last executing test programs: 3m17.953331306s ago: executing program 1 (id=80): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) 3m17.757309572s ago: executing program 1 (id=82): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) userfaultfd(0x80001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) listen(0xffffffffffffffff, 0x802) socket$packet(0x11, 0xf8ee34745f88a816, 0x300) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x2ce}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f00000000c0)={{&(0x7f00000005c0)={'KERNEL\x00', {&(0x7f0000000380)=@adf_str={@format={'Cy', '3', 'NumConcurrentRequests\x00'}, {"8d5daefee3c71ffbe09dc5d04d7660b0f8628cc6380d71012c14b0ca4e92605f377ecd4afd39302f02a0a3dd8462ff261afaaa5ea202f5b47f5b33866cce3e7e"}}}, {&(0x7f0000000200)={'Accelerator0\x00', {&(0x7f0000000500)=@adf_str={@format={'Dc', '2', 'RingAsymRx\x00'}, {"98ce8f3acd251183106b0be57818b2655ac31fd7b5887a25834570fbc3777f5188191d136275bd3c68c17dbbfc725b544b17ecd45f90eeccbf15adb9afff50e5"}, {&(0x7f0000000440)=@adf_hex={@normal='NumberCyInstances\x00'}}}}}}}}, 0x81}) getdents64(0xffffffffffffffff, 0x0, 0x64) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f00000002c0)=0x2c2, 0x4) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x40, 0xbbba, 0x2, 0x0, 0x2, {}, {0x80004, 0x2}, {0x4004000}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x800f, 0x2, 0x20000000, 0x80, 0x0, 0x11}) 3m15.813035289s ago: executing program 1 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0xe, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 3m15.642617053s ago: executing program 1 (id=86): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x8820, 0x0, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5) 3m15.269964233s ago: executing program 1 (id=88): socket$inet6_sctp(0xa, 0x1, 0x84) socket$tipc(0x1e, 0x5, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 3m14.430735721s ago: executing program 1 (id=92): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x6]}, 0x8) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) r2 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r2, 0x7) 3m14.254203515s ago: executing program 32 (id=92): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x6]}, 0x8) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) r2 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r2, 0x7) 10.913031278s ago: executing program 3 (id=932): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0xf1, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x3}, {"451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b7628e773a68a7cff5af42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30086526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"}}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r6, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2d, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "03a8"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x2, 0x0, 0x0, 0x2, 0xfffffffb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x1b1c}}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0f00000000000000000000000000000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) 9.65063765s ago: executing program 2 (id=937): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x8, 0xfffffffc}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 9.450700476s ago: executing program 5 (id=940): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1c}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/234) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000002240)=0x2) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000280)="41b978", 0x3}, {0x0}, {0x0}], 0x3) 9.441045007s ago: executing program 5 (id=941): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x80184153, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$inet6(0xa, 0x3, 0x5) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0908000500"], 0x10}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) execve(0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40002000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 8.682791388s ago: executing program 2 (id=945): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write$binfmt_misc(r7, &(0x7f0000000980), 0xfdef) splice(r3, 0x0, r7, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) 7.978809255s ago: executing program 4 (id=950): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 7.193745918s ago: executing program 3 (id=952): syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) bind$inet(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execve(0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40002000) 7.191718049s ago: executing program 2 (id=953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040880}, 0x44808) 7.110596685s ago: executing program 2 (id=954): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) vmsplice(r1, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000000000)="150d1c", 0x3}], 0x4, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 6.17713565s ago: executing program 5 (id=956): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r3], 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) 6.108709856s ago: executing program 0 (id=957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0xffffffff004) 5.734822946s ago: executing program 4 (id=958): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r4, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.272097574s ago: executing program 0 (id=959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040841}, 0x402c054) 5.147124254s ago: executing program 0 (id=960): bpf$ENABLE_STATS(0x20, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0xfffffffffffffffd, 0x100000003, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) sync() sync() 4.866952077s ago: executing program 0 (id=961): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001880), 0x100, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) syz_open_dev$usbfs(&(0x7f0000000240), 0x76, 0xc40) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$packet(0x11, 0x2, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.81838985s ago: executing program 4 (id=962): futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x88, &(0x7f00000009c0)={[{@nogrpid}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@lazytime}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 4.682787572s ago: executing program 0 (id=963): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0xf1, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x3}, {"451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b7628e773a68a7cff5af42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30086526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c"}}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r6, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2d, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "03a8"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x2, 0x0, 0x0, 0x2, 0xfffffffb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x1b1c}}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0f00000000000000000000000000000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) 4.478222708s ago: executing program 5 (id=964): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write$binfmt_misc(r7, &(0x7f0000000980), 0xfdef) splice(r3, 0x0, r7, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) 4.111192208s ago: executing program 3 (id=965): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x237, 0x0, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) gettid() gettid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) pipe(&(0x7f0000000040)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0x0, 0x0, 0xa}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c90000cf47d16331aef6ee13ff7f266e13da7be839b35e9ae1a333f2d8fd8e1983903166f4d8f3d5e043b8eb3a4dd0a04b39df97c82009b793cd734558a268aac6cea0ca6aa40899810bc164d8ad6b2ce23bf4b88d9b72991218c6c68e9a992582d217f639c8ad76405b511163edb9ca95e8123830003ab82fc86a517ac2aff77866914ebb9aca4a6e530d80f19ee31eeb1e5b8139b72264f8fceb54ee9980e771c5f11155b69e12e65e6a3699d1b80648dd949081f1a612b7b5950f41554c9b832f7cf9efa4987bd88887917199318d28808204e7638ca5932c066d2a662e600ac0a8f27b86c066f2bceabd1b3af66c12fefa311c5afe0821a14432925187a05476e0a972e85f26a24832c357d70d354ade966e6963234e4956658ac9ece3780485fcb3decb69a029ffbeda1c7b27bb020f4137624286d8a2d22221028b3efd3433e7fd3ba291446947a274a748f45bb347fa49e295cfa305f5dd46b662afde61cfee33ea823d23f46a662146886c6e3c30e660d765f46dcc14914b3e342e44436410fedeb6594f37ac94cd336dea463e0541daadbe70b5b925741db16240afc85f391539569ac14e5dccb9ca5790c33f8a6cdd7abc1cb762972634968ecb9f1dff8b6b6cd6f5f56db31c24ac5b2b1bed2efea1f4e67f686a8abfa41f297a165b9fcb4800230ed07af34727fe6c2cc6daf796cc38e8f03ee4fb786a92fabfbded442086d657dec598edb21ba428d4bb28ac974c38218bcf08ad3b4f6698ae05855769dbe5693eac83a223b76a5f452195795d3d485e5c0a18caf2315c3a21acb4bb661082b1c4fccfff8f0c52c353dedd3b9e575b800cfec557e43527228abf820e16411b45c77e99f308dcc5dcd1c3b8ddb828e6481c1fc6275c3e1ed4a1f0fe6d97db39cb3ad5b08400cc990ed5797e23fcd81ee76eed1caaf2ec709c18b014dfcfac7eb658f1c07a894dca1d8e23ebbc18c7b0acefacd915235a54637d13965681a6a527325d13b4a88a21505860873038bc6ca68e25bed80496e65b53a4817e7dba3cbe31eebb770ab04202486634b7210500238707cd664735c07e539e8ccb09ec82d7fad69c4f31113b4a01089a81d4a1787d69957a2dfcf371f0c357eba5a587f0d09d64588f3fade99726d786085b513e720fd1d889104e1d98bf4fe23d6bd8c408c44fc702880e6c53a733aaafec836a80b9e69d1432225dda63a755bde5103fbba7af46f81b3b0c3457d49e187c7fa53e9410d4ff7dd1c9a954d549b49197f350e8451e850279ba4690a4ff3fa4f91ebfa4dda7d2a60257d70c09ad6520387baf2cd734bf1f993565f7ccf80f29b1414e595de79ec03faf7afbeff3daf0034aeecfe41640366ae3c1d1b9437cb7580b9a94fe71a5ffe7be4f959cc5972e1672c5f5c5d252a63804d1a292aac2582b78ac73ea143095bc1283b210c66ecc5b5b9be4d6649920118d51429328f8a983a89f8f5d6ec383c89f07e91e0726ed40776d72d7499652a84f9d0bb086e9479a6d703907ee17345ed763ae817751515c744d428ac51fb10eba495f9a477809a4c1b447a94a3f6d1a092b109478ca36c3da494552d34f30d74a32958c53ec091e32ca8aaf5c814881d4bb3add2b07f362e9e4ea17b3f8b6e7310fcbea4ea6f2d9f5505b011011b75eb4dbf2455f665027abe2bb73dd37dff9c6aab6e9454bbd7bb887aef12f19f446bcbf257ada0e5144f708ccf350f07b861b813eb4cdab02d74b660d960c737f553f84b2d027da58f02345704583717199f693c913bfc2704cfde1b31270c43f17d51c82b672796fd6e1d09e34659d7e5fd9a1a69dcdde367c074b47beeb88f374740a64d9e9a99f4fabdbfca311174da518f868704e3fe259e6069330b04d2d3804a3428d2e04a483599f5ff47ff8c877601fcae33999575180fb540ff00c55728d0ee8eb6550658c7cbc8be4f87b50a9650a33aa164c6bae4044dfc080cf43a1c80e8a8132f973faefcf2ee23f9c2f3119fa93c0e5875832d4f8b6c2a1c347d480f15ead27ba7fb6e2ba9f2204982023b15b0f9df44ce9bba765c9598810593dd32a520ba72a5bfc375f36f4ea4a55017b1494c392568ef6828c18a1f2cec1442f705687695e42f62734ac2c1b0fed399ccf29b20fccd476afc72217182a73c970029c7679dffaebfc2ab9e8d18f5e757ccde87ac69b2bb0243b2e86d225dd2edad4919977bde1806bd6305eff22f2d63646c3a856a002aaea40d96e4811fe0cf5ad942e087c55551fdccc65835686320aa635ec50872f1c30cd8a732515b4dbfa132f905205f4b2ec64d1b9a9101ee2c3d0a110e40fd40d2c0b19f9a77b43f0b14e283ad1038de31cb21c2857d278933fd4bf106a7a93e16b28d71dfa73fa0695c77c0b1236e4cc7f17837be252d1011edf8ba626315e416b2963e96172b3294ec1f087672b0fc404edb79ca9b8e7a46f69b7a6f8b0488ec6c10f937632cc29bdb6f2c0ca86b978db6ca3cb9aa9b5f253fb5ba52e5b3738468236bd3ed26da1158e14881860f37f586b3b004ff7233a7427ece1c1365bb273aa1ce801c6d61b35a247c38917df23b9f12f7e764dabf9af18885e447a952de7796c3dd27e77325be816eb82ae9026ef5a855ddfb9aaf4a0bfc153f079c95337d2ee3c2ac36e5b4e8c5da765bf5d11edcf01ef11a3748d7ca0b1fd6f8882fbfd3423bd429c8592ec28a98bba845e7fe829ae2b11f5215ce819bf777ab45d73e9afe3cc76840b7d368161ee140efdec81ca1d5716c2ea5b255fabb5a4698864c8d427738837c45f1006cbf1f68bbedbfdf70e5b65b21b1934826c06d4d3da4f08e3ad376cec5aafb2f9eae9a06cab375ef5a44f30a563e5245077d84823b88d71912f458fe17d36e4b2a88260ad121af2e5a43a555ef61ffd242c09d5011b9be422c4c310a834f664c732930c1d329212aa9f063356c85130c965d919180e62afd193224d3792db6a069ff2bc8770bd6294a6884cbfb71301859a26b7572440ee12719e8753831bf73d353a33ea64c57df0bac0cc8938ea28370724439170824d1b55d415eed14f620d3a28bb5009edd12e9322df3573bbd9b0d0ff2cbd2e48c0c297f63c100116097c48c8f4cf0a7c4fb5156723fcb615236b6db175442b2db90c3e426cca9de56f55effdbb981c75c99a8dd084a619882fb216b000cb99eae616f0b5d7a8a2cc675cbd3e0a61b6f602250b040ae57f998471095563334e165f35139ec22aabf8ada15b890e2cf038a4f40d129760e39b166f58cfb4bfee7d4455ce06ad098745e0edac9434e4c61f889cbe6d7cf74da35f1b6d2b4455abf954223d1638ff808508228a3060d390e9ce539d2dcb032ae5d6c5abcd4df4bfb63f9851e45bb961cca2150eb386abd67dab2a12c096aa8df742e41ff7718f9dd77099d9bc87a2a46d8d6ffb903b23b429747c9acb21c0e88067eb6c7fa2507ef0673e6b65a15767cfa4ef9b52adbce41ea3461f77b0e705a2d5cbcf3841bd22414f3ef2402a915705a18113d370d35619fdbbfb4fe6e1581a8520525e863d931aaaed58d06d093905b0d83dd1345f4b8213954102abf8048be627d437f267d4a0a6e6f181891562b61be55f1e646120cfe17d8d2961ad86d1575856fff39791b90ccc6895495cc0f3a1e2604f5b729aec7452b133b9c822bbc74df480670f34cf0335d42b5ad6a7009c49050d97ef8c09eff8716dbb9ce5a5d67ffad2541860017bfe982c0e48390f987f470c7b600fb29be4d3a74251d85ef1cf1fe3b5a146bb9f6fee2369cba1f2be75782b14a422b0820fa00c1250f4d437f24914a94a8564fa079fe803b39c528707dd2906120d53020000b725596b68553f1653aad2fdd23114e4a7ca3402fcdf0b060323a683a03109ffbec9627c803da8a55665e156a335528f113eb730bb28c0480daf8f2b65483d0f3805e1c512b680d8698e63a80b45aa8c7e12ad0f0e072eefc806fde42455bc4d157e402a86218896d5638f8fdadb1fbffaf4fe92f526475612980f0c5a539a9cec3c63e4efa5b893611af45c8003650888dc5b958a18848cffe11e0636f40e3ade10da702b71a69e6941e506ec3f0297349867949246310909ff445005f68910308df1e44f7ef04efbcb6ade53086aeb80b0ca96b94c9e6353c77bc1ce575edd6a1ab76e000d2ca0bc80c09d76d2bf25d90c93d5fcf6c123a9e83a3354b798356aeb2e99721732d52b1ec6c84d79d6f1237186260e7e63f29cfe8050a8fd44d57b52582b45e1fe027792c07ef33a0ac686606dd009ef3839e179190aca20d01db1d2263898a6953feb5d2e8093a4b4a2b18f6cb06a0251d3862672814b5165213c65174fe5dad7673186293e336348fc77a6d545cc07355c07a8b9a98c95d76fa5dc4c19181578a6dc4f2b29b647ab6a09f6756994c8e389c7c165766f154468b380e1e67cb2edbc7f67b6bfad1de690c3f472908b11d1c502ca61b5e869cd2cf8e11e39eceb9d31fca090fd5dd15e1f5a8c4de58531df3fa96d655653a5b99ea449d3865e07401ecb63fb4ac4042c893841c2b70b4a133937ac0dca8d6f442de175f138ab7cf19477c2483caf524fc443b3243d31f15f3f518b2d7964314d7d34754ae417dd9d46a83e443cef18eb673f46f34aeaba592a171bb4710002da17d9d6554208fc384de22bff7e05d2bfb821656e78bfa084be46fe6b0f04a06c6bc80afbd406a918a57d582345b260360cec7168142ef0e0da8ad70ac9703d6206c6da23558374ad8bc1e8fe5cdede25e8ad5d0d0741d85e86566b7b9172f457e36feabb881f14a04d182b6971bb1aa1c37a608ff0eeaba1b6c37c4bdb15696afb0e031ef8b214a7a72892593c910829c820f773135f3441afc90cadeb50f76d4a5bbd713c8b3dc441599dcae659b9ad417affde5d9ee3933f00ea69323fd33e0b9a12b1ee29b2e97c7b1db3fa0a900678c6490a847fdd85fa93bb134e3239638052359774bc22405a0abb698081ce1dce2dfe0c0430b641f00d230013944df65581f6b5f458165b16aad8b92b44bf28b3236cac5239c91fe2351c5f53359d072aa34ffee18ff275afdc0dc7b889da928fdd4e300a52699cb5a4fea8cc42f636b15e449daef52df3586d4b55fd047b04e96734aa2c45bcad8f05dbf3c97daefcd6bad396a6aed71849e484eb0e3526970973db9b268b71e726748aacb5c2203cde2992af74cac612d33cecba7f3e5d66e2a2e449eb00e770af4fe13be6d16877cfa46c108c29d8db1efff5356433fc627741d12605056ec78c02bf143afc9e2161c15ce65a0f8c9f13a6b7a9164f256301ff0ca23dfffb77ec46ddd29b63d7bcfe5ae482f76f1c0e819b"], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.051467972s