last executing test programs: 6.592369862s ago: executing program 4 (id=1732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6.499017454s ago: executing program 4 (id=1733): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) 6.292061838s ago: executing program 4 (id=1735): recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x800006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.957812445s ago: executing program 4 (id=1739): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.015207823s ago: executing program 4 (id=1744): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'system.posix_acl_access\x00', 0x3a, 'system.posix_acl_access\x00', 0x3a, './file0'}, 0x57) 4.900343955s ago: executing program 4 (id=1745): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0)={0x0, 0xb, 0x1, "b3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.900120945s ago: executing program 1 (id=1746): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x84, 0x33, 0x0, 0x0) 4.365916855s ago: executing program 3 (id=1751): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0x9}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.268114567s ago: executing program 3 (id=1753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x2, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_DELAY_DIST={0x7, 0x2, '\x00^p'}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.381063874s ago: executing program 1 (id=1755): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1ac, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x150, 0x1, [@m_simple={0x64, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x2d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xe8, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0xb6, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527d9711d16abc0abaea927bcdffe4d3ec14fb6fca0407429934982873a3f054bcbf1e53f85fe7aee4ccd90229e6ba2b45bd165ebd7929c21abcdf0b8d47ff6a950009bf4b1ef96863b19aaa1c52a12b02f39c0816b2c6136341ed251c3b6f6af9385e3d242e39802d1054758f1fecd4810c086a3ef4c0b3354522333a981535fdda6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a3a, 0x823}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}]}}}, @IFLA_IFNAME={0x14}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.230950087s ago: executing program 1 (id=1758): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) write$FUSE_STATFS(r6, &(0x7f0000000200)={0x60, 0xfffffffffffffff5, 0x0, {{0x4, 0x7, 0x2, 0xfff, 0x3, 0x1ff, 0x1, 0x80000000}}}, 0x60) mount$afs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(0x0, 0x8) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="61564992b80a38b0bbd17181ade9629df8ab35c7cdc934cfc11e576191b754fbc4ee9c92c2f60ae819b07a84900095d5f9a610421647ae405b0230b653ab397de7cfeb535bcad839af6d2ae32a38efe161cd75c47d063868f610528b2916d5ff651c6e82ed1ee6b491d6ba8e00eee15f4bbb6357ff761af9395e184b9f2251dc7503dd8de1d5d1f62a1fb1e1488ffb9fc56babb173773d074deacf7156fa2b7b0e2439c89e4b3bc05e447d17a7c99c23", 0xb0}, {&(0x7f0000000340)="d3ce07594d2757ea645079dbe2ccb58b758e0aa1e2ab3190b7f9be1bcaa6baa05533a39991f349337398e2c365b4b75aa7058e1b75d39b29ce24d8a3abd92c14bbdb3e2f98b1b067b2db002564186a7417244d1fcae1e69f0a9ff299aade61ddaf9d00e62aa131abda5f82b1773a0657443f4afa754ccbb1c14017dbe10699975fd427b2318d960202378e11fa4520a4270aae9699ed4b437917", 0x9a}, {&(0x7f0000000100)="d18edf2dc34d4969b18aebd854f4e030b8dd07a2917fafa36d", 0x19}, {&(0x7f0000000400)="fb298f27d3729788460c7262286418ab2c3da63c256ce56b26db5c770398e032cf4dd5334bf24970c9844b7a3bd6d1ca0758e69569765fcaf46e962194e405ec31", 0x41}, {&(0x7f00000004c0)="79e42c07038d38fda25595d85559a607331e3dee7c780c2e6184db58cc99dffd04ad142635763a6710ca1b1050bd14e7be9b77bc695c1d3ae9d4c40e78ec0a789d335de66681454d0af83ebb7436584ad8634636f6122dab73ffdf0f1b2d827f705ea9ff8534fd8d567a61f0c9fa3c636447ea6673081adb3337d43bf1ed8b657fabd1d66141cefacf4301d6f6ee7ec366358d922e2622ddadf5184002364d4d68832d1a67365ea8b9ec8b6b4d34a41f9e4d13480334b9a5", 0xb8}], 0x5) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.176248989s ago: executing program 3 (id=1759): r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0xe65b}], 0x2) semctl$SETALL(r0, 0x0, 0x11, 0x0) 2.898216204s ago: executing program 0 (id=1761): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getrusage(0xffffffffffffffff, &(0x7f0000000240)) 2.188718727s ago: executing program 2 (id=1762): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_create(0x9, 0x80000) 2.149035118s ago: executing program 3 (id=1763): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2.148622978s ago: executing program 0 (id=1764): recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x800006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.08763707s ago: executing program 1 (id=1765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.940144192s ago: executing program 2 (id=1766): socket$kcm(0xa, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x2, 0x5620, 0x2, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xfffffffffffffffd, 0x5, 0x7, 0x100000000], 0x1, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.929851042s