.824062][ T9] em28xx 8-1:0.0: Closing input extension [ 573.867254][ T9] em28xx 8-1:0.0: Freeing device [ 573.936861][ T121] usb 3-1: Using ep0 maxpacket: 32 [ 573.956470][ T979] kye 0003:0458:5016.0039: control desc unexpectedly large [ 573.964810][ T121] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.984946][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 573.992272][ T979] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0039/input/input63 [ 574.022303][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 574.041372][ T121] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 574.072261][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.128127][ T121] usb 3-1: config 0 descriptor?? [ 574.139062][ T979] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0039/input/input64 [ 574.165262][T16453] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 574.246886][ T121] hub 3-1:0.0: USB hub found [ 574.271056][T16468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3465'. [ 574.329174][ T979] kye 0003:0458:5016.0039: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 574.393007][ T979] usb 7-1: USB disconnect, device number 30 [ 574.434871][ T121] hub 3-1:0.0: 2 ports detected [ 574.514020][T16472] fido_id[16472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 574.860523][ T121] hub 3-1:0.0: set hub depth failed [ 574.896788][ T121] usb 3-1: USB disconnect, device number 39 [ 575.375266][ T979] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 575.507956][ T43] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 575.537343][ T979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.553183][ T979] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 575.578188][ T979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.599302][ T979] usb 8-1: config 0 descriptor?? [ 575.692496][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 575.719042][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 575.730986][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 575.740953][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 575.754239][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.763878][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.802437][ T43] usb 6-1: config 0 descriptor?? [ 575.846394][ T979] usbhid 8-1:0.0: can't add hid device: -71 [ 575.859434][ T979] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 575.886243][ T979] usb 8-1: USB disconnect, device number 27 [ 576.263973][ T43] plantronics 0003:047F:FFFF.003A: No inputs registered, leaving [ 576.309041][ T43] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 576.385503][ T979] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 576.445254][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 576.535658][ T979] usb 8-1: Using ep0 maxpacket: 32 [ 576.544635][ T979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.560115][ T979] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 576.570878][ T979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.590222][ T979] usb 8-1: config 0 descriptor?? [ 576.602768][ T979] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 576.614631][ T979] ldusb 8-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 576.638287][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 576.658680][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 576.684296][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.698865][ T9] usb 3-1: Product: syz [ 576.710772][ T9] usb 3-1: Manufacturer: syz [ 576.723152][ T9] usb 3-1: SerialNumber: syz [ 576.746157][ T9] usb 3-1: config 0 descriptor?? [ 576.935907][ T5886] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 576.973431][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 577.045745][T16543] loop7: detected capacity change from 0 to 16384 [ 577.095270][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 577.103235][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.115363][ T5886] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 577.124699][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.139031][ T5886] usb 1-1: config 0 descriptor?? [ 577.149941][ T5886] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 577.295242][ T5870] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 577.459045][ T5870] usb 7-1: config 0 has no interfaces? [ 577.471421][ T5870] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 577.481753][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.489881][ T5870] usb 7-1: Product: syz [ 577.494353][ T5870] usb 7-1: Manufacturer: syz [ 577.499070][ T5870] usb 7-1: SerialNumber: syz [ 577.509727][ T5870] usb 7-1: config 0 descriptor?? [ 577.787986][T16543] I/O error, dev loop7, sector 6696 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 577.800649][T16543] I/O error, dev loop7, sector 6952 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 577.811324][T16543] I/O error, dev loop7, sector 6696 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.821167][T16543] buffer_io_error: 39 callbacks suppressed [ 577.821194][T16543] Buffer I/O error on dev loop7, logical block 837, async page read [ 577.835824][T16543] I/O error, dev loop7, sector 6696 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.845465][T16543] Buffer I/O error on dev loop7, logical block 837, async page read [ 577.856575][T16543] I/O error, dev loop7, sector 6696 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.866166][T16543] Buffer I/O error on dev loop7, logical block 837, async page read [ 577.908348][ T5870] usb 7-1: USB disconnect, device number 31 [ 577.927902][T16542] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 577.956417][T16542] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 577.970521][T16542] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 577.998165][T16542] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 578.007554][T16542] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 578.019884][T16542] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 578.030490][T16542] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 578.042174][T16542] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 578.063860][T16542] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 578.075235][ T979] usb 6-1: reset high-speed USB device number 47 using dummy_hcd [ 578.100324][T16542] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 578.151755][T16542] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 578.151874][ T5870] usb 8-1: USB disconnect, device number 28 [ 578.186684][ T5870] ldusb 8-1:0.0: LD USB Device #1 now disconnected [ 578.205370][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 578.230878][T16542] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 578.261780][ T9] usb 3-1: USB disconnect, device number 40 [ 578.588985][ T5886] gspca_vc032x: reg_w err -71 [ 578.604015][ T5886] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 578.634749][ T5886] usb 1-1: USB disconnect, device number 47 [ 578.753132][T16550] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3496'. [ 578.767490][T16550] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3496'. [ 579.192560][T16555] loop6: detected capacity change from 0 to 7 [ 579.211242][T16555] Dev loop6: unable to read RDB block 7 [ 579.244511][T16555] loop6: AHDI p4 [ 579.277356][T16555] loop6: partition table partially beyond EOD, truncated [ 579.847484][ T5869] usb 6-1: USB disconnect, device number 47 [ 582.322991][ T2982] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.520097][ T2982] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.667433][ T2982] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.687177][T16647] veth1_to_team: entered promiscuous mode [ 582.847583][T16647] team0: Port device team_slave_1 removed [ 582.952587][ T2982] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.405979][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 583.418028][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 583.429741][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 583.455182][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 583.464446][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 583.976406][T16675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3547'. [ 