ago: executing program 2 (id=966): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x80184153, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$inet6(0xa, 0x3, 0x5) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0908000500"], 0x10}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) execve(0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40002000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 3.760176126s ago: executing program 3 (id=967): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 3.758497896s ago: executing program 4 (id=968): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x1184680, &(0x7f0000000b40), 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x8000) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x840) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d40)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000011c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.46262447s ago: executing program 5 (id=969): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x66f, 0x5, 0x7}, 0x50) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 1.838364152s ago: executing program 3 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040841}, 0x402c054) 1.791738995s ago: executing program 3 (id=971): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x57, {0x57, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1.706736492s ago: executing program 4 (id=972): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r4, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.583627952s ago: executing program 0 (id=973): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 1.525608487s ago: executing program 5 (id=974): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0xfffffffffffffe1b}], 0x0, 0x4498bda7e2139f37, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x1, 0x0, 0x5f, 0x7, 0x2, 0xa6, 0x0, 0x5, 0xe, 0xffffffffffffffff}, {0xfffffff9, 0x4004, 0x0, 0xfe, 0x0, 0xf6, 0x81, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000001}, {0xffffff01, 0x35, 0x0, 0x1, 0x4, 0x5, 0xf, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2000000020, 0x8000000000000001, 0x80000000000, 0x0, 0x10, 0x4, 0x0, 0x2000, 0x2, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, r6, {0x2}}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 939.926134ms ago: executing program 2 (id=975): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = inotify_init() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000050) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r8 = inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[@ANYRES64=r8], 0x69) close(r7) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 0s ago: executing program 4 (id=976): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001f00e3620e0001006e65"], 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) kernel console output (not intermixed with test programs): writing: No such file or directory [ 73.692736][ T4539] loop2: detected capacity change from 0 to 4096 [ 73.728278][ T4541] usb usb7: usbfs: process 4541 (syz.3.50) did not claim interface 0 before use [ 73.775259][ T4539] loop2: detected capacity change from 0 to 256 [ 74.982889][ T4579] syz.2.64 uses obsolete (PF_INET,SOCK_PACKET) [ 75.213969][ T4333] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 75.311560][ T4586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 75.405528][ T4333] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.419526][ T4333] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 75.428963][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.444188][ T4333] usb 4-1: config 0 descriptor?? [ 75.461440][ T4333] pwc: Askey VC010 type 2 USB webcam detected. [ 75.856773][ T4333] pwc: recv_control_msg error -32 req 02 val 2b00 [ 75.870059][ T4333] pwc: recv_control_msg error -32 req 02 val 2700 [ 75.882209][ T4333] pwc: recv_control_msg error -32 req 02 val 2c00 [ 75.900021][ T4333] pwc: recv_control_msg error -32 req 04 val 1000 [ 75.912193][ T4333] pwc: recv_control_msg error -32 req 04 val 1300 [ 75.925642][ T4333] pwc: recv_control_msg error -32 req 04 val 1400 [ 75.933080][ T4333] pwc: recv_control_msg error -32 req 02 val 2000 [ 75.940711][ T4333] pwc: recv_control_msg error -32 req 02 val 2100 [ 76.149481][ T4333] pwc: recv_control_msg error -32 req 02 val 2500 [ 76.359253][ T4333] pwc: recv_control_msg error -71 req 02 val 2600 [ 76.370020][ T4333] pwc: recv_control_msg error -71 req 02 val 2900 [ 76.377322][ T4333] pwc: recv_control_msg error -71 req 02 val 2800 [ 76.384223][ T4333] pwc: recv_control_msg error -71 req 04 val 1100 [ 76.391112][ T4333] pwc: recv_control_msg error -71 req 04 val 1200 [ 76.399907][ T4333] pwc: Registered as video103. [ 76.412865][ T4333] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 76.427235][ T41] cfg80211: failed to load regulatory.db [ 76.458290][ T4333] usb 4-1: USB disconnect, device number 5 [ 76.757637][ T4604] netlink: 52 bytes leftover after parsing attributes in process `syz.2.73'. [ 77.357417][ T4614] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 77.369937][ T4614] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 77.413733][ T41] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 77.635349][ T41] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 77.654522][ T41] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 77.685216][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.765120][ T41] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 77.808987][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.910136][ T4623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 77.932975][ T4367] usb 4-1: USB disconnect, device number 6 [ 78.976077][ T41] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 79.185455][ T41] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 79.201075][ T41] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.240284][ T41] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.279193][ T41] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.312753][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.348401][ T41] usb 4-1: Product: syz [ 79.362583][ T41] usb 4-1: Manufacturer: syz [ 79.379129][ T41] usb 4-1: SerialNumber: syz [ 79.682611][ T41] usb 4-1: 0:2 : does not exist [ 79.688189][ T41] usb 4-1: unit 6 not found! [ 79.754508][ T41] usb 4-1: USB disconnect, device number 7 [ 80.014320][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.118770][ T4645] loop1: detected capacity change from 0 to 512 [ 80.211631][ T4645] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.262782][ T4645] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.457343][ T4272] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 80.479280][ T4272] EXT4-fs (loop1): Remounting filesystem read-only [ 80.492862][ T4272] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 80.515816][ T4272] EXT4-fs (loop1): Remounting filesystem read-only [ 80.530157][ T4272] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 80.559490][ T4272] EXT4-fs (loop1): Remounting filesystem read-only [ 80.568109][ T4272] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 80.582353][ T4272] EXT4-fs (loop1): Remounting filesystem read-only [ 80.592899][ T4272] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 80.607548][ T4272] EXT4-fs (loop1): Remounting filesystem read-only [ 80.614833][ T4272] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 80.632230][ T4272] EXT4-fs (loop1): Remounting filesystem read-only [ 80.639695][ T4272] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 80.656308][ T4272] EXT4-fs (loop1): Remounting filesystem read-only [ 80.670831][ T4272] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 80.683193][ T4272] EXT4-fs (loop1): Remounting filesystem read-only [ 80.696243][ T4272] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 80.710571][ T4272] EXT4-fs (loop1): Remounting filesystem read-only [ 80.719914][ T4272] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 81.278258][ T4358] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.357899][ T4358] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.467134][ T4358] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.563258][ T4358] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.034126][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.043344][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.053030][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.063442][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.071139][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.078410][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.941702][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 83.823799][ T4388] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 84.000192][ T4388] usb 4-1: device descriptor read/64, error -71 [ 84.174071][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 84.273866][ T4388] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 84.320232][ T4668] chnl_net:caif_netlink_parms(): no params data found [ 84.368085][ T4709] netlink: 204 bytes leftover after parsing attributes in process `syz.0.103'. [ 84.433954][ T4388] usb 4-1: device descriptor read/64, error -71 [ 84.564222][ T4388] usb usb4-port1: attempt power cycle [ 84.981088][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.983927][ T4388] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 85.002131][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.032442][ T4668] device bridge_slave_0 entered promiscuous mode [ 85.064624][ T4388] usb 4-1: device descriptor read/8, error -71 [ 85.116526][ T4358] device hsr_slave_0 left promiscuous mode [ 85.131177][ T4358] device hsr_slave_1 left promiscuous mode [ 85.179665][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.195049][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.255448][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.277938][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.297042][ T4358] device batadv1 left promiscuous mode [ 85.313646][ T4358] bridge0: port 3(batadv1) entered disabled state [ 85.350092][ T4358] device bridge_slave_1 left promiscuous mode [ 85.378010][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.415620][ T4358] device bridge_slave_0 left promiscuous mode [ 85.444004][ T4388] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 85.445087][ T4295] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 85.466779][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.495087][ T4388] usb 4-1: device descriptor read/8, error -71 [ 85.561661][ T4358] device veth1_macvtap left promiscuous mode [ 85.593174][ T4358] device veth0_macvtap left promiscuous mode [ 85.620475][ T4358] device veth1_vlan left promiscuous mode [ 85.624043][ T4388] usb usb4-port1: unable to enumerate USB device [ 85.674403][ T4358] device veth0_vlan left promiscuous mode [ 86.023930][ T11] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 86.263919][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 86.664704][ T26] audit: type=1326 audit(1756442053.277:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 86.782687][ T26] audit: type=1326 audit(1756442053.327:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 86.895957][ T26] audit: type=1326 audit(1756442053.327:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 87.013595][ T26] audit: type=1326 audit(1756442053.327:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 87.044692][ T26] audit: type=1326 audit(1756442053.337:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 87.141956][ T26] audit: type=1326 audit(1756442053.337:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 87.253514][ T26] audit: type=1326 audit(1756442053.337:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 87.339411][ T26] audit: type=1326 audit(1756442053.337:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 87.369320][ T26] audit: type=1326 audit(1756442053.987:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 87.392247][ T26] audit: type=1326 audit(1756442053.987:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 87.715770][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 88.064519][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 88.212036][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.333863][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 88.343143][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.158447][ T4358] bond0 (unregistering): Released all slaves [ 89.260780][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.270197][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.281906][ T4668] device bridge_slave_1 entered promiscuous mode [ 89.360886][ T4668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.388208][ T4668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.508174][ T4668] team0: Port device team_slave_0 added [ 89.528615][ T4668] team0: Port device team_slave_1 added [ 89.627446][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.641920][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.713123][ T4668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.773293][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.801150][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.849375][ T4668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.933626][ T4668] device hsr_slave_0 entered promiscuous mode [ 89.950641][ T4668] device hsr_slave_1 entered promiscuous mode [ 90.007212][ T4388] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 90.207704][ T4388] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.251636][ T4668] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.275024][ T4668] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.291974][ T4388] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.304213][ T4668] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.325497][ T4388] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.335126][ T4388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.357886][ T4388] usb 3-1: Product: syz [ 90.368754][ T4668] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.372570][ T4388] usb 3-1: Manufacturer: syz [ 90.388851][ T4388] usb 3-1: SerialNumber: syz [ 90.424172][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 90.609309][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.622962][ T4388] usb 3-1: 0:2 : does not exist [ 90.635248][ T4388] usb 3-1: unit 6 not found! [ 90.647059][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.666108][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.688979][ T4668] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.720795][ T4388] usb 3-1: USB disconnect, device number 3 [ 