last executing test programs: 46.123938163s ago: executing program 3 (id=869): bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x110}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x4000) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000140)={0x0, 0x6, 0x0, 0xeab0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002a80)={'sit0\x00', &(0x7f00000029c0)={'gretap0\x00', 0x0, 0x20, 0x1, 0x6, 0x0, {{0x6, 0x4, 0x2, 0x33, 0x18, 0x66, 0x0, 0x7f, 0x29, 0x0, @broadcast, @local, {[@rr={0x7, 0x3, 0x63}]}}}}}) r4 = socket(0x200000000000011, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x802, r5, 0x1, 0x0, 0x6, @local}, 0x14) prctl$PR_SET_MM(0xd, 0x0, &(0x7f0000004000/0x3000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg$unix(r9, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000802"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$sndmidi(0x0, 0x822, 0x610080) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40), 0x0, 0x2102, 0x0) 45.061793334s ago: executing program 3 (id=872): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000040)='./file0\x00', 0x7fffffff) 44.7526257s ago: executing program 3 (id=873): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c71, 0x3, 0x1000, 0x101, 0x8, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 43.828066418s ago: executing program 3 (id=879): r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 43.521360444s ago: executing program 3 (id=880): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) 43.132205752s ago: executing program 3 (id=883): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000040)='./file0\x00', 0x7fffffff) 42.71120402s ago: executing program 32 (id=883): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000040)='./file0\x00', 0x7fffffff) 7.7407531s ago: executing program 0 (id=1001): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.19654186s ago: executing program 1 (id=1004): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40001) syz_usb_disconnect(r0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0x18) 6.049990432s ago: executing program 5 (id=1005): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={0x0}) 5.651476711s ago: executing program 2 (id=1008): r0 = gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee2, 0x2, 0x3, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x20a}, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) pipe(&(0x7f0000000d00)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x2000c044) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 5.422646485s ago: executing program 2 (id=1009): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT], 0x1, 0x273, &(0x7f0000001200)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) creat(&(0x7f0000000300)='./file1\x00', 0x118) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 5.275377357s ago: executing program 0 (id=1010): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 5.196141079s ago: executing program 2 (id=1011): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2, 0x5, 0x84) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001000000"], 0x1c}}, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 4.249807347s ago: executing program 5 (id=1013): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 4.12764123s ago: executing program 0 (id=1014): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000100)='./file1\x00', 0x1210010, &(0x7f00000004c0)={[{}, {@gid={'gid', 0x3d, r1}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@codepage={'codepage', 0x3d, 'iso8859-1'}}, {@dir_umask={'dir_umask', 0x3d, 0x8}}, {@file_umask={'file_umask', 0x3d, 0x50}}, {}, {@uid}]}, 0x7, 0x318, &(0x7f0000000800)="$eJzs3U1rE08cB/Dv7CZp8m/pf20rBY/VgqfS1oPixSLFi2/AgxRrm0LpWkEraEGMnkW8CYJHb55F34JexDegpx7Ek16CB1dmZmcf0tnNQ9tsQr4faJrszsNvdnayMynpgohG1tXVb28vHMgfUQbgArgMOACqQAnAacxWH+zube/59c28glyVQ/4I6JziUJqN3botq8yncoQ8+aqEieQ2OhlBEATf26b61ZdYqDhCj/1DHGAsHJ1qf7XvkZ2Mhm7XaEn0sGiiiYeYLDIcIiIqXnj9d8KrxEQ4f3ccYD6chw/79T81v2kWF8dAiK7/jn4dCHl8/le74vWeWsLJ3nfMKtFWlvWcCOLDXYE+s1IdINqtKlUsTm1r268vNFQBz3AllEg2ox43YRqiZEVb0b/mLGvTHHltzzeu2lCWbVjOiH+66xo//sAre3VrnzuISXwSX8Sa8PAam9H8rxQIeXDU8fFaekrHv5hdomqlp1OlWhmv30+pSs6YHvjwLm5lLeu4VuHKWGxkKaJ1/u6ZOF9WsnNhCumPFXTrlrJbp3JNW3MtR6//WHPNtOaqbZX9+sLGXT/3o5RjY13RiRfihpjDT7zHamL+78jU88gemalRLlTK8MzIbU9JpczoxxQ1gO90NTJJuWbt6HzPcRuXMHn/0f7Ouu/X7xX/xAyVAYlHn4jh6Si3yN+JNKjKJ2UAx1bp3yAIrLtK6EeTy6qpF9/ETd7fWRcN/fJoVaARFWh2rWQnBrACINxi3hF6qf1JlGssLrCj7L9lb6st9hPSRNWHE9JUldrlYqyjkVLrodLrj3fW/Z7eiWjIxJ2O2ZtFB0NFkPMuodd/ifXKonrXkQ9ezmokaFd4osSljBXQlHr8r7MVXFRs5jxx3Dxps+Y6ex4411KjA1Pj09ZivTBODOJfJbv/U4ZYxVfc4uf/RERERERERERERERERERERERERETDpttvI/TydYJ0jQcj+I83iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOJnH/X8BVd4ypFH7/X7eD+/+a+1IQUc/+BQAA//8KX2Ch") 3.876014405s ago: executing program 5 (id=1015): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x224, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x1d0, 0x8, 0x0, 0x1, [{0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x1c0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x4}]}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) 3.860292095s ago: executing program 0 (id=1016): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000100)={0x2, 0x100, 0x9, 0x5, 0x7, 0x6}) 2.820105525s ago: executing program 1 (id=1018): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x800000, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00", 0x57}], 0x1) 2.740644627s ago: executing program 4 (id=1019): r0 = gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee2, 0x2, 0x3, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x20a}, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) pipe(&(0x7f0000000d00)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x2000c044) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 2.664383278s ago: executing program 5 (id=1020): syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xb00, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}}}}}}, 0x0) 2.620391209s ago: executing program 2 (id=1021): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.59719427s ago: executing program 1 (id=1022): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) listen(r2, 0x80) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x8, 0x0) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a3000000000"], 0x60}}, 0xc000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}], 0x2, 0x32001, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x34}}, 0x0) 2.412278703s ago: executing program 5 (id=1023): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={0x0}) 2.331641935s ago: executing program 4 (id=1024): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r5, 0x400000}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r5, 0x4) openat$kvm(0xffffff9c, 0x0, 0x80000, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB='$', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf250f00000008000300", @ANYRES32, @ANYBLOB="050033003c"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x40) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.217561987s ago: executing program 1 (id=1025): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 1.956073802s ago: executing program 1 (id=1026): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) listen(r2, 0x80) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x8, 0x0) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}], 0x2, 0x32001, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x34}}, 0x0) 1.228718746s ago: executing program 0 (id=1027): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x20802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000001c0)=""/133) r1 = open(0x0, 0x10000, 0x80) r2 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$TCGETS(r1, 0x5401, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$EVIOCGID(r0, 0x80084502, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x90100) ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0) 1.228586246s ago: executing program 1 (id=1028): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40001) syz_usb_disconnect(r0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0x18) 1.228268306s ago: executing program 4 (id=1029): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2000019, 0x0, 0xfc, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009500", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2102039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x1000, {0x6, 0xcbff, 0x0, {0x5, 0x5, 0x7, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0x1, 0x0, 0xffffffffffffffff, 0xa8, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00'}, 0x18) utime(&(0x7f0000000000)='./file0\x00', 0x0) 1.03016216s ago: executing program 4 (id=1030): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_setlink={0x20, 0x13, 0x1, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x5402a, 0x2200}}, 0x20}}, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./bus\x00', 0x3200041, &(0x7f0000000780)=ANY=[@ANYBLOB="6561733d6e6f2c6572726f72733d636f6e74696e75652c6572726f72733d72656d6f756e742d726f2c636865636b3d6e6f6e652c00076f3a0f9d8935b4d91c8ce96292849df91aaec1b5b143a4030067c9c746face505fd3c79169da7a899e259d6d91420646b0c5ddaf54d1381d9ba59c207b67321a6ea74a3f07d5e4c8a1665ff057b8dd25e1a231ade8c0c72d13a2858d28bcab6085567a3f11c5e289760ae9109f81b7635c86398c0ada9c72ded9494066d5d67ff19f2ca1531a94a376c9e7e6b542e395148f81fa0f544acb45b30f90e1fc3ff24a66bc91a355a4f4c993e0da9de27f94c84c9f333321dd5900e870d728f42e154a8776a9990cb47c3c63033de79ec6"], 0x1, 0x9e28, &(0x7f0000026280)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) 808.371914ms ago: executing program 5 (id=1031): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, 0x0) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) 500.96037ms ago: executing program 0 (id=1032): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2, 0x5, 0x84) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001000000"], 0x1c}}, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 324.123794ms ago: executing program 4 (id=1033): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 262.801305ms ago: executing program 2 (id=1034): r0 = gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee2, 0x2, 0x3, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x20a}, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) pipe(&(0x7f0000000d00)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x2000c044) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 45.93609ms ago: executing program 2 (id=1035): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)=ANY=[@ANYBLOB="1401"], 0x114}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 4 (id=1036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000300)) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x8, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) faccessat(r7, 0x0, 0x10) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x14}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x200040d0) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x4000000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) kernel console output (not intermixed with test programs): 4.481135][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.531558][ T14] usb 4-1: device descriptor read/8, error -71 [ 164.560733][ T4868] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 164.650830][ T14] usb usb4-port1: unable to enumerate USB device [ 164.791606][ T4868] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 164.815122][ T4868] usb 5-1: config 0 has no interface number 0 [ 164.879401][ T4868] usb 5-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 164.940731][ T4868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.948743][ T4868] usb 5-1: Product: syz [ 164.980843][ T4868] usb 5-1: Manufacturer: syz [ 165.001711][ T4868] usb 5-1: SerialNumber: syz [ 165.006858][ T5521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 165.041245][ T4868] usb 5-1: config 0 descriptor?? [ 165.222528][ T5526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 165.259176][ T5527] tipc: Started in network mode [ 165.268778][ T5527] tipc: Node identity 7ac8d0c9d5a2, cluster identity 4711 [ 165.286313][ T5527] tipc: Enabled bearer , priority 0 [ 165.310308][ T5527] device syzkaller0 entered promiscuous mode [ 165.419348][ T5527] tipc: Resetting bearer [ 165.482401][ T5525] tipc: Resetting bearer [ 165.561012][ T5525] tipc: Disabling bearer [ 165.883952][ T4868] kaweth 5-1:0.58: Firmware present in device. [ 165.891393][ T4868] kaweth 5-1:0.58: Error reading configuration (-71), no net device created [ 165.913270][ T4868] kaweth: probe of 5-1:0.58 failed with error -5 [ 165.943529][ T5537] netlink: 43 bytes leftover after parsing attributes in process `syz.4.381'. [ 165.978380][ T4868] usb 5-1: USB disconnect, device number 7 [ 166.001887][ T5537] loop4: detected capacity change from 0 to 128 [ 166.868153][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 167.190511][ T26] audit: type=1326 audit(1758092768.977:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd21b2ada9 code=0x7ffc0000 [ 167.249100][ T26] audit: type=1326 audit(1758092769.007:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd21b8eba9 code=0x7ffc0000 [ 167.275045][ T26] audit: type=1326 audit(1758092769.007:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd21b2ada9 code=0x7ffc0000 [ 167.306639][ T26] audit: type=1326 audit(1758092769.007:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd21b2ada9 code=0x7ffc0000 [ 167.347312][ T26] audit: type=1326 audit(1758092769.007:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd21b2ada9 code=0x7ffc0000 [ 167.397231][ T26] audit: type=1326 audit(1758092769.007:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd21b2ada9 code=0x7ffc0000 [ 167.569297][ T26] audit: type=1326 audit(1758092769.007:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd21b2ada9 code=0x7ffc0000 [ 167.753242][ T26] audit: type=1326 audit(1758092769.007:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd21b2ada9 code=0x7ffc0000 [ 167.869768][ T26] audit: type=1326 audit(1758092769.007:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd21b2ada9 code=0x7ffc0000 [ 167.900381][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 168.039542][ T26] audit: type=1326 audit(1758092769.007:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd21b8eba9 code=0x7ffc0000 [ 168.062898][ T27] usb 1-1: device descriptor read/64, error -71 [ 168.205574][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 168.330889][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 168.430607][ T4356] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 168.500413][ T27] usb 1-1: device descriptor read/64, error -71 [ 168.520046][ T4347] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 168.620444][ T27] usb usb1-port1: attempt power cycle [ 168.627192][ T4356] usb 3-1: config 0 has an invalid interface number: 58 but max is 0 [ 168.636145][ T4356] usb 3-1: config 0 has no interface number 0 [ 168.645871][ T4356] usb 3-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 168.655769][ T4356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.664716][ T4356] usb 3-1: Product: syz [ 168.668890][ T4356] usb 3-1: Manufacturer: syz [ 168.674574][ T4356] usb 3-1: SerialNumber: syz [ 168.681662][ T4356] usb 3-1: config 0 descriptor?? [ 168.710429][ T4347] usb 5-1: Using ep0 maxpacket: 32 [ 168.717306][ T4347] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 168.727915][ T4347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.738931][ T4347] usb 5-1: config 0 descriptor?? [ 168.957728][ T4347] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 168.985681][ T4347] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 169.000320][ T4347] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 