last executing test programs: 2m23.071247321s ago: executing program 2 (id=513): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xee2, 0x0, 0x8, 0x76ed}, 0x0) syz_io_uring_setup(0x1000109, &(0x7f0000000400)={0x0, 0x43d4, 0x400, 0x3, 0x3e1}, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) read$FUSE(r5, &(0x7f0000001c00)={0x2020}, 0x2020) r6 = fcntl$dupfd(r3, 0x0, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r8, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x3, 0x31dc}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) 2m17.415742161s ago: executing program 2 (id=527): memfd_secret(0x0) r0 = dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) 2m16.40338559s ago: executing program 2 (id=534): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000040)="020000", 0x3}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000200)="527102587a0a4e43ad", 0x9}], 0x3, 0xc, 0x20000000) 2m15.212698798s ago: executing program 2 (id=537): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x20c8c1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 2m14.680499691s ago: executing program 2 (id=538): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x17}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 2m14.148599563s ago: executing program 2 (id=541): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af0117030109021200"], 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000004540)=""/4120) 2m13.801342587s ago: executing program 32 (id=541): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af0117030109021200"], 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000004540)=""/4120) 10.956654527s ago: executing program 4 (id=869): syz_emit_ethernet(0xd6, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @remote, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x1, 0x5, "4eb8a6"}, {0x7, 0x12, "9606013d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0xf, 0x0, [@broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x2, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x6, 0xb, "f7d11634eea26b75af"}, {0x0, 0x12, "02000948fd74062c8fb7060088866158"}, {0x0, 0x10, "ccf0294e2a3bdb4aa40b249e8e0c"}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x20, 0x0]}]}}}}}}}, 0x0) 10.083046664s ago: executing program 4 (id=872): sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000180)={0xc, &(0x7f00000003c0)={0x20, 0xc, 0xec, {0xec, 0xe, "7ffb4c95d7ddb79bc51ebae9e9a0a6d1ee270dbf96dc94de58793258e6868aa8fad71fb1782ed3d765988ba775cccb1bf0a0e7286f7fd7f035a61be6b9cc348e03a9b69cc422669d845f2ae132ec4b77bfae3659dd7204a91577cd5c42afa46d46029d35502716e87e536ec40b83991ce42696ef6223c81366b13652fff6df5bf49ec6b3b3e4c6006e11fb5a2941921219ff8e931518cc3cd3f7b0d6c736d614969f84a47d15726c73eecced67c4bbddf6d9d2e58ef6f0feafea7fb92d4033beb198e46d8e116fc6f0af4f55582e69f357959350b73a946a7a7f11caa934f53e2830a90c9538e9083a86"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x446}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="2010f8000000822081cb2d5c5d1c834a72579fba447e3424eb3970abb1e145e425ebeaeee7735f526dfde64aca7d24f12c2d93460d7de447873a299205cae0254bca6a6b41cbd2e318deea4e4371aff447d52414d6731fb652de57b1f6bfe422457de61a054c762e495a313441af0fc6b22e5c4ced950a02a9cdcf85fa74a22b6965b65a79f7cf7aecafe6aed02f1225d63e309fe1fce3b238379d48822b860d01695953ba1cfbb4a00ad6cc492c82488d234ee235ea5db05c45d367d9271356aa7e736afb9b98d4bcd32b51f02e7e625430fef07a6e18166269837b72aeb38f7dee429c9a68da6ebf0ccccd7be9a4dab36baa03df32fd1100e666099449"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x72}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0xfffff018}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x9}, 0x0}) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) 9.134441067s ago: executing program 3 (id=873): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f00000069c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x2, 0x5567, &(0x7f000000c4c0)="$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") write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r0 = getpid() ptrace$getregset(0x4204, r0, 0x6, &(0x7f0000000240)={0x0}) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.freeze\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 9.133060498s ago: executing program 0 (id=882): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, 0x0, 0x25, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200000, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) 8.279292722s ago: executing program 4 (id=875): syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x5456, 0x10000, 0x4, 0x312}, &(0x7f00000029c0), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x1ff, 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000700)=""/231, 0xe7}], 0x1, 0x200c, 0x22f) 7.508128688s ago: executing program 1 (id=876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300"/16], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040), 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7.506441608s ago: executing program 0 (id=877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT=r4, @ANYRESHEX, @ANYRES32, @ANYRESOCT=r4], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) close(r3) 7.319067287s ago: executing program 1 (id=878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x13) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x8102, 0x0) sendfile(r4, r4, 0x0, 0x6) 6.862248432s ago: executing program 0 (id=879): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 6.221470855s ago: executing program 1 (id=881): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x0) 5.960523721s ago: executing program 3 (id=883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a, 0x7}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 5.959799721s ago: executing program 1 (id=884): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130003000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.891225697s ago: executing program 3 (id=885): sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x72}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0xfffff018}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x9}, 0x0}) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) 4.890313827s ago: executing program 0 (id=886): read$FUSE(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x44202, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r2 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file1'}, 0x237) 4.640281452s ago: executing program 0 (id=887): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c0d0) 4.639876632s ago: executing program 1 (id=888): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) pwritev2(r2, 0x0, 0x0, 0xc0, 0x8b1, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) pwrite64(r3, &(0x7f0000000000)="7f", 0x1, 0x24fed0) fallocate(r1, 0x20, 0x0, 0x8000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, 0x0) 3.904373144s ago: executing program 3 (id=889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT=r4, @ANYRESHEX, @ANYRES32, @ANYRESOCT=r4], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) close(r3) 3.867702448s ago: executing program 4 (id=890): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 3.857108449s ago: executing program 0 (id=891): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r1 = inotify_init() read$FUSE(r1, 0x0, 0x0) 3.629724161s ago: executing program 3 (id=892): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) statx(0xffffffffffffffff, 0x0, 0x4100, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x7c) 2.843572339s ago: executing program 1 (id=893): epoll_create1(0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x8, 0x4004, @fd=r0, 0x10, 0x0, 0x0, 0x18, 0x1, {0x2, r2}}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xdffffff8]}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001b00)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r5 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4e, 0x0, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) 2.842233239s ago: executing program 4 (id=894): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x101, 0x48001051, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x91) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe91, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) io_uring_setup(0x510d, &(0x7f0000000100)={0x0, 0xc7db, 0x10, 0x3, 0x1f5}) sendmsg$key(r1, 0x0, 0x4) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r6, &(0x7f0000000240)='./bus/file0\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x2) 436.46µs ago: executing program 4 (id=895): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) write$6lowpan_enable(r1, 0x0, 0x0) 0s ago: executing program 3 (id=896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) kernel console output (not intermixed with test programs): error -22 [ 111.136092][ T28] audit: type=1326 audit(1760878501.133:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b4d8efc9 code=0x7ffc0000 [ 111.220040][ T28] audit: type=1326 audit(1760878501.133:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b4d8efc9 code=0x7ffc0000 [ 111.434842][ T6066] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.781903][ T5878] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.061803][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 112.108727][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 112.145494][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 112.192638][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.277880][ T5878] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 112.323412][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.403101][ T5878] usb 3-1: Product: syz [ 112.435734][ T5878] usb 3-1: Manufacturer: syz [ 112.472276][ T5878] usb 3-1: SerialNumber: syz [ 112.534260][ T5878] usb 3-1: config 0 descriptor?? [ 113.207905][ T787] usb 1-1: USB disconnect, device number 3 [ 113.354869][ T6077] tipc: Started in network mode [ 113.411763][ T6077] tipc: Node identity 9a35c73b735a, cluster identity 4711 [ 113.443437][ T6077] tipc: Enabled bearer , priority 0 [ 113.480948][ T6079] syzkaller0: entered promiscuous mode [ 113.509091][ T6079] syzkaller0: entered allmulticast mode [ 113.694264][ T6075] tipc: Resetting bearer [ 113.748052][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.786342][ T6075] tipc: Disabling bearer [ 113.961809][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 113.975543][ T8] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 114.007473][ T8] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 114.044043][ T8] usb 1-1: Product: syz [ 114.052130][ T6091] batadv_slave_1: entered promiscuous mode [ 114.060187][ T8] usb 1-1: Manufacturer: syz [ 114.073663][ T8] usb 1-1: SerialNumber: syz [ 114.079371][ T6091] netlink: 'syz.3.49': attribute type 4 has an invalid length. [ 114.091361][ T6091] netlink: 152 bytes leftover after parsing attributes in process `syz.3.49'. [ 114.104667][ T8] usb 1-1: config 0 descriptor?? [ 114.222132][ T6091] : renamed from bond0 (while UP) [ 114.417396][ T6094] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.438112][ T6090] batadv_slave_1: left promiscuous mode [ 114.463676][ T787] usb 1-1: USB disconnect, device number 4 [ 114.514904][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 115.075364][ T8] usb 3-1: USB disconnect, device number 3 [ 115.528066][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 115.528082][ T28] audit: type=1326 audit(1760878506.083:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7ffc0000 [ 115.614105][ T28] audit: type=1326 audit(1760878506.093:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2e5dd8efc9 code=0x7ffc0000 [ 115.697777][ T28] audit: type=1326 audit(1760878506.093:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7ffc0000 [ 115.761369][ T28] audit: type=1326 audit(1760878506.123:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e5dd8efc9 code=0x7ffc0000 [ 115.794826][ T28] audit: type=1326 audit(1760878506.123:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7ffc0000 [ 115.817751][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.832484][ T28] audit: type=1326 audit(1760878506.123:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7ffc0000 [ 115.952704][ T28] audit: type=1326 audit(1760878506.123:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e5dd8efc9 code=0x7ffc0000 [ 116.017238][ T28] audit: type=1326 audit(1760878506.123:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7ffc0000 [ 116.062263][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 116.080389][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.104351][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 116.118983][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.122911][ T28] audit: type=1326 audit(1760878506.163:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f2e5dd8efc9 code=0x7ffc0000 [ 116.178381][ T9] usb 4-1: Product: syz [ 116.194975][ T9] usb 4-1: Manufacturer: syz [ 116.199731][ T9] usb 4-1: SerialNumber: syz [ 116.239308][ T28] audit: type=1326 audit(1760878506.163:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7ffc0000 [ 116.245326][ T9] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 116.376261][ T9] usbtest: probe of 4-1:1.0 failed with error -22 [ 116.951862][ T6126] batadv_slave_1: entered promiscuous mode [ 117.011132][ T6125] batadv_slave_1: left promiscuous mode [ 117.474611][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 118.141818][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.461820][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 118.493236][ T787] usb 4-1: USB disconnect, device number 2 [ 118.496302][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 118.519206][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 118.534360][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.676345][ T8] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 118.690003][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.707850][ T8] usb 2-1: Product: syz [ 118.714960][ T8] usb 2-1: Manufacturer: syz [ 118.720284][ T8] usb 2-1: SerialNumber: syz [ 118.760301][ T8] usb 2-1: config 0 descriptor?? [ 118.793170][ T6153] batadv_slave_1: entered promiscuous mode [ 118.839814][ T6152] batadv_slave_1: left promiscuous mode [ 119.092367][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 119.272589][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.351844][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.899260][ T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.113380][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 120.172665][ T787] usb 3-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 120.184921][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64320, setting to 1024 [ 120.197423][ T787] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.210830][ T787] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 120.267562][ T787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 120.340447][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.356326][ T787] usb 3-1: Product: syz [ 120.365821][ T787] usb 3-1: Manufacturer: syz [ 120.376141][ T787] usb 3-1: SerialNumber: syz [ 120.398294][ T6173] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.418438][ T787] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 120.433031][ T787] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 120.445545][ T787] usbtest: probe of 3-1:1.0 failed with error -22 [ 121.400618][ T5878] usb 2-1: USB disconnect, device number 2 [ 121.981788][ T5878] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.034362][ T6204] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 122.043790][ T6204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 122.177124][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 122.206063][ T5878] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 122.234271][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 122.254315][ T5878] usb 2-1: Product: syz [ 122.260887][ T5878] usb 2-1: Manufacturer: syz [ 122.268230][ T5878] usb 2-1: SerialNumber: syz [ 122.309300][ T5878] usb 2-1: config 0 descriptor?? [ 122.560351][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.595147][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.953494][ T9] usb 3-1: USB disconnect, device number 4 [ 123.764770][ T5878] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.961830][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 123.978153][ T5878] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 123.988827][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 124.020997][ T5878] usb 4-1: Product: syz [ 124.031797][ T5878] usb 4-1: Manufacturer: syz [ 124.044319][ T5878] usb 4-1: SerialNumber: syz [ 124.062534][ T5878] usb 4-1: config 0 descriptor?? [ 124.194391][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 124.297301][ T5859] usb 4-1: USB disconnect, device number 3 [ 124.422683][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 124.440653][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 124.465020][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 124.481975][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.520390][ T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 124.542618][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.556722][ T9] usb 1-1: Product: syz [ 124.563692][ T9] usb 1-1: Manufacturer: syz [ 124.568659][ T9] usb 1-1: SerialNumber: syz [ 124.589930][ T9] usb 1-1: config 0 descriptor?? [ 124.738997][ T967] usb 2-1: USB disconnect, device number 3 [ 125.286081][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.329911][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.605924][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.801781][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 125.831548][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 125.873650][ T9] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF1, skipping [ 125.897139][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.024934][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 126.037758][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.046618][ T9] usb 4-1: Product: syz [ 126.051582][ T9] usb 4-1: Manufacturer: syz [ 126.062585][ T9] usb 4-1: SerialNumber: syz [ 126.081479][ T6244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 126.095099][ T6244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 126.133188][ T9] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 126.154302][ T9] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 126.185211][ T9] usbtest: probe of 4-1:1.0 failed with error -22 [ 126.831918][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.931579][ T9] usb 1-1: USB disconnect, device number 5 [ 127.043990][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 127.115347][ T8] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 127.135061][ T8] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 127.153991][ T8] usb 3-1: Product: syz [ 127.158486][ T8] usb 3-1: Manufacturer: syz [ 127.165160][ T8] usb 3-1: SerialNumber: syz [ 127.176526][ T8] usb 3-1: config 0 descriptor?? [ 127.474572][ T5859] usb 3-1: USB disconnect, device number 5 [ 127.991892][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 128.194827][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.236534][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 128.259065][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 128.284790][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.310497][ T9] usb 1-1: config 0 descriptor?? [ 128.397828][ T967] usb 4-1: USB disconnect, device number 4 [ 128.543432][ T9] usb 1-1: USB disconnect, device number 6 [ 128.563713][ T6276] input: syz1 as /devices/virtual/input/input7 [ 128.658196][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 129.172010][ T967] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.392225][ T967] usb 2-1: Using ep0 maxpacket: 16 [ 129.461102][ T967] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 129.510704][ T967] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 129.546189][ T967] usb 2-1: Product: syz [ 129.581921][ T967] usb 2-1: Manufacturer: syz [ 129.604424][ T967] usb 2-1: SerialNumber: syz [ 129.625455][ T967] usb 2-1: config 0 descriptor?? [ 129.841813][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.858714][ T967] usb 2-1: USB disconnect, device number 4 [ 130.062062][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 130.079187][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 130.135638][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF1, skipping [ 130.176139][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.211946][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 130.222057][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.230173][ T9] usb 1-1: Product: syz [ 130.234863][ T9] usb 1-1: Manufacturer: syz [ 130.239539][ T9] usb 1-1: SerialNumber: syz [ 130.248715][ T6302] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 130.263081][ T6302] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 130.292685][ T9] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 130.317805][ T9] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 130.345478][ T9] usbtest: probe of 1-1:1.0 failed with error -22 [ 130.512427][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 131.055660][ T8] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 131.305198][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.315609][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 131.327589][ T8] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 131.346893][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.373560][ T8] usb 4-1: config 0 descriptor?? [ 131.491834][ T967] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.606772][ T5878] usb 4-1: USB disconnect, device number 5 [ 131.691986][ T967] usb 3-1: Using ep0 maxpacket: 16 [ 131.711012][ T967] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 131.720668][ T967] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 131.739740][ T967] usb 3-1: Product: syz [ 131.746582][ T967] usb 3-1: Manufacturer: syz [ 131.751327][ T967] usb 3-1: SerialNumber: syz [ 131.764394][ T967] usb 3-1: config 0 descriptor?? [ 131.989104][ T8] usb 3-1: USB disconnect, device number 6 [ 132.294643][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 133.094672][ T8] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 133.219259][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 133.295923][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.306156][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.313272][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.360570][ T5859] usb 1-1: USB disconnect, device number 7 [ 133.404506][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 133.440034][ T8] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 133.460203][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.485121][ T8] usb 3-1: config 0 descriptor?? [ 133.714489][ T5859] usb 3-1: USB disconnect, device number 7 [ 134.092006][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 134.136896][ T6378] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 134.145658][ T6378] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 134.313452][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 134.343558][ T8] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 134.369195][ T8] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 134.388596][ T8] usb 4-1: Product: syz [ 134.398610][ T8] usb 4-1: Manufacturer: syz [ 134.418615][ T8] usb 4-1: SerialNumber: syz [ 134.453171][ T8] usb 4-1: config 0 descriptor?? [ 134.740858][ T8] usb 4-1: USB disconnect, device number 6 [ 135.662010][ T8] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 135.842208][ T5859] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 135.873952][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.891793][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 135.912414][ T8] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 135.926688][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.955985][ T8] usb 4-1: config 0 descriptor?? [ 135.963787][ T6419] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 135.981754][ T6419] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 136.051905][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 136.082818][ T5859] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 136.112291][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 136.131285][ T5859] usb 1-1: Product: syz [ 136.137115][ T5859] usb 1-1: Manufacturer: syz [ 136.142548][ T5859] usb 1-1: SerialNumber: syz [ 136.163980][ T5859] usb 1-1: config 0 descriptor?? [ 136.212958][ T8] usb 4-1: USB disconnect, device number 7 [ 136.439528][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.448712][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.084945][ T6435] trusted_key: encrypted_key: insufficient parameters specified [ 137.103841][ T6435] trusted_key: encrypted_key: keylen parameter is missing [ 137.171985][ T5859] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 137.299589][ T6443] bridge_slave_0: left allmulticast mode [ 137.305999][ T6443] bridge_slave_0: left promiscuous mode [ 137.318294][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.343073][ T6443] bridge_slave_1: left allmulticast mode [ 137.349977][ T6443] bridge_slave_1: left promiscuous mode [ 137.358954][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.392825][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 137.406628][ T5859] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 137.418218][ T6443] bond0: (slave bond_slave_0): Releasing backup interface [ 137.419721][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 137.440385][ T5859] usb 4-1: Product: syz [ 137.447249][ T5859] usb 4-1: Manufacturer: syz [ 137.452843][ T6443] bond0: (slave bond_slave_1): Releasing backup interface [ 137.457739][ T5859] usb 4-1: SerialNumber: syz [ 137.479603][ T5859] usb 4-1: config 0 descriptor?? [ 137.506571][ T6443] team0: Port device team_slave_0 removed [ 137.539180][ T6443] team0: Port device team_slave_1 removed [ 137.558719][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.573698][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.586738][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.598031][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.670853][ T6448] tipc: Started in network mode [ 137.675986][ T6448] tipc: Node identity 4a1a93085288, cluster identity 4711 [ 137.688265][ T6448] tipc: Enabled bearer , priority 0 [ 137.719804][ T967] usb 4-1: USB disconnect, device number 8 [ 137.869819][ T6449] syzkaller0: entered promiscuous mode [ 137.875890][ T6449] syzkaller0: entered allmulticast mode [ 137.924963][ T6445] tipc: Resetting bearer [ 137.957230][ T6445] tipc: Disabling bearer [ 138.092609][ T5859] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 138.219673][ T6459] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 138.231348][ T6459] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 138.296017][ T5859] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.328429][ T5859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 138.366617][ T5859] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 138.376955][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.395410][ T5859] usb 3-1: config 0 descriptor?? [ 138.425750][ T5859] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 138.435954][ T5859] dvb-usb: bulk message failed: -22 (3/0) [ 138.467599][ T5859] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 138.497846][ T5859] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 138.506794][ T5859] usb 3-1: media controller created [ 138.527617][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.564768][ T5859] dvb-usb: bulk message failed: -22 (6/0) [ 138.583811][ T5859] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 138.600635][ T5859] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 138.670372][ T5859] dvb-usb: schedule remote query interval to 150 msecs. [ 138.693371][ T5859] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 138.760807][ T5859] usb 3-1: USB disconnect, device number 8 [ 138.909627][ T5859] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 138.923735][ T787] usb 1-1: USB disconnect, device number 8 [ 139.281988][ T6466] trusted_key: encrypted_key: insufficient parameters specified [ 139.326809][ T6466] trusted_key: encrypted_key: keylen parameter is missing [ 140.242157][ T5878] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.422459][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 140.440251][ T5878] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 140.451485][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 140.466354][ T5878] usb 