90.768025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.795726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.806803][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.813976][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.823903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.868228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.879993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.891248][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.898384][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.912613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.942531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.960433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.970844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.980096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.000062][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.016036][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.061278][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.081046][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.111817][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.129730][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.205942][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.752233][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 91.958804][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.971396][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.988627][ T4668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.116591][ T4800] delete_channel: no stack [ 92.194769][ T4830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 93.325949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.345698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.407152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.438867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.483242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.500438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.535489][ T4668] device veth0_vlan entered promiscuous mode [ 93.603933][ T4668] device veth1_vlan entered promiscuous mode [ 93.730636][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.751552][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.782605][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.813501][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.856222][ T4668] device veth0_macvtap entered promiscuous mode [ 93.916226][ T4668] device veth1_macvtap entered promiscuous mode [ 94.043511][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.058297][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.079835][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.103911][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.117890][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.140019][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.183558][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.208744][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.242689][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.262664][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.274415][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.295135][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.310032][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.336771][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.374968][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.425941][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.473778][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.521565][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.563225][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.605780][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.642436][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.678003][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.700895][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.716400][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.745660][ T4668] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.769188][ T4668] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.796775][ T4668] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.822731][ T4668] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.046233][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.111702][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.156791][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.207635][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.258332][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.300124][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.573396][ T26] audit: type=1326 audit(1756442062.187:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 95.674796][ T4880] loop5: detected capacity change from 0 to 1024 [ 95.714144][ T26] audit: type=1326 audit(1756442062.187:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 95.769438][ T4880] EXT4-fs: Ignoring removed nobh option [ 95.829861][ T4880] EXT4-fs: Ignoring removed bh option [ 95.905779][ T4886] netlink: 240 bytes leftover after parsing attributes in process `syz.2.128'. [ 95.920505][ T4880] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.937617][ T26] audit: type=1326 audit(1756442062.187:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 96.046276][ T26] audit: type=1326 audit(1756442062.217:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 96.075066][ T4880] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 96.274512][ T26] audit: type=1326 audit(1756442062.217:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 96.428022][ T26] audit: type=1326 audit(1756442062.217:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 96.471708][ T4880] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 96.528345][ T26] audit: type=1326 audit(1756442062.217:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 96.626550][ T4668] EXT4-fs (loop5): unmounting filesystem. [ 96.739033][ T26] audit: type=1326 audit(1756442062.227:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 96.853330][ T26] audit: type=1326 audit(1756442062.227:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 96.960708][ T26] audit: type=1326 audit(1756442062.227:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 97.656418][ T4909] delete_channel: no stack [ 99.223954][ T7] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 99.410229][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.436100][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.472284][ T7] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.510671][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.544022][ T4367] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 99.609402][ T7] usb 6-1: Product: syz [ 99.651093][ T4960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.139'. [ 99.654776][ T7] usb 6-1: Manufacturer: syz [ 99.711594][ T7] usb 6-1: SerialNumber: syz [ 99.730149][ T4960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.139'. [ 99.749158][ T4367] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 99.782030][ T4367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.808019][ T4367] usb 4-1: Product: syz [ 99.822766][ T4367] usb 4-1: Manufacturer: syz [ 99.831042][ T4367] usb 4-1: SerialNumber: syz [ 99.871086][ T4367] usb 4-1: config 0 descriptor?? [ 99.898701][ T4367] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 012 [ 99.977764][ T7] usb 6-1: 0:2 : does not exist [ 99.983468][ T7] usb 6-1: unit 6 not found! [ 100.054235][ T7] usb 6-1: USB disconnect, device number 2 [ 100.618294][ T4367] i2c i2c-1: failure reading functionality [ 100.647177][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 100.726691][ T4367] i2c i2c-1: connected i2c-tiny-usb device [ 100.760616][ T4367] usb 4-1: USB disconnect, device number 12 [ 101.254766][ T4998] loop3: detected capacity change from 0 to 128 [ 101.359331][ T4998] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.386238][ T4998] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.080770][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 103.081458][ T5024] netlink: 388 bytes leftover after parsing attributes in process `syz.0.148'. [ 103.171169][ T5008] delete_channel: no stack [ 103.250100][ T5027] netlink: 240 bytes leftover after parsing attributes in process `syz.4.149'. [ 104.012624][ T5043] loop2: detected capacity change from 0 to 64 [ 104.403605][ T5050] usb usb7: usbfs: process 5050 (syz.3.153) did not claim interface 0 before use [ 104.542742][ T5053] loop2: detected capacity change from 0 to 128 [ 104.584276][ T5053] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.598267][ T5053] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.701651][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 106.972309][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 107.423329][ T5105] netlink: 48 bytes leftover after parsing attributes in process `syz.4.165'. [ 107.721307][ T5088] delete_channel: no stack [ 107.785606][ T5099] loop8: detected capacity change from 0 to 7 [ 107.807992][ T4259] Dev loop8: unable to read RDB block 7 [ 107.817971][ T4259] loop8: AHDI p1 p2 p3 [ 107.842884][ T4259] loop8: partition table partially beyond EOD, truncated [ 107.885896][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 107.920098][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 107.953034][ T5099] Dev loop8: unable to read RDB block 7 [ 107.978883][ T5099] loop8: AHDI p1 p2 p3 [ 107.987283][ T5099] loop8: partition table partially beyond EOD, truncated [ 108.099428][ T5099] loop8: p1 start 1601398130 is beyond EOD, truncated [ 108.160024][ T5099] loop8: p2 start 1702059890 is beyond EOD, truncated [ 109.074362][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 109.074372][ T26] audit: type=1326 audit(1756442075.687:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 109.136136][ T26] audit: type=1326 audit(1756442075.737:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 109.222029][ T26] audit: type=1326 audit(1756442075.737:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 109.244163][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.409406][ T26] audit: type=1326 audit(1756442075.737:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 109.511077][ T26] audit: type=1326 audit(1756442075.737:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 109.608257][ T26] audit: type=1326 audit(1756442075.737:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 109.712338][ T26] audit: type=1326 audit(1756442075.747:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 109.798030][ T26] audit: type=1326 audit(1756442075.747:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 109.906156][ T26] audit: type=1326 audit(1756442075.747:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 110.015365][ T26] audit: type=1326 audit(1756442075.747:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 111.607629][ T5161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 112.824991][ T5167] usb usb7: usbfs: process 5167 (syz.3.179) did not claim interface 0 before use [ 113.303244][ T5172] loop8: detected capacity change from 0 to 7 [ 113.311097][ T4259] Dev loop8: unable to read RDB block 7 [ 113.320994][ T4259] loop8: AHDI p1 p2 p3 [ 113.337165][ T4259] loop8: partition table partially beyond EOD, truncated [ 113.359864][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 113.383466][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 113.441608][ T5172] Dev loop8: unable to read RDB block 7 [ 113.449567][ T5172] loop8: AHDI p1 p2 p3 [ 113.460233][ T5172] loop8: partition table partially beyond EOD, truncated [ 113.471102][ T5172] loop8: p1 start 1601398130 is beyond EOD, truncated [ 113.478496][ T5172] loop8: p2 start 1702059890 is beyond EOD, truncated [ 113.496023][ T5176] Dev loop8: unable to read RDB block 7 [ 113.513062][ T5176] loop8: AHDI p1 p2 p3 [ 113.520295][ T5176] loop8: partition table partially beyond EOD, truncated [ 113.538315][ T5176] loop8: p1 start 1601398130 is beyond EOD, truncated [ 113.549344][ T5176] loop8: p2 start 1702059890 is beyond EOD, truncated [ 114.107050][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 114.727321][ T5200] netlink: 388 bytes leftover after parsing attributes in process `syz.4.186'. [ 115.571807][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 115.571819][ T26] audit: type=1326 audit(1756442082.187:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 115.666635][ T26] audit: type=1326 audit(1756442082.287:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 115.691578][ T26] audit: type=1326 audit(1756442082.297:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 115.721622][ T26] audit: type=1326 audit(1756442082.297:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 115.793113][ T26] audit: type=1326 audit(1756442082.297:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 116.007123][ T26] audit: type=1326 audit(1756442082.297:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 116.160820][ T26] audit: type=1326 audit(1756442082.297:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 116.398624][ T26] audit: type=1326 audit(1756442082.297:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 116.571237][ T26] audit: type=1326 audit(1756442082.297:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 116.593321][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.852533][ T26] audit: type=1326 audit(1756442082.297:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 116.874648][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.070546][ T5223] usb usb7: usbfs: process 5223 (syz.2.192) did not claim interface 0 before use [ 121.547631][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.206'. [ 121.557661][ T5313] netlink: 388 bytes leftover after parsing attributes in process `syz.0.204'. [ 122.702104][ T5321] netlink: 'syz.2.208': attribute type 10 has an invalid length. [ 122.717942][ T5321] device syz_tun entered promiscuous mode [ 122.753525][ T5321] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 123.002765][ T5340] loop2: detected capacity change from 0 to 128 [ 123.070788][ T5340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 123.101670][ T5340] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.253068][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 123.412241][ T5348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.214'. [ 123.412262][ T5348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.214'. [ 124.569533][ T5369] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 124.697569][ T5375] netlink: 388 bytes leftover after parsing attributes in process `syz.0.219'. [ 125.246505][ T126] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 125.435246][ T126] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.469911][ T126] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 125.539684][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.576519][ T126] usb 6-1: config 0 descriptor?? [ 125.636821][ T126] pwc: Askey VC010 type 2 USB webcam detected. [ 126.030882][ T126] pwc: recv_control_msg error -32 req 02 val 2b00 [ 126.049066][ T126] pwc: recv_control_msg error -32 req 02 val 2700 [ 126.065159][ T126] pwc: recv_control_msg error -32 req 02 val 2c00 [ 126.097822][ T126] pwc: recv_control_msg error -32 req 04 val 1000 [ 126.117414][ T5408] loop2: detected capacity change from 0 to 128 [ 126.140053][ T126] pwc: recv_control_msg error -32 req 04 val 1300 [ 126.157009][ T126] pwc: recv_control_msg error -32 req 04 val 1400 [ 126.206795][ T5408] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 126.216547][ T126] pwc: recv_control_msg error -32 req 02 val 2000 [ 126.234194][ T126] pwc: recv_control_msg error -32 req 02 val 2100 [ 126.238813][ T5408] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.442863][ T126] pwc: recv_control_msg error -32 req 02 val 2500 [ 126.662158][ T126] pwc: recv_control_msg error -71 req 02 val 2600 [ 126.677295][ T126] pwc: recv_control_msg error -71 req 02 val 2900 [ 126.694557][ T126] pwc: recv_control_msg error -71 req 02 val 2800 [ 126.717895][ T126] pwc: recv_control_msg error -71 req 04 val 1100 [ 126.746835][ T126] pwc: recv_control_msg error -71 req 04 val 1200 [ 126.784695][ T126] pwc: Registered as video103. [ 126.795594][ T5408] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 126.807613][ T126] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7 [ 126.849759][ T5408] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 126.892079][ T126] usb 6-1: USB disconnect, device number 3 [ 126.998360][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 127.569208][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.229'. [ 127.964115][ T5457] netlink: 388 bytes leftover after parsing attributes in process `syz.2.231'. [ 129.503816][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 129.663759][ T7] usb 4-1: device descriptor read/64, error -71 [ 129.943810][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 130.103762][ T7] usb 4-1: device descriptor read/64, error -71 [ 130.123809][ T5497] loop2: detected capacity change from 0 to 128 [ 130.176037][ T5497] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 130.204927][ T5497] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.223957][ T7] usb usb4-port1: attempt power cycle [ 130.322178][ T5497] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 130.423588][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 130.638394][ T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 130.675039][ T7] usb 4-1: device descriptor read/8, error -71 [ 130.983856][ T7] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 131.024497][ T7] usb 4-1: device descriptor read/8, error -71 [ 131.160685][ T7] usb usb4-port1: unable to enumerate USB device [ 132.737229][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.743612][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.347267][ T5554] netlink: 'syz.2.248': attribute type 10 has an invalid length. [ 133.690986][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 134.458495][ T5578] netlink: 388 bytes leftover after parsing attributes in process `syz.5.253'. [ 135.837826][ T5597] netlink: 'syz.4.260': attribute type 10 has an invalid length. [ 135.861183][ T5597] device syz_tun entered promiscuous mode [ 135.886247][ T5597] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 136.290375][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 136.290384][ T26] audit: type=1326 audit(1756442102.907:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 136.365943][ T26] audit: type=1326 audit(1756442102.967:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 136.453787][ T26] audit: type=1326 audit(1756442102.967:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 136.475878][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.518037][ T26] audit: type=1326 audit(1756442102.967:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 136.540209][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.677835][ T26] audit: type=1326 audit(1756442102.967:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 136.858572][ T26] audit: type=1326 audit(1756442102.967:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 137.031523][ T26] audit: type=1326 audit(1756442102.967:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 137.156826][ T26] audit: type=1326 audit(1756442102.967:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 137.251100][ T26] audit: type=1326 audit(1756442102.967:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 137.273224][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.368577][ T26] audit: type=1326 audit(1756442102.967:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 137.390662][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.898755][ T5629] fuse: Bad value for 'fd' [ 139.704029][ T4325] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 139.905041][ T4325] usb 6-1: no configurations [ 139.909842][ T4325] usb 6-1: can't read configurations, error -22 [ 140.203738][ T4325] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 140.397096][ T4325] usb 6-1: no configurations [ 140.402048][ T4325] usb 6-1: can't read configurations, error -22 [ 140.413615][ T4325] usb usb6-port1: attempt power cycle [ 140.833885][ T4325] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 140.874956][ T4325] usb 6-1: no configurations [ 140.879597][ T4325] usb 6-1: can't read configurations, error -22 [ 141.033926][ T4325] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 141.074845][ T4325] usb 6-1: no configurations [ 141.080460][ T4325] usb 6-1: can't read configurations, error -22 [ 141.093053][ T4325] usb usb6-port1: unable to enumerate USB device [ 142.903798][ T129] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 142.993861][ T4325] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.097637][ T129] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.125239][ T129] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 143.186551][ T129] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.208088][ T4325] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.232099][ T4325] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.252612][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.283423][ T4325] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.302799][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.320636][ T4325] usb 3-1: SerialNumber: syz [ 143.323124][ T5689] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 143.557548][ T4325] usb 3-1: 0:2 : does not exist [ 143.646837][ T4325] usb 3-1: USB disconnect, device number 4 [ 143.682672][ T7] usb 6-1: USB disconnect, device number 8 [ 143.965211][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 144.517461][ T7] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 144.714472][ T7] usb 4-1: no configurations [ 144.719347][ T7] usb 4-1: can't read configurations, error -22 [ 144.904258][ T7] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 145.107331][ T7] usb 4-1: no configurations [ 145.112174][ T7] usb 4-1: can't read configurations, error -22 [ 145.137075][ T7] usb usb4-port1: attempt power cycle [ 145.553760][ T7] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 145.604922][ T7] usb 4-1: no configurations [ 145.609584][ T7] usb 4-1: can't read configurations, error -22 [ 145.774313][ T7] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 145.815090][ T7] usb 4-1: no configurations [ 145.819819][ T7] usb 4-1: can't read configurations, error -22 [ 145.853223][ T7] usb usb4-port1: unable to enumerate USB device [ 147.488686][ T5819] loop3: detected capacity change from 0 to 512 [ 147.589663][ T5819] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.856115][ T5819] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 149.180064][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.317'. [ 149.203466][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.317'. [ 149.391366][ T5867] loop5: detected capacity change from 0 to 64 [ 149.593760][ T4325] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 149.784907][ T4325] usb 4-1: no configurations [ 149.790380][ T4325] usb 4-1: can't read configurations, error -22 [ 149.953735][ T4325] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 149.961459][ T126] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 150.165243][ T4325] usb 4-1: no configurations [ 150.169958][ T4325] usb 4-1: can't read configurations, error -22 [ 150.177155][ T126] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.187501][ T4325] usb usb4-port1: attempt power cycle [ 150.192886][ T126] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.203381][ T126] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 150.212632][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.221183][ T126] usb 6-1: SerialNumber: syz [ 150.436851][ T126] usb 6-1: 0:2 : does not exist [ 150.449574][ T126] usb 6-1: USB disconnect, device number 9 [ 150.603760][ T4325] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 150.649288][ T4325] usb 4-1: no configurations [ 150.654760][ T4325] usb 4-1: can't read configurations, error -22 [ 150.685823][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.813890][ T4325] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 150.860612][ T4325] usb 4-1: no configurations [ 150.865725][ T4325] usb 4-1: can't read configurations, error -22 [ 150.872627][ T4325] usb usb4-port1: unable to enumerate USB device [ 151.432995][ T5892] netlink: 388 bytes leftover after parsing attributes in process `syz.5.328'. [ 151.682874][ T5882] loop8: detected capacity change from 0 to 7 [ 151.721350][ T4259] Dev loop8: unable to read RDB block 7 [ 151.727407][ T4259] loop8: AHDI p1 p2 p3 [ 151.736084][ T4259] loop8: partition table partially beyond EOD, truncated [ 151.748540][ T5899] loop2: detected capacity change from 0 to 64 [ 151.756258][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 151.797354][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 151.849840][ T5882] Dev loop8: unable to read RDB block 7 [ 151.861433][ T5882] loop8: AHDI p1 p2 p3 [ 151.868314][ T5882] loop8: partition table partially beyond EOD, truncated [ 151.878959][ T5882] loop8: p1 start 1601398130 is beyond EOD, truncated [ 151.967259][ T5882] loop8: p2 start 1702059890 is beyond EOD, truncated [ 152.114181][ T5903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.331'. [ 152.788143][ T5921] loop5: detected capacity change from 0 to 64 [ 153.052974][ T5925] netlink: 388 bytes leftover after parsing attributes in process `syz.5.339'. [ 153.769653][ T5942] loop8: detected capacity change from 0 to 7 [ 153.785889][ T4259] Dev loop8: unable to read RDB block 7 [ 153.791944][ T4259] loop8: AHDI p1 p2 p3 [ 153.800837][ T4259] loop8: partition table partially beyond EOD, truncated [ 153.817145][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 153.825746][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 153.878783][ T5942] Dev loop8: unable to read RDB block 7 [ 153.884966][ T5942] loop8: AHDI p1 p2 p3 [ 153.889541][ T5942] loop8: partition table partially beyond EOD, truncated [ 153.901422][ T5942] loop8: p1 start 1601398130 is beyond EOD, truncated [ 153.908701][ T5942] loop8: p2 start 1702059890 is beyond EOD, truncated [ 153.926619][ T5944] Dev loop8: unable to read RDB block 7 [ 153.937983][ T5944] loop8: AHDI p1 p2 p3 [ 153.942373][ T5944] loop8: partition table partially beyond EOD, truncated [ 153.950999][ T5944] loop8: p1 start 1601398130 is beyond EOD, truncated [ 153.961268][ T5944] loop8: p2 start 1702059890 is beyond EOD, truncated [ 154.537938][ T5956] netlink: 388 bytes leftover after parsing attributes in process `syz.4.350'. [ 154.941445][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.236829][ T5988] netlink: 388 bytes leftover after parsing attributes in process `syz.2.361'. [ 156.459589][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 156.459602][ T26] audit: type=1326 audit(1756442123.077:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc2f8ebe9 code=0x7ffc0000 [ 156.487886][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.550109][ T6000] netlink: 'syz.2.366': attribute type 2 has an invalid length. [ 156.591540][ T26] audit: type=1326 audit(1756442123.117:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fecc2f8ebe9 code=0x7ffc0000 [ 156.647551][ T6000] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 156.691027][ T26] audit: type=1326 audit(1756442123.117:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc2f8ebe9 code=0x7ffc0000 [ 156.737354][ T26] audit: type=1326 audit(1756442123.117:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fecc2f8ebe9 code=0x7ffc0000 [ 156.783815][ T4367] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 156.844632][ T26] audit: type=1326 audit(1756442123.117:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc2f8ebe9 code=0x7ffc0000 [ 156.901589][ T6006] netlink: 'syz.2.368': attribute type 10 has an invalid length. [ 156.913416][ T26] audit: type=1326 audit(1756442123.127:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fecc2f8ebe9 code=0x7ffc0000 [ 156.997904][ T4367] usb 4-1: config 0 has an invalid interface number: 162 but max is 0 [ 157.010560][ T26] audit: type=1326 audit(1756442123.137:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc2f8ebe9 code=0x7ffc0000 [ 157.038985][ T4367] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.196016][ T26] audit: type=1326 audit(1756442123.137:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fecc2f8ebe9 code=0x7ffc0000 [ 157.206576][ T4367] usb 4-1: config 0 has no interface number 0 [ 157.271642][ T4367] usb 4-1: config 0 interface 162 altsetting 0 endpoint 0x7 has an invalid bInterval 32, changing to 9 [ 157.296554][ T4367] usb 4-1: config 0 interface 162 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.327362][ T4367] usb 4-1: config 0 interface 162 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.351196][ T4367] usb 4-1: config 0 interface 162 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 157.373200][ T26] audit: type=1326 audit(1756442123.887:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc2f8ebe9 code=0x7ffc0000 [ 157.436673][ T4367] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=d4.45 [ 157.450457][ T4367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.467127][ T4367] usb 4-1: Product: syz [ 157.473185][ T4367] usb 4-1: Manufacturer: syz [ 157.486492][ T4367] usb 4-1: SerialNumber: syz [ 157.516620][ T4367] usb 4-1: config 0 descriptor?? [ 157.568816][ T26] audit: type=1326 audit(1756442123.887:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc2f8ebe9 code=0x7ffc0000 [ 157.590943][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.685428][ T4367] rtsx_usb: probe of 4-1:0.162 failed with error -8 [ 157.771363][ T4367] usb 4-1: USB disconnect, device number 25 [ 158.548223][ T6026] netlink: 388 bytes leftover after parsing attributes in process `syz.2.374'. [ 159.001851][ T6038] netlink: 'syz.2.380': attribute type 10 has an invalid length. [ 160.053721][ T129] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 161.245470][ T129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.364568][ T129] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 161.393816][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.414431][ T129] usb 3-1: config 0 descriptor?? [ 161.453737][ T129] pwc: Askey VC010 type 2 USB webcam detected. [ 161.832973][ T129] pwc: recv_control_msg error -32 req 02 val 2b00 [ 161.841945][ T129] pwc: recv_control_msg error -32 req 02 val 2700 [ 161.868333][ T129] pwc: recv_control_msg error -32 req 02 val 2c00 [ 161.922009][ T129] pwc: recv_control_msg error -32 req 04 val 1000 [ 161.953473][ T129] pwc: recv_control_msg error -32 req 04 val 1300 [ 162.001409][ T129] pwc: recv_control_msg error -32 req 04 val 1400 [ 162.084201][ T129] pwc: recv_control_msg error -32 req 02 val 2000 [ 162.104067][ T129] pwc: recv_control_msg error -32 req 02 val 2100 [ 162.233722][ T126] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 162.312100][ T129] pwc: recv_control_msg error -32 req 02 val 2500 [ 162.439729][ T126] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 162.478915][ T126] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 162.523087][ T129] pwc: recv_control_msg error -71 req 02 val 2600 [ 162.539043][ T129] pwc: recv_control_msg