169.040557][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 169.070617][ T27] usb 1-1: device descriptor read/8, error -71 [ 169.293021][ T5580] netlink: 43 bytes leftover after parsing attributes in process `syz.1.396'. [ 169.316225][ T5580] loop1: detected capacity change from 0 to 128 [ 169.370964][ T27] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 169.462892][ T27] usb 1-1: device descriptor read/8, error -71 [ 169.650941][ T27] usb usb1-port1: unable to enumerate USB device [ 170.028936][ T4356] kaweth 3-1:0.58: Firmware present in device. [ 170.037346][ T4356] kaweth 3-1:0.58: Error reading configuration (-71), no net device created [ 170.049711][ T4356] kaweth: probe of 3-1:0.58 failed with error -5 [ 170.099985][ T4356] usb 3-1: USB disconnect, device number 8 [ 170.592392][ T5595] loop2: detected capacity change from 0 to 7 [ 170.602690][ T4257] Dev loop2: unable to read RDB block 7 [ 170.609202][ T4257] loop2: unable to read partition table [ 170.617121][ T4257] loop2: partition table beyond EOD, truncated [ 170.626542][ T5595] Dev loop2: unable to read RDB block 7 [ 170.651650][ T5595] loop2: unable to read partition table [ 170.667360][ T5595] loop2: partition table beyond EOD, truncated [ 170.684943][ T5595] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 170.825706][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.399'. [ 170.944399][ T5605] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 171.157625][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 171.384142][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 171.670440][ T4356] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 171.882812][ T4356] usb 2-1: config 0 has an invalid interface number: 58 but max is 0 [ 171.902111][ T4356] usb 2-1: config 0 has no interface number 0 [ 171.924124][ T4356] usb 2-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 171.959387][ T4356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.990800][ T4356] usb 2-1: Product: syz [ 171.995115][ T4356] usb 2-1: Manufacturer: syz [ 172.020796][ T4356] usb 2-1: SerialNumber: syz [ 172.040386][ T4356] usb 2-1: config 0 descriptor?? [ 172.341212][ T5624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.409'. [ 172.532277][ T5627] netlink: 43 bytes leftover after parsing attributes in process `syz.4.411'. [ 172.617067][ T5627] loop4: detected capacity change from 0 to 128 [ 172.880684][ T5583] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 173.115174][ T5583] usb 3-1: Using ep0 maxpacket: 16 [ 173.190238][ T5583] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.253320][ T5583] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 173.263656][ T5583] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 173.273945][ T5583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.358245][ T5583] usb 3-1: config 0 descriptor?? [ 173.596610][ T4356] kaweth 2-1:0.58: Firmware present in device. [ 173.620551][ T4356] kaweth 2-1:0.58: Error reading configuration (-71), no net device created [ 173.655158][ T4356] kaweth: probe of 2-1:0.58 failed with error -5 [ 173.710277][ T4356] usb 2-1: USB disconnect, device number 11 [ 173.797947][ T5644] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 174.022764][ T5654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 174.067477][ T5654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 174.103515][ T5654] device bridge0 entered promiscuous mode [ 174.143849][ T5654] device ip6gretap0 entered promiscuous mode [ 174.175934][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 174.534850][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 174.973429][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 175.286193][ T5678] tipc: Enabled bearer , priority 0 [ 175.364100][ T5678] device syzkaller0 entered promiscuous mode [ 175.516066][ T5679] tipc: Resetting bearer [ 175.599208][ T4316] usb 3-1: USB disconnect, device number 9 [ 175.722559][ T5677] tipc: Resetting bearer [ 175.964903][ T5677] tipc: Disabling bearer [ 176.466815][ T5688] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 177.018720][ T5699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 177.512755][ T5583] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 177.597132][ T5583] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.840589][ T5635] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 178.040397][ T5635] usb 3-1: Using ep0 maxpacket: 16 [ 178.047291][ T5635] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.111006][ T5635] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 178.204260][ T5635] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 178.257618][ T5635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.289423][ T5717] tipc: Enabled bearer , priority 0 [ 178.326307][ T5635] usb 3-1: config 0 descriptor?? [ 178.346380][ T5717] device syzkaller0 entered promiscuous mode [ 178.561828][ T5717] tipc: Resetting bearer [ 178.641626][ T5716] tipc: Resetting bearer [ 178.663745][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 178.695768][ T5716] tipc: Disabling bearer [ 179.103037][ T5726] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 179.958196][ T5731] vivid-000: ================= START STATUS ================= [ 180.008282][ T5731] vivid-000: Test Pattern: 75% Colorbar [ 180.020413][ T5731] vivid-000: Fill Percentage of Frame: 100 [ 180.026399][ T5731] vivid-000: Horizontal Movement: No Movement [ 180.029007][ T5733] loop2: detected capacity change from 0 to 7 [ 180.039393][ T5731] vivid-000: Vertical Movement: No Movement [ 180.047812][ T5731] vivid-000: OSD Text Mode: All [ 180.058026][ T5731] vivid-000: Show Border: false [ 180.066384][ T5731] vivid-000: Show Square: false [ 180.074819][ T5731] vivid-000: Sensor Flipped Horizontally: false [ 180.082231][ T5731] vivid-000: Sensor Flipped Vertically: false [ 180.089213][ T5731] vivid-000: Insert SAV Code in Image: false [ 180.096102][ T5731] vivid-000: Insert EAV Code in Image: false [ 180.104002][ T5731] vivid-000: Insert Video Guard Band: false [ 180.111222][ T4257] Dev loop2: unable to read RDB block 7 [ 180.118110][ T5731] vivid-000: Reduced Framerate: [ 180.118173][ T4257] loop2: AHDI p1 p2 p3 [ 180.123642][ T5731] false [ 180.123689][ T5731] vivid-000: Enable Capture Cropping: true [ 180.123712][ T5731] vivid-000: Enable Capture Composing: true [ 180.123735][ T5731] vivid-000: Enable Capture Scaler: true [ 180.123757][ T5731] vivid-000: Timestamp Source: End of Frame [ 180.123780][ T5731] vivid-000: Colorspace: Rec. 709 [ 180.123801][ T5731] vivid-000: Transfer Function: Default [ 180.123823][ T5731] vivid-000: Y'CbCr Encoding: Default [ 180.123846][ T5731] vivid-000: HSV Encoding: Hue 0-179 [ 180.123868][ T5731] vivid-000: Quantization: Default [ 180.123891][ T5731] vivid-000: Apply Alpha To Red Only: false [ 180.123913][ T5731] vivid-000: Standard Aspect Ratio: 4x3 [ 180.123936][ T5731] vivid-000: DV Timings Signal Mode: Current DV Timings [ 180.123958][ T5731] vivid-000: DV Timings: 640x480p59 inactive [ 180.123986][ T5731] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 180.124009][ T5731] vivid-000: Maximum EDID Blocks: 2 [ 180.124032][ T5731] vivid-000: Limited RGB Range (16-235): true [ 180.124053][ T5731] vivid-000: Rx RGB Quantization Range: Automatic [ 180.124075][ T5731] vivid-000: Power Present: 0x00000001 [ 180.124100][ T5731] tpg source WxH: 1280x720 (Y'CbCr) [ 180.124130][ T5731] tpg field: 1 [ 180.124137][ T5731] tpg crop: 1280x720@0x0 [ 180.124150][ T5731] tpg compose: 1280x720@0x0 [ 180.124163][ T5731] tpg colorspace: 3 [ 180.124170][ T5731] tpg transfer function: 0/0 [ 180.124180][ T5731] tpg Y'CbCr encoding: 0/0 [ 180.124190][ T5731] tpg quantization: 0/0 [ 180.124199][ T5731] tpg RGB range: 0/1 [ 180.124209][ T5731] vivid-000: ================== END STATUS ================== [ 180.291592][ T4257] loop2: partition table partially beyond EOD, truncated [ 180.301627][ T4257] loop2: p1 start 1601398130 is beyond EOD, truncated [ 180.309079][ T4257] loop2: p2 start 1702059890 is beyond EOD, truncated [ 180.320342][ T5733] Dev loop2: unable to read RDB block 7 [ 180.335977][ T5733] loop2: AHDI p1 p2 p3 [ 180.340961][ T5733] loop2: partition table partially beyond EOD, truncated [ 180.349188][ T5733] loop2: p1 start 1601398130 is beyond EOD, truncated [ 180.358281][ T5733] loop2: p2 start 1702059890 is beyond EOD, truncated [ 180.427262][ T5635] usb 3-1: USB disconnect, device number 10 [ 180.756613][ T5739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 181.170903][ T5748] netlink: 43 bytes leftover after parsing attributes in process `syz.2.448'. [ 181.226642][ T5748] loop2: detected capacity change from 0 to 128 [ 181.243439][ T5751] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 181.880751][ T5757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'. [ 182.316089][ T4325] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 182.434409][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 182.500132][ T5772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 182.520753][ T4325] usb 1-1: Using ep0 maxpacket: 16 [ 182.527433][ T4325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.565394][ T4325] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.592502][ T4325] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 182.645935][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.715675][ T4325] usb 1-1: config 0 descriptor?? [ 182.864042][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 182.864058][ T26] audit: type=1326 audit(1758092784.657:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5760 comm="syz.2.456" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22dcd8eba9 code=0x0 [ 183.370446][ T5789] loop6: detected capacity change from 0 to 524287999 [ 183.425261][ T5793] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 183.457190][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.466591][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.516251][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.525452][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.587895][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.597153][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.664608][ T5797] netlink: 43 bytes leftover after parsing attributes in process `syz.2.466'. [ 183.675293][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.684494][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.709733][ T5799] tipc: Started in network mode [ 183.725284][ T5797] loop2: detected capacity change from 0 to 128 [ 183.742855][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.743193][ T5799] tipc: Node identity bacc9377454b, cluster identity 4711 [ 183.752073][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.783543][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.792769][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.834317][ T5799] tipc: Enabled bearer , priority 0 [ 183.850358][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.859563][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.878459][ T5800] device syzkaller0 entered promiscuous mode [ 183.941368][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.950759][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.960782][ T4257] ldm_validate_partition_table(): Disk read failed. [ 183.994214][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.003486][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.016135][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.025344][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.037451][ T5799] tipc: Resetting bearer [ 184.060510][ T5796] tipc: Resetting bearer [ 184.097128][ T4257] Dev loop6: unable to read RDB block 0 [ 184.111495][ T5796] tipc: Disabling bearer [ 184.115141][ T4257] loop6: unable to read partition table [ 185.050946][ T126] usb 1-1: USB disconnect, device number 18 [ 185.237623][ T5819] bridge0: port 3(netdevsim0) entered blocking state [ 185.278358][ T5819] bridge0: port 3(netdevsim0) entered disabled state [ 185.309575][ T5819] device netdevsim0 entered promiscuous mode [ 185.336841][ T5819] bridge0: port 3(netdevsim0) entered blocking state [ 185.344727][ T5819] bridge0: port 3(netdevsim0) entered forwarding state [ 185.616659][ T5829] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 186.118511][ T5840] netlink: 43 bytes leftover after parsing attributes in process `syz.2.480'. [ 186.187809][ T5840] loop2: detected capacity change from 0 to 128 [ 187.055554][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 188.575540][ T5867] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 188.951793][ T5876] netlink: 43 bytes leftover after parsing attributes in process `syz.0.493'. [ 188.970648][ T5876] loop0: detected capacity change from 0 to 128 [ 190.008145][ T5888] netlink: 68 bytes leftover after parsing attributes in process `syz.1.497'. [ 190.828997][ T5903] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 190.878734][ T5904] tipc: Enabled bearer , priority 0 [ 190.980796][ T5904] device syzkaller0 entered promiscuous mode [ 191.082847][ T5905] tipc: Resetting bearer [ 191.118090][ T5902] tipc: Resetting bearer [ 191.261800][ T5902] tipc: Disabling bearer [ 191.797941][ T5916] netlink: 43 bytes leftover after parsing attributes in process `syz.4.507'. [ 191.826048][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 191.915089][ T5916] loop4: detected capacity change from 0 to 128 [ 192.020527][ T5583] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 192.111276][ T4325] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 192.485091][ T5583] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 192.545907][ T5583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.555830][ T5583] usb 2-1: Product: syz [ 192.561565][ T5583] usb 2-1: Manufacturer: syz [ 192.567186][ T5583] usb 2-1: SerialNumber: syz [ 192.611552][ T5583] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 192.730330][ T4325] usb 1-1: Using ep0 maxpacket: 16 [ 192.737993][ T4325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.791982][ T5583] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 192.834020][ T4325] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.017507][ T4325] usb 1-1: config 0 interface 0 has no altsetting 0 [ 193.020643][ T4356] usb 2-1: USB disconnect, device number 12 [ 193.065558][ T4325] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 193.124908][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.188516][ T4325] usb 1-1: config 0 descriptor?? [ 193.223698][ T4325] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 193.696236][ T5938] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 193.840503][ T5583] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 193.848088][ T5583] ath9k_htc: Failed to initialize the device [ 193.862276][ T5943] tipc: Enabled bearer , priority 0 [ 193.902091][ T4356] usb 2-1: ath9k_htc: USB layer deinitialized [ 193.916600][ T5949] device syzkaller0 entered promiscuous mode [ 194.010847][ T5949] tipc: Resetting bearer [ 194.033050][ T5941] tipc: Resetting bearer [ 194.149313][ T5941] tipc: Disabling bearer [ 194.245994][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.253382][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.145224][ T4356] usb 1-1: USB disconnect, device number 19 [ 195.507572][ T5972] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 195.841446][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 195.891681][ T5977] capability: warning: `syz.3.528' uses 32-bit capabilities (legacy support in use) [ 196.008021][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 196.320469][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 196.326554][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 196.333145][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 