ago: executing program 2 (id=1767): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$unix(0x1, 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='veth1_to_hsr\x00', 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x30) sendmmsg$inet(r6, &(0x7f00000034c0), 0x0, 0x40000840) 1.894868053s ago: executing program 0 (id=1768): socket$can_bcm(0x1d, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) 995.68875ms ago: executing program 2 (id=1769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000002000)=ANY=[@ANYBLOB="7b87f20fa99d"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 995.01082ms ago: executing program 3 (id=1770): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) 940.254961ms ago: executing program 2 (id=1771): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000d40), 0x0, 0x20103, &(0x7f0000000e40)={0x0, 0x3938700}) 931.737942ms ago: executing program 0 (id=1772): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create(0xbe1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x43, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000380)={0x60000, 0x0, [0x0, 0xc4c2, 0x7ffd, 0x9, 0x101, 0x2ddf, 0x2, 0xb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x200, 0x0, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x80001]}}, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000700)={{0xa, 0x4, 0x10, 0x9, 'syz0\x00', 0x9}, 0x1, [0x80000001, 0x8004000000000000, 0x10001, 0x1, 0x8000000000000000, 0x5, 0x7, 0x100000001, 0x3, 0x7fff, 0x8, 0xca, 0x100, 0xa2b8, 0xc, 0xfffffffffffffffd, 0x1, 0x100, 0x79, 0x4, 0x1f, 0x57eb, 0x98, 0xfffffffffffffffb, 0x3, 0x735, 0xfa1, 0x7365a6d3, 0x7, 0x6, 0x7f, 0x9, 0xfffffffffffffff8, 0x2, 0x4, 0x3, 0x25, 0x5, 0x6, 0x9, 0x100000001, 0x7, 0x0, 0x7, 0x123, 0xfffffffffffffff8, 0x7, 0x7, 0xba1, 0x1, 0xf, 0x7fff, 0x9, 0x8001, 0x2, 0x1, 0x80, 0x7f, 0xfffffffffffffbff, 0x0, 0xdb, 0x401, 0x1, 0x0, 0xfffffffffffffffa, 0x6, 0x0, 0x2, 0xd, 0x907, 0x942, 0xd, 0x4, 0xff, 0x6, 0x5, 0x9, 0xa9, 0x7, 0x4, 0x81, 0x80000000, 0xbc, 0x7, 0x7fffffffffffffff, 0x7, 0xdea4, 0x100, 0x6, 0x2, 0x5, 0x4, 0xff, 0x0, 0x9, 0x33a2, 0x1, 0x9, 0x4, 0x40, 0xd, 0x100, 0x80, 0x5, 0x4, 0x80000001, 0x7, 0x2, 0xa573, 0x0, 0x6, 0xa2d, 0x7fffffffffffffff, 0xbb87, 0x2, 0xabfc, 0x1bbd, 0x80000000, 0x8000000000000004, 0x5, 0xa, 0xfffffffffffffffb, 0x0, 0x8, 0x9, 0x1000000000, 0x7ff, 0x1]}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x70000, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xff, "001500"}, 0x0, 0x2, {}, 0x58603}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)={0x40002008}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044050) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x8020008, 0x6, 0x34325842, 0x4, 0x6bf, 0xffffffff, 0x0, 0x6, 0x0, 0x1, 0x2, 0x4}}) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f00000004c0)={0x4000200c}) close_range(r0, 0xffffffffffffffff, 0x0) 870.172103ms ago: executing program 2 (id=1773): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000140)="f30f0926640f01cbb9090200000f3265360fc7717e660f3815e966b8da000f00d8c4e11f5d3bb9a40a00000f322e260ffbfcc4e259b803", 0x37}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r7, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) 695.670616ms ago: executing program 0 (id=1774): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x28, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x28}}, 0x40000) 576.350018ms ago: executing program 0 (id=1775): r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0xe65b}], 0x2) semctl$SETALL(r0, 0x0, 0x11, 0x0) 245.179875ms ago: executing program 1 (id=1776): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 56.168858ms ago: executing program 1 (id=1777): socket$kcm(0xa, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x2, 0x5620, 0x2, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xfffffffffffffffd, 0x5, 0x7, 0x100000000], 0x1, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=1778): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x6, 0x0, &(0x7f0000000080)="f4b84de4115d", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r3, 0x1e76, 0xf728, 0x5, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000b00)=0x6) read(r6, &(0x7f0000000a40)=""/141, 0x8d) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x800, 0x0, 'syz0\x00', 0xa7d}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0f, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3e56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000740)='wlan0\x00', 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) kernel console output (not intermixed with test programs): ge from 0 to 1764 [ 131.815190][ T5632] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.312359][ T5666] loop3: detected capacity change from 0 to 764 [ 132.498483][ T5676] loop1: detected capacity change from 0 to 128 [ 132.519355][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.525867][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.601357][ T5680] loop0: detected capacity change from 0 to 128 [ 