error -71 req 02 val 2900 [ 162.551321][ T126] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 162.556196][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 162.577878][ T129] pwc: recv_control_msg error -71 req 02 val 2800 [ 162.597717][ T129] pwc: recv_control_msg error -71 req 04 val 1100 [ 162.610596][ T126] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.662167][ T126] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 162.673494][ T129] pwc: recv_control_msg error -71 req 04 val 1200 [ 162.697282][ T126] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 162.722078][ T126] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 162.731186][ T129] pwc: Registered as video103. [ 162.761761][ T129] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 162.763853][ T126] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.773186][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.859167][ T126] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 162.889887][ T129] usb 3-1: USB disconnect, device number 5 [ 162.904003][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.919102][ T126] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 162.931789][ T7] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.950095][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.968788][ T126] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 162.981914][ T7] usb 1-1: SerialNumber: syz [ 162.988992][ T126] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.062101][ T126] usb 6-1: string descriptor 0 read error: -22 [ 163.078871][ T126] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 163.120400][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.209757][ T7] usb 1-1: 0:2 : does not exist [ 163.304048][ T126] adutux 6-1:168.0: interrupt endpoints not found [ 164.273697][ T7] usb 1-1: USB disconnect, device number 5 [ 164.826514][ T4394] udevd[4394]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.919691][ T6124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'. [ 165.733521][ T4325] usb 6-1: USB disconnect, device number 10 [ 168.093730][ T4324] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 168.241609][ T6174] netlink: 388 bytes leftover after parsing attributes in process `syz.4.421'. [ 168.297192][ T4324] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.308235][ T4324] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.333497][ T4324] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 168.357089][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 168.375091][ T4324] usb 4-1: SerialNumber: syz [ 168.503474][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.5.424'. [ 168.533540][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.5.424'. [ 168.612035][ T4324] usb 4-1: 0:2 : does not exist [ 168.691297][ T4324] usb 4-1: USB disconnect, device number 26 [ 168.959104][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.603840][ T4333] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 171.793698][ T4333] usb 6-1: Using ep0 maxpacket: 32 [ 171.800443][ T4333] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 171.815588][ T4333] usb 6-1: config 0 has no interface number 0 [ 171.821888][ T4333] usb 6-1: config 0 interface 12 has no altsetting 0 [ 171.834535][ T4333] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 171.846637][ T4333] usb 6-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 171.855947][ T4333] usb 6-1: Product: syz [ 171.860198][ T4333] usb 6-1: Manufacturer: syz [ 171.866810][ T4333] usb 6-1: SerialNumber: syz [ 171.879469][ T4333] usb 6-1: config 0 descriptor?? [ 174.232918][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.445'. [ 174.242009][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.445'. [ 174.674295][ T4333] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 174.682080][ T4333] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 174.689903][ T4333] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 174.700773][ T4333] f81534: probe of 6-1:0.12 failed with error -71 [ 174.712239][ T4333] usb 6-1: USB disconnect, device number 11 [ 178.263697][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 178.610993][ T129] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 178.621987][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.663050][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.715366][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 178.754141][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 178.772345][ T7] usb 3-1: SerialNumber: syz [ 178.865785][ T129] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.890674][ T129] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 178.927155][ T129] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 178.993697][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.032018][ T129] usb 1-1: config 0 descriptor?? [ 179.108628][ T7] usb 3-1: 0:2 : does not exist [ 179.154840][ T7] usb 3-1: USB disconnect, device number 6 [ 179.415906][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.523873][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.466'. [ 181.167220][ T6354] loop8: detected capacity change from 0 to 7 [ 181.182778][ T4259] Dev loop8: unable to read RDB block 7 [ 181.196879][ T4259] loop8: AHDI p1 p2 p3 [ 181.202100][ T4259] loop8: partition table partially beyond EOD, truncated [ 181.217764][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 181.241325][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 181.270960][ T6354] Dev loop8: unable to read RDB block 7 [ 181.341728][ T7] usb 1-1: USB disconnect, device number 6 [ 181.489320][ T6354] loop8: AHDI p1 p2 p3 [ 181.495864][ T6354] loop8: partition table partially beyond EOD, truncated [ 181.503688][ T6354] loop8: p1 start 1601398130 is beyond EOD, truncated [ 181.510644][ T6354] loop8: p2 start 1702059890 is beyond EOD, truncated [ 183.404259][ T6384] sched: RT throttling activated [ 183.560829][ T6395] netlink: 388 bytes leftover after parsing attributes in process `syz.3.486'. [ 183.639316][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.485'. [ 183.880668][ T6407] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 183.893975][ T6407] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 183.909398][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.499'. [ 183.918963][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.499'. [ 184.752448][ T6421] loop8: detected capacity change from 0 to 7 [ 184.763609][ T4259] Dev loop8: unable to read RDB block 7 [ 184.770800][ T4259] loop8: AHDI p1 p2 p3 [ 184.785533][ T4259] loop8: partition table partially beyond EOD, truncated [ 184.794768][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 184.803040][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 184.876517][ T6421] Dev loop8: unable to read RDB block 7 [ 184.882304][ T6421] loop8: AHDI p1 p2 p3 [ 184.887929][ T6421] loop8: partition table partially beyond EOD, truncated [ 184.900096][ T6421] loop8: p1 start 1601398130 is beyond EOD, truncated [ 184.907265][ T6421] loop8: p2 start 1702059890 is beyond EOD, truncated [ 184.937522][ T6427] Dev loop8: unable to read RDB block 7 [ 184.948380][ T6427] loop8: AHDI p1 p2 p3 [ 184.952655][ T6427] loop8: partition table partially beyond EOD, truncated [ 185.021012][ T6427] loop8: p1 start 1601398130 is beyond EOD, truncated [ 185.216436][ T6427] loop8: p2 start 1702059890 is beyond EOD, truncated [ 185.883774][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 186.452161][ T6445] netlink: 388 bytes leftover after parsing attributes in process `syz.4.498'. [ 186.750098][ T6451] loop2: detected capacity change from 0 to 1024 [ 186.975084][ T75] hfsplus: b-tree write err: -5, ino 4 [ 187.004465][ T6455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.502'. [ 187.062392][ T6455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.502'. [ 187.293732][ T4277] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 187.303933][ T4325] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 187.493865][ T4325] usb 4-1: Using ep0 maxpacket: 32 [ 187.504629][ T4277] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.520489][ T4277] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.530914][ T4325] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 187.541039][ T4325] usb 4-1: config 0 has no interface number 0 [ 187.547616][ T4325] usb 4-1: config 0 interface 12 has no altsetting 0 [ 187.554824][ T4277] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 187.564120][ T4277] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.575641][ T4325] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 187.585708][ T4325] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 187.595528][ T4277] usb 6-1: config 0 descriptor?? [ 187.600807][ T4325] usb 4-1: Product: syz [ 187.610093][ T4325] usb 4-1: Manufacturer: syz [ 187.614868][ T4325] usb 4-1: SerialNumber: syz [ 187.623533][ T4325] usb 4-1: config 0 descriptor?? [ 188.015145][ T4277] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 188.029826][ T4277] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 188.237917][ T4277] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 189.003746][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 189.549684][ T6489] netlink: 388 bytes leftover after parsing attributes in process `syz.0.512'. [ 189.953786][ T4324] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 190.279239][ T6500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.516'. [ 190.288596][ T6500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.516'. [ 190.398868][ T4325] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 190.413937][ T4325] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 190.431527][ T4325] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 190.440456][ T4325] f81534: probe of 4-1:0.12 failed with error -71 [ 190.457466][ T4325] usb 4-1: USB disconnect, device number 27 [ 190.837549][ T4277] usb 6-1: USB disconnect, device number 12 [ 192.828972][ T6505] loop8: detected capacity change from 0 to 7 [ 192.841221][ T4259] Dev loop8: unable to read RDB block 7 [ 192.849036][ T4259] loop8: AHDI p1 p2 p3 [ 192.856938][ T4259] loop8: partition table partially beyond EOD, truncated [ 192.865219][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 192.872288][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 192.903866][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.528'. [ 192.921511][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.528'. [ 192.925876][ T6505] Dev loop8: unable to read RDB block 7 [ 192.945736][ T6505] loop8: AHDI p1 p2 p3 [ 192.950507][ T6505] loop8: partition table partially beyond EOD, truncated [ 192.962369][ T6505] loop8: p1 start 1601398130 is beyond EOD, truncated [ 192.972677][ T6505] loop8: p2 start 1702059890 is beyond EOD, truncated [ 193.023259][ T6543] Dev loop8: unable to read RDB block 7 [ 193.030216][ T6543] loop8: AHDI p1 p2 p3 [ 193.041941][ T6543] loop8: partition table partially beyond EOD, truncated [ 193.087115][ T6543] loop8: p1 start 1601398130 is beyond EOD, truncated [ 193.150200][ T6543] loop8: p2 start 1702059890 is beyond EOD, truncated [ 193.528020][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'. [ 194.186210][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.192726][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.047124][ T6631] netlink: 72 bytes leftover after parsing attributes in process `syz.2.553'. [ 199.105252][ T6633] loop3: detected capacity change from 0 to 64 [ 200.064773][ T6640] loop3: detected capacity change from 0 to 128 [ 200.353871][ T126] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 200.550555][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.5.559'. [ 200.573713][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 200.580463][ T126] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 200.590014][ T126] usb 3-1: config 0 has no interface number 0 [ 200.596521][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.5.559'. [ 200.607420][ T126] usb 3-1: config 0 interface 12 has no altsetting 0 [ 200.628513][ T126] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 200.657556][ T126] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 200.679180][ T126] usb 3-1: Product: syz [ 200.688238][ T126] usb 3-1: Manufacturer: syz [ 200.699166][ T126] usb 3-1: SerialNumber: syz [ 200.718358][ T126] usb 3-1: config 0 descriptor?? [ 201.654456][ T4324] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 201.848979][ T4324] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 201.869650][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.900029][ T4324] usb 4-1: Product: syz [ 201.919229][ T4324] usb 4-1: Manufacturer: syz [ 201.940552][ T4324] usb 4-1: SerialNumber: syz [ 201.982733][ T4324] usb 4-1: config 0 descriptor?? [ 201.994652][ T4324] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 028 [ 202.355423][ T126] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 202.373249][ T126] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 202.388804][ T126] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 202.408683][ T126] f81534: probe of 3-1:0.12 failed with error -71 [ 202.462536][ T126] usb 3-1: USB disconnect, device number 7 [ 202.602250][ T4324] i2c i2c-1: failure reading functionality [ 202.629684][ T4324] i2c i2c-1: connected i2c-tiny-usb device [ 202.649208][ T4324] usb 4-1: USB disconnect, device number 28 [ 202.772731][ T26] audit: type=1800 audit(1756442169.387:75): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.570" name="/newroot/128/bus/#683//deleted" dev="tmpfs" ino=683 res=0 errno=0 [ 205.553905][ T4388] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 205.743731][ T4388] usb 6-1: Using ep0 maxpacket: 32 [ 205.750527][ T4388] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 205.802427][ T4388] usb 6-1: config 0 has no interface number 0 [ 205.851543][ T4388] usb 6-1: config 0 interface 12 has no altsetting 0 [ 205.897937][ T4388] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 205.968662][ T4388] usb 6-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 206.012715][ T4388] usb 6-1: Product: syz [ 206.039900][ T4388] usb 6-1: Manufacturer: syz [ 206.067205][ T4388] usb 6-1: SerialNumber: syz [ 206.105126][ T4388] usb 6-1: config 0 descriptor?? [ 206.834470][ T6737] process 'syz.2.585' launched './file0' with NULL argv: empty string added [ 207.004192][ T6739] loop3: detected capacity change from 0 to 512 [ 207.028556][ T6739] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 207.103823][ T6739] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.169687][ T6739] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 207.186194][ T6739] EXT4-fs (loop3): 1 truncate cleaned up [ 207.191950][ T6739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 207.303928][ T129] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 207.334438][ T26] audit: type=1800 audit(1756442173.957:76): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.586" name="/newroot/111/bus/#601//deleted" dev="tmpfs" ino=601 res=0 errno=0 [ 207.359696][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 207.527713][ T129] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 207.543710][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.558600][ T129] usb 1-1: Product: syz [ 207.563145][ T129] usb 1-1: Manufacturer: syz [ 