196.333193][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 196.345569][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 196.803579][ T5989] tipc: Enabled bearer , priority 0 [ 196.846081][ T5989] device syzkaller0 entered promiscuous mode [ 196.928858][ T5989] tipc: Resetting bearer [ 196.980784][ T5988] tipc: Resetting bearer [ 197.080815][ T5988] tipc: Disabling bearer [ 197.460730][ T5583] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 197.567233][ T6002] netlink: 43 bytes leftover after parsing attributes in process `syz.1.538'. [ 197.595239][ T6002] loop1: detected capacity change from 0 to 128 [ 197.660765][ T5583] usb 4-1: Using ep0 maxpacket: 16 [ 197.695057][ T5583] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.912669][ T5583] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.926829][ T5583] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.938721][ T5583] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 197.949011][ T5583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.027965][ T5583] usb 4-1: config 0 descriptor?? [ 198.144569][ T5583] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 198.694383][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 198.733803][ T6022] device bridge0 entered promiscuous mode [ 198.770934][ T6022] device bridge0 left promiscuous mode [ 200.170500][ T27] usb 4-1: USB disconnect, device number 11 [ 200.204944][ T6046] device erspan0 entered promiscuous mode [ 200.244786][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.553'. [ 200.750497][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 200.945954][ T6056] tipc: Enabled bearer , priority 0 [ 200.955146][ T6056] device syzkaller0 entered promiscuous mode [ 200.972166][ T27] usb 4-1: config 0 has an invalid interface number: 58 but max is 0 [ 200.987017][ T6056] tipc: Resetting bearer [ 200.994118][ T27] usb 4-1: config 0 has no interface number 0 [ 201.017378][ T6055] tipc: Resetting bearer [ 201.019292][ T27] usb 4-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 201.060414][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.085010][ T27] usb 4-1: Product: syz [ 201.099285][ T27] usb 4-1: Manufacturer: syz [ 201.105308][ T27] usb 4-1: SerialNumber: syz [ 201.131260][ T27] usb 4-1: config 0 descriptor?? [ 201.172181][ T6055] tipc: Disabling bearer [ 201.922085][ T27] kaweth 4-1:0.58: Firmware present in device. [ 201.958973][ T27] kaweth 4-1:0.58: Error reading configuration (-71), no net device created [ 201.991353][ T27] kaweth: probe of 4-1:0.58 failed with error -5 [ 202.024887][ T27] usb 4-1: USB disconnect, device number 12 [ 202.357793][ T6077] netlink: 43 bytes leftover after parsing attributes in process `syz.1.566'. [ 202.373689][ T6077] loop1: detected capacity change from 0 to 128 [ 202.400558][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 202.610497][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 202.627549][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.639019][ T27] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.655915][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.665316][ T27] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 202.677122][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.716552][ T27] usb 4-1: config 0 descriptor?? [ 202.767763][ T27] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 203.547041][ T6094] tipc: Enabled bearer , priority 0 [ 203.608823][ T6097] device syzkaller0 entered promiscuous mode [ 203.649121][ T6094] tipc: Resetting bearer [ 203.664121][ T6090] tipc: Resetting bearer [ 203.708261][ T6090] tipc: Disabling bearer [ 204.530027][ T5583] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 204.732205][ T5583] usb 1-1: config 0 has an invalid interface number: 58 but max is 0 [ 204.772563][ T5583] usb 1-1: config 0 has no interface number 0 [ 204.864750][ T5583] usb 1-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 204.910527][ T5583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.931915][ T5583] usb 1-1: Product: syz [ 204.944853][ T5583] usb 1-1: Manufacturer: syz [ 204.985394][ T5583] usb 1-1: SerialNumber: syz [ 205.020593][ T4325] usb 4-1: USB disconnect, device number 13 [ 205.051287][ T5583] usb 1-1: config 0 descriptor?? [ 205.610360][ T14] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 205.780421][ T14] usb 3-1: device descriptor read/64, error -71 [ 205.918068][ T5583] kaweth 1-1:0.58: Firmware present in device. [ 205.952007][ T5583] kaweth 1-1:0.58: Error reading configuration (-71), no net device created [ 205.985088][ T5583] kaweth: probe of 1-1:0.58 failed with error -5 [ 206.029183][ T5583] usb 1-1: USB disconnect, device number 20 [ 206.051584][ T14] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 206.110635][ T6126] netlink: 43 bytes leftover after parsing attributes in process `syz.0.579'. [ 206.147206][ T6126] loop0: detected capacity change from 0 to 128 [ 206.340135][ T14] usb 3-1: device descriptor read/64, error -71 [ 206.851215][ T14] usb usb3-port1: attempt power cycle [ 207.124987][ T6135] tipc: Enabled bearer , priority 0 [ 207.151421][ T6135] device syzkaller0 entered promiscuous mode [ 207.260674][ T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 207.285443][ T6135] tipc: Resetting bearer [ 207.320719][ T6134] tipc: Resetting bearer [ 207.331322][ T14] usb 3-1: device descriptor read/8, error -71 [ 207.437393][ T6134] tipc: Disabling bearer [ 207.600886][ T14] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 207.640980][ T14] usb 3-1: device descriptor read/8, error -71 [ 207.702028][ T4325] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 207.770888][ T14] usb usb3-port1: unable to enumerate USB device [ 207.891533][ T4325] usb 4-1: Using ep0 maxpacket: 16 [ 207.904722][ T4325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.955021][ T4325] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.013145][ T4325] usb 4-1: config 0 interface 0 has no altsetting 0 [ 208.044941][ T4325] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 208.079096][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.128932][ T4325] usb 4-1: config 0 descriptor?? [ 208.153235][ T4325] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 208.901676][ T14] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 209.072217][ T14] usb 3-1: device descriptor read/64, error -71 [ 209.326318][ T6161] loop2: detected capacity change from 0 to 7 [ 209.342741][ T4257] Dev loop2: unable to read RDB block 7 [ 209.348698][ T4257] loop2: unable to read partition table [ 209.361249][ T14] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 209.377517][ T4257] loop2: partition table beyond EOD, truncated [ 209.395741][ T6161] Dev loop2: unable to read RDB block 7 [ 209.404935][ T6161] loop2: unable to read partition table [ 209.430737][ T6161] loop2: partition table beyond EOD, truncated [ 209.456345][ T6161] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 209.495755][ T3637] Dev loop2: unable to read RDB block 7 [ 209.505161][ T3637] loop2: unable to read partition table [ 209.525661][ T3637] loop2: partition table beyond EOD, truncated [ 209.532611][ T14] usb 3-1: device descriptor read/64, error -71 [ 209.662095][ T14] usb usb3-port1: attempt power cycle [ 210.070684][ T14] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 210.112104][ T14] usb 3-1: device descriptor read/8, error -71 [ 210.235364][ T6166] fuse: Unknown parameter 'group_i00000000000000000000' [ 210.388297][ T14] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 210.433706][ T14] usb 3-1: device descriptor read/8, error -71 [ 210.439053][ T5583] usb 4-1: USB disconnect, device number 14 [ 210.561374][ T14] usb usb3-port1: unable to enumerate USB device [ 211.000715][ T4325] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 211.065197][ T6193] syz.0.603 uses obsolete (PF_INET,SOCK_PACKET) [ 211.202458][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.226226][ T4325] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.257595][ T4325] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 211.272738][ T6199] fuse: Unknown parameter 'group_i00000000000000000000' [ 211.284313][ T4325] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 211.301899][ T4325] usb 2-1: Manufacturer: syz [ 211.317409][ T4325] usb 2-1: config 0 descriptor?? [ 211.940871][ T4325] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 212.130740][ T4325] usb 1-1: Using ep0 maxpacket: 8 [ 212.136450][ T4325] usb 1-1: no configurations [ 212.145852][ T4325] usb 1-1: can't read configurations, error -22 [ 212.310769][ T4325] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 212.500768][ T4325] usb 1-1: Using ep0 maxpacket: 8 [ 212.506448][ T4325] usb 1-1: no configurations [ 212.524560][ T4325] usb 1-1: can't read configurations, error -22 [ 212.540918][ T4325] usb usb1-port1: attempt power cycle [ 212.980434][ T4325] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 213.021157][ T4325] usb 1-1: Using ep0 maxpacket: 8 [ 213.026854][ T4325] usb 1-1: no configurations [ 213.038985][ T4325] usb 1-1: can't read configurations, error -22 [ 213.210392][ T4325] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 213.251789][ T4325] usb 1-1: Using ep0 maxpacket: 8 [ 213.257688][ T4325] usb 1-1: no configurations [ 213.302177][ T4325] usb 1-1: can't read configurations, error -22 [ 213.330500][ T4325] usb usb1-port1: unable to enumerate USB device [ 213.362833][ T6218] nvme_fabrics: missing parameter 'transport=%s' [ 213.370854][ T6218] nvme_fabrics: missing parameter 'nqn=%s' [ 213.600489][ T5583] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 213.746528][ T4325] usb 2-1: USB disconnect, device number 13 [ 213.800412][ T5583] usb 4-1: Using ep0 maxpacket: 16 [ 213.807120][ T5583] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.860540][ T5583] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.888611][ T5583] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.904854][ T5583] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 213.918636][ T5583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.943335][ T5583] usb 4-1: config 0 descriptor?? [ 213.959741][ T5583] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 214.523276][ T6227] tipc: Started in network mode [ 214.528340][ T6227] tipc: Node identity 1688c80542e2, cluster identity 4711 [ 214.538570][ T6227] tipc: Enabled bearer , priority 0 [ 214.554501][ T6227] device syzkaller0 entered promiscuous mode [ 214.595675][ T6227] tipc: Resetting bearer [ 214.606703][ T6226] tipc: Resetting bearer [ 214.633886][ T6226] tipc: Disabling bearer [ 215.193048][ T6246] netlink: 43 bytes leftover after parsing attributes in process `syz.0.618'. [ 215.265351][ T6246] loop0: detected capacity change from 0 to 128 [ 216.207036][ T6255] fuse: Bad value for 'fd' [ 216.340840][ T4325] usb 4-1: USB disconnect, device number 15 [ 216.870800][ T4325] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 217.060812][ T4325] usb 4-1: Using ep0 maxpacket: 8 [ 217.084038][ T4325] usb 4-1: no configurations [ 217.119158][ T4325] usb 4-1: can't read configurations, error -22 [ 217.191970][ T6272] nvme_fabrics: missing parameter 'transport=%s' [ 217.199075][ T6272] nvme_fabrics: missing parameter 'nqn=%s' [ 217.331486][ T4325] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 217.520696][ T4325] usb 4-1: Using ep0 maxpacket: 8 [ 217.528106][ T4325] usb 4-1: no configurations [ 217.559069][ T4325] usb 4-1: can't read configurations, error -22 [ 217.603511][ T4325] usb usb4-port1: attempt power cycle [ 218.030756][ T4325] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 218.071595][ T4325] usb 4-1: Using ep0 maxpacket: 8 [ 218.077235][ T4325] usb 4-1: no configurations [ 218.120822][ T4325] usb 4-1: can't read configurations, error -22 [ 218.206448][ T6276] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 218.280413][ T4325] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 218.321205][ T4325] usb 4-1: Using ep0 maxpacket: 8 [ 218.335411][ T4325] usb 4-1: no configurations [ 218.368169][ T4325] usb 4-1: can't read configurations, error -22 [ 218.408036][ T4325] usb usb4-port1: unable to enumerate USB device [ 218.577708][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 219.330531][ T6289] fuse: Unknown parameter 'group_id00000000000000000000' [ 219.511562][ T6291] netlink: 48 bytes leftover after parsing attributes in process `syz.0.632'. [ 219.762034][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 219.803295][ T6295] fuse: Bad value for 'fd' [ 220.090456][ T4316] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 220.281535][ T4316] usb 4-1: Using ep0 maxpacket: 16 [ 220.291912][ T4316] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.315477][ T4316] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.348237][ T4316] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 220.399006][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.436536][ T4316] usb 4-1: config 0 descriptor?? [ 220.458825][ T4316] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 220.968413][ T6303] tipc: Enabled bearer , priority 0 [ 220.991089][ T6304] device syzkaller0 entered promiscuous mode [ 221.150836][ T6304] tipc: Resetting bearer [ 221.273958][ T6304] tipc: Disabling bearer [ 221.858668][ T6330] netlink: 43 bytes leftover after parsing attributes in process `syz.2.640'. [ 222.003914][ T6330] loop2: detected capacity change from 0 to 128 [ 222.809312][ T4325] usb 4-1: USB disconnect, device number 20 [ 223.106974][ T6337] fuse: Unknown parameter 'group_id00000000000000000000' [ 223.148517][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 223.568958][ T6349] fuse: Bad value for 'fd' [ 223.663631][ T6344] nvme_fabrics: missing parameter 'transport=%s' [ 223.705699][ T6344] nvme_fabrics: missing parameter 'nqn=%s' [ 223.770458][ T4325] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 223.893964][ T6354] netlink: 68 bytes leftover after parsing attributes in process `syz.0.647'. [ 223.985544][ T4325] usb 2-1: Using ep0 maxpacket: 8 [ 223.992702][ T4325] usb 2-1: no configurations [ 223.997509][ T4325] usb 2-1: can't read configurations, error -22 [ 224.080636][ T6356] tipc: Enabled bearer , priority 0 [ 224.121489][ T6356] device syzkaller0 entered promiscuous mode [ 224.152861][ T6356] tipc: Resetting bearer [ 224.160924][ T4325] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 224.174405][ T6355] tipc: Resetting bearer [ 224.305748][ T6355] tipc: Disabling bearer [ 224.500900][ T4325] usb 2-1: Using ep0 maxpacket: 8 [ 224.506702][ T4325] usb 2-1: no configurations [ 224.548557][ T4325] usb 2-1: can't read configurations, error -22 [ 224.596999][ T4325] usb usb2-port1: attempt power cycle [ 224.695813][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 224.880772][ T6366] netlink: 43 bytes leftover after parsing attributes in process `syz.4.652'. [ 224.918533][ T6366] loop4: detected capacity change from 0 to 128 [ 225.027072][ T4325] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 225.543893][ T4325] usb 2-1: Using ep0 maxpacket: 8 [ 225.554191][ T4325] usb 2-1: no configurations [ 225.558817][ T4325] usb 2-1: can't read configurations, error -22 [ 225.720956][ T4325] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 225.761384][ T4325] usb 2-1: Using ep0 maxpacket: 8 [ 225.769332][ T4325] usb 2-1: no configurations [ 225.792540][ T4325] usb 2-1: can't read configurations, error -22 [ 225.854656][ T4325] usb usb2-port1: unable to enumerate USB device [ 226.686262][ T6375] fuse: Bad value for 'user_id' [ 227.878716][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 228.180446][ T126] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 228.370359][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 