584.139417][ T2982] bond0 (unregistering): Released all slaves [ 584.909024][ T2982] hsr_slave_0: left promiscuous mode [ 584.981327][ T2982] hsr_slave_1: left promiscuous mode [ 585.039431][ T2982] veth1_macvtap: left promiscuous mode [ 585.045055][ T2982] veth0_macvtap: left promiscuous mode [ 585.557832][ T5838] Bluetooth: hci3: command tx timeout [ 585.599533][T16707] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 585.681714][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 585.692477][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 585.703047][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 585.723713][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 585.733494][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 586.105283][ T5890] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 586.275415][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 586.308516][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.334786][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42399, setting to 1024 [ 586.355305][ T5890] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 586.375968][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.399541][ T5890] usb 6-1: config 0 descriptor?? [ 586.407926][T16714] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 586.442732][ T5890] hub 6-1:0.0: USB hub found [ 586.592196][T16727] input: syz0 as /devices/virtual/input/input66 [ 586.622252][ T5890] hub 6-1:0.0: 1 port detected [ 587.401866][T16663] chnl_net:caif_netlink_parms(): no params data found [ 587.645448][ T5149] Bluetooth: hci3: command tx timeout [ 587.761743][ T5890] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 587.770675][ T9] usb 6-1: USB disconnect, device number 48 [ 587.795327][ T5149] Bluetooth: hci2: command tx timeout [ 588.079317][T16663] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.091740][T16663] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.103622][T16663] bridge_slave_0: entered allmulticast mode [ 588.124428][T16663] bridge_slave_0: entered promiscuous mode [ 588.248166][ T2982] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.270043][ T2982] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.324897][T16663] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.371907][T16663] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.402349][T16663] bridge_slave_1: entered allmulticast mode [ 588.409036][ T5890] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 588.437049][T16663] bridge_slave_1: entered promiscuous mode [ 588.533941][ T2982] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.568039][ T2982] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.589968][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.635260][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.654788][ T5890] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 588.664146][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.691600][ T5890] usb 3-1: config 0 descriptor?? [ 588.712884][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3573'. [ 588.804161][ T2982] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.816165][ T2982] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.847857][T16663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.875927][T16712] chnl_net:caif_netlink_parms(): no params data found [ 588.896137][T16777] tipc: Failed to remove unknown binding: 66,1,1/1:1557169646/1557169648 [ 588.907155][T16777] tipc: Failed to remove unknown binding: 66,1,1/1:1557169646/1557169648 [ 588.978954][T16663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.079746][ T2982] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.091623][ T2982] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.129980][ T5890] cm6533_jd 0003:0D8C:0022.003B: unknown main item tag 0x0 [ 589.142429][ T5890] cm6533_jd 0003:0D8C:0022.003B: unknown main item tag 0x0 [ 589.171815][ T5890] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.003B/input/input67 [ 589.233171][ T5890] cm6533_jd 0003:0D8C:0022.003B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 589.308105][T16663] team0: Port device team_slave_0 added [ 589.348860][T16663] team0: Port device team_slave_1 added [ 589.406170][ T9] usb 3-1: USB disconnect, device number 41 [ 589.672861][T16663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.709794][T16663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.715359][ T5149] Bluetooth: hci3: command tx timeout [ 589.759529][T16663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.875462][ T5149] Bluetooth: hci2: command tx timeout [ 589.881978][T16663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.892079][T16663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.925620][T16663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.008198][T16712] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.028446][T16712] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.075026][T16712] bridge_slave_0: entered allmulticast mode [ 590.117585][T16712] bridge_slave_0: entered promiscuous mode [ 590.135856][T16712] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.170123][T16712] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.181449][T16712] bridge_slave_1: entered allmulticast mode [ 590.194840][T16712] bridge_slave_1: entered promiscuous mode [ 590.629734][T16712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.694262][T16663] hsr_slave_0: entered promiscuous mode [ 590.737027][T16663] hsr_slave_1: entered promiscuous mode [ 590.810963][T16712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.179689][T16712] team0: Port device team_slave_0 added [ 591.324894][T16813] macvlan2: entered promiscuous mode [ 591.356907][T16813] bond_slave_0: entered promiscuous mode [ 591.363109][T16813] bond_slave_1: entered promiscuous mode [ 591.401273][T16813] bond0: entered promiscuous mode [ 591.441143][T16813] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 591.518768][T16813] team0: Port device macvlan2 added [ 591.555266][ T5869] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 591.569881][T16712] team0: Port device team_slave_1 added [ 591.765426][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 591.798188][ T5149] Bluetooth: hci3: command tx timeout [ 591.806606][ T5869] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 591.854942][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 591.911006][ T5869] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 591.955471][ T5838] Bluetooth: hci2: command tx timeout [ 591.977350][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 591.986387][T16712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.005436][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 592.047716][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.095637][ T5869] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 592.103123][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 592.185213][ T5869] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 592.220687][T16712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.238068][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 592.295214][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 592.350850][ T5869] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 592.369753][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 592.405373][ T5869] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 592.465646][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 592.525157][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 592.626913][ T5869] usb 1-1: string descriptor 0 read error: -22 [ 592.633283][ T5869] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 592.695178][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.765565][ T5869] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 593.010649][ T5869] usb 1-1: USB disconnect, device number 48 [ 593.265258][ T2982] bond0 (unregistering): Released all slaves [ 593.279905][ T2982] bond1 (unregistering): Released all slaves [ 593.314017][T16712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.323013][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.375194][T16712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.402512][T16827] netlink: 