4-1: Product: syz [ 140.470634][ T5878] usb 4-1: Manufacturer: syz [ 140.478930][ T5878] usb 4-1: SerialNumber: syz [ 140.491844][ T787] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 140.512001][ T5878] usb 4-1: config 0 descriptor?? [ 140.704539][ T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.726330][ T787] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 140.764287][ T6482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.779769][ T787] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 140.792626][ T6482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.802125][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.833694][ T787] usb 3-1: config 0 descriptor?? [ 140.862764][ T787] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 140.876908][ T787] dvb-usb: bulk message failed: -22 (3/0) [ 140.901870][ T787] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 140.917472][ T787] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 140.925290][ T787] usb 3-1: media controller created [ 140.933014][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.957880][ T787] dvb-usb: bulk message failed: -22 (6/0) [ 140.973961][ T787] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 140.999164][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 141.045104][ T787] dvb-usb: schedule remote query interval to 150 msecs. [ 141.068170][ T787] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 141.113449][ T787] usb 3-1: USB disconnect, device number 9 [ 141.178053][ T787] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 141.360003][ T6503] tipc: Enabled bearer , priority 0 [ 141.370666][ T6503] syzkaller0: entered promiscuous mode [ 141.376597][ T6503] syzkaller0: entered allmulticast mode [ 141.447099][ T6502] tipc: Resetting bearer [ 141.481191][ T6502] tipc: Disabling bearer [ 142.206696][ T6526] fuse: Bad value for 'fd' [ 142.929604][ T6531] tipc: Started in network mode [ 142.937620][ T6531] tipc: Node identity 0285ab5ee77, cluster identity 4711 [ 142.971858][ T6531] tipc: Enabled bearer , priority 0 [ 142.997905][ T6531] syzkaller0: entered promiscuous mode [ 143.009484][ T6531] syzkaller0: entered allmulticast mode [ 143.145990][ T8] usb 4-1: USB disconnect, device number 9 [ 143.222963][ T6530] tipc: Resetting bearer [ 143.314133][ T6530] tipc: Disabling bearer [ 143.601892][ T967] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 143.817480][ T967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.840552][ T967] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 143.855947][ T967] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 143.865501][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.876143][ T967] usb 3-1: config 0 descriptor?? [ 143.885791][ T967] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 143.895458][ T967] dvb-usb: bulk message failed: -22 (3/0) [ 143.904670][ T967] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 143.922376][ T967] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 143.931826][ T967] usb 3-1: media controller created [ 143.938974][ T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.992655][ T967] dvb-usb: bulk message failed: -22 (6/0) [ 143.998776][ T967] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 144.046185][ T967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 144.060464][ T967] dvb-usb: schedule remote query interval to 150 msecs. [ 144.068161][ T967] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 144.094253][ T967] usb 3-1: USB disconnect, device number 10 [ 144.168802][ T967] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 144.642204][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.711862][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 144.761138][ T6566] tipc: Started in network mode [ 144.766355][ T6566] tipc: Node identity fedbda57a598, cluster identity 4711 [ 144.786946][ T6566] tipc: Enabled bearer , priority 0 [ 144.799919][ T6566] syzkaller0: entered promiscuous mode [ 144.808766][ T6566] syzkaller0: entered allmulticast mode [ 144.912808][ T6565] tipc: Resetting bearer [ 144.922015][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 144.922029][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 144.944624][ T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 144.956590][ T8] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 144.963520][ T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x55, skipping [ 144.983895][ T8] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 144.998887][ T6572] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 145.014420][ T8] usb 4-1: Product: syz [ 145.016994][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.018848][ T8] usb 4-1: Manufacturer: syz [ 145.042672][ T6572] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 145.073086][ T6565] tipc: Disabling bearer [ 145.081594][ T8] usb 4-1: SerialNumber: syz [ 145.083078][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 145.088304][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.122671][ T8] usb 4-1: config 0 descriptor?? [ 145.146639][ T27] usb 1-1: Product: syz [ 145.153901][ T27] usb 1-1: Manufacturer: syz [ 145.159056][ T27] usb 1-1: SerialNumber: syz [ 145.200169][ T6557] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.243726][ T6557] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.293820][ T27] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 145.314316][ T27] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 145.342049][ T27] usbtest: probe of 1-1:1.0 failed with error -22 [ 145.469249][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.499779][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.181978][ T27] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 146.373886][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.391182][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.407588][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.421416][ T27] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 146.436231][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.455838][ T27] usb 3-1: config 0 descriptor?? [ 146.877938][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 146.878029][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 146.889392][ T27] usb 3-1: USB disconnect, device number 11 [ 147.566354][ T9] usb 4-1: USB disconnect, device number 10 [ 147.759857][ T6603] input: syz1 as /devices/virtual/input/input11 [ 148.073808][ T27] usb 1-1: USB disconnect, device number 9 [ 149.563872][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 150.030045][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 151.655142][ T6655] input: syz1 as /devices/virtual/input/input12 [ 151.684634][ T6654] input: syz1 as /devices/virtual/input/input13 [ 151.806767][ T6660] batadv_slave_1: entered promiscuous mode [ 151.807386][ T6659] batadv_slave_1: left promiscuous mode [ 152.819376][ T6683] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 152.828444][ T6683] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 154.071838][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 154.335802][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 154.435915][ T8] usb 1-1: config index 0 descriptor too short (expected 44, got 36) [ 154.491743][ T8] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 154.543678][ T8] usb 1-1: config 0 has no interface number 0 [ 154.585443][ T6703] trusted_key: encrypted_key: keylen parameter is missing [ 154.601779][ T8] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 154.637447][ T8] usb 1-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.681870][ T8] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 154.719844][ T8] usb 1-1: config 0 interface 126 has no altsetting 0 [ 154.780419][ T8] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 154.839133][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.870710][ T8] usb 1-1: Product: syz [ 154.878377][ T8] usb 1-1: Manufacturer: syz [ 154.884670][ T8] usb 1-1: SerialNumber: syz [ 154.911032][ T8] usb 1-1: config 0 descriptor?? [ 154.937960][ T6694] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.130927][ T6716] input: syz1 as /devices/virtual/input/input14 [ 157.235856][ T6742] batadv_slave_1: entered promiscuous mode [ 157.289660][ T6741] batadv_slave_1: left promiscuous mode [ 157.721452][ T6755] tipc: Enabled bearer , priority 0 [ 157.768245][ T6755] syzkaller0: entered promiscuous mode [ 157.785958][ T6755] syzkaller0: entered allmulticast mode [ 158.013794][ T6753] tipc: Resetting bearer [ 158.314171][ T6753] tipc: Disabling bearer [ 158.496328][ T8] ir_usb 1-1:0.126: IR Dongle converter detected [ 158.548721][ T8] usb 1-1: IRDA class descriptor not found, device not bound [ 158.570541][ T8] usb 1-1: USB disconnect, device number 10 [ 158.712493][ T6772] input: syz1 as /devices/virtual/input/input15 [ 160.484923][ T6810] fuse: Bad value for 'fd' [ 160.500515][ T6809] batadv_slave_1: entered promiscuous mode [ 160.642437][ T6808] batadv_slave_1: left promiscuous mode [ 160.747135][ T6806] nvme_fabrics: missing parameter 'transport=%s' [ 160.809074][ T6806] nvme_fabrics: missing parameter 'nqn=%s' [ 161.769582][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 162.500348][ T6847] batadv_slave_1: entered promiscuous mode [ 162.510734][ T6844] batadv_slave_1: left promiscuous mode [ 162.520036][ T6846] trusted_key: encrypted_key: keylen parameter is missing [ 162.908391][ T6866] input: syz1 as /devices/virtual/input/input16 [ 163.171814][ T5878] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.362956][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 163.390063][ T5878] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 163.390097][ T5878] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x65, skipping [ 163.390119][ T5878] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.437027][ T5878] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 163.437059][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.437080][ T5878] usb 1-1: Product: syz [ 163.437097][ T5878] usb 1-1: Manufacturer: syz [ 163.437112][ T5878] usb 1-1: SerialNumber: syz [ 163.569694][ T6864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.572055][ T5878] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 163.573091][ T5878] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 163.573184][ T5878] usbtest: probe of 1-1:1.0 failed with error -22 [ 164.194786][ T6889] trusted_key: encrypted_key: keylen parameter is missing [ 164.852346][ T6910] batadv_slave_1: entered promiscuous mode [ 164.921609][ T6909] batadv_slave_1: left promiscuous mode [ 165.018306][ T5878] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.302574][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 165.313651][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.325131][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.336139][ T5878] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 165.387899][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.417253][ T5878] usb 2-1: config 0 descriptor?? [ 165.875139][ T6925] netlink: 64 bytes leftover after parsing attributes in process `syz.2.306'. [ 166.043250][ T5878] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 166.364160][ T5789] usb 1-1: USB disconnect, device number 11 [ 166.781177][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 167.402303][ T5859] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 167.821294][ T6952] input: syz1 as /devices/virtual/input/input17 [ 167.973897][ T6955] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 167.973950][ T6955] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 168.129270][ T6957] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 168.697353][ T6961] input: syz1 as /devices/virtual/input/input18 [ 169.395744][ T6973] netlink: 64 bytes leftover after parsing attributes in process `syz.0.323'. [ 169.443883][ T5789] usb 2-1: USB disconnect, device number 5 [ 169.571851][ T787] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 169.814367][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 169.838062][ T787] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 169.860245][ T787] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 169.880275][ T787] usb 4-1: Product: syz [ 169.892002][ T787] usb 4-1: Manufacturer: syz [ 169.901354][ T787] usb 4-1: SerialNumber: syz [ 169.917394][ T787] usb 4-1: config 0 descriptor?? [ 170.161122][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.182280][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.076592][ T6984] tipc: Enabled bearer , priority 0 [ 171.086062][ T6984] syzkaller0: entered promiscuous mode [ 171.092117][ T6984] syzkaller0: entered allmulticast mode [ 171.178193][ T6983] tipc: Resetting bearer [ 171.263790][ T6983] tipc: Disabling bearer [ 171.501964][ T967] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 171.664315][ T7002] input: syz1 as /devices/virtual/input/input19 [ 171.770466][ T967] usb 1-1: Using ep0 maxpacket: 8 [ 171.855360][ T967] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 171.855396][ T967] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x2A, skipping [ 171.855420][ T967] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.876334][ T5878] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 171.887584][ T967] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 171.887608][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.887623][ T967] usb 1-1: Product: syz [ 171.887656][ T967] usb 1-1: Manufacturer: syz [ 171.887667][ T967] usb 1-1: SerialNumber: syz [ 171.959338][ T6988] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 171.959992][ T6988] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 172.017698][ T967] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 172.020834][ T967] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 172.111778][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 172.114288][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.114323][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.114363][ T5878] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 172.114387][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.115800][ T967] usbtest: probe of 1-1:1.0 failed with error -22 [ 172.117162][ T5878] usb 2-1: config 0 descriptor?? [ 172.342218][ T5789] usb 4-1: USB disconnect, device number 11 [ 172.587038][ T5878] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 174.262472][ T5789] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 174.453990][ T5789] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 174.541802][ T5789] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.551878][ T5878] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.597172][ T967] usb 1-1: USB disconnect, device number 12 [ 174.712542][ T5789] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.730545][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.760710][ T5789] usb 4-1: config 0 descriptor?? [ 174.776220][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 174.788214][ T5878] usb 3-1: config index 0 descriptor too short (expected 44, got 36) [ 174.810596][ T5789] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 174.879942][ T5878] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 174.954316][ T5878] usb 3-1: config 0 has no interface number 0 [ 174.963213][ T5878] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 174.982876][ T5878] usb 3-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.013405][ T5878] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 175.050030][ T5878] usb 3-1: config 0 interface 126 has no altsetting 0 [ 175.060172][ T787] usb 2-1: USB disconnect, device number 6 [ 175.077312][ T5878] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 175.097899][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.115094][ T5878] usb 3-1: Product: syz [ 175.119661][ T5878] usb 3-1: Manufacturer: syz [ 175.126311][ T5878] usb 3-1: SerialNumber: syz [ 175.143076][ T7030] input: syz1 as /devices/virtual/input/input20 [ 175.156756][ T5878] usb 3-1: config 0 descriptor?? [ 175.172253][ T7023] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 175.211975][ T5859] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 175.401836][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 175.406723][ T5859] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 175.406745][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 175.406762][ T5859] usb 1-1: Product: syz [ 175.406779][ T5859] usb 1-1: Manufacturer: syz [ 175.406794][ T5859] usb 1-1: SerialNumber: syz [ 175.418032][ T5859] usb 1-1: config 0 descriptor?? [ 175.643902][ T7027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.663225][ T7027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.592105][ T7038] fuse: Bad value for 'fd' [ 176.667496][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.346'. [ 177.018625][ T27] usb 4-1: USB disconnect, device number 12 [ 177.475873][ T5878] ir_usb 3-1:0.126: IR Dongle converter detected [ 177.532058][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.550585][ T5878] usb 3-1: IRDA class descriptor not found, device not bound [ 177.621994][ T5789] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 177.636480][ T5878] usb 3-1: USB disconnect, device number 12 [ 177.732721][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 177.854120][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 177.872101][ T8] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF1, skipping [ 177.917920][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.942654][ T5789] usb 4-1: Using ep0 maxpacket: 32 [ 177.962143][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 178.021994][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.030172][ T8] usb 2-1: Product: syz [ 178.059453][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.070970][ T8] usb 2-1: Manufacturer: syz [ 178.076106][ T8] usb 2-1: SerialNumber: syz [ 178.080815][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.093563][ T5789] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 178.104902][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.119444][ T5789] usb 4-1: config 0 descriptor?? [ 178.140207][ T7055] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 178.157615][ T9] usb 1-1: USB disconnect, device number 13 [ 178.332088][ T7055] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 178.344211][ T8] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 178.353246][ T8] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 178.368676][ T8] usbtest: probe of 2-1:1.0 failed with error -22 [ 178.685162][ T5789] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 178.778476][ T7071] fuse: Bad value for 'fd' [ 179.030767][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'. [ 179.772096][ T5878] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 179.984187][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.994877][ T5878] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 180.007350][ T5878] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 180.017123][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.045511][ T5878] usb 1-1: config 0 descriptor?? [ 180.124290][ T5878] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 180.141855][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 180.151256][ T5878] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 180.183778][ T5878] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 180.197962][ T5878] usb 1-1: media controller created [ 180.209420][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.240623][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 180.316132][ T5878] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 180.360540][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 180.396172][ T5878] dvb-usb: schedule remote query interval to 150 msecs. [ 180.409826][ T5878] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 180.463049][ T5878] usb 1-1: USB disconnect, device number 14 [ 180.554732][ T8] usb 4-1: USB disconnect, device number 13 [ 180.635869][ T5878] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 180.848335][ T27] usb 2-1: USB disconnect, device number 7 [ 181.466970][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 182.361916][ T5789] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 182.571932][ T5789] usb 4-1: Using ep0 maxpacket: 32 [ 182.582124][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 182.644578][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.667539][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.678231][ T5789] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 182.691140][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.714763][ T5789] usb 4-1: config 0 descriptor?? [ 182.811842][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 182.967709][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 183.021791][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xD2, skipping [ 183.075171][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.197654][ T5789] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 183.302579][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 183.352589][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.381163][ T9] usb 1-1: Product: syz [ 183.391637][ T9] usb 1-1: Manufacturer: syz [ 183.406833][ T9] usb 1-1: SerialNumber: syz [ 183.497128][ T7123] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 183.529457][ T9] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 183.572745][ T9] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 183.586304][ T9] usbtest: probe of 1-1:1.0 failed with error -22 [ 183.605663][ T7137] tipc: Enabled bearer , priority 0 [ 183.722448][ T7137] syzkaller0: entered promiscuous mode [ 183.775005][ T7137] syzkaller0: entered allmulticast mode [ 184.022968][ T7136] tipc: Resetting bearer [ 184.053786][ T7136] tipc: Disabling bearer [ 185.361108][ T5878] usb 4-1: USB disconnect, device number 14 [ 185.530889][ T967] usb 1-1: USB disconnect, device number 15 [ 185.853356][ T7165] input: syz1 as /devices/virtual/input/input22 [ 185.954222][ T7167] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 185.954240][ T7167] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 187.811828][ T967] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 187.922819][ T5878] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 188.002810][ T967] usb 4-1: Using ep0 maxpacket: 8 [ 188.021241][ T967] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 188.051947][ T967] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x55, skipping [ 188.109786][ T967] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.151930][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 188.164655][ T967] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 188.181772][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.200893][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.233752][ T967] usb 4-1: Product: syz [ 188.293352][ T967] usb 4-1: Manufacturer: syz [ 188.316695][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.328893][ T7204] loop2: detected capacity change from 0 to 512 [ 188.342902][ T967] usb 4-1: SerialNumber: syz [ 189.982897][ T5878] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 189.984275][ T7204] ======================================================= [ 189.984275][ T7204] WARNING: The mand mount option has been deprecated and [ 189.984275][ T7204] and is ignored by this kernel. Remove the mand [ 189.984275][ T7204] option from the mount to silence this warning. [ 189.984275][ T7204] ======================================================= [ 189.995518][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.027648][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.052336][ T7194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.164232][ T7194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.181263][ T967] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 190.188630][ T7204] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 190.225031][ T7204] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 190.252935][ T967] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 190.259244][ T967] usbtest: probe of 4-1:1.0 failed with error -22 [ 190.282963][ T5878] usb 2-1: config 0 descriptor?? [ 190.324300][ T7204] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.397: Invalid inode table block 1 in block_group 0 [ 190.390296][ T7204] EXT4-fs (loop2): get root inode failed [ 190.396346][ T7204] EXT4-fs (loop2): mount failed [ 192.099741][ T787] usb 4-1: USB disconnect, device number 15 [ 192.589695][ T5878] usbhid 2-1:0.0: can't add hid device: -71 [ 192.623238][ T5878] usbhid: probe of 2-1:0.0 failed with error -71 [ 192.662064][ T5878] usb 2-1: USB disconnect, device number 8 [ 192.842525][ T7220] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 192.851117][ T7220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 193.252510][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 193.491827][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 193.533695][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 193.575418][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x55, skipping [ 193.677521][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.915853][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 193.984121][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.006701][ T9] usb 3-1: Product: syz [ 194.010929][ T9] usb 3-1: Manufacturer: syz [ 194.015695][ T9] usb 3-1: SerialNumber: syz [ 194.034859][ T7229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.060670][ T7229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.090888][ T9] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 194.111122][ T9] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 194.146519][ T9] usbtest: probe of 3-1:1.0 failed with error -22 [ 194.451847][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 194.681756][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 194.728597][ T9] usb 1-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 194.744109][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 58688, setting to 1024 [ 194.758141][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.765098][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.774391][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 194.816187][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 194.841770][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 194.897143][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 194.914848][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.933110][ T9] usb 1-1: Product: syz [ 194.938823][ T9] usb 1-1: Manufacturer: syz [ 194.946555][ T7238] loop3: detected capacity change from 0 to 32768 [ 194.953384][ T9] usb 1-1: SerialNumber: syz [ 194.961501][ T7249] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 195.041248][ T9] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 195.065088][ T9] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 195.071972][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 195.089309][ T9] usbtest: probe of 1-1:1.0 failed with error -22 [ 195.098336][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.251739][ T7238] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 195.281405][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.299328][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 195.334042][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.389356][ T8] usb 2-1: config 0 descriptor?? [ 195.413007][ T7238] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 195.443230][ T7238] XFS (loop3): Starting recovery (logdev: internal) [ 195.498286][ T787] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 195.534801][ T787] XFS (loop3): Unmount and run xfs_repair [ 195.547824][ T787] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 195.569018][ T787] 00000000: 58 41 47 46 00 00 00 04 00 00 00 00 00 00 10 00 XAGF............ [ 195.642676][ T787] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 195.678189][ T787] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 195.700959][ T787] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 195.710879][ T787] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 195.725179][ T787] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 195.761953][ T787] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 195.902063][ T787] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 195.902561][ T7238] XFS (loop3): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 196.189628][ T787] usb 3-1: USB disconnect, device number 13 [ 197.590165][ T9] usb 1-1: USB disconnect, device number 16 [ 198.145289][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 198.151560][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 198.206697][ T8] usb 2-1: USB disconnect, device number 9 [ 198.802038][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 199.020003][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 199.051508][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 199.076206][ T7306] loop2: detected capacity change from 0 to 128 [ 199.081953][ T8] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF0, skipping [ 199.103275][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.148467][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 199.152062][ T7306] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 199.175360][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.213300][ T8] usb 1-1: Product: syz [ 199.231156][ T8] usb 1-1: Manufacturer: syz [ 199.259071][ T8] usb 1-1: SerialNumber: syz [ 199.272258][ T7295] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 199.329554][ T8] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 199.352731][ T8] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 199.371313][ T8] usbtest: probe of 1-1:1.0 failed with error -22 [ 199.828080][ T7320] input: syz1 as /devices/virtual/input/input24 [ 200.681666][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.118855][ T7335] input: syz1 as /devices/virtual/input/input25 [ 202.262016][ T787] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 202.441860][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 202.679697][ T8] usb 1-1: USB disconnect, device number 17 [ 202.743079][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.854416][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.877494][ T787] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 202.912508][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.923715][ T787] usb 4-1: config 0 descriptor?? [ 204.895706][ T7366] loop0: detected capacity change from 0 to 256 [ 204.926244][ T7367] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 204.926244][ T7367] The task syz.2.444 (7367) triggered the difference, watch for misbehavior. [ 204.979033][ T7366] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 205.308619][ T787] usbhid 4-1:0.0: can't add hid device: -71 [ 205.327631][ T787] usbhid: probe of 4-1:0.0 failed with error -71 [ 205.468858][ T787] usb 4-1: USB disconnect, device number 16 [ 206.641683][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.051820][ T787] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 208.721600][ T7389] capability: warning: `syz.3.451' uses 32-bit capabilities (legacy support in use) [ 213.412300][ T787] usb 2-1: device descriptor read/64, error -110 [ 214.171857][ T967] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 214.988867][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 215.025466][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.085719][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.936792][ T967] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 217.231820][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.282027][ T967] usb 4-1: config 0 descriptor?? [ 217.416455][ T7450] loop2: detected capacity change from 0 to 128 [ 217.461192][ T7450] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 218.215542][ T967] usb 4-1: can't set config #0, error -71 [ 218.235827][ T967] usb 4-1: USB disconnect, device number 17 [ 218.296003][ T7460] loop0: detected capacity change from 0 to 128 [ 219.614895][ T7471] input: syz1 as /devices/virtual/input/input26 [ 223.008804][ T7516] loop1: detected capacity change from 0 to 8192 [ 223.141790][ T5859] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 223.186489][ T7519] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 223.391841][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 223.886476][ T7519] FAT-fs (loop1): Filesystem has been set read-only [ 223.995599][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.026954][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.037093][ T5859] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 224.047201][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.059795][ T5859] usb 3-1: config 0 descriptor?? [ 224.486919][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 224.486936][ T28] audit: type=1326 audit(1760878615.043:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7fc00000 [ 224.623294][ T28] audit: type=1326 audit(1760878615.043:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7fc00000 [ 224.650794][ T28] audit: type=1326 audit(1760878615.043:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7fc00000 [ 224.760936][ T7532] loop1: detected capacity change from 0 to 64 [ 224.786951][ T28] audit: type=1326 audit(1760878615.043:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7fc00000 [ 224.837779][ T7532] hfs: unable to locate alternate MDB [ 224.860199][ T28] audit: type=1326 audit(1760878615.043:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7fc00000 [ 224.885474][ T7532] hfs: continuing without an alternate MDB [ 224.913652][ T28] audit: type=1326 audit(1760878615.043:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7fc00000 [ 224.937545][ T28] audit: type=1326 audit(1760878615.043:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7fc00000 [ 224.971446][ T28] audit: type=1326 audit(1760878615.043:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7fc00000 [ 225.009420][ T28] audit: type=1326 audit(1760878615.043:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7fc00000 [ 225.035940][ T28] audit: type=1326 audit(1760878615.113:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5dd8efc9 code=0x7fc00000 [ 225.951924][ T9] IPVS: starting estimator thread 0... [ 226.092345][ T7535] IPVS: using max 25 ests per chain, 60000 per kthread [ 226.130906][ T7538] input: syz1 as /devices/virtual/input/input27 [ 227.783321][ T5859] usbhid 3-1:0.0: can't add hid device: -71 [ 227.817292][ T7554] loop1: detected capacity change from 0 to 1024 [ 227.824636][ T7554] EXT4-fs: Ignoring removed orlov option [ 227.857062][ T5859] usbhid: probe of 3-1:0.0 failed with error -71 [ 227.860947][ T7554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.939762][ T5859] usb 3-1: USB disconnect, device number 14 [ 228.891245][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.228593][ T7571] tipc: Enabling of bearer rejected, failed to enable media [ 229.515742][ T7566] loop2: detected capacity change from 0 to 8192 [ 229.580595][ T7582] input: syz1 as /devices/virtual/input/input28 [ 230.522287][ T7580] loop0: detected capacity change from 0 to 32768 [ 230.601384][ T7580] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.508 (7580) [ 230.744000][ T7580] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 230.773109][ T7580] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 230.809916][ T7580] BTRFS info (device loop0): enabling disk space caching [ 230.819834][ T7580] BTRFS info (device loop0): use no compression [ 230.834503][ T7580] BTRFS info (device loop0): force clearing of disk cache [ 230.846219][ T7580] BTRFS info (device loop0): turning on sync discard [ 230.853724][ T7580] BTRFS info (device loop0): disabling disk space caching [ 231.086413][ T7580] BTRFS info (device loop0): enabling ssd optimizations [ 231.156566][ T7580] BTRFS info (device loop0): rebuilding free space tree [ 231.372117][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 231.577517][ T7580] BTRFS info (device loop0): disabling free space tree [ 231.592380][ T7580] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 231.622834][ T7580] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 231.633343][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 231.648140][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.695925][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.739551][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 231.765033][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.777421][ T9] usb 3-1: config 0 descriptor?? [ 231.826215][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 231.826317][ T28] audit: type=1800 audit(1760878622.383:213): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.508" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 232.089482][ T7580] BTRFS info (device loop0): balance: start -s [ 232.297445][ T7580] BTRFS info (device loop0): relocating block group 1048576 flags system [ 232.588930][ T7580] BTRFS info (device loop0): balance: ended with status: 0 [ 233.409797][ T5786] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 234.615222][ T7648] loop0: detected capacity change from 0 to 512 [ 235.775518][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 235.790977][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 235.835901][ T9] usb 3-1: USB disconnect, device number 15 [ 236.316662][ T7661] loop3: detected capacity change from 0 to 1764 [ 236.441554][ T7661] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 236.825920][ T7671] tipc: Enabled bearer , priority 0 [ 236.843178][ T7671] syzkaller0: entered promiscuous mode [ 236.856736][ T7671] syzkaller0: entered allmulticast mode [ 237.140816][ T7670] tipc: Resetting bearer [ 237.222331][ T7670] tipc: Disabling bearer [ 237.320781][ T7680] loop3: detected capacity change from 0 to 256 [ 237.332141][ T7680] exfat: Unknown parameter 'zero_size_dir' [ 238.385528][ T7687] input: syz1 as /devices/virtual/input/input29 [ 238.530805][ T7692] loop2: detected capacity change from 0 to 128 [ 239.397866][ T4447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.531787][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 239.621179][ T4447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.763614][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.797812][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.816897][ T9] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 239.817257][ T4447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.837714][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.879391][ T9] usb 2-1: config 0 descriptor?? [ 240.154748][ T4447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.334436][ T9] hid (null): invalid report_count 50514 [ 240.368578][ T9] aquacomputer_d5next 0003:0C70:F00D.0005: invalid report_count 50514 [ 240.401220][ T9] aquacomputer_d5next 0003:0C70:F00D.0005: item 0 2 1 9 parsing failed [ 240.438302][ T9] aquacomputer_d5next: probe of 0003:0C70:F00D.0005 failed with error -22 [ 240.551938][ T9] usb 2-1: USB disconnect, device number 12 [ 240.800198][ T4447] tipc: Left network mode [ 241.966821][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.976192][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.985116][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.995201][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.018859][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 242.027118][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.241251][ T7722] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 242.271967][ T7722] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 242.303497][ T7722] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 242.329265][ T7722] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 242.343210][ T7722] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 242.351199][ T7722] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 242.359057][ T7722] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 242.367017][ T7722] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 242.375809][ T7722] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 242.382879][ T7722] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 242.390225][ T7722] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 242.398690][ T7722] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 242.406803][ T7722] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 242.415730][ T7722] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 242.424832][ T7722] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 242.432825][ T7722] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 242.441802][ T7722] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 242.448671][ T7722] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 242.478573][ T7722] comedi comedi3: 8255: I/O port conflict (0x40000004,4) [ 242.491057][ T7722] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 242.502963][ T7722] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 242.510355][ T7722] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 242.520403][ T7722] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 242.529511][ T7722] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 242.537292][ T7722] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 242.919618][ T7721] syzkaller0: entered promiscuous mode [ 242.925622][ T7721] syzkaller0: entered allmulticast mode [ 243.219467][ T7740] input: syz1 as /devices/virtual/input/input30 [ 244.082222][ T5799] Bluetooth: hci0: command tx timeout [ 244.119546][ T7749] loop1: detected capacity change from 0 to 32768 [ 244.268727][ T7749] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 244.357433][ T7749] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 244.448139][ T5059] (kworker/u4:8,5059,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 244.576642][ T28] audit: type=1800 audit(1760878635.133:214): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.551" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 244.659668][ T28] audit: type=1800 audit(1760878635.193:215): pid=7767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.551" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 244.684183][ T7713] chnl_net:caif_netlink_parms(): no params data found [ 244.778089][ T5787] ocfs2: Unmounting device (7,1) on (node local) [ 246.163260][ T5799] Bluetooth: hci0: command tx timeout [ 246.737364][ T4447] hsr_slave_0: left promiscuous mode [ 246.786864][ T4447] hsr_slave_1: left promiscuous mode [ 246.925571][ T4447] veth1_macvtap: left promiscuous mode [ 246.932834][ T4447] veth0_macvtap: left promiscuous mode [ 246.946829][ T4447] veth1_vlan: left promiscuous mode [ 246.967763][ T4447] veth0_vlan: left promiscuous mode [ 247.241927][ T7810] input: syz1 as /devices/virtual/input/input31 [ 248.246024][ T5799] Bluetooth: hci0: command tx timeout [ 249.311343][ T4447] bond0 (unregistering): Released all slaves [ 