228.377546][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.452843][ T126] usb 4-1: config 0 has no interfaces? [ 228.516899][ T126] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 228.554947][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.564824][ T126] usb 4-1: Product: syz [ 228.569087][ T126] usb 4-1: Manufacturer: syz [ 228.577978][ T126] usb 4-1: SerialNumber: syz [ 228.587261][ T126] usb 4-1: config 0 descriptor?? [ 228.807235][ T4356] usb 4-1: USB disconnect, device number 21 [ 229.086051][ T6414] fuse: Bad value for 'user_id' [ 229.735249][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'. [ 229.938361][ T6433] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 230.082897][ T4347] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 230.101517][ T6435] tipc: Enabled bearer , priority 0 [ 230.118937][ T6435] device syzkaller0 entered promiscuous mode [ 230.124886][ T4347] dvb_usb_az6027: probe of 5-1:0.0 failed with error -110 [ 230.170039][ T4347] usb 5-1: USB disconnect, device number 8 [ 230.214619][ T6435] tipc: Resetting bearer [ 230.248838][ T6434] tipc: Resetting bearer [ 230.346032][ T6434] tipc: Disabling bearer [ 231.378875][ T6455] fuse: Bad value for 'user_id' [ 231.620903][ T4308] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 231.810832][ T4308] usb 2-1: Using ep0 maxpacket: 16 [ 231.818220][ T4308] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.845791][ T4308] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.853803][ T4308] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 231.866430][ T4308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.880500][ T126] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 231.894600][ T4308] usb 2-1: config 0 descriptor?? [ 231.914260][ T4308] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 232.027548][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'. [ 232.080580][ T126] usb 1-1: Using ep0 maxpacket: 8 [ 232.092806][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.137569][ T126] usb 1-1: config 0 has no interfaces? [ 232.162313][ T126] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 232.186352][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.214483][ T126] usb 1-1: Product: syz [ 232.224960][ T126] usb 1-1: Manufacturer: syz [ 232.231822][ T126] usb 1-1: SerialNumber: syz [ 232.249000][ T126] usb 1-1: config 0 descriptor?? [ 232.465112][ T4308] usb 1-1: USB disconnect, device number 25 [ 232.640230][ T6469] netlink: 40 bytes leftover after parsing attributes in process `syz.2.686'. [ 232.896660][ T6478] tipc: Enabled bearer , priority 0 [ 232.953196][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 232.963227][ T6481] device syzkaller0 entered promiscuous mode [ 233.098363][ T6478] tipc: Resetting bearer [ 233.145689][ T6476] tipc: Resetting bearer [ 233.183542][ T6476] tipc: Disabling bearer [ 233.300973][ T4347] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 233.460484][ T4347] usb 5-1: device descriptor read/64, error -71 [ 233.733339][ T4347] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 233.911615][ T4347] usb 5-1: device descriptor read/64, error -71 [ 234.042784][ T4347] usb usb5-port1: attempt power cycle [ 234.133433][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 234.353342][ T4316] usb 2-1: USB disconnect, device number 18 [ 234.454174][ T6499] fuse: Bad value for 'fd' [ 234.490691][ T4347] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 234.555342][ T4347] usb 5-1: device descriptor read/8, error -71 [ 234.740705][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 234.870398][ T4347] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 234.911076][ T4347] usb 5-1: device descriptor read/8, error -71 [ 235.044806][ T4347] usb usb5-port1: unable to enumerate USB device [ 235.160410][ T126] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 235.377954][ T126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 235.391767][ T126] usb 3-1: no configurations [ 235.408843][ T126] usb 3-1: can't read configurations, error -22 [ 235.593821][ T6513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.700'. [ 235.971053][ T4316] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 236.105289][ T6519] tipc: Enabled bearer , priority 0 [ 236.117653][ T6519] device syzkaller0 entered promiscuous mode [ 236.180915][ T4316] usb 2-1: Using ep0 maxpacket: 8 [ 236.190846][ T4316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.220669][ T4316] usb 2-1: config 0 has no interfaces? [ 236.228742][ T4316] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 236.238530][ T6519] tipc: Resetting bearer [ 236.247411][ T6518] tipc: Resetting bearer [ 236.287596][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.319063][ T4316] usb 2-1: Product: syz [ 236.333218][ T4316] usb 2-1: Manufacturer: syz [ 236.337996][ T4316] usb 2-1: SerialNumber: syz [ 236.377869][ T4316] usb 2-1: config 0 descriptor?? [ 236.402390][ T6518] tipc: Disabling bearer [ 236.494850][ T6528] loop2: detected capacity change from 0 to 7 [ 236.507955][ T4257] Dev loop2: unable to read RDB block 7 [ 236.535022][ T4257] loop2: unable to read partition table [ 236.556603][ T4257] loop2: partition table beyond EOD, truncated [ 236.565073][ T6528] Dev loop2: unable to read RDB block 7 [ 236.580946][ T6528] loop2: unable to read partition table [ 236.587651][ T6528] loop2: partition table beyond EOD, truncated [ 236.604416][ T6528] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.620475][ T4316] usb 2-1: USB disconnect, device number 19 [ 236.676379][ T6533] sctp: [Deprecated]: syz.2.709 (pid 6533) Use of int in maxseg socket option. [ 236.676379][ T6533] Use struct sctp_assoc_value instead [ 236.730378][ T27] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 236.920478][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 236.927896][ T27] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.981502][ T27] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.019084][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 237.043986][ T27] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 237.080901][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.124406][ T27] usb 5-1: config 0 descriptor?? [ 237.329276][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 237.472988][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 237.554384][ T27] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 237.756873][ T27] usb 5-1: USB disconnect, device number 13 [ 237.911321][ T6551] fido_id[6551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 239.448527][ T6586] tipc: Enabled bearer , priority 0 [ 239.483477][ T6586] device syzkaller0 entered promiscuous mode [ 239.646751][ T6586] tipc: Resetting bearer [ 239.688223][ T6585] tipc: Resetting bearer [ 239.807222][ T6585] tipc: Disabling bearer [ 240.045120][ T6591] loop2: detected capacity change from 0 to 7 [ 240.083754][ T6591] Dev loop2: unable to read RDB block 7 [ 240.101162][ T6593] fuse: Bad value for 'fd' [ 240.115204][ T6591] loop2: unable to read partition table [ 240.140583][ T6591] loop2: partition table beyond EOD, truncated [ 240.160076][ T6591] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 240.188459][ T6595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.724'. [ 240.200380][ T4308] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 240.225558][ T3637] Dev loop2: unable to read RDB block 7 [ 240.238486][ T3637] loop2: unable to read partition table [ 240.260618][ T3637] loop2: partition table beyond EOD, truncated [ 240.400987][ T4308] usb 4-1: Using ep0 maxpacket: 8 [ 240.413259][ T4308] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.456611][ T4308] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 240.501381][ T4308] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 240.532620][ T4308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.552481][ T4308] usb 4-1: Product: syz [ 240.563539][ T4308] usb 4-1: Manufacturer: syz [ 240.578399][ T4308] usb 4-1: SerialNumber: syz [ 240.597148][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.727'. [ 240.607225][ T4308] usb 4-1: config 0 descriptor?? [ 240.801145][ T27] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 240.830972][ T4325] usb 4-1: USB disconnect, device number 22 [ 240.996174][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 241.020524][ T27] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.038423][ T27] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.058985][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.077004][ T27] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 241.089373][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.114979][ T27] usb 1-1: config 0 descriptor?? [ 241.193229][ T6619] tipc: Enabled bearer , priority 0 [ 241.218108][ T6619] device syzkaller0 entered promiscuous mode [ 241.257123][ T6619] tipc: Resetting bearer [ 241.273655][ T6618] tipc: Resetting bearer [ 241.310365][ T6618] tipc: Disabling bearer [ 241.318814][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 241.548199][ T27] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 241.573377][ T6624] fuse: Bad value for 'fd' [ 241.588007][ T6623] netlink: 43 bytes leftover after parsing attributes in process `syz.2.736'. [ 241.753393][ T27] usb 1-1: USB disconnect, device number 26 [ 242.015905][ T6628] fido_id[6628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 243.383078][ T6653] fuse: Bad value for 'fd' [ 243.475292][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 243.650516][ T4316] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 243.713380][ T27] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 243.734184][ T27] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 243.840386][ T4316] usb 5-1: Using ep0 maxpacket: 8 [ 243.847520][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.940818][ T4316] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 243.976547][ T4316] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 243.997124][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.015549][ T4316] usb 5-1: Product: syz [ 244.023772][ T4316] usb 5-1: Manufacturer: syz [ 244.036293][ T4316] usb 5-1: SerialNumber: syz [ 244.052357][ T4316] usb 5-1: config 0 descriptor?? [ 244.263120][ T4316] usb 5-1: USB disconnect, device number 14 [ 244.954196][ T6689] netlink: 43 bytes leftover after parsing attributes in process `syz.4.757'. [ 245.007917][ T6690] loop4: detected capacity change from 0 to 128 [ 246.041384][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 246.997988][ T6700] fuse: Bad value for 'fd' [ 247.628338][ T6711] tipc: Enabled bearer , priority 0 [ 247.667940][ T6711] device syzkaller0 entered promiscuous mode [ 247.773242][ T6711] tipc: Resetting bearer [ 247.798060][ T6709] tipc: Resetting bearer [ 247.882565][ T6709] tipc: Disabling bearer [ 247.950345][ T4316] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 248.047323][ T6717] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 248.150746][ T4316] usb 3-1: Using ep0 maxpacket: 8 [ 248.157753][ T4316] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.188546][ T4316] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.212888][ T4316] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 248.250412][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.258548][ T4316] usb 3-1: Product: syz [ 248.310882][ T4316] usb 3-1: Manufacturer: syz [ 248.315784][ T4316] usb 3-1: SerialNumber: syz [ 248.352198][ T4316] usb 3-1: config 0 descriptor?? [ 248.413187][ T6728] fuse: Invalid rootmode [ 248.428927][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.772'. [ 248.588968][ T4347] usb 3-1: USB disconnect, device number 21 [ 249.000481][ T27] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 249.014018][ T6744] tipc: Enabled bearer , priority 0 [ 249.030356][ T6744] device syzkaller0 entered promiscuous mode [ 249.078074][ T6744] tipc: Resetting bearer [ 249.100727][ T6743] tipc: Resetting bearer [ 249.206236][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 249.212711][ T27] usb 5-1: config 5 has an invalid interface number: 3 but max is 0 [ 249.238399][ T6743] tipc: Disabling bearer [ 249.246564][ T27] usb 5-1: config 5 has no interface number 0 [ 249.261148][ T6750] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 249.272410][ T27] usb 5-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 249.292492][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.321301][ T27] usb 5-1: Product: syz [ 249.337451][ T27] usb 5-1: Manufacturer: syz [ 249.352840][ T27] usb 5-1: SerialNumber: syz [ 249.382182][ T27] ftdi_sio 5-1:5.3: FTDI USB Serial Device converter detected [ 249.428745][ T27] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 249.586584][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 249.616753][ T6739] device bond_slave_0 entered promiscuous mode [ 249.623380][ T6739] device bond_slave_1 entered promiscuous mode [ 249.700868][ T6739] device macvtap1 entered promiscuous mode [ 249.749274][ T6739] device bond0 entered promiscuous mode [ 249.767117][ T6762] fuse: Invalid rootmode [ 249.787686][ T6739] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 249.835850][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 249.924576][ T6760] device bond0 left promiscuous mode [ 249.940246][ T6760] device bond_slave_0 left promiscuous mode [ 249.946338][ T6760] device bond_slave_1 left promiscuous mode [ 250.090311][ T27] usb 5-1: USB disconnect, device number 15 [ 250.151931][ T27] ftdi_sio 5-1:5.3: device disconnected [ 250.338117][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.789'. [ 250.726109][ T6775] input: syz1 as /devices/virtual/input/input12 [ 250.894736][ T6780] tipc: Enabled bearer , priority 0 [ 250.904846][ T6780] device syzkaller0 entered promiscuous mode [ 250.943034][ T6780] tipc: Resetting bearer [ 250.963619][ T6779] tipc: Resetting bearer [ 250.988370][ T6779] tipc: Disabling bearer [ 251.000694][ T4316] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 251.153628][ T6786] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 251.190682][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 251.197598][ T4316] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.273614][ T4316] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 251.338540][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.433641][ T4316] usb 4-1: Product: syz [ 251.457566][ T4316] usb 4-1: Manufacturer: syz [ 251.457915][ T6790] fuse: Invalid rootmode [ 251.487368][ T4316] usb 4-1: SerialNumber: syz [ 251.502140][ T4316] usb 4-1: config 0 descriptor?? [ 251.585612][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 251.677913][ T6796] netlink: 43 bytes leftover after parsing attributes in process `syz.2.800'. [ 251.726286][ T27] usb 4-1: USB disconnect, device number 23 [ 252.384895][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 253.135991][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'. [ 254.214736][ T6825] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 254.392368][ T6827] tipc: Enabled bearer , priority 0 [ 254.443056][ T6827] device syzkaller0 entered promiscuous mode [ 254.612691][ T6826] tipc: Resetting bearer [ 254.658709][ T6826] tipc: Disabling bearer [ 254.820897][ T4325] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 255.056501][ T4325] usb 2-1: unable to get BOS descriptor or descriptor too short [ 255.085975][ T4325] usb 2-1: no configurations [ 255.100528][ T4325] usb 2-1: can't read configurations, error -22 [ 255.201285][ T4308] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 255.390778][ T4308] usb 4-1: Using ep0 maxpacket: 8 [ 255.401414][ T4308] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.422914][ T4308] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 255.450417][ T4308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.473687][ T4308] usb 4-1: Product: syz [ 255.485625][ T4308] usb 4-1: Manufacturer: syz [ 255.495854][ T4308] usb 4-1: SerialNumber: syz [ 255.517547][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 255.524877][ T4308] usb 4-1: config 0 descriptor?? [ 255.681349][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.687896][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.902823][ T4308] usb 4-1: USB disconnect, device number 24 [ 256.574363][ T6856] input: syz1 as /devices/virtual/input/input13 [ 257.090475][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 257.664898][ T6847] netlink: 43 bytes leftover after parsing attributes in process `syz.1.815'. [ 257.708779][ T6862] tipc: Enabled bearer , priority 0 [ 257.732272][ T6866] device syzkaller0 entered promiscuous mode [ 257.732356][ T6885] fuse: Bad value for 'group_id' [ 257.983212][ T6866] tipc: Resetting bearer [ 258.032411][ T6866] tipc: Disabling bearer [ 258.241651][ T4308] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 258.383447][ T4325] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 258.393358][ T6903] netlink: 192 bytes leftover after parsing attributes in process `syz.3.831'. [ 258.436384][ T4308] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.460681][ T4308] usb 3-1: no configurations [ 258.481368][ T4308] usb 3-1: can't read configurations, error -22 [ 258.583225][ T4325] usb 2-1: Using ep0 maxpacket: 8 [ 258.596050][ T4325] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 258.639252][ T4325] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 258.708006][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.723329][ T4325] usb 2-1: Product: syz [ 258.727755][ T4325] usb 2-1: Manufacturer: syz [ 258.735433][ T4325] usb 2-1: SerialNumber: syz [ 258.753015][ T4325] usb 2-1: config 0 descriptor?? [ 258.900456][ T2120] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 258.987308][ T27] usb 2-1: USB disconnect, device number 22 [ 259.092419][ T2120] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 259.121087][ T2120] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 259.167684][ T2120] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 259.198056][ T2120] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 259.216373][ T2120] usb 4-1: Manufacturer: syz [ 259.238821][ T2120] usb 4-1: config 0 descriptor?? [ 259.265435][ T2120] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 259.302717][ T6918] netlink: 43 bytes leftover after parsing attributes in process `syz.2.836'. [ 259.590461][ T2120] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 259.797853][ T2120] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 259.853203][ T2120] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 259.968493][ T2120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.034458][ T2120] usb 5-1: config 0 descriptor?? [ 260.071855][ T6916] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 260.366998][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.834'. [ 261.200611][ T2120] ath6kl: Failed to submit usb control message: -110 [ 261.207920][ T2120] ath6kl: unable to send the bmi data to the device: -110 [ 261.260678][ T2120] ath6kl: Unable to send get target info: -110 [ 261.292533][ T2120] ath6kl: Failed to init ath6kl core: -110 [ 261.407122][ T2120] ath6kl_usb: probe of 5-1:0.0 failed with error -110 [ 261.574940][ T4347] usb 4-1: USB disconnect, device number 25 [ 261.844120][ T6941] tipc: Enabled bearer , priority 0 [ 261.933227][ T6942] device syzkaller0 entered promiscuous mode [ 262.108171][ T6940] tipc: Resetting bearer [ 262.236787][ T6940] tipc: Disabling bearer [ 262.364597][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 262.626440][ T6955] fuse: Unknown parameter 'use00000000000000000000' [ 262.790604][ T126] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 262.790740][ T4308] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 262.845014][ T4325] usb 5-1: USB disconnect, device number 16 [ 262.922677][ T6959] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 262.990861][ T4308] usb 4-1: Using ep0 maxpacket: 16 [ 262.994738][ T126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.998547][ T4308] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.019061][ T126] usb 2-1: no configurations [ 263.034736][ T126] usb 2-1: can't read configurations, error -22 [ 263.047366][ T4308] usb 4-1: config 0 interface 0 has no altsetting 0 [ 263.055951][ T6962] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 263.058123][ T4308] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 263.080485][ T27] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 263.089165][ T4308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.111336][ T4308] usb 4-1: config 0 descriptor?? [ 263.300361][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 263.333768][ T27] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 263.355236][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.370830][ T27] usb 1-1: Product: syz [ 263.386119][ T27] usb 1-1: Manufacturer: syz [ 263.391556][ T27] usb 1-1: SerialNumber: syz [ 263.409188][ T27] usb 1-1: config 0 descriptor?? [ 263.437345][ T27] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 263.474393][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 263.486174][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 263.514517][ T27] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 263.536844][ T27] usb 1-1: media controller created [ 263.577844][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.647173][ T27] cxusb: set interface failed [ 263.662880][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 263.741728][ T4308] usbhid 4-1:0.0: can't add hid device: -71 [ 263.750750][ T4308] usbhid: probe of 4-1:0.0 failed with error -71 [ 263.800934][ T4308] usb 4-1: USB disconnect, device number 26 [ 263.888959][ T27] DVB: Unable to find symbol mt352_attach() [ 263.902530][ T27] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 264.074609][ T6981] tipc: Enabled bearer , priority 0 [ 264.104241][ T6981] device syzkaller0 entered promiscuous mode [ 264.122649][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 264.178871][ T6980] tipc: Resetting bearer [ 264.206109][ T27] rc_core: IR keymap rc-dvico-portable not found [ 264.213114][ T27] Registered IR keymap rc-empty [ 264.221467][ T27] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 264.238752][ T27] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input14 [ 264.288817][ T27] dvb-usb: schedule remote query interval to 100 msecs. [ 264.312364][ T27] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 264.313555][ T6980] tipc: Disabling bearer [ 264.395890][ T27] usb 1-1: USB disconnect, device number 27 [ 264.460758][ T6988] mmap: syz.2.858 (6988) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 264.468585][ T6986] fuse: Unknown parameter 'user_i00000000000000000000' [ 264.550187][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 264.574423][ T27] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 264.693853][ T6993] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 265.315437][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.866'. [ 265.325125][ T26] audit: type=1326 audit(1758092867.107:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c4d8eba9 code=0x7ffc0000 [ 265.358302][ T26] audit: type=1326 audit(1758092867.107:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c4d8eba9 code=0x7ffc0000 [ 265.382571][ T26] audit: type=1326 audit(1758092867.107:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f39c4d8eba9 code=0x7ffc0000 [ 265.438339][ T26] audit: type=1326 audit(1758092867.197:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c4d8eba9 code=0x7ffc0000 [ 265.470566][ T2120] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 265.488193][ T26] audit: type=1326 audit(1758092867.197:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c4d8eba9 code=0x7ffc0000 [ 265.590449][ T27] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 265.666628][ T2120] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.694191][ T2120] usb 2-1: no configurations [ 265.706416][ T2120] usb 2-1: can't read configurations, error -22 [ 265.820595][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 265.829341][ T27] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 265.867100][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.893909][ T27] usb 5-1: Product: syz [ 265.919041][ T27] usb 5-1: Manufacturer: syz [ 265.940354][ T27] usb 5-1: SerialNumber: syz [ 265.958410][ T27] usb 5-1: config 0 descriptor?? [ 266.002240][ T27] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 266.082342][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 266.126265][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.212167][ T27] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 266.243969][ T27] usb 5-1: media controller created [ 266.330507][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.419784][ T27] cxusb: set interface failed [ 266.434826][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 266.650822][ T7032] fuse: Unknown parameter 'user_i00000000000000000000' [ 266.680409][ T2120] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 266.792197][ T27] DVB: Unable to find symbol mt352_attach() [ 266.800177][ T27] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 266.870356][ T2120] usb 2-1: Using ep0 maxpacket: 16 [ 266.886861][ T2120] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.937770][ T7034] tipc: Enabled bearer , priority 0 [ 266.950841][ T2120] usb 2-1: config 0 interface 0 has no altsetting 0 [ 266.967799][ T2120] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 266.983911][ T7034] device syzkaller0 entered promiscuous mode [ 266.997341][ T2120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.046911][ T2120] usb 2-1: config 0 descriptor?? [ 267.147807][ T7033] tipc: Resetting bearer [ 267.280163][ T27] rc_core: IR keymap rc-dvico-portable not found [ 267.286822][ T27] Registered IR keymap rc-empty [ 267.333955][ T27] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 267.382045][ T7033] tipc: Disabling bearer [ 267.392044][ T27] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input15 [ 267.414368][ T7041] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 267.471212][ T27] dvb-usb: schedule remote query interval to 100 msecs. [ 267.513299][ T27] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 267.575449][ T27] usb 5-1: USB disconnect, device number 17 [ 267.656495][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 267.670843][ T2120] usbhid 2-1:0.0: can't add hid device: -71 [ 267.677159][ T2120] usbhid: probe of 2-1:0.0 failed with error -71 [ 267.709359][ T2120] usb 2-1: USB disconnect, device number 26 [ 267.851959][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.878'. [ 267.861969][ T27] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 268.350880][ T4356] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 268.515872][ T5317] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.551673][ T4356] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 268.569161][ T4356] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 268.637085][ T4356] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.674492][ T4356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.717431][ T4356] usb 1-1: config 0 descriptor?? [ 268.742628][ T4356] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 268.885579][ T5317] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.049058][ T5317] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.224913][ T5317] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.736434][ T5317] tipc: Left network mode [ 269.799102][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.812043][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.821724][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.822404][ T7076] tipc: Enabled bearer , priority 0 [ 269.837854][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.847436][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.855169][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.876283][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.885336][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.893364][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.902498][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.911005][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.918241][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.008053][ T5317] device ip6gretap0 left promiscuous mode [ 270.175006][ T7076] device syzkaller0 entered promiscuous mode [ 270.308021][ T7075] tipc: Resetting bearer [ 270.373247][ T7075] tipc: Disabling bearer [ 271.161495][ T27] usb 1-1: USB disconnect, device number 28 [ 271.474086][ T7074] chnl_net:caif_netlink_parms(): no params data found [ 271.541127][ T4325] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 271.750086][ T4325] usb 3-1: Using ep0 maxpacket: 16 [ 271.771306][ T4325] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.828617][ T4325] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.881556][ T4325] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 271.898728][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'. [ 271.929051][ T7115] fuse: Unknown parameter 'grou00000000000000000000' [ 271.933470][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.979199][ T4325] usb 3-1: config 0 descriptor?? [ 271.996729][ T5317] device bridge0 left promiscuous mode [ 272.000484][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 272.018610][ T5317] device hsr_slave_0 left promiscuous mode [ 272.030694][ T5317] device hsr_slave_1 left promiscuous mode [ 272.048830][ T5317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.057267][ T5317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.078118][ T5317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.098467][ T5317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.122334][ T5317] device bridge_slave_1 left promiscuous mode [ 272.137182][ T5317] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.205347][ T5317] device bridge_slave_0 left promiscuous mode [ 272.216448][ T5317] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.348659][ T5317] device veth1_macvtap left promiscuous mode [ 272.368232][ T5317] device veth0_macvtap left promiscuous mode [ 272.815014][ T4325] usbhid 3-1:0.0: can't add hid device: -71 [ 272.824837][ T4325] usbhid: probe of 3-1:0.0 failed with error -71 [ 272.865723][ T4325] usb 3-1: USB disconnect, device number 24 [ 273.055797][ T7124] sctp: [Deprecated]: syz.4.899 (pid 7124) Use of int in maxseg socket option. [ 273.055797][ T7124] Use struct sctp_assoc_value instead [ 273.261222][ T5317] team0 (unregistering): Port device team_slave_1 removed [ 273.504229][ T5317] team0 (unregistering): Port device team_slave_0 removed [ 273.642760][ T5317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.795972][ T5317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.010354][ T4347] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 274.085069][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 274.231984][ T4347] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 274.249968][ T4347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.263953][ T4347] usb 1-1: Product: syz [ 274.268347][ T4347] usb 1-1: Manufacturer: syz [ 274.273882][ T4347] usb 1-1: SerialNumber: syz [ 274.327905][ T4347] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 274.428947][ T4347] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 275.335762][ T5317] bond0 (unregistering): Released all slaves [ 275.520075][ T4347] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 275.527297][ T4347] ath9k_htc: Failed to