207.568268][ T129] usb 1-1: SerialNumber: syz [ 207.584092][ T129] usb 1-1: config 0 descriptor?? [ 207.611585][ T129] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 007 [ 207.766424][ T7] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 207.776553][ T4388] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 207.785550][ T4388] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 207.801926][ T4388] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 207.819118][ T4388] f81534: probe of 6-1:0.12 failed with error -71 [ 207.842535][ T4388] usb 6-1: USB disconnect, device number 13 [ 207.977902][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.992711][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.023742][ T7] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.033110][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.042220][ T7] usb 4-1: SerialNumber: syz [ 208.266500][ T7] usb 4-1: 0:2 : does not exist [ 208.328183][ T7] usb 4-1: USB disconnect, device number 29 [ 208.336521][ T129] i2c i2c-1: failure reading functionality [ 208.355584][ T129] i2c i2c-1: connected i2c-tiny-usb device [ 208.379487][ T129] usb 1-1: USB disconnect, device number 7 [ 208.988663][ T6774] 9pnet_fd: Insufficient options for proto=fd [ 209.423755][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 209.624994][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.659040][ T7] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 209.710157][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.800704][ T7] usb 3-1: config 0 descriptor?? [ 209.829853][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 210.228844][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 210.253292][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 210.301568][ T7] pwc: recv_control_msg error -32 req 02 val 2c00 [ 210.329279][ T7] pwc: recv_control_msg error -32 req 04 val 1000 [ 210.379102][ T7] pwc: recv_control_msg error -32 req 04 val 1300 [ 210.401301][ T7] pwc: recv_control_msg error -32 req 04 val 1400 [ 210.422638][ T7] pwc: recv_control_msg error -32 req 02 val 2000 [ 210.444456][ T7] pwc: recv_control_msg error -32 req 02 val 2100 [ 210.464361][ T7] pwc: recv_control_msg error -32 req 04 val 1500 [ 210.481146][ T6792] overlayfs: failed to clone upperpath [ 210.487652][ T7] pwc: recv_control_msg error -32 req 02 val 2500 [ 210.501009][ T7] pwc: recv_control_msg error -32 req 02 val 2400 [ 210.510064][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 210.517167][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 210.524615][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 210.534262][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 210.543131][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 210.553951][ T7] pwc: Registered as video103. [ 210.564236][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 210.581696][ T7] usb 3-1: USB disconnect, device number 8 [ 210.870585][ T6803] netlink: 388 bytes leftover after parsing attributes in process `syz.4.605'. [ 211.353936][ T129] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 211.545241][ T129] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.555973][ T129] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.567584][ T129] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 211.577967][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.587837][ T129] usb 3-1: SerialNumber: syz [ 211.820252][ T129] usb 3-1: 0:2 : does not exist [ 211.867432][ T129] usb 3-1: USB disconnect, device number 9 [ 212.562810][ T6836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.613'. [ 212.711109][ T6838] netlink: 388 bytes leftover after parsing attributes in process `syz.2.617'. [ 214.123831][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 214.303739][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 214.310869][ T7] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.322500][ T7] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.334543][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 214.343819][ T7] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 214.352171][ T7] usb 3-1: Product: syz [ 214.356497][ T7] usb 3-1: Manufacturer: syz [ 214.367648][ T7] hub 3-1:4.0: USB hub found [ 214.570272][ T7] hub 3-1:4.0: 2 ports detected [ 214.779075][ T7] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 214.787231][ T7] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 214.826248][ T7] usb 3-1: USB disconnect, device number 10 [ 215.389596][ T6862] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.732829][ T6877] loop5: detected capacity change from 0 to 1024 [ 215.782602][ T6877] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.856498][ T6877] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 215.989742][ T4668] EXT4-fs (loop5): unmounting filesystem. [ 216.445847][ T6896] netlink: 60 bytes leftover after parsing attributes in process `syz.5.634'. [ 216.895518][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.638'. [ 217.651980][ T6915] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 219.063361][ T6946] netlink: 60 bytes leftover after parsing attributes in process `syz.0.650'. [ 219.863423][ T26] audit: type=1326 audit(1756442186.477:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 219.949631][ T26] audit: type=1326 audit(1756442186.507:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 220.034743][ T26] audit: type=1326 audit(1756442186.507:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 220.109940][ T26] audit: type=1326 audit(1756442186.507:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 220.163028][ T26] audit: type=1326 audit(1756442186.507:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 220.198022][ T26] audit: type=1326 audit(1756442186.507:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 220.225026][ T26] audit: type=1326 audit(1756442186.507:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 220.248817][ T26] audit: type=1326 audit(1756442186.507:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 220.302491][ T26] audit: type=1326 audit(1756442186.507:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 220.341832][ T26] audit: type=1326 audit(1756442186.507:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69178ebe9 code=0x7ffc0000 [ 221.228321][ T6977] comedi comedi3: pcl724: I/O port conflict (0xd,4) [ 221.722240][ T6989] netlink: 60 bytes leftover after parsing attributes in process `syz.3.664'. [ 221.773119][ T6990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.663'. [ 222.019655][ T6993] loop8: detected capacity change from 0 to 7 [ 222.028756][ T4259] Dev loop8: unable to read RDB block 7 [ 222.036394][ T4259] loop8: AHDI p1 p2 p3 [ 222.040854][ T4259] loop8: partition table partially beyond EOD, truncated [ 222.052416][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 222.059932][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 222.067804][ T6993] Dev loop8: unable to read RDB block 7 [ 222.076531][ T6993] loop8: AHDI p1 p2 p3 [ 222.080866][ T6993] loop8: partition table partially beyond EOD, truncated [ 222.090059][ T6993] loop8: p1 start 1601398130 is beyond EOD, truncated [ 222.098408][ T6993] loop8: p2 start 1702059890 is beyond EOD, truncated [ 222.117010][ T4259] Dev loop8: unable to read RDB block 7 [ 222.122833][ T4259] loop8: AHDI p1 p2 p3 [ 222.127604][ T4259] loop8: partition table partially beyond EOD, truncated [ 222.135835][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 222.142872][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 222.151929][ T6995] Dev loop8: unable to read RDB block 7 [ 222.159188][ T6995] loop8: AHDI p1 p2 p3 [ 222.166014][ T6995] loop8: partition table partially beyond EOD, truncated [ 222.176887][ T6995] loop8: p1 start 1601398130 is beyond EOD, truncated [ 222.186184][ T6995] loop8: p2 start 1702059890 is beyond EOD, truncated [ 223.263751][ T7] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 223.445340][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.455663][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.465918][ T7] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 223.475214][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 223.483261][ T7] usb 6-1: SerialNumber: syz [ 223.569825][ T7013] netlink: 'syz.0.672': attribute type 1 has an invalid length. [ 223.699127][ T7] usb 6-1: 0:2 : does not exist [ 223.719195][ T7] usb 6-1: USB disconnect, device number 14 [ 223.944726][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.033688][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 225.215388][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.225861][ T7] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 225.235322][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.245892][ T7] usb 3-1: config 0 descriptor?? [ 225.254023][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 225.553058][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 225.553072][ T26] audit: type=1326 audit(1756442192.167:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 225.657144][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 225.669247][ T26] audit: type=1326 audit(1756442192.207:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 225.697884][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 225.710494][ T7] pwc: recv_control_msg error -32 req 02 val 2c00 [ 225.717360][ T26] audit: type=1326 audit(1756442192.207:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 225.740581][ T7] pwc: recv_control_msg error -32 req 04 val 1000 [ 225.747299][ T26] audit: type=1326 audit(1756442192.207:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 225.769449][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.782309][ T7] pwc: recv_control_msg error -32 req 04 val 1300 [ 225.792667][ T26] audit: type=1326 audit(1756442192.207:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 225.793283][ T7] pwc: recv_control_msg error -32 req 04 val 1400 [ 225.814802][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.828283][ T26] audit: type=1326 audit(1756442192.207:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 225.860166][ T26] audit: type=1326 audit(1756442192.207:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 225.894043][ T7] pwc: recv_control_msg error -32 req 02 val 2000 [ 225.907635][ T26] audit: type=1326 audit(1756442192.207:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 225.913575][ T7] pwc: recv_control_msg error -32 req 02 val 2100 [ 225.945290][ T7] pwc: recv_control_msg error -32 req 04 val 1500 [ 225.951939][ T26] audit: type=1326 audit(1756442192.207:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 225.975135][ T7] pwc: recv_control_msg error -32 req 02 val 2500 [ 225.982336][ T26] audit: type=1326 audit(1756442192.207:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 226.208477][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 226.222056][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 226.241480][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 226.276398][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 226.292195][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 226.316972][ T7] pwc: Registered as video103. [ 226.339017][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 226.433383][ T7] usb 3-1: USB disconnect, device number 11 [ 227.253397][ T7067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.688'. [ 228.536407][ T7086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.694'. [ 228.545933][ T7086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.694'. [ 229.003738][ T126] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 229.183675][ T126] usb 1-1: Using ep0 maxpacket: 8 [ 229.190227][ T126] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 229.201483][ T126] usb 1-1: config 0 has no interface number 0 [ 229.208165][ T126] usb 1-1: config 0 interface 200 altsetting 2 has an invalid endpoint with address 0xB5, skipping [ 229.219205][ T126] usb 1-1: config 0 interface 200 has no altsetting 0 [ 229.228344][ T126] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 229.237520][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.245704][ T126] usb 1-1: Product: syz [ 229.250375][ T126] usb 1-1: Manufacturer: syz [ 229.255132][ T126] usb 1-1: SerialNumber: syz [ 229.261334][ T126] usb 1-1: config 0 descriptor?? [ 229.266872][ T7093] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 229.486352][ T126] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 229.496167][ T126] usb 1-1: USB disconnect, device number 8 [ 230.301189][ T7098] loop8: detected capacity change from 0 to 7 [ 230.315621][ T4259] Dev loop8: unable to read RDB block 7 [ 230.326166][ T4259] loop8: AHDI p1 p2 p3 [ 230.330384][ T4259] loop8: partition table partially beyond EOD, truncated [ 230.340809][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 230.351520][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 230.384912][ T7098] Dev loop8: unable to read RDB block 7 [ 230.399408][ T7098] loop8: AHDI p1 p2 p3 [ 230.408793][ T7098] loop8: partition table partially beyond EOD, truncated [ 230.427815][ T7098] loop8: p1 start 1601398130 is beyond EOD, truncated [ 230.438119][ T7098] loop8: p2 start 1702059890 is beyond EOD, truncated [ 230.462656][ T7100] Dev loop8: unable to read RDB block 7 [ 230.489311][ T7100] loop8: AHDI p1 p2 p3 [ 230.504197][ T7100] loop8: partition table partially beyond EOD, truncated [ 230.531591][ T7100] loop8: p1 start 1601398130 is beyond EOD, truncated [ 230.544235][ T7100] loop8: p2 start 1702059890 is beyond EOD, truncated [ 231.208803][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 231.208815][ T26] audit: type=1326 audit(1756442197.827:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 231.209085][ T26] audit: type=1326 audit(1756442197.827:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 231.209340][ T26] audit: type=1326 audit(1756442197.827:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 231.209536][ T26] audit: type=1326 audit(1756442197.827:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 231.209672][ T26] audit: type=1326 audit(1756442197.827:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 231.209951][ T26] audit: type=1326 audit(1756442197.827:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 231.209970][ T26] audit: type=1326 audit(1756442197.827:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 231.210108][ T26] audit: type=1326 audit(1756442197.827:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 231.210270][ T26] audit: type=1326 audit(1756442197.827:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 231.210523][ T26] audit: type=1326 audit(1756442197.827:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 231.598352][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.958002][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.706'. [ 231.958023][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.706'. [ 232.483406][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.711'. [ 232.935879][ T4388] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 233.125420][ T4388] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.135902][ T4388] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.146401][ T4388] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.155602][ T4388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.163825][ T4388] usb 4-1: SerialNumber: syz [ 233.377298][ T4388] usb 4-1: 0:2 : does not exist [ 233.395974][ T4388] usb 4-1: USB disconnect, device number 30 [ 233.616285][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.841034][ T7152] loop8: detected capacity change from 0 to 7 [ 233.851403][ T4259] Dev loop8: unable to read RDB block 7 [ 233.857862][ T4259] loop8: AHDI p1 p2 p3 [ 233.862325][ T4259] loop8: partition table partially beyond EOD, truncated [ 233.870116][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 233.877173][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 233.885650][ T7152] Dev loop8: unable to read RDB block 7 [ 233.891492][ T7152] loop8: AHDI p1 p2 p3 [ 233.896102][ T7152] loop8: partition table partially beyond EOD, truncated [ 233.910825][ T7152] loop8: p1 start 1601398130 is beyond EOD, truncated [ 233.919287][ T7152] loop8: p2 start 1702059890 is beyond EOD, truncated [ 233.969912][ T4259] Dev loop8: unable to read RDB block 7 [ 233.976496][ T4259] loop8: AHDI p1 p2 p3 [ 233.982292][ T4259] loop8: partition table partially beyond EOD, truncated [ 233.999245][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 234.008038][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 234.019047][ T7154] Dev loop8: unable to read RDB block 7 [ 234.028549][ T7154] loop8: AHDI p1 p2 p3 [ 234.038144][ T7154] loop8: partition table partially beyond EOD, truncated [ 234.047181][ T7154] loop8: p1 start 1601398130 is beyond EOD, truncated [ 234.065516][ T7154] loop8: p2 start 1702059890 is beyond EOD, truncated [ 234.740106][ T7180] loop5: detected capacity change from 0 to 128 [ 234.778699][ T7180] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 234.792238][ T7180] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 234.916312][ T4668] EXT4-fs (loop5): unmounting filesystem. [ 236.291567][ T7218] loop3: detected capacity change from 0 to 1024 [ 236.307748][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 236.307762][ T26] audit: type=1326 audit(1756442202.927:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.5.