249.399800][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.407691][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.415398][ T7713] bridge_slave_0: entered allmulticast mode [ 249.423309][ T7713] bridge_slave_0: entered promiscuous mode [ 249.432682][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.439881][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.447689][ T7713] bridge_slave_1: entered allmulticast mode [ 249.456690][ T7713] bridge_slave_1: entered promiscuous mode [ 249.478493][ T7795] tipc: Enabling of bearer rejected, failed to enable media [ 249.689970][ T7713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.732547][ T7713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.943093][ T7713] team0: Port device team_slave_0 added [ 249.980518][ T7713] team0: Port device team_slave_1 added [ 250.181289][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.212622][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.277572][ T7713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.316385][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.332219][ T5799] Bluetooth: hci0: command tx timeout [ 250.337651][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.337686][ T7713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.566928][ T7713] hsr_slave_0: entered promiscuous mode [ 250.592158][ T7713] hsr_slave_1: entered promiscuous mode [ 250.644705][ T7713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.692063][ T7713] Cannot create hsr debugfs directory [ 252.727139][ T7874] tipc: Enabled bearer , priority 0 [ 252.743727][ T7713] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.776907][ T7874] syzkaller0: entered promiscuous mode [ 252.789050][ T7874] syzkaller0: entered allmulticast mode [ 252.809842][ T7713] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.035539][ T7713] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.077325][ T7713] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.115501][ T7873] tipc: Resetting bearer [ 253.176386][ T7873] tipc: Disabling bearer [ 253.484756][ T7713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.673005][ T7713] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.867628][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.874867][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.953779][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.961186][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.103021][ T7713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.284765][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.581'. [ 255.533294][ T7713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.337566][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.371188][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.318418][ T7713] veth0_vlan: entered promiscuous mode [ 257.393651][ T7713] veth1_vlan: entered promiscuous mode [ 257.432321][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 257.470725][ T7713] veth0_macvtap: entered promiscuous mode [ 257.569513][ T7713] veth1_macvtap: entered promiscuous mode [ 257.733200][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 257.847605][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.862518][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.875421][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.011844][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.058085][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 258.076614][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.099761][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.111057][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.125312][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.139604][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.147876][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.172553][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.195272][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.216805][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.228769][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.244378][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.253235][ T9] usb 1-1: config 0 descriptor?? [ 258.266363][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.329383][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.398375][ T7713] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.427088][ T7713] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.450299][ T7713] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.481458][ T7713] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.190733][ T9] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 259.276702][ T7966] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.297177][ T7966] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.318621][ T7966] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.338331][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.589'. [ 259.363518][ T7966] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.420077][ T7966] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 259.497955][ T7966] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 259.667184][ T5071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.544644][ T5071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.711603][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.712118][ T9] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 260.734009][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.106482][ T7985] overlayfs: failed to resolve './file1': -2 [ 261.189780][ T7986] cgroup: Unknown subsys name 'uid' [ 263.388737][ T5799] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.399445][ T5799] Bluetooth: hci3: command 0x0c1a tx timeout [ 263.409059][ T5799] Bluetooth: hci2: command 0x0c1a tx timeout [ 263.421157][ T5799] Bluetooth: hci0: command 0x0c1a tx timeout [ 265.039331][ T7998] loop1: detected capacity change from 0 to 128 [ 265.211693][ T28] audit: type=1800 audit(1760878655.753:216): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.593" name="bus" dev="loop1" ino=1048612 res=0 errno=0 [ 265.443293][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 267.502529][ T8] usb 1-1: USB disconnect, device number 18 [ 267.512340][ T8006] syz.1.593: attempt to access beyond end of device [ 267.512340][ T8006] loop1: rw=2049, sector=537, nr_sectors = 504 limit=128 [ 267.533078][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 267.680325][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.597'. [ 267.800078][ T8017] input: syz1 as /devices/virtual/input/input33 [ 269.108265][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 270.008745][ T8052] tipc: Enabled bearer , priority 0 [ 270.025818][ T8054] syzkaller0: entered promiscuous mode [ 270.031587][ T8054] syzkaller0: entered allmulticast mode [ 270.291761][ T967] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 271.123467][ T8051] tipc: Resetting bearer [ 271.152189][ T787] tipc: Node number set to 412259080 [ 271.231731][ T967] usb 1-1: Using ep0 maxpacket: 32 [ 271.264767][ T8051] tipc: Disabling bearer [ 271.294557][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.322549][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.365324][ T967] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 271.421756][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.455866][ T967] usb 1-1: config 0 descriptor?? [ 272.789568][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 273.210488][ T8075] loop4: detected capacity change from 0 to 512 [ 273.322760][ T8075] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 273.575139][ T8075] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.611: iget: bogus i_mode (5) [ 273.666439][ T8075] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.611: couldn't read orphan inode 15 (err -117) [ 273.763573][ T8075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.860696][ T8075] ext2 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.034825][ T967] usbhid 1-1:0.0: can't add hid device: -71 [ 276.040950][ T967] usbhid: probe of 1-1:0.0 failed with error -71 [ 276.050888][ T967] usb 1-1: USB disconnect, device number 19 [ 276.095126][ T7713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.715406][ T8111] input: syz1 as /devices/virtual/input/input34 [ 277.744161][ T8108] tipc: Enabled bearer , priority 0 [ 277.805282][ T8108] syzkaller0: entered promiscuous mode [ 277.810880][ T8108] syzkaller0: entered allmulticast mode [ 278.011453][ T8123] ksmbd: Unknown IPC event: 6, ignore. [ 278.199977][ T8106] tipc: Resetting bearer [ 279.310880][ T8127] loop0: detected capacity change from 0 to 64 [ 279.318480][ T8127] hfs: unable to parse mount options [ 279.379949][ T8106] tipc: Disabling bearer [ 280.719459][ T8144] loop4: detected capacity change from 0 to 1024 [ 280.851919][ T8144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.321981][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 282.591760][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 282.620208][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.640973][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.666551][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 282.686273][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.705988][ T9] usb 1-1: config 0 descriptor?? [ 283.001103][ T8171] input: syz1 as /devices/virtual/input/input35 [ 283.176737][ T9] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 283.771513][ T8182] tipc: Started in network mode [ 283.784044][ T8182] tipc: Node identity ea81d91c0495, cluster identity 4711 [ 283.875528][ T8182] tipc: Enabled bearer , priority 0 [ 283.925759][ T8184] syzkaller0: entered promiscuous mode [ 283.970435][ T8184] syzkaller0: entered allmulticast mode [ 284.117048][ T8181] tipc: Resetting bearer [ 284.181288][ T8181] tipc: Disabling bearer [ 285.421785][ T5789] usb 1-1: reset high-speed USB device number 20 using dummy_hcd [ 286.813132][ T8207] input: syz1 as /devices/virtual/input/input36 [ 286.996894][ T8190] loop1: detected capacity change from 0 to 40427 [ 287.060748][ T8190] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 287.102401][ T8190] F2FS-fs (loop1): invalid crc value [ 287.140511][ T8190] F2FS-fs (loop1): Found nat_bits in checkpoint [ 287.258380][ T8219] loop0: detected capacity change from 0 to 128 [ 287.298518][ T8219] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 287.340028][ T8217] loop3: detected capacity change from 0 to 4096 [ 287.750650][ T9] usb 1-1: USB disconnect, device number 20 [ 288.971710][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 289.003459][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 289.122844][ T8244] input: syz1 as /devices/virtual/input/input37 [ 289.178527][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 289.197989][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 289.208732][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.218259][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.221359][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.230813][ T8237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 289.258125][ T27] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 289.273709][ T9] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 289.284100][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 289.322796][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 289.353961][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 289.404478][ T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 289.446598][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 289.549992][ T27] usb 2-1: Product: syz [ 289.563405][ T8251] loop3: detected capacity change from 0 to 128 [ 289.601580][ T27] usb 2-1: Manufacturer: syz [ 289.630721][ T8251] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 289.666329][ T5878] usb 5-1: USB disconnect, device number 2 [ 289.683478][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 289.688948][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 290.164676][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 290.170970][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 290.494325][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 290.832358][ T8277] input: syz1 as /devices/virtual/input/input38 [ 290.953723][ T8276] loop0: detected capacity change from 0 to 8192 [ 290.983426][ T8276] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 291.598295][ T8290] ksmbd: Unknown IPC event: 6, ignore. [ 292.654341][ T27] usb 2-1: USB disconnect, device number 13 [ 292.735710][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 293.461913][ T8309] input: syz1 as /devices/virtual/input/input39 [ 293.982266][ T8324] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 294.020227][ T8324] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 295.218003][ T8303] loop3: detected capacity change from 0 to 32768 [ 295.277402][ T8303] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.665 (8303) [ 295.367062][ T8303] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 295.380198][ T8339] loop4: detected capacity change from 0 to 512 [ 295.392077][ T8303] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 295.401068][ T8303] BTRFS info (device loop3): using free space tree [ 295.509938][ T8339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.524115][ T8339] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.555832][ T8303] BTRFS info (device loop3): enabling ssd optimizations [ 295.585323][ T8303] BTRFS info (device loop3): auto enabling async discard [ 295.711801][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 295.786483][ T28] audit: type=1800 audit(1760878686.333:217): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.665" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 295.996912][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 296.027718][ T8367] block device autoloading is deprecated and will be removed. [ 296.062082][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 296.120186][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 296.155741][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 296.258217][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 296.463199][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 296.544017][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 296.647059][ T5788] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 