'syz.2.3586': attribute type 12 has an invalid length. [ 593.411109][T16827] netlink: 'syz.2.3586': attribute type 29 has an invalid length. [ 593.431508][T16827] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3586'. [ 593.440710][T16827] netlink: 'syz.2.3586': attribute type 1 has an invalid length. [ 593.448778][T16827] netlink: 'syz.2.3586': attribute type 2 has an invalid length. [ 593.457127][T16827] netlink: 39 bytes leftover after parsing attributes in process `syz.2.3586'. [ 593.466635][T16828] netlink: 'syz.2.3586': attribute type 12 has an invalid length. [ 593.474535][T16828] netlink: 'syz.2.3586': attribute type 29 has an invalid length. [ 593.483011][T16828] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3586'. [ 593.496977][T16828] netlink: 'syz.2.3586': attribute type 1 has an invalid length. [ 593.504741][T16828] netlink: 'syz.2.3586': attribute type 2 has an invalid length. [ 593.512798][T16828] netlink: 39 bytes leftover after parsing attributes in process `syz.2.3586'. [ 593.632920][ T2982] tipc: Disabling bearer [ 593.685815][ T2982] tipc: Left network mode [ 593.940997][T16712] hsr_slave_0: entered promiscuous mode [ 593.949877][T16712] hsr_slave_1: entered promiscuous mode [ 593.960034][T16712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.969168][T16712] Cannot create hsr debugfs directory [ 594.035234][ T5838] Bluetooth: hci2: command tx timeout [ 594.130938][ T2982] hsr_slave_0: left promiscuous mode [ 594.162649][ T2982] hsr_slave_1: left promiscuous mode [ 594.204833][ T2982] veth1_macvtap: left promiscuous mode [ 594.224322][ T2982] veth0_macvtap: left promiscuous mode [ 595.940143][T16875] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3601'. [ 596.414056][T16888] loop2: detected capacity change from 0 to 7 [ 596.442673][T16888] Dev loop2: unable to read RDB block 7 [ 596.461113][T16888] loop2: unable to read partition table [ 596.475511][T16888] loop2: partition table beyond EOD, truncated [ 596.492387][T16888] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 596.647583][T16663] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 596.708413][T16663] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 596.765416][T16663] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 596.842694][T16663] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 597.008759][T16712] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 597.055617][T16712] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 597.135604][T16712] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 597.228859][T16712] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 597.305810][T16910] input: syz1 as /devices/virtual/input/input68 [ 597.440863][T16663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.510426][T16663] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.537128][ T7133] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.544314][ T7133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.604980][ T7133] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.612204][ T7133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.786768][T16919] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.807090][T16919] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.908189][T16922] vlan0: entered allmulticast mode [ 598.025345][ T5890] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 598.050465][T16712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.122093][T16712] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.151005][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.158382][ T7128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.193934][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.201194][ T7128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.207215][ T5890] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 598.241480][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.267709][T16663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.276770][ T5890] usb 6-1: config 0 descriptor?? [ 598.294129][ T5890] gspca_main: spca508-2.14.0 probing 8086:0110 [ 598.342390][T16932] netlink: 'syz.0.3618': attribute type 1 has an invalid length. [ 598.441483][T16932] bond1: (slave veth3): Enslaving as an active interface with a down link [ 598.523212][ T5890] gspca_spca508: reg_read err -32 [ 598.559800][ T5890] gspca_spca508: reg_read err -32 [ 598.596251][ T5890] gspca_spca508: reg_read err -32 [ 598.604778][T16663] veth0_vlan: entered promiscuous mode [ 598.694101][T16663] veth1_vlan: entered promiscuous mode [ 598.712854][T16712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.824350][ T5890] gspca_spca508: reg_read err -32 [ 598.849962][T16663] veth0_macvtap: entered promiscuous mode [ 598.916178][T16663] veth1_macvtap: entered promiscuous mode [ 598.997686][T16712] veth0_vlan: entered promiscuous mode [ 599.045404][ T5890] gspca_spca508: reg write: error -71 [ 599.062116][ T5890] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 599.094968][T16663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.113829][ T5890] usb 6-1: USB disconnect, device number 49 [ 599.127396][T16712] veth1_vlan: entered promiscuous mode [ 599.209899][T16663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.250720][T16663] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.262735][T16663] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.279428][T16663] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.288583][T16663] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.294686][T16948] xt_CT: No such helper "netbios-ns" [ 599.429710][T16712] veth0_macvtap: entered promiscuous mode [ 599.483965][T16712] veth1_macvtap: entered promiscuous mode [ 599.540822][T16712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.633518][T16712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.684126][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.726144][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.751267][T16712] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.787599][T16712] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.803351][T16712] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.812513][T16712] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.905331][ T7133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.938611][ T7133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.246351][ T7133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.284987][ T7133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.335929][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 600.419521][ T7128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.455144][ T7128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.525254][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 600.533955][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3629'. [ 600.560869][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3629'. [ 600.561549][ T9] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 600.630750][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.697909][ T9] usb 3-1: config 0 descriptor?? [ 600.746318][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 600.808227][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input69 [ 601.034794][T17002] netlink: 'syz.8.3632': attribute type 39 has an invalid length. [ 601.167905][ T121] usb 3-1: USB disconnect, device number 42 [ 603.345288][ T5886] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 603.565288][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 603.614139][ T5886] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 603.689461][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.750443][ T5886] usb 1-1: Product: syz [ 603.825573][ T5886] usb 1-1: Manufacturer: syz [ 603.855251][ T5886] usb 1-1: SerialNumber: syz [ 603.915479][ T5886] usb 1-1: config 0 descriptor?? [ 604.004955][ T5886] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 604.262313][ T5870] IPVS: starting estimator thread 0... [ 604.389052][T17074] IPVS: using max 24 ests per chain, 57600 per kthread [ 605.309390][ T5886] input: sonixj as /devices/platform/dummy_hcd.0/usb1/1-1/input/input70 [ 605.577027][ T5886] usb 1-1: USB