initialize the device [ 275.575880][ T4347] usb 1-1: ath9k_htc: USB layer deinitialized [ 275.601181][ T7119] netlink: 43 bytes leftover after parsing attributes in process `syz.1.897'. [ 275.624279][ T7145] tipc: Enabled bearer , priority 0 [ 275.645919][ T7074] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.731177][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.750072][ T7074] device bridge_slave_0 entered promiscuous mode [ 275.781440][ T7074] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.803505][ T7074] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.871736][ T7074] device bridge_slave_1 entered promiscuous mode [ 275.898914][ T7159] fuse: Unknown parameter 'grou00000000000000000000' [ 276.020746][ T7145] tipc: Disabling bearer [ 276.045747][ T7074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.108226][ T7074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.161760][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 276.294856][ T7166] sctp: [Deprecated]: syz.1.909 (pid 7166) Use of int in maxseg socket option. [ 276.294856][ T7166] Use struct sctp_assoc_value instead [ 276.326046][ T7074] team0: Port device team_slave_0 added [ 276.420823][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'. [ 276.455198][ T7074] team0: Port device team_slave_1 added [ 276.588569][ T7074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.647573][ T7074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.819163][ T7074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.903534][ T7074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.957631][ T7074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.166219][ T7074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.275923][ T4308] usb 1-1: USB disconnect, device number 29 [ 277.448583][ T7074] device hsr_slave_0 entered promiscuous mode [ 277.505552][ T7074] device hsr_slave_1 entered promiscuous mode [ 277.546426][ T7074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.578408][ T7074] Cannot create hsr debugfs directory [ 277.912666][ T7200] netlink: 43 bytes leftover after parsing attributes in process `syz.2.915'. [ 278.200485][ T4347] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 278.225105][ T7074] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 278.240939][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 278.278867][ T7074] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 278.406480][ T7074] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 278.414196][ T4347] usb 1-1: Using ep0 maxpacket: 32 [ 278.421236][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.441420][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.472829][ T4347] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 278.517338][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.555261][ T4347] usb 1-1: config 0 descriptor?? [ 278.602706][ T7074] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 278.663424][ T7214] tipc: Enabled bearer , priority 0 [ 278.816350][ T7211] tipc: Resetting bearer [ 278.875523][ T7210] tipc: Disabling bearer [ 278.982130][ T4347] ft260 0003:0403:6030.000B: unknown main item tag 0x7 [ 279.009003][ T4347] ft260 0003:0403:6030.000B: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 279.168344][ T7074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.178879][ T4347] ft260 0003:0403:6030.000B: chip code: 6424 8183 [ 279.247411][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.256095][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.278926][ T7074] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.325096][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.345916][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.386834][ T4347] ft260 0003:0403:6030.000B: failed to retrieve system status [ 279.398868][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.406023][ T5634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.423825][ T4347] ft260: probe of 0003:0403:6030.000B failed with error -32 [ 279.485960][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.536193][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.633139][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.686697][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.693894][ T5634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.794017][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.854789][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.096730][ T7230] device gretap1 entered promiscuous mode [ 280.566101][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.595123][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.666690][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.714366][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.756669][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.795076][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.829214][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.871108][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.905685][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.950876][ T7074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.028727][ T7249] sctp: [Deprecated]: syz.2.920 (pid 7249) Use of int in maxseg socket option. [ 281.028727][ T7249] Use struct sctp_assoc_value instead [ 281.567293][ T4356] usb 1-1: USB disconnect, device number 30 [ 282.115836][ T7274] netlink: 43 bytes leftover after parsing attributes in process `syz.1.926'. [ 282.277537][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.308773][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.352356][ T7074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.745723][ T7289] device syzkaller0 entered promiscuous mode [ 282.772391][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 284.632133][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 284.765104][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.797296][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.952718][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.976025][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.002803][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.028421][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.051781][ T7074] device veth0_vlan entered promiscuous mode [ 285.130357][ T7074] device veth1_vlan entered promiscuous mode [ 285.267647][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 285.307290][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 285.333271][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.352709][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.378444][ T7074] device veth0_macvtap entered promiscuous mode [ 285.434681][ T7074] device veth1_macvtap entered promiscuous mode [ 285.515219][ T7074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.567732][ T7346] sctp: [Deprecated]: syz.1.937 (pid 7346) Use of int in maxseg socket option. [ 285.567732][ T7346] Use struct sctp_assoc_value instead [ 285.577960][ T7074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.632199][ T7074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.678630][ T7074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.728352][ T7074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.766707][ T7074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.807954][ T7074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.867722][ T7074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.938781][ T7074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.971501][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.007861][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.038125][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.073168][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.105915][ T7358] netlink: 43 bytes leftover after parsing attributes in process `syz.2.939'. [ 286.131205][ T7074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.169534][ T7074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.198067][ T7074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.245989][ T7074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.277043][ T7074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.305092][ T7074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.326716][ T7074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.378523][ T7074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.414208][ T7074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.429605][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.452055][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.546633][ T7074] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.577680][ T7074] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.633876][ T7074] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.680706][ T14] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 286.694227][ T7074] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.854421][ T5634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.870919][ T4325] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 286.881435][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 286.895978][ T5634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.898051][ T14] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.916680][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 286.966483][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.978359][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 286.987395][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.012927][ T14] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 287.036721][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 287.073690][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.110346][ T4325] usb 3-1: Using ep0 maxpacket: 8 [ 287.116965][ T4325] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 287.146356][ T14] usb 5-1: config 0 descriptor?? [ 287.162843][ T4325] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 287.253332][ T4325] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 287.316378][ T4325] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 287.357225][ T4325] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 287.487235][ T4325] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 287.514761][ T4325] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 287.535199][ T4325] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 287.552361][ T4325] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 287.574207][ T4325] usb 3-1: string descriptor 0 read error: -22 [ 287.605857][ T4325] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 287.643098][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.721900][ T4325] adutux 3-1:168.0: interrupt endpoints not found [ 287.850132][ T2120] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 287.917114][ T4308] usb 3-1: USB disconnect, device number 25 [ 287.991392][ T14] usbhid 5-1:0.0: can't add hid device: -71 [ 288.007813][ T14] usbhid: probe of 5-1:0.0 failed with error -71 [ 288.039947][ T2120] usb 6-1: Using ep0 maxpacket: 8 [ 288.045564][ T14] usb 5-1: USB disconnect, device number 18 [ 288.055412][ T2120] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 288.088592][ T2120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.130549][ T2120] usb 6-1: Product: syz [ 288.150936][ T2120] usb 6-1: Manufacturer: syz [ 288.182727][ T2120] usb 6-1: SerialNumber: syz [ 288.216456][ T2120] usb 6-1: config 0 descriptor?? [ 288.257324][ T2120] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 288.270406][ T2120] dvb-usb: bulk message failed: -22 (2/0) [ 288.297198][ T2120] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 288.318508][ T2120] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 288.340572][ T2120] usb 6-1: media controller created [ 288.400953][ T2120] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.472059][ T2120] cxusb: set interface failed [ 288.476799][ T2120] dvb-usb: bulk message failed: -22 (1/0) [ 288.905259][ T2120] DVB: Unable to find symbol mt352_attach() [ 288.917739][ T2120] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 289.216435][ T7412] fuse: Unknown parameter 'group_id00000000000000000000' [ 289.380346][ T2120] rc_core: IR keymap rc-dvico-portable not found [ 289.386766][ T2120] Registered IR keymap rc-empty [ 289.413508][ T2120] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 289.460138][ T7417] sctp: [Deprecated]: syz.2.951 (pid 7417) Use of int in maxseg socket option. [ 289.460138][ T7417] Use struct sctp_assoc_value instead [ 289.480364][ T2120] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input16 [ 289.545515][ T7424] netlink: 43 bytes leftover after parsing attributes in process `syz.4.953'. [ 289.582294][ T2120] dvb-usb: schedule remote query interval to 100 msecs. [ 289.635286][ T2120] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 289.648821][ T7424] loop4: detected capacity change from 0 to 128 [ 289.702036][ T2120] usb 6-1: USB disconnect, device number 2 [ 289.884163][ T2120] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 290.306460][ T7413] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 290.330466][ T2120] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 290.430335][ T4308] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 290.540258][ T2120] usb 6-1: Using ep0 maxpacket: 16 [ 290.547339][ T2120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.574216][ T7450] netlink: 336 bytes leftover after parsing attributes in process `syz.4.959'. [ 290.590483][ T2120] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 290.627563][ T2120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.636840][ T4308] usb 2-1: Using ep0 maxpacket: 16 [ 290.646167][ T4308] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.699116][ T2120] usb 6-1: config 0 descriptor?? [ 290.704450][ T4308] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.712395][ T4308] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 290.729041][ T4308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.757080][ T4308] usb 2-1: config 0 descriptor?? [ 290.900463][ T27] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 291.029978][ T14] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 291.039329][ T2120] usbhid 6-1:0.0: can't add hid device: -71 [ 291.067205][ T2120] usbhid: probe of 6-1:0.0 failed with error -71 [ 291.110459][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 291.110662][ T2120] usb 6-1: USB disconnect, device number 3 [ 291.131986][ T27] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 291.161375][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.207354][ T27] usb 3-1: Product: syz [ 291.224368][ T27] usb 3-1: Manufacturer: syz [ 291.242485][ T27] usb 3-1: SerialNumber: syz [ 291.249997][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 291.257493][ T14] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 291.268663][ T27] usb 3-1: config 0 descriptor?? [ 291.298016][ T27] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 291.307520][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.307549][ T14] usb 5-1: config 0 has no interface number 0 [ 291.307585][ T14] usb 5-1: config 0 interface 204 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 291.332449][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 291.364642][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 291.406081][ T27] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 291.426473][ T14] usb 5-1: config 0 interface 204 altsetting 0 endpoint 0xC has an invalid bInterval 58, changing to 9 [ 291.436672][ T27] usb 3-1: media controller created [ 291.474623][ T14] usb 5-1: config 0 interface 204 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 291.483236][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.570436][ T27] cxusb: set interface failed [ 291.575287][ T14] usb 5-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=1a.0e [ 291.585405][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 291.588611][ T4308] usbhid 2-1:0.0: can't add hid device: -71 [ 291.600655][ T4308] usbhid: probe of 2-1:0.0 failed with error -71 [ 291.641811][ T4308] usb 2-1: USB disconnect, device number 27 [ 291.647981][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.707156][ T14] usb 5-1: Product: syz [ 291.735878][ T14] usb 5-1: Manufacturer: syz [ 291.765293][ T14] usb 5-1: SerialNumber: syz [ 291.802386][ T14] usb 5-1: config 0 descriptor?? [ 291.874762][ T27] DVB: Unable to find symbol mt352_attach() [ 291.886556][ T27] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 292.027720][ T4308] usb 5-1: USB disconnect, device number 19 [ 292.130460][ T27] rc_core: IR keymap rc-dvico-portable not found [ 292.137054][ T27] Registered IR keymap rc-empty [ 292.188540][ T27] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 292.196434][ T7471] fuse: Unknown parameter 'group_id00000000000000000000' [ 292.223761][ T27] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input18 [ 292.256946][ T27] dvb-usb: schedule remote query interval to 100 msecs. [ 292.299312][ T27] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 292.324385][ T27] usb 3-1: USB disconnect, device number 26 [ 292.417799][ T27] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 292.463480][ T7483] netlink: 43 bytes leftover after parsing attributes in process `syz.2.966'. [ 292.476596][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.967'. [ 292.520528][ T126] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 292.710261][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 292.729008][ T126] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.757729][ T126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 292.779375][ T126] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 292.805616][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.843025][ T126] usb 1-1: config 0 descriptor?? [ 292.850378][ T4347] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 293.064997][ T4347] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 293.097254][ T4347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.137339][ T4347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.174810][ T4347] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 293.218099][ T4347] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 293.258449][ T4347] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 293.286446][ T126] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 293.302788][ T4347] usb 2-1: Manufacturer: syz [ 293.307545][ T126] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 293.349110][ T4347] usb 2-1: config 0 descriptor?? [ 293.364031][ T126] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 293.397349][ T126] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 293.429223][ T126] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 293.477738][ T126] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 293.542980][ C1] usb 1-1: input irq status -75 received [ 293.748863][ T126] usb 1-1: USB disconnect, device number 31 [ 293.795445][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 293.805194][ T4347] usbhid 2-1:0.0: can't add hid device: -71 [ 293.816906][ T4347] usbhid: probe of 2-1:0.0 failed with error -71 [ 293.835782][ T4347] usb 2-1: USB disconnect, device number 28 [ 294.074854][ T7505] fido_id[7505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 294.200719][ T7508] device syzkaller0 entered promiscuous mode [ 295.090316][ T126] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 295.180047][ T4347] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 295.270386][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 295.281563][ T126] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 295.308308][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.319237][ T126] usb 3-1: Product: syz [ 295.325449][ T126] usb 3-1: Manufacturer: syz [ 295.332418][ T126] usb 3-1: SerialNumber: syz [ 295.357898][ T126] usb 3-1: config 0 descriptor?? [ 295.380495][ T4347] usb 6-1: Using ep0 maxpacket: 16 [ 295.387345][ T4347] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.400166][ T126] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 295.408589][ T126] dvb-usb: bulk message failed: -22 (2/0) [ 295.416155][ T4347] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.427331][ T4347] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 295.453589][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.473469][ T4347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.485262][ T126] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 295.502230][ T126] usb 3-1: media controller created [ 295.514493][ T4347] usb 6-1: config 0 descriptor?? [ 295.557615][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.635163][ T126] cxusb: set interface failed [ 295.656864][ T126] dvb-usb: bulk message failed: -22 (1/0) [ 295.675737][ T7537] vivid-000: ================= START STATUS ================= [ 295.812194][ T7537] vivid-000: Test Pattern: 75% Colorbar [ 295.872077][ T7537] vivid-000: Fill Percentage of Frame: 100 [ 295.939213][ T4347] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 295.971828][ T7537] vivid-000: Horizontal Movement: No Movement [ 295.980816][ T126] DVB: Unable to find symbol mt352_attach() [ 295.986888][ T126] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 296.215684][ T7537] vivid-000: Vertical Movement: No Movement [ 296.340529][ T4347] usb 6-1: USB disconnect, device number 4 [ 296.477602][ T7537] vivid-000: OSD Text Mode: All [ 296.497952][ T7537] vivid-000: Show Border: false [ 296.514797][ T7537] vivid-000: Show Square: false [ 296.529349][ T7537] vivid-000: Sensor Flipped Horizontally: false [ 296.548639][ T7537] vivid-000: Sensor Flipped Vertically: false [ 296.610364][ T126] rc_core: IR keymap rc-dvico-portable not found [ 296.624862][ T7537] [ 296.628749][ T7537] vivid-000: Insert SAV Code in Image: false [ 296.663345][ T126] Registered IR keymap rc-empty [ 296.678887][ T126] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 296.742059][ T126] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input19 [ 296.786550][ T7537] vivid-000: Insert EAV Code in Image: false [ 296.797886][ T126] dvb-usb: schedule remote query interval to 100 msecs. [ 296.814209][ T126] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 296.904028][ T126] usb 3-1: USB disconnect, device number 27 [ 296.984649][ T7537] vivid-000: Insert Video Guard Band: false [ 297.027385][ T126] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 297.172045][ T7537] vivid-000: Reduced Framerate: false [ 297.244640][ T7537] vivid-000: Enable Capture Cropping: true grabbed [ 297.317260][ T7537] vivid-000: Enable Capture Composing: true grabbed [ 297.368092][ T7537] vivid-000: Enable Capture Scaler: true grabbed [ 297.400470][ T4390] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 297.411796][ T7537] vivid-000: Timestamp Source: End of Frame [ 297.418087][ T7537] vivid-000: Colorspace: Rec. 709 [ 297.428489][ T7537] vivid-000: Transfer Function: Default [ 297.444062][ T7537] vivid-000: Y'CbCr Encoding: Default [ 297.453383][ T7537] vivid-000: HSV Encoding: Hue 0-179 [ 297.472163][ T7537] vivid-000: Quantization: Default [ 297.481714][ T7537] vivid-000: Apply Alpha To Red Only: false [ 297.494537][ T7537] vivid-000: Standard Aspect Ratio: 4x3 [ 297.504312][ T7537] vivid-000: DV Timings Signal Mode: Current DV Timings [ 297.521702][ T7537] vivid-000: DV Timings: 640x480p59 inactive [ 297.567895][ T7537] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 297.594667][ T4390] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 297.617895][ T7537] vivid-000: Maximum EDID Blocks: 2 [ 297.628857][ T4390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.662823][ T4390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.675829][ T7537] vivid-000: Limited RGB Range (16-235): true [ 297.687825][ T4390] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 297.724844][ T4390] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 297.745009][ T4390] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 297.758152][ T7537] vivid-000: Rx RGB Quantization Range: Automatic [ 297.763770][ T4390] usb 6-1: Manufacturer: syz [ 297.805138][ T4390] usb 6-1: config 0 descriptor?? [ 297.814054][ T7537] vivid-000: Power Present: 0x00000001 [ 297.843616][ T7537] tpg source WxH: 1280x720 (Y'CbCr) [ 297.874940][ T7537] tpg field: 1 [ 297.878533][ T7537] tpg crop: 1280x720@0x0 [ 297.885325][ T7537] tpg compose: 1280x720@0x0 [ 297.894346][ T7537] tpg colorspace: 3 [ 297.898761][ T7537] tpg transfer function: 0/0 [ 297.904974][ T7537] tpg Y'CbCr encoding: 0/0 [ 297.913686][ T7537] tpg quantization: 0/0 [ 297.946192][ T7537] tpg RGB range: 0/1 [ 297.951359][ T126] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 297.962605][ T7537] vivid-000: ================== END STATUS ================== [ 298.150291][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 298.171334][ T126] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.236066][ T4390] usbhid 6-1:0.0: can't add hid device: -71 [ 298.252107][ T4390] usbhid: probe of 6-1:0.0 failed with error -71 [ 298.281796][ T4390] usb 6-1: USB disconnect, device number 5 [ 298.385387][ T126] usb 3-1: config 0 interface 0 has no altsetting 0 [ 298.405768][ T126] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 298.419625][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.435454][ T126] usb 3-1: config 0 descriptor?? [ 298.861097][ T126] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 298.899121][ T126] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 298.944289][ T126] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 298.964706][ T126] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 298.991228][ T126] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 299.031891][ T7577] device syzkaller0 entered promiscuous mode [ 299.065135][ T126] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 299.111658][ C0] usb 3-1: input irq status -75 received [ 299.321721][ T4390] usb 3-1: USB disconnect, device number 28 [ 299.521143][ T7580] fido_id[7580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 300.230150][ T4347] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 300.269304][ T7595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.430470][ T4347] usb 3-1: Using ep0 maxpacket: 8 [ 300.443664][ T4347] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 300.504958][ T4347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.549200][ T4347] usb 3-1: Product: syz [ 300.555709][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.989'. [ 300.687567][ T4347] usb 3-1: Manufacturer: syz [ 300.711458][ T4347] usb 3-1: SerialNumber: syz [ 300.745638][ T4347] usb 3-1: config 0 descriptor?? [ 300.775443][ T4347] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 300.797478][ T4347] dvb-usb: bulk message failed: -22 (2/0) [ 300.846287][ T4347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.875764][ T4347] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 300.908313][ T4347] usb 3-1: media controller created [ 300.993221][ T4347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.120408][ T4347] cxusb: set interface failed [ 301.137656][ T4347] dvb-usb: bulk message failed: -22 (1/0) [ 301.501537][ T4347] DVB: Unable to find symbol mt352_attach() [ 301.507610][ T4347] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 301.860528][ T4347] rc_core: IR keymap rc-dvico-portable not found [ 301.867114][ T4347] Registered IR keymap rc-empty [ 301.906332][ T4347] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 301.978584][ T4347] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input20 [ 302.021415][ T4347] dvb-usb: schedule remote query interval to 100 msecs. [ 302.050321][ T4347] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 302.135925][ T4347] usb 3-1: USB disconnect, device number 29 [ 302.220154][ T4347] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 302.333795][ T7625] loop5: detected capacity change from 0 to 2048 [ 302.707019][ T7629] sg_write: data in/out 91/10 bytes for SCSI command 0xc0-- guessing data in; [ 302.707019][ T7629] program syz.5.996 not setting count and/or reply_len properly [ 303.039145][ T7609] loop4: detected capacity change from 0 to 32768 [ 303.196657][ T7609] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.993 (7609) [ 303.430293][ T4347] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 303.470592][ T7609] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 303.523164][ T7609] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 303.586356][ T7609] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 303.610331][ T7609] BTRFS info (device loop4): use zstd compression, level 3 [ 303.627855][ T7609] BTRFS info (device loop4): using free space tree [ 303.644776][ T4347] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 303.666771][ T4347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.691582][ T4347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.761963][ T4347] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 303.811610][ T4347] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 303.830314][ T4347] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 303.838452][ T4347] usb 3-1: Manufacturer: syz [ 303.912365][ T4347] usb 3-1: config 0 descriptor?? [ 304.069057][ T7609] BTRFS info (device loop4): enabling ssd optimizations [ 304.290690][ T4390] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 304.510817][ T4390] usb 1-1: Using ep0 maxpacket: 16 [ 304.534722][ T4390] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.660325][ T4390] usb 1-1: config 0 interface 0 has no altsetting 0 [ 304.680369][ T4390] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 304.710329][ T4390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.825681][ T4390] usb 1-1: config 0 descriptor?? [ 304.833470][ T7665] loop5: detected capacity change from 0 to 256 [ 304.851568][ T7665] exfat: Deprecated parameter 'utf8' [ 304.858052][ T7665] exfat: Deprecated parameter 'utf8' [ 304.876726][ T4264] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 304.894888][ T7665] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 304.975795][ T4347] usbhid 3-1:0.0: can't add hid device: -71 [ 305.010562][ T4347] usbhid: probe of 3-1:0.0 failed with error -71 [ 305.059122][ T4347] usb 3-1: USB disconnect, device number 30 [ 305.253281][ T4390] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 305.298267][ T4390] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 305.360096][ T4390] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 305.390587][ T4390] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 305.423821][ T4390] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 305.471344][ T4390] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 305.520536][ C0] usb 1-1: input irq status -75 received [ 305.619232][ T4282] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop4 scanned by udevd (4282) [ 305.656429][ T4390] usb 1-1: USB disconnect, device number 32 [ 305.687351][ T7683] fuse: Bad value for 'user_id' [ 305.913058][ T7684] fido_id[7684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 305.955805][ T7675] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 305.976311][ T7692] sctp: [Deprecated]: syz.4.1007 (pid 7692) Use of int in maxseg socket option. [ 305.976311][ T7692] Use struct sctp_assoc_value instead [ 306.000743][ T14] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 306.160434][ T14] usb 2-1: device descriptor read/64, error -71 [ 306.160527][ T7675] usb 6-1: Using ep0 maxpacket: 8 [ 306.194888][ T7675] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 306.230804][ T7675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.258356][ T7675] usb 6-1: Product: syz [ 306.270328][ T7675] usb 6-1: Manufacturer: syz [ 306.300349][ T7675] usb 6-1: SerialNumber: syz [ 306.321051][ T7675] usb 6-1: config 0 descriptor?? [ 306.348943][ T7675] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 306.368728][ T7675] dvb-usb: bulk message failed: -22 (2/0) [ 306.432665][ T14] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 306.437970][ T7675] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 306.510782][ T7675] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 306.526555][ T7675] usb 6-1: media controller created [ 306.624676][ T14] usb 2-1: device descriptor read/64, error -71 [ 306.626567][ T7675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.857435][ T7675] cxusb: set interface failed [ 306.863579][ T7675] dvb-usb: bulk message failed: -22 (1/0) [ 307.051939][ T14] usb usb2-port1: attempt power cycle [ 307.129369][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'. [ 307.375540][ T7675] DVB: Unable to find symbol mt352_attach() [ 307.390122][ T7675] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 307.503934][ T14] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 307.564121][ T14] usb 2-1: device descriptor read/8, error -71 [ 307.759888][ T7675] rc_core: IR keymap rc-dvico-portable not found [ 307.767447][ T7675] Registered IR keymap rc-empty [ 307.784801][ T7675] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 307.950845][ T7675] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input21 [ 307.960151][ T14] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 308.668522][ T7675] dvb-usb: schedule remote query interval to 100 msecs. [ 308.679315][ T7733] fuse: Bad value for 'fd' [ 308.680120][ T14] usb 2-1: device descriptor read/8, error -71 [ 308.700544][ T7675] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 308.745461][ T7675] usb 6-1: USB disconnect, device number 6 [ 308.800773][ T4390] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 308.820767][ T14] usb usb2-port1: unable to enumerate USB device [ 308.965335][ T7675] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 308.992640][ T4390] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 309.043557][ T4390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.087907][ T4390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.105101][ T7741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1022'. [ 309.125900][ T4390] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 309.173931][ T4390] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 309.194398][ T4390] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 309.225628][ T4390] usb 1-1: Manufacturer: syz [ 309.237589][ T4390] usb 1-1: config 0 descriptor?? [ 309.274258][ T7753] sctp: [Deprecated]: syz.4.1024 (pid 7753) Use of int in maxseg socket option. [ 309.274258][ T7753] Use struct sctp_assoc_value instead [ 309.474064][ T2120] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 309.640481][ T7675] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 309.660191][ T2120] usb 3-1: Using ep0 maxpacket: 16 [ 309.671961][ T2120] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.697655][ T2120] usb 3-1: config 0 interface 0 has no altsetting 0 [ 309.707212][ T2120] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 309.726903][ T2120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.736238][ T4390] usbhid 1-1:0.0: can't add hid device: -71 [ 309.743292][ T4390] usbhid: probe of 1-1:0.0 failed with error -71 [ 309.755017][ T2120] usb 3-1: config 0 descriptor?? [ 309.764418][ T4390] usb 1-1: USB disconnect, device number 33 [ 309.830579][ T7675] usb 6-1: Using ep0 maxpacket: 8 [ 309.846504][ T7675] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 309.856537][ T7675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.865851][ T7675] usb 6-1: Product: syz [ 309.871240][ T7675] usb 6-1: Manufacturer: syz [ 309.875967][ T7675] usb 6-1: SerialNumber: syz [ 309.884785][ T7675] usb 6-1: config 0 descriptor?? [ 309.901881][ T7675] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 309.919492][ T7675] dvb-usb: bulk message failed: -22 (2/0) [ 309.927561][ T7675] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 309.939122][ T7675] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 309.952753][ T7675] usb 6-1: media controller created [ 309.976137][ T7675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.104927][ T7675] cxusb: set interface failed [ 310.110545][ T7675] dvb-usb: bulk message failed: -22 (1/0) [ 310.175584][ T2120] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 310.205740][ T2120] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 310.243831][ T7675] DVB: Unable to find symbol mt352_attach() [ 310.250298][ T2120] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 310.250358][ T2120] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 310.251839][ T2120] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 310.278489][ T7675] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 310.377271][ T7778] fuse: Bad value for 'fd' [ 310.425027][ C0] usb 3-1: input irq status -75 received [ 310.490585][ T7675] rc_core: IR keymap rc-dvico-portable not found [ 310.497045][ T7675] Registered IR keymap rc-empty [ 310.520471][ T7675] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 310.597612][ T7675] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input22 [ 310.644585][ T4390] usb 3-1: USB disconnect, device number 31 [ 310.690844][ T7675] dvb-usb: schedule remote query interval to 100 msecs. [ 310.697858][ T7675] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 310.766150][ T7792] loop4: detected capacity change from 0 to 128 [ 310.778973][ T7675] usb 6-1: USB disconnect, device number 7 [ 310.830425][ T2120] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 310.879734][ T7792] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 310.902069][ T7786] fido_id[7786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 310.929047][ T7675] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 310.948200][ T7792] hpfs: filesystem error: improperly stopped [ 310.966131][ T7792] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 310.989915][ T2120] usb 2-1: device descriptor read/64, error -71 [ 311.028937][ T7792] hpfs: You really don't want any checks? You are crazy... [ 311.058968][ T7792] hpfs: hpfs_map_sector(): read error [ 311.077960][ T7792] hpfs: code page support is disabled [ 311.092423][ T7792] hpfs: hpfs_map_4sectors(): unaligned read [ 311.099223][ T7792] hpfs: hpfs_map_4sectors(): unaligned read [ 311.110634][ T7792] hpfs: filesystem error: unable to find root dir [ 311.213505][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 311.280689][ T2120] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 311.360663][ T7675] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 311.440210][ T2120] usb 2-1: device descriptor read/64, error -71 [ 311.552854][ T7675] usb 6-1: Using ep0 maxpacket: 8 [ 311.560254][ T2120] usb usb2-port1: attempt power cycle [ 311.567812][ T7675] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.602584][ T7675] usb 6-1: config 0 has no interface number 0 [ 311.619076][ T7675] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.145582][ T2120] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 312.232380][ T2120] usb 2-1: device descriptor read/8, error -71 [ 312.554787][ T2120] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 312.648899][ T7675] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 312.655720][ T2120] usb 2-1: device descriptor read/8, error -71 [ 312.658147][ T7675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.684723][ T7675] usb 6-1: config 0 descriptor?? [ 312.746522][ T7813] [ 312.748920][ T7813] ====================================================== [ 312.755958][ T7813] WARNING: possible circular locking dependency detected [ 312.762990][ T7813] syzkaller #0 Not tainted [ 312.767587][ T7813] ------------------------------------------------------ [ 312.774634][ T7813] syz.2.1035/7813 is trying to acquire lock: [ 312.780627][ T7813] ffff88807c6235d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 312.790401][ T7813] [ 312.790401][ T7813] but task is already holding lock: [ 312.797768][ T7813] ffff888054b988e0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 312.808664][ T7813] [ 312.808664][ T7813] which lock already depends on the new lock. [ 312.808664][ T7813] [ 312.819065][ T7813] [ 312.819065][ T7813] the existing dependency chain (in reverse order) is: [ 312.828092][ T7813] [ 312.828092][ T7813] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 312.836988][ T7813] down_write+0x36/0x60 [ 312.841694][ T7813] process_measurement+0x33c/0x1a10 [ 312.847428][ T7813] ima_file_mmap+0x104/0x150 [ 312.852552][ T7813] __se_sys_remap_file_pages+0x53e/0x770 [ 312.858714][ T7813] do_syscall_64+0x4c/0xa0 [ 312.863661][ T7813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.870092][ T7813] [ 312.870092][ T7813] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 312.877659][ T7813] __lock_acquire+0x2cf8/0x7c50 [ 312.883037][ T7813] lock_acquire+0x1b4/0x490 [ 312.888069][ T7813] down_read_killable+0x4c/0x340 [ 312.893533][ T7813] mmap_read_lock_killable+0x1d/0x60 [ 312.899351][ T7813] lock_mm_and_find_vma+0x2b1/0x2f0 [ 312.905102][ T7813] do_user_addr_fault+0x2db/0xb10 [ 312.910659][ T7813] exc_page_fault+0x60/0x100 [ 312.915871][ T7813] asm_exc_page_fault+0x22/0x30 [ 312.921249][ T7813] fault_in_readable+0x13e/0x1f0 [ 312.926712][ T7813] fault_in_iov_iter_readable+0xbb/0x2e0 [ 312.932966][ T7813] generic_perform_write+0x1d2/0x560 [ 312.938779][ T7813] __generic_file_write_iter+0x172/0x430 [ 312.944940][ T7813] generic_file_write_iter+0xab/0x2e0 [ 312.950838][ T7813] vfs_write+0x44c/0x960 [ 312.955610][ T7813] ksys_write+0x143/0x240 [ 312.960471][ T7813] do_syscall_64+0x4c/0xa0 [ 312.965410][ T7813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.971924][ T7813] [ 312.971924][ T7813] other info that might help us debug this: [ 312.971924][ T7813] [ 312.982157][ T7813] Possible unsafe locking scenario: [ 312.982157][ T7813] [ 312.989606][ T7813] CPU0 CPU1 [ 312.994975][ T7813] ---- ---- [ 313.000336][ T7813] lock(&sb->s_type->i_mutex_key#12); [ 313.005809][ T7813] lock(&mm->mmap_lock); [ 313.012666][ T7813] lock(&sb->s_type->i_mutex_key#12); [ 313.020672][ T7813] lock(&mm->mmap_lock); [ 313.025018][ T7813] [ 313.025018][ T7813] *** DEADLOCK *** [ 313.025018][ T7813] [ 313.033260][ T7813] 3 locks held by syz.2.1035/7813: [ 313.038383][ T7813] #0: ffff8880296eb768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 313.047638][ T7813] #1: ffff888078d62460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 313.056541][ T7813] #2: ffff888054b988e0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 313.067864][ T7813] [ 313.067864][ T7813] stack backtrace: [ 313.073769][ T7813] CPU: 1 PID: 7813 Comm: syz.2.1035 Not tainted syzkaller #0 [ 313.081155][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 313.091310][ T7813] Call Trace: [ 313.094610][ T7813] [ 313.097544][ T7813] dump_stack_lvl+0x168/0x22e [ 313.102262][ T7813] ? load_image+0x3b0/0x3b0 [ 313.106784][ T7813] ? show_regs_print_info+0x12/0x12 [ 313.111993][ T7813] ? print_circular_bug+0x12b/0x1a0 [ 313.117207][ T7813] check_noncircular+0x274/0x310 [ 313.122166][ T7813] ? add_chain_block+0x940/0x940 [ 313.127548][ T7813] ? lockdep_lock+0xdc/0x1e0 [ 313.132154][ T7813] ? _find_first_zero_bit+0xcf/0x100 [ 313.137449][ T7813] __lock_acquire+0x2cf8/0x7c50 [ 313.142314][ T7813] ? verify_lock_unused+0x140/0x140 [ 313.147559][ T7813] ? verify_lock_unused+0x140/0x140 [ 313.152798][ T7813] ? verify_lock_unused+0x140/0x140 [ 313.158018][ T7813] ? mark_lock+0x94/0x320 [ 313.162364][ T7813] lock_acquire+0x1b4/0x490 [ 313.166880][ T7813] ? mmap_read_lock_killable+0x1d/0x60 [ 313.172385][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 313.177789][ T7813] ? cmp_ex_search+0x1a/0x70 [ 313.182386][ T7813] ? bsearch+0x8a/0xb0 [ 313.186466][ T7813] ? fault_in_readable+0x13e/0x1f0 [ 313.191585][ T7813] ? search_extable+0x8c/0xd0 [ 313.196267][ T7813] ? trim_init_extable+0x3b0/0x3b0 [ 313.201456][ T7813] ? mmap_read_lock_killable+0x1d/0x60 [ 313.206922][ T7813] down_read_killable+0x4c/0x340 [ 313.211870][ T7813] ? mmap_read_lock_killable+0x1d/0x60 [ 313.217338][ T7813] mmap_read_lock_killable+0x1d/0x60 [ 313.222641][ T7813] lock_mm_and_find_vma+0x2b1/0x2f0 [ 313.227850][ T7813] do_user_addr_fault+0x2db/0xb10 [ 313.232882][ T7813] ? _raw_spin_unlock_irq+0x1f/0x40 [ 313.238100][ T7813] exc_page_fault+0x60/0x100 [ 313.242785][ T7813] asm_exc_page_fault+0x22/0x30 [ 313.247637][ T7813] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 313.253369][ T7813] Code: 58 e9 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 37 e9 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 1a e9 [ 313.273075][ T7813] RSP: 0018:ffffc900038d7a90 EFLAGS: 00050287 [ 313.279147][ T7813] RAX: ffffffff81bbe759 RBX: 0000000000001000 RCX: 0000000000080000 [ 313.287218][ T7813] RDX: ffffc9000e237000 RSI: 0000000000064181 RDI: 0000000000064182 [ 313.295194][ T7813] RBP: 0000000000000000 R08: ffff88802b653b80 R09: 0000000000000002 [ 313.303354][ T7813] R10: 0000000000000006 R11: 0000000000000002 R12: 00002000003a4000 [ 313.311329][ T7813] R13: dffffc0000000000 R14: 00002000003a2040 R15: 00002000003a3000 [ 313.319312][ T7813] ? fault_in_readable+0x139/0x1f0 [ 313.324445][ T7813] fault_in_iov_iter_readable+0xbb/0x2e0 [ 313.330087][ T7813] generic_perform_write+0x1d2/0x560 [ 313.335405][ T7813] ? atime_needs_update+0x780/0x780 [ 313.340612][ T7813] ? generic_file_direct_write+0x660/0x660 [ 313.346428][ T7813] ? __file_remove_privs+0x5b0/0x5b0 [ 313.351740][ T7813] ? preempt_count_add+0x8d/0x190 [ 313.356769][ T7813] ? rwsem_write_trylock+0x12f/0x1b0 [ 313.362068][ T7813] ? clear_nonspinnable+0x60/0x60 [ 313.367107][ T7813] ? generic_write_checks_count+0x3d9/0x4c0 [ 313.373012][ T7813] __generic_file_write_iter+0x172/0x430 [ 313.378653][ T7813] generic_file_write_iter+0xab/0x2e0 [ 313.384031][ T7813] vfs_write+0x44c/0x960 [ 313.388283][ T7813] ? file_end_write+0x250/0x250 [ 313.393146][ T7813] ? __fget_files+0x44a/0x4d0 [ 313.397840][ T7813] ? __fdget_pos+0x2ae/0x360 [ 313.402440][ T7813] ? ksys_write+0x71/0x240 [ 313.406862][ T7813] ksys_write+0x143/0x240 [ 313.411199][ T7813] ? __ia32_sys_read+0x80/0x80 [ 313.415968][ T7813] ? lockdep_hardirqs_on+0x94/0x140 [ 313.421177][ T7813] do_syscall_64+0x4c/0xa0 [ 313.425599][ T7813] ? clear_bhb_loop+0x60/0xb0 [ 313.430281][ T7813] ? clear_bhb_loop+0x60/0xb0 [ 313.434961][ T7813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.440893][ T7813] RIP: 0033:0x7f22dcd8eba9 [ 313.445311][ T7813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.464931][ T7813] RSP: 002b:00007f22ddb6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 313.473363][ T7813] RAX: ffffffffffffffda RBX: 00007f22dcfd5fa0 RCX: 00007f22dcd8eba9 [ 313.481348][ T7813] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000003 [ 313.489321][ T7813] RBP: 00007f22dce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 313.497304][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.505290][ T7813] R13: 00007f22dcfd6038 R14: 00007f22dcfd5fa0 R15: 00007ffef7028fd8 [ 313.513273][ T7813] [ 313.532317][ T2120] usb usb2-port1: unable to enumerate USB device [ 313.581905][ T7675] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 313.594684][ T7675] usb 6-1: USB disconnect, device number 8 [ 317.121736][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.128068][ T1266] ieee802154 phy1 wpan1: encryption failed: -22