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc2f8ebe9 code=0x7ffc0000 [ 236.389329][ T7218] EXT4-fs: Ignoring removed orlov option [ 236.409505][ T26] audit: type=1326 audit(1756442203.007:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.5.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc2f8ebe9 code=0x7ffc0000 [ 236.473227][ T7218] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.518554][ T7227] loop2: detected capacity change from 0 to 64 [ 236.562736][ T7218] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 236.630320][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.739'. [ 236.697055][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 237.430618][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.746'. [ 237.440384][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.746'. [ 238.575430][ T26] audit: type=1326 audit(1756442205.197:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 238.668828][ T26] audit: type=1326 audit(1756442205.217:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 238.820753][ T26] audit: type=1326 audit(1756442205.227:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 238.820793][ T26] audit: type=1326 audit(1756442205.227:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 238.820819][ T26] audit: type=1326 audit(1756442205.227:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 239.529244][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'. [ 239.950464][ T7275] loop8: detected capacity change from 0 to 7 [ 239.967825][ T4259] Dev loop8: unable to read RDB block 7 [ 239.973655][ T4259] loop8: AHDI p1 p2 p3 [ 239.984193][ T4259] loop8: partition table partially beyond EOD, truncated [ 240.014464][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 240.022888][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 240.140837][ T7275] Dev loop8: unable to read RDB block 7 [ 240.151567][ T7275] loop8: AHDI p1 p2 p3 [ 240.153740][ T126] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 240.167862][ T7275] loop8: partition table partially beyond EOD, truncated [ 240.209831][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.761'. [ 240.238260][ T7275] loop8: p1 start 1601398130 is beyond EOD, truncated [ 240.251013][ T7275] loop8: p2 start 1702059890 is beyond EOD, truncated [ 240.365178][ T126] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 240.398194][ T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.454990][ T126] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.531702][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.573777][ T126] usb 1-1: SerialNumber: syz [ 240.800337][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.814454][ T126] usb 1-1: 0:2 : does not exist [ 240.833844][ T126] usb 1-1: unit 255 not found! [ 240.958100][ T126] usb 1-1: USB disconnect, device number 9 [ 240.964167][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.054893][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.065940][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.083757][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.133745][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 242.247785][ T7340] trusted_key: encrypted_key: insufficient parameters specified [ 242.366215][ T7] usb 3-1: no configurations [ 242.371085][ T7] usb 3-1: can't read configurations, error -22 [ 242.543692][ T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 242.746763][ T7] usb 3-1: no configurations [ 242.751685][ T7] usb 3-1: can't read configurations, error -22 [ 242.765402][ T7] usb usb3-port1: attempt power cycle [ 242.911445][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.777'. [ 242.942343][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.777'. [ 243.176305][ T126] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 243.183731][ T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 243.224929][ T7] usb 3-1: no configurations [ 243.232472][ T7] usb 3-1: can't read configurations, error -22 [ 243.283739][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.781'. [ 243.387673][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.393724][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 243.405596][ T126] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 243.424946][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.450243][ T126] usb 4-1: config 0 descriptor?? [ 243.462288][ T7] usb 3-1: no configurations [ 243.467039][ T7] usb 3-1: can't read configurations, error -22 [ 243.483834][ T7] usb usb3-port1: unable to enumerate USB device [ 243.838533][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 243.853732][ T4324] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 243.869434][ T7382] netlink: 48 bytes leftover after parsing attributes in process `syz.4.789'. [ 243.875788][ T126] pantherlord 0003:0810:0001.0004: item fetching failed at offset 0/7 [ 243.920802][ T126] pantherlord 0003:0810:0001.0004: parse failed [ 243.956420][ T126] pantherlord: probe of 0003:0810:0001.0004 failed with error -22 [ 244.055341][ T4324] usb 6-1: config 0 has an invalid interface number: 162 but max is 0 [ 244.067407][ T4324] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.077985][ T4324] usb 6-1: config 0 has no interface number 0 [ 244.084374][ T4324] usb 6-1: config 0 interface 162 altsetting 0 endpoint 0x7 has an invalid bInterval 32, changing to 9 [ 244.101720][ T4324] usb 6-1: config 0 interface 162 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 244.112092][ T4324] usb 6-1: config 0 interface 162 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.122971][ T4324] usb 6-1: config 0 interface 162 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 244.137053][ T126] usb 4-1: USB disconnect, device number 31 [ 244.145201][ T4324] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=d4.45 [ 244.160121][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.168939][ T4324] usb 6-1: Product: syz [ 244.173128][ T4324] usb 6-1: Manufacturer: syz [ 244.178983][ T4324] usb 6-1: SerialNumber: syz [ 244.186280][ T4324] usb 6-1: config 0 descriptor?? [ 244.304353][ T4324] rtsx_usb: probe of 6-1:0.162 failed with error -8 [ 244.422451][ T4388] usb 6-1: USB disconnect, device number 15 [ 244.729069][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.790'. [ 244.743276][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.790'. [ 244.958653][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 245.048106][ T7398] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 245.055049][ T7398] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 245.079499][ T7398] vhci_hcd vhci_hcd.0: Device attached [ 245.144399][ T7403] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 245.149582][ T7398] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 245.178829][ T7398] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(7) [ 245.185395][ T7398] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 245.193411][ T7398] vhci_hcd vhci_hcd.0: Device attached [ 245.201117][ T7398] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 245.223257][ T7398] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 245.229995][ T7398] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 245.239507][ T7398] vhci_hcd vhci_hcd.0: Device attached [ 245.249221][ T7398] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15) [ 245.255830][ T7398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 245.264368][ T7398] vhci_hcd vhci_hcd.0: Device attached [ 245.271050][ T7415] vhci_hcd: connection closed [ 245.271851][ T7399] vhci_hcd: connection closed [ 245.276741][ T7411] vhci_hcd: connection closed [ 245.281521][ T7408] vhci_hcd: connection closed [ 245.286879][ T4388] vhci_hcd: vhci_device speed not set [ 245.298032][ T7260] vhci_hcd: stop threads [ 245.303080][ T7260] vhci_hcd: release socket [ 245.309336][ T7260] vhci_hcd: disconnect device [ 245.316241][ T7260] vhci_hcd: stop threads [ 245.320608][ T7260] vhci_hcd: release socket [ 245.325407][ T7260] vhci_hcd: disconnect device [ 245.331520][ T7260] vhci_hcd: stop threads [ 245.339609][ T7260] vhci_hcd: release socket [ 245.344599][ T7260] vhci_hcd: disconnect device [ 245.350613][ T7260] vhci_hcd: stop threads [ 245.355355][ T7260] vhci_hcd: release socket [ 245.360000][ T7260] vhci_hcd: disconnect device [ 245.363756][ T4388] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 245.372296][ T4388] usb 39-1: enqueue for inactive port 0 [ 245.453885][ T4388] vhci_hcd: vhci_device speed not set [ 245.883963][ T7421] Bluetooth: MGMT ver 1.22 [ 246.040802][ T7429] netlink: 28 bytes leftover after parsing attributes in process `syz.5.806'. [ 246.065743][ T7429] netlink: 28 bytes leftover after parsing attributes in process `syz.5.806'. [ 246.134280][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 246.483703][ T129] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 246.685819][ T129] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.699197][ T129] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.712112][ T129] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 246.723286][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.732358][ T129] usb 4-1: SerialNumber: syz [ 246.981985][ T129] usb 4-1: 0:2 : does not exist [ 247.082024][ T129] usb 4-1: USB disconnect, device number 32 [ 248.232347][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 248.341937][ T7498] netlink: 48 bytes leftover after parsing attributes in process `syz.2.827'. [ 249.545889][ T129] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 249.614986][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.836'. [ 249.631402][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.836'. [ 249.733719][ T129] usb 6-1: Using ep0 maxpacket: 32 [ 249.742874][ T129] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 249.768194][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.802570][ T129] usb 6-1: Product: syz [ 249.818540][ T129] usb 6-1: Manufacturer: syz [ 249.833942][ T129] usb 6-1: SerialNumber: syz [ 249.857323][ T129] usb 6-1: config 0 descriptor?? [ 249.877344][ T129] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 250.118048][ T7533] loop2: detected capacity change from 0 to 512 [ 250.155699][ T7533] EXT4-fs: Ignoring removed oldalloc option [ 250.242189][ T7533] EXT4-fs (loop2): 1 truncate cleaned up [ 250.249871][ T7533] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 250.400700][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 250.648800][ T7545] netlink: 48 bytes leftover after parsing attributes in process `syz.2.843'. [ 250.678537][ T129] gspca_ov534_9: reg_w failed -71 [ 251.075765][ T129] gspca_ov534_9: Unknown sensor 0000 [ 251.075817][ T129] ov534_9: probe of 6-1:0.0 failed with error -22 [ 251.100361][ T129] usb 6-1: USB disconnect, device number 16 [ 251.346309][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.5.849'. [ 251.424625][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.5.849'. [ 251.793692][ T129] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 251.993988][ T129] usb 1-1: Using ep0 maxpacket: 8 [ 252.020131][ T129] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 252.046712][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.068233][ T129] usb 1-1: Product: syz [ 252.078347][ T129] usb 1-1: Manufacturer: syz [ 252.089665][ T129] usb 1-1: SerialNumber: syz [ 252.115322][ T129] usb 1-1: config 0 descriptor?? [ 252.326079][ T129] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 253.130921][ T129] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 253.149112][ T129] usb 1-1: USB disconnect, device number 10 [ 253.507248][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 253.843835][ T41] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 254.045743][ T41] usb 6-1: config 0 has an invalid interface number: 162 but max is 0 [ 254.057407][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.068851][ T41] usb 6-1: config 0 has no interface number 0 [ 254.075670][ T41] usb 6-1: config 0 interface 162 altsetting 0 endpoint 0x7 has an invalid bInterval 32, changing to 9 [ 254.087305][ T41] usb 6-1: config 0 interface 162 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 254.098508][ T41] usb 6-1: config 0 interface 162 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.109262][ T41] usb 6-1: config 0 interface 162 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 254.137679][ T41] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=d4.45 [ 254.149951][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.149976][ T41] usb 6-1: Product: syz [ 254.149988][ T41] usb 6-1: Manufacturer: syz [ 254.149996][ T41] usb 6-1: SerialNumber: syz [ 254.171870][ T41] usb 6-1: config 0 descriptor?? [ 254.284282][ T41] rtsx_usb: probe of 6-1:0.162 failed with error -8 [ 254.378653][ T41] usb 6-1: USB disconnect, device number 17 [ 255.616109][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.622821][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.543792][ T129] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 257.735768][ T129] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 257.757360][ T129] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 257.801450][ T129] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 257.861129][ T129] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 257.913757][ T129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 257.924810][ T129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 257.934985][ T129] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 257.958315][ T129] usb 6-1: string descriptor 0 read error: -22 [ 257.973807][ T129] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 258.019388][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.074680][ T129] usb 6-1: config 0 descriptor?? [ 258.120406][ T129] hub 6-1:0.0: bad descriptor, ignoring hub [ 258.159212][ T129] hub: probe of 6-1:0.0 failed with error -5 [ 258.191974][ T129] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11 [ 258.324765][ T41] usb 6-1: USB disconnect, device number 18 [ 258.634206][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.896'. [ 259.064640][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.899'. [ 262.043880][ T126] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 262.233700][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 262.241563][ T126] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.269527][ T126] usb 4-1: config 0 has no interface number 0 [ 262.293424][ T126] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 262.303745][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.312836][ T126] usb 4-1: Product: syz [ 262.323640][ T126] usb 4-1: Manufacturer: syz [ 262.337131][ T126] usb 4-1: SerialNumber: syz [ 262.369500][ T126] usb 4-1: config 0 descriptor?? [ 262.392949][ T126] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 262.429455][ T126] usb 4-1: selecting invalid altsetting 1 [ 262.451329][ T126] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 262.496681][ T126] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 262.551574][ T126] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 262.577580][ T126] usb 4-1: media controller created [ 262.626977][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.843042][ T126] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 262.852057][ T126] zl10353_read_register: readreg error (reg=127, ret==-71) [ 262.862978][ T126] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 262.918459][ T126] usb 4-1: USB disconnect, device number 33 [ 263.058233][ T26] audit: type=1326 audit(1756442229.677:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 263.086362][ T26] audit: type=1326 audit(1756442229.697:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 263.109039][ T26] audit: type=1326 audit(1756442229.697:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 263.132448][ T26] audit: type=1326 audit(1756442229.697:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 263.158311][ T26] audit: type=1326 audit(1756442229.697:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 263.184706][ T26] audit: type=1326 audit(1756442229.697:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 263.278347][ T26] audit: type=1326 audit(1756442229.707:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 263.311488][ T26] audit: type=1326 audit(1756442229.707:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 263.336948][ T26] audit: type=1326 audit(1756442229.707:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 263.369580][ T26] audit: type=1326 audit(1756442229.707:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2e0f8ebe9 code=0x7ffc0000 [ 263.459364][ T7794] loop5: detected capacity change from 0 to 1024 [ 263.497723][ T7794] EXT4-fs: inline encryption not supported [ 263.509341][ T7796] device pim6reg1 entered promiscuous mode [ 263.529974][ T7794] EXT4-fs: Ignoring removed bh option [ 263.600883][ T7794] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 263.919518][ T4668] EXT4-fs (loop5): unmounting filesystem. [ 268.648690][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 268.648703][ T26] audit: type=1326 audit(1756442235.267:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 268.785491][ T26] audit: type=1326 audit(1756442235.277:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 268.812917][ T26] audit: type=1326 audit(1756442235.277:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 269.385131][ T26] audit: type=1326 audit(1756442235.277:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 269.426461][ T26] audit: type=1326 audit(1756442235.277:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 269.457586][ T26] audit: type=1326 audit(1756442235.277:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 269.608942][ T26] audit: type=1326 audit(1756442235.277:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 269.633965][ T26] audit: type=1326 audit(1756442235.297:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 269.663555][ T26] audit: type=1326 audit(1756442235.297:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 269.663682][ T26] audit: type=1326 audit(1756442235.297:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f035478ebe9 code=0x7ffc0000 [ 270.418033][ T7906] loop8: detected capacity change from 0 to 7 [ 270.433092][ T4259] Dev loop8: unable to read RDB block 7 [ 270.441334][ T4259] loop8: AHDI p1 p2 p3 [ 270.455027][ T4259] loop8: partition table partially beyond EOD, truncated [ 270.470435][ T4259] loop8: p1 start 1601398130 is beyond EOD, truncated [ 270.489795][ T4259] loop8: p2 start 1702059890 is beyond EOD, truncated [ 270.515980][ T7906] Dev loop8: unable to read RDB block 7 [ 270.541452][ T7906] loop8: AHDI p1 p2 p3 [ 270.570346][ T7906] loop8: partition table partially beyond EOD, truncated [ 270.677081][ T7906] loop8: p1 start 1601398130 is beyond EOD, truncated [ 270.687847][ T7906] loop8: p2 start 1702059890 is beyond EOD, truncated [ 271.610078][ T7936] program syz.3.965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.833982][ C1] sd 0:0:1:0: [sda] tag#1952 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 271.844437][ C1] sd 0:0:1:0: [sda] tag#1952 CDB: Write(6) 0a 00 00 00 00 00 [ 272.533766][ T41] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 272.734792][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 272.748841][ T41] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 272.757489][ T41] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 272.773766][ T41] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 272.787462][ T41] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 272.811047][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 272.850576][ T41] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 272.873672][ T41] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 272.921572][ T41] usb 6-1: Product: syz [ 272.938913][ T41] usb 6-1: Manufacturer: syz [ 272.956618][ T41] usb 6-1: SerialNumber: syz [ 272.997586][ T41] usb 6-1: config 0 descriptor?? [ 273.037457][ T41] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 273.111170][ T41] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 273.378733][ T41] usb 6-1: USB disconnect, device number 19 [ 273.384887][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 273.391699][ T7950] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 273.432342][ T41] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 274.244470][ T4388] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 274.433845][ T4388] usb 4-1: Using ep0 maxpacket: 32 [ 274.445516][ T4388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.458851][ T4388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.478553][ T4388] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 274.492729][ T4388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.509472][ T4388] usb 4-1: config 0 descriptor?? [ 274.958791][ T4388] hid-u2fzero 0003:10C4:8ACF.0005: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 274.983291][ T4388] hid-u2fzero 0003:10C4:8ACF.0005: U2F Zero LED initialised [ 275.677133][ T4388] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 275.688896][ T4388] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 275.697337][ T4388] CPU: 0 PID: 4388 Comm: kworker/0:7 Not tainted syzkaller #0 [ 275.704820][ T4388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.714874][ T4388] Workqueue: usb_hub_wq hub_event [ 275.719914][ T4388] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 275.725565][ T4388] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 2e 61 2c fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 86 61 2c fa 48 8d 84 24 80 00 00 00 [ 275.745175][ T4388] RSP: 0018:ffffc900046fe7c0 EFLAGS: 00010202 [ 275.751230][ T4388] RAX: 0000000000000015 RBX: ffff8880292b2030 RCX: dffffc0000000000 [ 275.759189][ T4388] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888058af3169 [ 275.767150][ T4388] RBP: ffffc900046fe970 R08: 0000000000000001 R09: ffff888058af312e [ 275.775113][ T4388] R10: ffffed100b15e62d R11: 1ffff1100b15e625 R12: 1ffff11005256406 [ 275.783070][ T4388] R13: dffffc0000000000 R14: 1ffff11005256405 R15: 00000000000000a8 [ 275.791027][ T4388] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 275.800019][ T4388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.806623][ T4388] CR2: 000000110c3d24c8 CR3: 000000002efc0000 CR4: 00000000003526f0 [ 275.814591][ T4388] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 275.822573][ T4388] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 275.830530][ T4388] Call Trace: [ 275.833797][ T4388] [ 275.836716][ T4388] ? rcu_is_watching+0x11/0xa0 [ 275.841475][ T4388] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 275.847130][ T4388] ? mutex_lock_nested+0x10/0x10 [ 275.852061][ T4388] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 275.857680][ T4388] add_early_randomness+0x7a/0x150 [ 275.862780][ T4388] hwrng_register+0x398/0x440 [ 275.867445][ T4388] devm_hwrng_register+0x43/0xb0 [ 275.872368][ T4388] u2fzero_probe+0x355/0x470 [ 275.876946][ T4388] ? twinhan_input_mapping+0x2210/0x2210 [ 275.882564][ T4388] hid_device_probe+0x25c/0x350 [ 275.887406][ T4388] ? hid_uevent+0x340/0x340 [ 275.891896][ T4388] really_probe+0x2aa/0xc70 [ 275.896390][ T4388] ? pm_runtime_barrier+0x147/0x1c0 [ 275.901583][ T4388] __driver_probe_device+0x18c/0x330 [ 275.906861][ T4388] driver_probe_device+0x4f/0x420 [ 275.911875][ T4388] __device_attach_driver+0x2c6/0x510 [ 275.917238][ T4388] ? coredump_store+0x90/0x90 [ 275.921987][ T4388] bus_for_each_drv+0x175/0x200 [ 275.926861][ T4388] ? _raw_spin_unlock+0x40/0x40 [ 275.931795][ T4388] ? subsys_find_device_by_id+0x350/0x350 [ 275.937501][ T4388] __device_attach+0x29b/0x460 [ 275.942425][ T4388] ? device_attach+0x20/0x20 [ 275.946998][ T4388] ? __kmem_cache_free+0xb6/0x1f0 [ 275.952016][ T4388] ? kobject_uevent_env+0x35f/0x8a0 [ 275.957289][ T4388] bus_probe_device+0xbc/0x1e0 [ 275.962039][ T4388] ? device_add+0x97c/0xfb0 [ 275.966526][ T4388] device_add+0xa00/0xfb0 [ 275.970851][ T4388] hid_add_device+0x389/0x530 [ 275.975524][ T4388] usbhid_probe+0xc09/0xfe0 [ 275.980017][ T4388] usb_probe_interface+0x5a0/0xaf0 [ 275.985117][ T4388] ? usb_register_driver+0x3d0/0x3d0 [ 275.990387][ T4388] really_probe+0x2aa/0xc70 [ 275.994880][ T4388] __driver_probe_device+0x18c/0x330 [ 276.000212][ T4388] driver_probe_device+0x4f/0x420 [ 276.005234][ T4388] __device_attach_driver+0x2c6/0x510 [ 276.010602][ T4388] ? coredump_store+0x90/0x90 [ 276.015453][ T4388] bus_for_each_drv+0x175/0x200 [ 276.020294][ T4388] ? _raw_spin_unlock+0x40/0x40 [ 276.025134][ T4388] ? subsys_find_device_by_id+0x350/0x350 [ 276.030845][ T4388] __device_attach+0x29b/0x460 [ 276.035625][ T4388] ? device_attach+0x20/0x20 [ 276.040204][ T4388] ? kobject_uevent_env+0x35f/0x8a0 [ 276.045389][ T4388] bus_probe_device+0xbc/0x1e0 [ 276.050135][ T4388] ? device_add+0x97c/0xfb0 [ 276.054627][ T4388] device_add+0xa00/0xfb0 [ 276.058946][ T4388] usb_set_configuration+0x1991/0x1fd0 [ 276.064398][ T4388] usb_generic_driver_probe+0x89/0x150 [ 276.069841][ T4388] usb_probe_device+0x139/0x270 [ 276.074680][ T4388] ? usb_register_device_driver+0x230/0x230 [ 276.080560][ T4388] really_probe+0x2aa/0xc70 [ 276.085058][ T4388] ? pm_runtime_barrier+0x147/0x1c0 [ 276.090242][ T4388] __driver_probe_device+0x18c/0x330 [ 276.095691][ T4388] driver_probe_device+0x4f/0x420 [ 276.100793][ T4388] __device_attach_driver+0x2c6/0x510 [ 276.106159][ T4388] ? coredump_store+0x90/0x90 [ 276.110826][ T4388] bus_for_each_drv+0x175/0x200 [ 276.115673][ T4388] ? _raw_spin_unlock+0x40/0x40 [ 276.120515][ T4388] ? subsys_find_device_by_id+0x350/0x350 [ 276.126225][ T4388] __device_attach+0x29b/0x460 [ 276.130980][ T4388] ? device_attach+0x20/0x20 [ 276.135565][ T4388] ? __kmem_cache_free+0xb6/0x1f0 [ 276.140753][ T4388] ? kobject_uevent_env+0x35f/0x8a0 [ 276.145944][ T4388] bus_probe_device+0xbc/0x1e0 [ 276.150697][ T4388] ? device_add+0x97c/0xfb0 [ 276.155193][ T4388] device_add+0xa00/0xfb0 [ 276.159680][ T4388] usb_new_device+0xd4d/0x1620 [ 276.164446][ T4388] ? lock_chain_count+0x20/0x20 [ 276.169287][ T4388] ? usb_disconnect+0x8a0/0x8a0 [ 276.174132][ T4388] ? _raw_spin_unlock_irq+0x1f/0x40 [ 276.179325][ T4388] ? lockdep_hardirqs_on+0x94/0x140 [ 276.184528][ T4388] hub_event+0x2d5e/0x54e0 [ 276.188953][ T4388] ? hub_post_resume+0x120/0x120 [ 276.193878][ T4388] ? read_lock_is_recursive+0x10/0x10 [ 276.199243][ T4388] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 276.205135][ T4388] ? _raw_spin_unlock+0x40/0x40 [ 276.209973][ T4388] ? _raw_spin_unlock_irq+0x1f/0x40 [ 276.215246][ T4388] ? process_one_work+0x7a1/0x1160 [ 276.220341][ T4388] process_one_work+0x898/0x1160 [ 276.225265][ T4388] ? worker_detach_from_pool+0x240/0x240 [ 276.230886][ T4388] ? _raw_spin_lock_irq+0xab/0xe0 [ 276.236068][ T4388] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 276.241511][ T4388] ? kthread_data+0x4b/0xc0 [ 276.246005][ T4388] worker_thread+0xaa2/0x1250 [ 276.250669][ T4388] ? __kthread_parkme+0x162/0x1c0 [ 276.255684][ T4388] kthread+0x29d/0x330 [ 276.259832][ T4388] ? worker_clr_flags+0x1a0/0x1a0 [ 276.265015][ T4388] ? kthread_blkcg+0xd0/0xd0 [ 276.269602][ T4388] ret_from_fork+0x1f/0x30 [ 276.274011][ T4388] [ 276.277026][ T4388] Modules linked in: [ 276.307109][ T4388] ---[ end trace 0000000000000000 ]--- [ 276.314618][ T4388] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 276.321424][ T4388] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 2e 61 2c fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 86 61 2c fa 48 8d 84 24 80 00 00 00 [ 276.342527][ T4388] RSP: 0018:ffffc900046fe7c0 EFLAGS: 00010202 [ 276.352376][ T4388] RAX: 0000000000000015 RBX: ffff8880292b2030 RCX: dffffc0000000000 [ 276.361687][ T4388] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888058af3169 [ 276.369803][ T4388] RBP: ffffc900046fe970 R08: 0000000000000001 R09: ffff888058af312e [ 276.382427][ T4388] R10: ffffed100b15e62d R11: 1ffff1100b15e625 R12: 1ffff11005256406 [ 276.391770][ T4388] R13: dffffc0000000000 R14: 1ffff11005256405 R15: 00000000000000a8 [ 276.401729][ T4388] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 276.410726][ T4388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.418141][ T4388] CR2: 00002000001e3000 CR3: 00000000670ba000 CR4: 00000000003526f0 [ 276.426175][ T4388] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 276.439040][ T4388] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 276.447192][ T4388] Kernel panic - not syncing: Fatal exception [ 276.453578][ T4388] Kernel Offset: disabled [ 276.457903][ T4388] Rebooting in 86400 seconds..