disconnect, device number 49 [ 606.071327][T17117] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 606.624797][T17137] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3675'. [ 607.800834][T17171] netlink: 'syz.9.3686': attribute type 1 has an invalid length. [ 607.829624][T17171] netlink: 232 bytes leftover after parsing attributes in process `syz.9.3686'. [ 608.679770][T17206] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3696'. [ 609.131898][T17227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3701'. [ 610.093253][ T5870] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 610.276167][ T5870] usb 9-1: Using ep0 maxpacket: 16 [ 610.305442][ T5870] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 610.383757][ T5870] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.455225][ T5870] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.525201][ T5870] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 610.554668][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.578222][ T5870] usb 9-1: Product: syz [ 610.582457][ T5870] usb 9-1: Manufacturer: syz [ 610.600044][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 610.600467][ T5870] usb 9-1: SerialNumber: syz [ 610.787783][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 610.810052][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 610.853507][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.887993][ T10] usb 1-1: config 0 descriptor?? [ 610.921695][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 611.082264][ T5870] usb 9-1: 0:2 : does not exist [ 612.044075][ T5870] usb 9-1: USB disconnect, device number 2 [ 612.204840][ T10] gspca_sonixj: reg_w1 err -71 [ 612.245008][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 612.323481][ T10] usb 1-1: USB disconnect, device number 50 [ 614.427467][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 614.470027][T17342] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 614.622238][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.664166][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.719680][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 614.755224][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 614.781093][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.825915][ T10] usb 9-1: config 0 descriptor?? [ 614.935931][ T5887] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 615.105545][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 615.147224][ T5887] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 615.165967][ T5887] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.208636][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.231081][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 615.261836][ T5887] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.315430][ T5887] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 615.340355][ T10] plantronics 0003:047F:FFFF.003C: No inputs registered, leaving [ 615.357824][T17362] loop2: detected capacity change from 0 to 7 [ 615.365748][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.406239][T17362] Dev loop2: unable to read RDB block 7 [ 615.411962][T17362] loop2: unable to read partition table [ 615.460354][T17362] loop2: partition table beyond EOD, truncated [ 615.473107][ T10] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 615.488230][T17362] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 615.813574][ T5887] usb 6-1: GET_CAPABILITIES returned 0 [ 615.814712][ T5870] usb 9-1: USB disconnect, device number 3 [ 615.920884][ T5887] usbtmc 6-1:16.0: can't read capabilities [ 616.126399][T17370] fido_id[17370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 616.141332][ T979] usb 6-1: USB disconnect, device number 50 [ 617.677069][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3752'. [ 618.423628][ T10] IPVS: starting estimator thread 0... [ 618.527449][T17428] IPVS: using max 27 ests per chain, 64800 per kthread [ 618.736144][ T5887] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 618.917689][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 618.961595][ T5887] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 619.000003][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.026685][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 619.026705][ T30] audit: type=1326 audit(1748339381.149:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.8.3759" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705e539 code=0x0 [ 619.050421][ T5887] usb 6-1: Product: syz [ 619.081452][ T5887] usb 6-1: Manufacturer: syz [ 619.159450][ T5887] usb 6-1: SerialNumber: syz [ 619.192823][ T5887] r8152-cfgselector 6-1: Unknown version 0x0000 [ 619.209381][ T5887] r8152-cfgselector 6-1: config 0 descriptor?? [ 619.274192][ T3534] IPVS: stop unused estimator thread 0... [ 619.415257][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 619.567509][T17449] input: syz0 as /devices/virtual/input/input72 [ 619.605585][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 619.630410][ T10] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.687610][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 619.714917][ T10] usb 10-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 619.744411][T17430] bridge_slave_0: default FDB implementation only supports local addresses [ 619.768056][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.778308][ T5887] r8152-cfgselector 6-1: USB disconnect, device number 51 [ 619.824220][ T10] usb 10-1: config 0 descriptor?? [ 620.105326][ T43] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 620.295637][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 620.321433][T17453] loop2: detected capacity change from 0 to 3 [ 620.361846][T17453] ldm_validate_privheads(): Disk read failed. [ 620.383325][T17453] Dev loop2: unable to read RDB block 3 [ 620.416460][T17453] loop2: unable to read partition table [ 620.435615][T17453] loop2: partition table beyond EOD, truncated [ 620.454987][T17453] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 620.512043][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 620.560884][ T43] usb 3-1: too many configurations: 105, using maximum allowed: 8 [ 620.601433][ T43] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 620.625211][ T43] usb 3-1: can't read configurations, error -71 [ 620.879898][T17482] netlink: 'syz.8.3771': attribute type 2 has an invalid length. [ 622.295627][ T5833] usb 10-1: USB disconnect, device number 2 [ 622.854418][T17539] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3787'. [ 623.765525][ T121] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 623.962686][ T121] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.986218][ T121] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 623.996007][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.050754][ T121] usb 3-1: config 0 descriptor?? [ 624.097296][ T121] pwc: Askey VC010 type 2 USB webcam detected. [ 624.441647][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.453711][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.532858][ T121] pwc: recv_control_msg error -32 req 02 val 2b00 [ 624.549532][ T121] pwc: recv_control_msg error -32 req 02 val 2700 [ 624.784835][ T121] pwc: recv_control_msg error -32 req 04 val 1000 [ 624.807011][ T121] pwc: recv_control_msg error -32 req 04 val 1300 [ 624.827415][ T121] pwc: recv_control_msg error -71 req 04 val 1400 [ 624.847652][ T121] pwc: recv_control_msg error -71 req 02 val 2000 [ 624.865818][ T121] pwc: recv_control_msg error -71 req 02 val 2100 [ 624.882435][ T121] pwc: recv_control_msg error -71 req 04 val 1500 [ 624.908182][ T121] pwc: recv_control_msg error -71 req 02 val 2500 [ 624.940441][ T121] pwc: recv_control_msg error -71 req 02 val 2400 [ 624.959385][ T121] pwc: recv_control_msg error -71 req 02 val 2600 [ 624.975598][ T121] pwc: recv_control_msg error -71 req 02 val 2900 [ 624.993870][ T121] pwc: recv_control_msg error -71 req 02 val 2800 [ 625.006521][ T121] pwc: recv_control_msg error -71 req 04 val 1100 [ 625.020188][ T121] pwc: recv_control_msg error -71 req 04 val 1200 [ 625.053263][ T121] pwc: Registered as video103. [ 625.084595][ T121] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input73 [ 625.178234][ T121] usb 3-1: USB disconnect, device number 45 [ 626.358272][ T43] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 626.419155][ T43] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 627.279272][T17655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3821'. [ 627.524472][T17655] bond2: entered promiscuous mode [ 627.565849][T17655] bond2: entered allmulticast mode [ 627.607504][T17658] ip6tnl1: entered allmulticast mode [ 627.644339][T17658] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 627.674745][T17658] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 628.245346][ T5887] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 628.415595][ T5887] usb 9-1: Using ep0 maxpacket: 32 [ 628.441388][ T5887] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 628.473591][ T5887] usb 9-1: config 0 has no interface number 0 [ 628.487982][ T5887] usb 9-1: config 0 interface 12 has no altsetting 0 [ 628.552719][ T5887] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 628.571440][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.596915][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3828'. [ 628.632626][ T5887] usb 9-1: Product: syz [ 628.642108][ T5887] usb 9-1: Manufacturer: syz [ 628.673609][ T5887] usb 9-1: SerialNumber: syz [ 628.697616][ T5887] usb 9-1: config 0 descriptor?? [ 629.340039][T17706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3835'. [ 629.392547][T17709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3835'. [ 630.186602][ T5887] f81534 9-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 630.215779][ T5887] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 630.223182][ T5887] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 630.256501][ T5887] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 630.316354][ T5887] usb 9-1: USB disconnect, device number 4 [ 630.849640][T17738] tipc: Started in network mode [ 630.854653][T17738] tipc: Node identity 7f000001, cluster identity 4711 [ 630.912628][T17738] tipc: Enabling of bearer rejected, failed to enable media [ 630.944096][ T5838] Bluetooth: hci1: Unable to find connection for big 0x00 [ 631.564954][ T30] audit: type=1326 audit(1748339393.669:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17755 comm="syz.8.3849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7fc00000 [ 631.677481][ T30] audit: type=1326 audit(1748339393.669:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17755 comm="syz.8.3849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7fc00000 [ 631.700778][T17760] loop2: detected capacity change from 0 to 7 [ 631.724582][ T30] audit: type=1326 audit(1748339393.679:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17755 comm="syz.8.3849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7fc00000 [ 631.759722][T17760] Dev loop2: unable to read RDB block 7 [ 631.768426][T17760] loop2: unable to read partition table [ 631.774462][T17760] loop2: partition table beyond EOD, truncated [ 631.794648][T17760] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 632.725626][ T5833] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 632.933661][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 632.987019][ T5833] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 633.034768][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.108277][ T5833] usb 1-1: config 0 descriptor?? [ 633.288398][T17795] netlink: 62 bytes leftover after parsing attributes in process `syz.5.3861'. [ 633.348655][ T5833] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 633.401910][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 633.440449][ T5833] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 633.471461][ T5833] usb 1-1: media controller created [ 633.616547][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 633.934205][T17816] fuse: Bad value for 'fd' [ 634.535366][ T5833] stb0899_attach: Driver disabled by Kconfig [ 634.541581][ T5833] az6027: no front-end attached [ 634.541581][ T5833] [ 634.552399][ T5833] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 634.563229][ T5833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input74 [ 634.602529][ T5833] dvb-usb: schedule remote query interval to 400 msecs. [ 634.622246][ T5833] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 634.781467][ T5887] usb 1-1: USB disconnect, device number 51 [ 634.824363][ T5887] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 635.718165][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 635.724422][T17800] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 636.464866][T17800] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 636.472497][T17800] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 636.480230][T17800] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 636.487434][T17800] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 636.498368][T17800] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 636.504498][T17800] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 636.512685][T17800] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 636.520359][T17800] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 636.531981][T17800] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 636.541004][T17800] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 636.795203][ T5833] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 636.805425][ T5906] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 637.004654][ T5833] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 637.013280][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.026081][ T5833] usb 10-1: config 0 has no interface number 0 [ 637.034485][ T5906] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 637.058782][ T5833] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 637.075821][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.100523][ T5833] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 637.121349][ T5833] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 637.133446][ T5906] usb 1-1: config 0 descriptor?? [ 637.139937][ T5833] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.160606][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 637.228538][ T5833] usb 10-1: config 0 descriptor?? [ 637.268200][ T5833] usb 10-1: can't set config #0, error -71 [ 637.310210][ T5833] usb 10-1: USB disconnect, device number 3 [ 637.591133][ T5906] pwc: recv_control_msg error -32 req 02 val 2b00 [ 637.600569][ T5906] pwc: recv_control_msg error -32 req 02 val 2700 [ 637.795343][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 637.809491][ T5906] pwc: recv_control_msg error -32 req 04 val 1000 [ 637.820010][ T5906] pwc: recv_control_msg error -32 req 04 val 1300 [ 637.833336][ T5906] pwc: recv_control_msg error -71 req 04 val 1400 [ 637.846935][ T5906] pwc: recv_control_msg error -71 req 02 val 2000 [ 637.866314][ T5906] pwc: recv_control_msg error -71 req 02 val 2100 [ 637.876409][ T5906] pwc: recv_control_msg error -71 req 04 val 1500 [ 637.887023][ T5906] pwc: recv_control_msg error -71 req 02 val 2500 [ 637.895056][ T5906] pwc: recv_control_msg error -71 req 02 val 2400 [ 637.904259][ T5906] pwc: recv_control_msg error -71 req 02 val 2600 [ 637.911401][ T5906] pwc: recv_control_msg error -71 req 02 val 2900 [ 637.925288][ T5833] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 637.940200][ T5906] pwc: recv_control_msg error -71 req 02 val 2800 [ 637.949077][ T5906] pwc: recv_control_msg error -71 req 04 val 1100 [ 637.957090][ T5906] pwc: recv_control_msg error -71 req 04 val 1200 [ 637.997296][ T5906] pwc: Registered as video103. [ 638.019338][ T5906] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input75 [ 638.070829][ T5906] usb 1-1: USB disconnect, device number 52 [ 638.100276][ T5833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.125298][ T5833] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 638.175311][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.208073][ T5833] usb 3-1: config 0 descriptor?? [ 638.228169][ T5833] pwc: Askey VC010 type 2 USB webcam detected. [ 638.516545][ T5149] Bluetooth: hci0: command 0x0406 tx timeout [ 638.522838][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 