296.663706][ T9] usb 1-1: Product: syz [ 296.681380][ T9] usb 1-1: Manufacturer: syz [ 296.698275][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 296.708544][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 296.720469][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 296.736032][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 296.782608][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 296.989350][ T8376] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 512 (only 1 groups) [ 297.555272][ T9] usb 1-1: USB disconnect, device number 21 [ 297.720194][ T7713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.234898][ T8403] input: syz1 as /devices/virtual/input/input40 [ 299.419455][ T8420] tipc: Enabled bearer , priority 0 [ 299.463122][ T8420] syzkaller0: entered promiscuous mode [ 299.492074][ T8420] syzkaller0: entered allmulticast mode [ 299.839978][ T8418] tipc: Resetting bearer [ 300.508667][ T9] tipc: Node number set to 3858082654 [ 300.812446][ T8418] tipc: Disabling bearer [ 301.310157][ T8452] input: syz1 as /devices/virtual/input/input41 [ 301.357134][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 301.562012][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 301.743349][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 301.771882][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 301.787109][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 301.799666][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 301.811747][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 301.827384][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.850985][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.865014][ T9] usb 5-1: Product: syz [ 301.871072][ T9] usb 5-1: Manufacturer: syz [ 301.923689][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 301.969663][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 301.992672][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 302.000750][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 302.534771][ T8485] tipc: Enabling of bearer rejected, failed to enable media [ 302.707129][ T5878] usb 5-1: USB disconnect, device number 3 [ 302.885394][ T8493] fuse: Bad value for 'fd' [ 303.239492][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 303.640688][ T8517] input: syz1 as /devices/virtual/input/input42 [ 304.518681][ T8528] tipc: Enabled bearer , priority 0 [ 304.537058][ T8528] syzkaller0: entered promiscuous mode [ 304.550097][ T8528] syzkaller0: entered allmulticast mode [ 304.563933][ T8531] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 304.586826][ T8531] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 304.706327][ T8527] tipc: Resetting bearer [ 304.844493][ T8527] tipc: Disabling bearer [ 305.721791][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 305.914901][ T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.928700][ T8] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 305.969075][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.986310][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 306.022954][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 306.061283][ T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 306.096584][ T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 306.139182][ T8] usb 5-1: Product: syz [ 306.157341][ T8] usb 5-1: Manufacturer: syz [ 306.188356][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 306.214386][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 306.217047][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 306.246739][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 306.266695][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 307.474251][ T5789] usb 5-1: USB disconnect, device number 4 [ 308.061247][ T8593] tipc: Enabled bearer , priority 0 [ 308.180362][ T8592] tipc: Disabling bearer [ 308.555903][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.721'. [ 309.381330][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 311.171914][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 311.365042][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 311.377967][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 311.388956][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 311.403656][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 311.418436][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 311.449332][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 311.460210][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 311.726683][ T9] usb 2-1: Product: syz [ 311.762650][ T9] usb 2-1: Manufacturer: syz [ 312.030065][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 312.045720][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 312.095164][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 312.101238][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 312.244591][ T8638] tipc: Enabled bearer , priority 0 [ 312.350440][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.736'. [ 312.366662][ T8636] tipc: Disabling bearer [ 312.430606][ T8649] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 312.448725][ T8649] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 312.805531][ T5858] usb 2-1: USB disconnect, device number 14 [ 313.241526][ T8652] loop4: detected capacity change from 0 to 32768 [ 313.261157][ T8652] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.738 (8652) [ 313.297571][ T8652] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 313.329438][ T8652] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 313.340766][ T8652] BTRFS info (device loop4): using free space tree [ 313.465749][ T8652] BTRFS info (device loop4): enabling ssd optimizations [ 313.487851][ T8652] BTRFS info (device loop4): auto enabling async discard [ 314.492295][ T28] audit: type=1800 audit(1760878705.043:218): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.738" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 314.890894][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 314.923574][ T7713] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 314.936258][ T8691] tipc: Enabled bearer , priority 0 [ 315.120281][ T8690] tipc: Disabling bearer [ 315.615651][ T8701] trusted_key: encrypted_key: insufficient parameters specified [ 317.608208][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.614738][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.811898][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 318.034302][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 318.050789][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 318.069125][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 318.105122][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 318.146993][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 318.184323][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 318.198736][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 318.379908][ T9] usb 2-1: Product: syz [ 318.386294][ T9] usb 2-1: Manufacturer: syz [ 318.411484][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 319.228369][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 319.250844][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 319.262067][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 319.294545][ T8726] loop0: detected capacity change from 0 to 8192 [ 319.359452][ T8726] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 319.394124][ T8726] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 319.440776][ T8726] REISERFS (device loop0): using ordered data mode [ 319.468770][ T8726] reiserfs: using flush barriers [ 319.509096][ T8726] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 319.578153][ T8726] REISERFS (device loop0): checking transaction log (loop0) [ 319.612505][ T8734] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 319.619864][ T8734] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 319.642399][ T8734] vhci_hcd vhci_hcd.0: Device attached [ 319.843177][ T8726] REISERFS (device loop0): Using r5 hash to sort names [ 319.943538][ T8726] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 320.060631][ T8735] vhci_hcd: connection closed [ 320.066068][ T141] vhci_hcd: stop threads [ 320.076934][ T141] vhci_hcd: release socket [ 320.083329][ T141] vhci_hcd: disconnect device [ 320.092245][ T9] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 320.112492][ T9] usb 41-1: enqueue for inactive port 0 [ 320.119371][ T5877] usb 2-1: USB disconnect, device number 15 [ 320.191878][ T9] vhci_hcd: vhci_device speed not set [ 321.671575][ T8754] loop0: detected capacity change from 0 to 1024 [ 321.679535][ T8754] EXT4-fs: Ignoring removed orlov option [ 321.762701][ T8760] netlink: 104 bytes leftover after parsing attributes in process `syz.4.767'. [ 321.780974][ T8754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.870379][ T28] audit: type=1800 audit(1760878712.423:219): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.764" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 323.211631][ C0] sched: RT throttling activated [ 323.537868][ T8756] loop1: detected capacity change from 0 to 32768 [ 323.561805][ T8756] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.766 (8756) [ 323.604346][ T8756] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 323.606100][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.620700][ T8756] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 323.639744][ T8756] BTRFS info (device loop1): setting nodatacow, compression disabled [ 323.648650][ T8756] BTRFS info (device loop1): force clearing of disk cache [ 323.661868][ T8756] BTRFS info (device loop1): enabling ssd optimizations [ 323.670061][ T8756] BTRFS info (device loop1): using spread ssd allocation scheme [ 323.683257][ T8756] BTRFS info (device loop1): turning off barriers [ 323.690745][ T8756] BTRFS info (device loop1): disabling free space tree [ 323.703312][ T8756] BTRFS info (device loop1): not using ssd optimizations [ 323.710650][ T8756] BTRFS info (device loop1): not using spread ssd allocation scheme [ 323.789320][ T8788] loop0: detected capacity change from 0 to 256 [ 323.841775][ T8756] BTRFS info (device loop1): rebuilding free space tree [ 323.874184][ T8788] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 323.916694][ T8788] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 323.942709][ T8756] BTRFS info (device loop1): disabling free space tree [ 323.949801][ T8756] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 323.985343][ T8756] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 325.053925][ T5787] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 326.922027][ T27] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 327.322086][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 327.394456][ T27] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 327.530448][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 327.863660][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 327.937823][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 328.029057][ T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 328.049276][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 328.084881][ T27] usb 2-1: Product: syz [ 328.089171][ T27] usb 2-1: Manufacturer: syz [ 328.126277][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 328.194324][ T8812] loop4: detected capacity change from 0 to 32768 [ 328.243444][ T8812] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.777 (8812) [ 328.386071][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 328.394758][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 328.401882][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 328.413137][ T8812] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 328.504328][ T8812] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 328.648000][ T8812] BTRFS info (device loop4): force zlib compression, level 3 [ 328.868917][ T8812] BTRFS info (device loop4): force clearing of disk cache [ 328.995809][ T8812] BTRFS info (device loop4): setting nodatasum [ 329.032035][ T8812] BTRFS info (device loop4): allowing degraded mounts [ 329.039425][ T8812] BTRFS info (device loop4): enabling disk space caching [ 329.097455][ T8812] BTRFS info (device loop4): disk space caching is enabled [ 329.202303][ T8] usb 2-1: USB disconnect, device number 16 [ 329.338783][ T28] audit: type=1326 audit(1760878719.893:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.3.780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32b4d8efc9 code=0x0 [ 329.372963][ T8812] BTRFS info (device loop4): auto enabling async discard [ 329.389560][ T8812] BTRFS info (device loop4): rebuilding free space tree [ 329.428199][ T8812] BTRFS info (device loop4): disabling free space tree [ 329.440610][ T8812] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 329.456205][ T8812] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 329.528910][ T8812] BTRFS info (device loop4): balance: start -f [ 329.541522][ T8812] BTRFS info (device loop4): balance: ended with status: 0 [ 329.597720][ T7713] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 329.682569][ T27] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 329.881878][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 329.890583][ T8845] input: syz1 as /devices/virtual/input/input43 [ 329.914688][ T27] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 329.944053][ T27] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 330.770915][ T27] usb 1-1: Product: syz [ 330.770938][ T27] usb 1-1: Manufacturer: syz [ 330.770955][ T27] usb 1-1: SerialNumber: syz [ 330.794125][ T27] usb 1-1: config 0 descriptor?? [ 332.382438][ T8863] loop1: detected capacity change from 0 to 8192 [ 332.410467][ T8863] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 332.452224][ T8863] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 332.472060][ T8863] REISERFS (device loop1): using ordered data mode [ 332.508498][ T8863] reiserfs: using flush barriers [ 332.547852][ T8863] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 332.578941][ T8863] REISERFS (device loop1): checking transaction log (loop1) [ 332.588429][ T8863] REISERFS (device loop1): Using r5 hash to sort names [ 332.596140][ T8863] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 332.837070][ T8856] loop4: detected capacity change from 0 to 32768 [ 332.893784][ T8856] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 332.962658][ T8856] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 333.311955][ T9] usb 1-1: USB disconnect, device number 22 [ 333.318863][ T7713] ocfs2: Unmounting device (7,4) on (node local) [ 335.828626][ T8890] loop4: detected capacity change from 0 to 128 [ 335.886154][ T8890] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 336.561842][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 336.622084][ T8906] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 336.650095][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.659013][ T8906] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.781863][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 336.796569][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 336.862497][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 336.932740][ T9] usb 5-1: Product: syz [ 336.940335][ T9] usb 5-1: Manufacturer: syz [ 336.957043][ T9] usb 5-1: SerialNumber: syz [ 336.993651][ T9] usb 5-1: config 0 descriptor?? [ 337.651883][ T5878] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 337.845008][ T5878] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 337.855488][ T5878] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 337.866380][ T5878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 337.876119][ T5878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 337.887839][ T5878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 337.906866][ T5878] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 337.916746][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 337.926223][ T5878] usb 1-1: Product: syz [ 337.930796][ T5878] usb 1-1: Manufacturer: syz [ 337.954110][ T5878] cdc_wdm 1-1:1.0: skipping garbage [ 337.959527][ T5878] cdc_wdm 1-1:1.0: skipping garbage [ 337.966374][ T5878] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 337.972573][ T5878] cdc_wdm 1-1:1.0: Unknown control protocol [ 338.735530][ T5878] usb 1-1: USB disconnect, device number 23 [ 339.335127][ T8930] loop0: detected capacity change from 0 to 128 [ 339.343795][ T8930] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 339.367245][ T5878] usb 5-1: USB disconnect, device number 5 [ 339.471804][ T5789] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 339.695714][ T5789] usb 2-1: Using ep0 maxpacket: 8 [ 339.704724][ T5789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.715798][ T5789] usb 2-1: config 0 has no interfaces? [ 339.725246][ T5789] usb 2-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 339.734505][ T5789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.743014][ T5789] usb 2-1: Product: syz [ 339.747237][ T5789] usb 2-1: Manufacturer: syz [ 339.752241][ T5789] usb 2-1: SerialNumber: syz [ 339.759233][ T5789] usb 2-1: config 0 descriptor?? [ 340.237899][ T8937] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 341.683471][ T5799] Bluetooth: hci4: command 0x1003 tx timeout [ 341.690294][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 342.689228][ T8945] loop0: detected capacity change from 0 to 256 [ 342.801989][ T8945] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.836874][ T9] usb 2-1: USB disconnect, device number 17 [ 344.953241][ T5858] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 344.991945][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 345.213770][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 345.233261][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 345.261888][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 345.284484][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 345.298647][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 345.311685][ T5858] usb 5-1: Using ep0 maxpacket: 16 [ 345.321953][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 345.342628][ T5858] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 345.378539][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 345.446413][ T5858] usb 5-1: Product: syz [ 345.451137][ T5858] usb 5-1: Manufacturer: syz [ 345.465252][ T5858] usb 5-1: SerialNumber: syz [ 345.646745][ T5858] usb 5-1: config 0 descriptor?? [ 346.122338][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 346.130592][ T9] usb 2-1: Product: syz [ 346.134926][ T9] usb 2-1: Manufacturer: syz [ 346.236197][ T9] usb 2-1: can't set config #1, error -71 [ 346.254200][ T9] usb 2-1: USB disconnect, device number 18 [ 346.537306][ T8969] loop0: detected capacity change from 0 to 40427 [ 346.545829][ T8969] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 346.553824][ T8969] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 346.595606][ T8969] F2FS-fs (loop0): invalid crc value [ 346.625266][ T8969] F2FS-fs (loop0): Found nat_bits in checkpoint [ 346.711056][ T8969] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 346.719384][ T8969] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 348.656654][ T8] usb 5-1: USB disconnect, device number 6 [ 350.706109][ T9012] loop4: detected capacity change from 0 to 128 [ 350.721995][ T9012] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 352.828434][ T28] audit: type=1326 audit(1760878743.383:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.842" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e5dd8efc9 code=0x0 [ 354.069373][ T9043] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 354.076268][ T9043] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 354.085084][ T9043] vhci_hcd vhci_hcd.0: Device attached [ 354.223075][ T9044] vhci_hcd: connection closed [ 354.231859][ T12] vhci_hcd: stop threads [ 354.246707][ T12] vhci_hcd: release socket [ 354.251474][ T12] vhci_hcd: disconnect device [ 354.348115][ T9048] loop4: detected capacity change from 0 to 128 [ 354.382528][ T9048] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 354.413443][ T9050] tipc: Enabled bearer , priority 0 [ 354.909808][ T9049] tipc: Disabling bearer [ 355.819871][ T5877] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 356.219384][ T5877] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 356.261678][ T5877] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 356.326518][ T5877] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 356.366809][ T5877] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 356.424076][ T5877] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 356.449632][ T5877] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 356.472085][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.480232][ T5877] usb 1-1: Product: syz [ 356.485291][ T5877] usb 1-1: Manufacturer: syz [ 356.507370][ T5877] cdc_wdm 1-1:1.0: skipping garbage [ 356.521816][ T5877] cdc_wdm 1-1:1.0: skipping garbage [ 356.537411][ T5877] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 356.550620][ T5877] cdc_wdm 1-1:1.0: Unknown control protocol [ 356.730066][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 357.963983][ T5877] usb 1-1: USB disconnect, device number 24 [ 358.141719][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 358.165752][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.182688][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.200207][ T27] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 358.248361][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.293912][ T27] usb 5-1: config 0 descriptor?? [ 358.323562][ T9082] loop1: detected capacity change from 0 to 764 [ 358.398434][ T9082] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 358.722715][ T9089] tipc: Enabling of bearer rejected, failed to enable media [ 359.920021][ T27] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 361.257309][ T27] usb 5-1: USB disconnect, device number 7 [ 361.822995][ T9118] input: syz1 as /devices/virtual/input/input46 [ 362.249617][ T9121] tipc: Enabled bearer , priority 0 [ 362.384612][ T9120] tipc: Disabling bearer [ 366.167839][ T9158] tipc: Enabled bearer , priority 0 [ 366.364492][ T9157] tipc: Disabling bearer [ 366.404740][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 366.654142][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 366.714018][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 366.881067][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.057243][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 367.220844][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 367.257840][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 367.341900][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 367.350028][ T9] usb 5-1: Product: syz [ 367.373546][ T9] usb 5-1: Manufacturer: syz [ 367.409334][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 367.428212][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 367.439924][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 367.451501][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 367.775384][ T9176] xt_TCPMSS: Only works on TCP SYN packets [ 368.833294][ T9] usb 5-1: USB disconnect, device number 8 [ 369.021205][ T9186] loop1: detected capacity change from 0 to 1024 [ 369.523640][ T9186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 369.557078][ T9186] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.728891][ T9195] tipc: Enabling of bearer rejected, failed to enable media [ 369.912885][ T9193] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 369.924810][ T9198] loop0: detected capacity change from 0 to 4096 [ 370.034315][ T9202] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2367 with max blocks 1 with error 28 [ 370.047422][ T9202] EXT4-fs (loop1): This should not happen!! Data will be lost [ 370.047422][ T9202] [ 370.057579][ T9202] EXT4-fs (loop1): Total free blocks count 0 [ 370.063740][ T9202] EXT4-fs (loop1): Free/Dirty block details [ 370.069853][ T9202] EXT4-fs (loop1): free_blocks=4293918720 [ 370.076498][ T9202] EXT4-fs (loop1): dirty_blocks=16 [ 370.081835][ T9202] EXT4-fs (loop1): Block reservation details [ 370.088187][ T9202] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 370.640742][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 371.266927][ T9198] EXT4-fs (loop0): Test dummy encryption mode enabled [ 373.524533][ T9198] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 373.568029][ T9198] EXT4-fs: failed to create workqueue [ 373.621830][ T9198] EXT4-fs (loop0): mount failed [ 373.642928][ T9215] comedi comedi3: pcl818: I/O port conflict (0x4f27,16) [ 373.649994][ T9215] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 373.661853][ T9215] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 373.670314][ T9215] CPU: 1 PID: 9215 Comm: syz.1.893 Not tainted syzkaller #0 [ 373.677781][ T9215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.687970][ T9215] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 373.693799][ T9215] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e9 cb df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c8 cb df f9 4d 8b 24 24 48 83 c3 [ 373.713530][ T9215] RSP: 0018:ffffc9000d96fa18 EFLAGS: 00010206 [ 373.719607][ T9215] RAX: 0000000000000005 RBX: ffff88802e4e1900 RCX: 0000000000080000 [ 373.727589][ T9215] RDX: ffffc9000ca3a000 RSI: 0000000000002b5e RDI: 0000000000002b5f [ 373.735571][ T9215] RBP: 0000000000000001 R08: ffff88814c37092f R09: 1ffff1102986e125 [ 373.743573][ T9215] R10: dffffc0000000000 R11: ffffed102986e126 R12: 0000000000000028 [ 373.751596][ T9215] R13: dffffc0000000000 R14: ffff88814c370800 R15: dffffc0000000000 [ 373.759858][ T9215] FS: 00007f8310d7c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 373.768918][ T9215] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.775520][ T9215] CR2: 00007f830ff722e0 CR3: 00000000509da000 CR4: 00000000003506e0 [ 373.783516][ T9215] Call Trace: [ 373.786828][ T9215] [ 373.789858][ T9215] pcl818_detach+0x66/0xd0 [ 373.794393][ T9215] comedi_device_detach_locked+0x172/0x710 [ 373.800333][ T9215] comedi_device_attach+0x5cd/0x710 [ 373.805598][ T9215] comedi_unlocked_ioctl+0x606/0xfe0 [ 373.810917][ T9215] ? tomoyo_path_number_perm+0x477/0x590 [ 373.816595][ T9215] ? comedi_poll+0x8c0/0x8c0 [ 373.821312][ T9215] ? __fget_files+0x28/0x4d0 [ 373.826033][ T9215] ? bpf_lsm_file_ioctl+0x9/0x10 [ 373.831164][ T9215] ? security_file_ioctl+0x80/0xa0 [ 373.836479][ T9215] ? comedi_poll+0x8c0/0x8c0 [ 373.841093][ T9215] __se_sys_ioctl+0xfd/0x170 [ 373.845805][ T9215] do_syscall_64+0x55/0xb0 [ 373.850327][ T9215] ? clear_bhb_loop+0x40/0x90 [ 373.855034][ T9215] ? clear_bhb_loop+0x40/0x90 [ 373.859784][ T9215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.865705][ T9215] RIP: 0033:0x7f830ff8efc9 [ 373.870327][ T9215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.890309][ T9215] RSP: 002b:00007f8310d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.898748][ T9215] RAX: ffffffffffffffda RBX: 00007f83101e5fa0 RCX: 00007f830ff8efc9 [ 373.906743][ T9215] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000006 [ 373.914749][ T9215] RBP: 00007f8310011f91 R08: 0000000000000000 R09: 0000000000000000 [ 373.922768][ T9215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.930777][ T9215] R13: 00007f83101e6038 R14: 00007f83101e5fa0 R15: 00007fff288b9088 [ 373.938990][ T9215] [ 373.942131][ T9215] Modules linked in: [ 373.948516][ T9215] ---[ end trace 0000000000000000 ]--- [ 373.954202][ T9215] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 373.959767][ T9215] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e9 cb df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c8 cb df f9 4d 8b 24 24 48 83 c3 [ 373.979922][ T9215] RSP: 0018:ffffc9000d96fa18 EFLAGS: 00010206 [ 373.986115][ T9215] RAX: 0000000000000005 RBX: ffff88802e4e1900 RCX: 0000000000080000 [ 373.994198][ T9215] RDX: ffffc9000ca3a000 RSI: 0000000000002b5e RDI: 0000000000002b5f [ 374.002503][ T9215] RBP: 0000000000000001 R08: ffff88814c37092f R09: 1ffff1102986e125 [ 374.010498][ T9215] R10: dffffc0000000000 R11: ffffed102986e126 R12: 0000000000000028 [ 374.018707][ T9215] R13: dffffc0000000000 R14: ffff88814c370800 R15: dffffc0000000000 [ 374.026712][ T9215] FS: 00007f8310d7c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 374.035766][ T9215] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.042403][ T9215] CR2: 00007f830ff722e0 CR3: 00000000509da000 CR4: 00000000003506e0 [ 374.050498][ T9215] Kernel panic - not syncing: Fatal exception [ 374.057034][ T9215] Kernel Offset: disabled [ 374.061420][ T9215] Rebooting in 86400 seconds..