638.599280][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 638.641208][ T5833] pwc: recv_control_msg error -32 req 02 val 2b00 [ 638.710739][ T5833] pwc: recv_control_msg error -32 req 02 val 2700 [ 638.955891][ T5833] pwc: recv_control_msg error -32 req 04 val 1000 [ 638.988919][ T5833] pwc: recv_control_msg error -32 req 04 val 1300 [ 639.025370][ T5833] pwc: recv_control_msg error -71 req 04 val 1400 [ 639.065509][ T5833] pwc: recv_control_msg error -71 req 02 val 2000 [ 639.085809][ T5833] pwc: recv_control_msg error -71 req 02 val 2100 [ 639.133528][ T5833] pwc: recv_control_msg error -71 req 04 val 1500 [ 639.161781][ T5833] pwc: recv_control_msg error -71 req 02 val 2500 [ 639.196866][ T5833] pwc: recv_control_msg error -71 req 02 val 2400 [ 639.224782][ T5833] pwc: recv_control_msg error -71 req 02 val 2600 [ 639.262062][ T5833] pwc: recv_control_msg error -71 req 02 val 2900 [ 639.269650][ T5833] pwc: recv_control_msg error -71 req 02 val 2800 [ 639.286493][ T5833] pwc: recv_control_msg error -71 req 04 val 1100 [ 639.305274][ T5887] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 639.346082][ T5833] pwc: recv_control_msg error -71 req 04 val 1200 [ 639.376532][ T5833] pwc: Registered as video103. [ 639.397968][T17917] syzkaller0: entered allmulticast mode [ 639.412637][ T5833] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input76 [ 639.490524][ T5833] usb 3-1: USB disconnect, device number 46 [ 639.501255][ T5887] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 639.520941][T17917] syzkaller0 (unregistering): left allmulticast mode [ 639.581364][ T5887] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 639.642677][ T5887] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 639.700090][ T5887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.776391][T17909] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 639.791331][ T5887] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 639.877935][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 640.103834][ T5887] usb 10-1: USB disconnect, device number 4 [ 640.605333][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 640.611506][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 640.685343][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 640.709496][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3896'. [ 642.685247][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 642.765254][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 643.047489][ T5833] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 643.249759][ T5833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 643.317019][ T5833] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 643.351846][ T5833] usb 9-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 643.383720][ T5833] usb 9-1: Manufacturer: syz [ 643.427062][ T5833] usb 9-1: config 0 descriptor?? [ 643.447528][ T5833] hub 9-1:0.0: USB hub found [ 643.681546][ T5833] hub 9-1:0.0: 1 port detected [ 643.925857][T18022] kvm: kvm [18021]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x9 [ 644.687541][ T5887] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 644.766695][ T5833] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 644.782993][ T5890] usb 9-1: USB disconnect, device number 5 [ 644.907312][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.026202][ T5887] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.037824][ T121] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 645.080690][ T5887] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 645.111786][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.253209][ T5887] usb 1-1: Product: syz [ 645.263273][ T5887] usb 1-1: Manufacturer: syz [ 645.287883][ T5887] usb 1-1: SerialNumber: syz [ 645.307470][ T121] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 645.349188][ T121] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.446562][ T121] usb 10-1: config 0 descriptor?? [ 645.569316][ T121] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 645.614788][ T5887] usb 1-1: 0:2 : does not exist [ 645.659143][ T5887] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 645.794459][ T121] gp8psk: usb in 128 operation failed. [ 645.866518][ T5887] usb 1-1: USB disconnect, device number 53 [ 645.895389][ T5890] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 645.964781][ T8773] udevd[8773]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.042181][ T121] gp8psk: usb in 146 operation failed. [ 646.075688][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 646.087596][ T121] gp8psk: failed to get FW version [ 646.108327][ T5890] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 646.127017][ T121] gp8psk: usb in 149 operation failed. [ 646.145154][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.155904][ T121] gp8psk: failed to get FPGA version [ 646.197626][ T5890] usb 6-1: Product: syz [ 646.215135][ T5890] usb 6-1: Manufacturer: syz [ 646.230568][ T5890] usb 6-1: SerialNumber: syz [ 646.267086][ T5890] usb 6-1: config 0 descriptor?? [ 646.382958][ T121] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 646.423766][ T121] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 646.564001][T18072] loop2: detected capacity change from 0 to 7 [ 646.603436][T18072] Dev loop2: unable to read RDB block 7 [ 646.631352][ T5833] usb 10-1: USB disconnect, device number 5 [ 646.642113][T18072] loop2: unable to read partition table [ 646.672310][T18072] loop2: partition table beyond EOD, truncated [ 646.693195][T18072] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 646.759575][ T5890] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 646.962970][ T5890] gspca_sunplus: reg_w_riv err -71 [ 646.980101][ T5890] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 647.014099][ T5890] usb 6-1: USB disconnect, device number 52 [ 647.146332][ T121] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 647.345346][ T121] usb 9-1: Using ep0 maxpacket: 32 [ 647.416712][ T121] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 647.498600][ T121] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 647.565307][ T121] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 647.643556][ T121] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 647.673040][ T121] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 647.729901][ T121] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 647.765244][ T121] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 647.796729][ T121] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.844712][ T121] usb 9-1: config 0 descriptor?? [ 648.127595][ T121] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 648.215697][ T121] usb 9-1: USB disconnect, device number 6 [ 648.266617][ T121] usblp0: removed [ 648.765449][ T121] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 648.935420][ T121] usb 9-1: Using ep0 maxpacket: 32 [ 648.946386][ T121] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 648.958618][ T121] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 648.969786][ T121] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 648.979698][ T121] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 649.012943][ T121] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 649.055172][ T121] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 649.089550][ T121] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 649.098983][ T9] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 649.112480][ T121] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.136682][ T121] usb 9-1: config 0 descriptor?? [ 649.165447][ T5890] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 649.278459][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.316420][ T9] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 649.356415][ T5890] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 649.377502][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.395299][ T5890] usb 3-1: config 0 has no interface number 0 [ 649.404564][ T121] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 649.433287][ T5890] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 649.449959][ T9] usb 10-1: config 0 descriptor?? [ 649.466139][ T5890] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 649.494024][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 649.510230][ T5890] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 649.530553][ T5890] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 649.550198][ T5890] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 649.562502][ T5890] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 649.576703][ T5890] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 649.591156][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.603962][ T5890] usb 3-1: config 0 descriptor?? [ 649.632663][T18142] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 649.671017][T18142] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 649.679296][T17495] usb 9-1: USB disconnect, device number 7 [ 649.708628][ T5890] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 649.718548][T17495] usblp0: removed [ 649.787773][T18148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.820380][T18148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.889725][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 649.935269][T18148] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.946078][ T5870] usb 6-1: new low-speed USB device number 53 using dummy_hcd [ 649.963156][ T5890] usb 3-1: USB disconnect, device number 47 [ 649.965571][T18148] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.988663][ T5890] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 649.998111][T18148] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.025295][T18148] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.111702][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 650.120218][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 650.130390][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 650.130587][ T5870] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.139341][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 650.159508][ T5870] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 650.169325][ T5870] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 650.182367][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 650.195249][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 650.199666][ T5870] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 650.212534][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 650.231400][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 650.235277][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.245644][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 650.270996][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 650.295563][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 650.305941][T18153] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 650.322747][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 650.341894][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 650.346706][ T5870] hub 6-1:1.0: bad descriptor, ignoring hub [ 650.375446][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 650.391684][ T5870] hub 6-1:1.0: probe with driver hub failed with error -5 [ 650.419834][ T9] pwc: Registered as video103. [ 650.441171][ T5870] cdc_wdm 6-1:1.0: skipping garbage [ 650.461778][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input77 [ 650.471121][ T5870] cdc_wdm 6-1:1.0: skipping garbage [ 650.508055][ T5870] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 650.533297][ T5870] cdc_wdm 6-1:1.0: Unknown control protocol [ 650.553953][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 650.560657][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 650.568519][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 650.568566][ T9] usb 10-1: USB disconnect, device number 6 [ 650.575161][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 650.577586][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 650.594067][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 650.600338][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.608998][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 650.615652][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 650.622974][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 650.629819][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 650.637264][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 650.643935][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 650.731542][T18161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3961'. [ 651.229252][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 651.235966][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 651.242500][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 651.249168][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 651.256830][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 651.263495][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 651.270209][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 651.276868][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 651.445672][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 651.695197][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 651.726137][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 651.778380][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 651.825224][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 651.865669][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 651.900537][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 651.945489][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 652.019701][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 652.078179][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.176670][ T9] usb 3-1: config 0 descriptor?? [ 652.494489][ T9] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 652.604019][ T9] usb 3-1: USB disconnect, device number 48 [ 652.735254][T17821] usb 6-1: USB disconnect, device number 53 [ 652.768084][ T9] usblp1: removed [ 653.195261][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 653.375497][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 653.450574][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 653.525574][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 653.527818][T18200] netlink: 'syz.8.3971': attribute type 1 has an invalid length. [ 653.575313][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 653.584410][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 653.701080][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 653.746440][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 653.788282][T18200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 653.838944][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 653.888408][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.945979][ T9] usb 3-1: config 0 descriptor?? [ 654.181415][T18216] loop2: detected capacity change from 0 to 7 [ 654.227468][T18216] Dev loop2: unable to read RDB block 7 [ 654.239694][T18216] loop2: unable to read partition table [ 654.269723][T18216] loop2: partition table beyond EOD, truncated [ 654.292187][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 654.305242][T18216] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 654.387040][ T9] usb 3-1: USB disconnect, device number 49 [ 654.428449][ T9] usblp0: removed [ 655.585848][ T43] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 655.756224][ T5906] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 655.764247][ T43] usb 9-1: Using ep0 maxpacket: 16 [ 655.787522][ T43] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.834106][ T43] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.864606][ T43] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.874660][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.895309][ T43] usb 9-1: Product: syz [ 655.901924][ T43] usb 9-1: Manufacturer: syz [ 655.920780][ T43] usb 9-1: SerialNumber: syz [ 655.967563][ T5906] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 656.011006][ T5906] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 656.041503][ T5906] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 656.074262][ T5906] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.128850][T18245] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 656.176862][ T43] usb 9-1: 0:2 : does not exist [ 656.202774][ T43] usb 9-1: unit 9 not found! [ 656.236447][ T43] usb 9-1: 4:0: cannot get min/max values for control 5 (id 4) [ 656.284706][ T43] usb 9-1: 4:0: cannot get min/max values for control 6 (id 4) [ 656.327519][ T5906] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 656.352761][ T43] usb 9-1: USB disconnect, device number 8 [ 656.618215][ T5906] usb 10-1: USB disconnect, device number 7 [ 656.865563][T17495] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 656.903773][T18272] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3991'. [ 656.945208][T18272] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3991'. [ 656.975609][T18272] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3991'. [ 657.045210][T17495] usb 6-1: Using ep0 maxpacket: 8 [ 657.064120][T17495] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 657.090829][T17495] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.118849][T17495] usb 6-1: Product: syz [ 657.139820][T17495] usb 6-1: Manufacturer: syz [ 657.148675][T17495] usb 6-1: SerialNumber: syz [ 657.164903][T17495] usb 6-1: config 0 descriptor?? [ 657.478041][T17495] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 658.065484][ T5906] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 658.074691][T18295] ================================================================== [ 658.082844][T18295] BUG: KASAN: use-after-free in __crypto_shash_import+0x26a/0x2a0 [ 658.090694][T18295] Write of size 1 at addr ffff88816b430347 by task syz.2.3998/18295 [ 658.098705][T18295] [ 658.101099][T18295] CPU: 0 UID: 0 PID: 18295 Comm: syz.2.3998 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 658.101134][T18295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 658.101155][T18295] Call Trace: [ 658.101169][T18295] [ 658.101180][T18295] dump_stack_lvl+0x189/0x250 [ 658.101216][T18295] ? __virt_addr_valid+0x1c8/0x5c0 [ 658.101247][T18295] ? rcu_is_watching+0x15/0xb0 [ 658.101276][T18295] ? __kasan_check_byte+0x12/0x40 [ 658.101301][T18295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.101329][T18295] ? rcu_is_watching+0x15/0xb0 [ 658.101354][T18295] ? lock_release+0x4b/0x3e0 [ 658.101379][T18295] ? __virt_addr_valid+0x1c8/0x5c0 [ 658.101414][T18295] ? __virt_addr_valid+0x4a5/0x5c0 [ 658.101444][T18295] print_report+0xd2/0x2b0 [ 658.101470][T18295] ? __crypto_shash_import+0x26a/0x2a0 [ 658.101489][T18295] kasan_report+0x118/0x150 [ 658.101510][T18295] ? __local_bh_enable_ip+0x12d/0x1c0 [ 658.101541][T18295] ? __crypto_shash_import+0x26a/0x2a0 [ 658.101567][T18295] __crypto_shash_import+0x26a/0x2a0 [ 658.101589][T18295] crypto_shash_import+0x84/0x230 [ 658.101610][T18295] hash_accept+0x1fb/0x280 [ 658.101638][T18295] do_accept+0x48c/0x680 [ 658.101663][T18295] ? __pfx_do_accept+0x10/0x10 [ 658.101701][T18295] __sys_accept4+0x11c/0x1c0 [ 658.101724][T18295] ? __pfx___sys_accept4+0x10/0x10 [ 658.101745][T18295] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 658.101772][T18295] __ia32_sys_accept4+0x9a/0xb0 [ 658.101794][T18295] __do_fast_syscall_32+0xb4/0x110 [ 658.101824][T18295] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.101850][T18295] do_fast_syscall_32+0x34/0x80 [ 658.101875][T18295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 658.101900][T18295] RIP: 0023:0xf712e539 [ 658.101923][T18295] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 658.101942][T18295] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016c [ 658.101968][T18295] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 658.101984][T18295] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 658.101997][T18295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 658.102018][T18295] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 658.102030][T18295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 658.102051][T18295] [ 658.102058][T18295] [ 658.342339][T18295] The buggy address belongs to the physical page: [ 658.348789][T18295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16b430 [ 658.357682][T18295] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 658.364925][T18295] raw: 057ff00000000000 ffffea0005ad0c08 ffffea0005ad0c08 0000000000000000 [ 658.373536][T18295] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 658.382141][T18295] page dumped because: kasan: bad access detected [ 658.388584][T18295] page_owner info is not present (never set?) [ 658.394660][T18295] [ 658.397019][T18295] Memory state around the buggy address: [ 658.402662][T18295] ffff88816b430200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 658.410745][T18295] ffff88816b430280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 658.418827][T18295] >ffff88816b430300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 658.426906][T18295] ^ [ 658.433078][T18295] ffff88816b430380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 658.441205][T18295] ffff88816b430400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 658.449281][T18295] ================================================================== [ 658.639894][ T5906] usb 9-1: Using ep0 maxpacket: 16 [ 658.658107][ T5906] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.722984][T17495] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 658.746831][ T5906] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.759656][T17495] usb 6-1: USB disconnect, device number 54 [ 658.808241][ T5906] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 658.854820][ T5906] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.914304][ T5906] usb 9-1: Product: syz [ 658.924460][ T5906] usb 9-1: Manufacturer: syz [ 658.931823][ T5906] usb 9-1: SerialNumber: syz [ 659.014612][T18295] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 659.021990][T18295] CPU: 0 UID: 0 PID: 18295 Comm: syz.2.3998 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 659.033766][T18295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 659.043879][T18295] Call Trace: [ 659.047212][T18295] [ 659.050189][T18295] dump_stack_lvl+0x99/0x250 [ 659.054848][T18295] ? __asan_memcpy+0x40/0x70 [ 659.059503][T18295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 659.064776][T18295] ? __pfx__printk+0x10/0x10 [ 659.069434][T18295] panic+0x2db/0x790 [ 659.073402][T18295] ? __pfx_panic+0x10/0x10 [ 659.077997][T18295] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 659.083950][T18295] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 659.090337][T18295] ? print_memory_metadata+0x314/0x400 [ 659.095867][T18295] ? __crypto_shash_import+0x26a/0x2a0 [ 659.101392][T18295] check_panic_on_warn+0x89/0xb0 [ 659.106495][T18295] ? __crypto_shash_import+0x26a/0x2a0 [ 659.112002][T18295] end_report+0x78/0x160 [ 659.116281][T18295] kasan_report+0x129/0x150 [ 659.120813][T18295] ? __local_bh_enable_ip+0x12d/0x1c0 [ 659.126215][T18295] ? __crypto_shash_import+0x26a/0x2a0 [ 659.131709][T18295] __crypto_shash_import+0x26a/0x2a0 [ 659.137027][T18295] crypto_shash_import+0x84/0x230 [ 659.142082][T18295] hash_accept+0x1fb/0x280 [ 659.146525][T18295] do_accept+0x48c/0x680 [ 659.150795][T18295] ? __pfx_do_accept+0x10/0x10 [ 659.155598][T18295] __sys_accept4+0x11c/0x1c0 [ 659.160230][T18295] ? __pfx___sys_accept4+0x10/0x10 [ 659.165372][T18295] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 659.171217][T18295] __ia32_sys_accept4+0x9a/0xb0 [ 659.176102][T18295] __do_fast_syscall_32+0xb4/0x110 [ 659.181250][T18295] ? lockdep_hardirqs_on+0x9c/0x150 [ 659.186481][T18295] do_fast_syscall_32+0x34/0x80 [ 659.191361][T18295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 659.197725][T18295] RIP: 0023:0xf712e539 [ 659.201818][T18295] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 659.221447][T18295] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016c [ 659.229878][T18295] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 659.237862][T18295] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 659.245853][T18295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 659.253845][T18295] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 659.261837][T18295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 659.269839][T18295] [ 659.273260][T18295] Kernel Offset: disabled [ 659.277625][T18295] Rebooting in 86400 seconds..