132.772280][ T5680] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.854857][ T5680] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.895581][ T4256] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 133.290799][ T4198] Bluetooth: hci0: Received unexpected HCI Event 00000000 [ 134.253607][ T4256] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.292690][ T5722] fuse: Bad value for 'fd' [ 134.319015][ T4256] usb 4-1: not running at top speed; connect to a high speed hub [ 134.346766][ T5726] loop0: detected capacity change from 0 to 512 [ 134.410523][ T5732] loop4: detected capacity change from 0 to 256 [ 134.430893][ T5726] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.446136][ T4256] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 134.454366][ T4256] usb 4-1: config 1 has no interface number 0 [ 134.477699][ T5740] netlink: 188 bytes leftover after parsing attributes in process `syz.2.439'. [ 134.486193][ T4256] usb 4-1: config 1 interface 138 has no altsetting 0 [ 134.491016][ T5726] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,dioread_nolock,bsddf,noinit_itable,,errors=continue. Quota mode: writeback. [ 135.767179][ T5751] EXT4-fs error (device loop0): ext4_get_first_dir_block:3597: inode #12: comm syz.0.435: Directory block failed checksum [ 135.795508][ T4256] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 135.837993][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.870069][ T4256] usb 4-1: Product: syz [ 135.874296][ T4256] usb 4-1: Manufacturer: syz [ 136.068387][ T5757] futex_wake_op: syz.2.446 tries to shift op by 32; fix this program [ 136.099584][ T4256] usb 4-1: can't set config #1, error -71 [ 136.154442][ T4256] usb 4-1: USB disconnect, device number 3 [ 136.530493][ T5771] loop4: detected capacity change from 0 to 2048 [ 138.718803][ T5771] UDF-fs: bad mount option "session=000000" or missing value [ 139.969157][ T5805] loop3: detected capacity change from 0 to 256 [ 140.067354][ T5805] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 140.124597][ T5811] loop1: detected capacity change from 0 to 128 [ 140.188121][ T5811] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.380210][ T5813] netlink: 96 bytes leftover after parsing attributes in process `syz.1.444'. [ 140.442110][ T5815] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 140.458017][ T5816] loop3: detected capacity change from 0 to 256 [ 140.474684][ T5815] FAT-fs (loop1): Filesystem has been set read-only [ 140.509289][ T5816] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 140.547618][ T5816] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 140.816446][ T25] audit: type=1800 audit(1757566490.554:51): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.469" name="file1" dev="loop3" ino=1048607 res=0 errno=0 [ 141.011696][ T5825] loop0: detected capacity change from 0 to 1024 [ 141.213618][ T5825] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 141.245015][ T5825] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 141.302771][ T5825] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 142.040470][ T5838] loop4: detected capacity change from 0 to 512 [ 142.142001][ T5843] loop0: detected capacity change from 0 to 512 [ 142.185376][ T5838] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 142.259825][ T5843] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.269834][ T5838] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.322285][ T5843] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.383053][ T5838] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.478: Unrecognised inode hash code 20 [ 142.404386][ T5843] EXT4-fs error (device loop0): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.0.479: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 142.431008][ T5838] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.478: Corrupt directory, running e2fsck is recommended [ 142.464170][ T5838] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.478: Unrecognised inode hash code 20 [ 142.488866][ T5838] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.478: Corrupt directory, running e2fsck is recommended [ 142.520705][ T5843] EXT4-fs error (device loop0): ext4_get_first_dir_block:3608: inode #12: comm syz.0.479: directory missing '.' [ 142.778270][ T5860] loop3: detected capacity change from 0 to 128 [ 142.789106][ T5859] loop1: detected capacity change from 0 to 256 [ 142.842813][ T5863] loop4: detected capacity change from 0 to 512 [ 142.882525][ T5860] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.899514][ T5863] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.901229][ T5859] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 143.065562][ T5863] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 143.203896][ T5863] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 143.242783][ T5859] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 143.368275][ T5863] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 143.504104][ T5863] System zones: 0-2, 18-18, 34-34 [ 143.538988][ T5869] netlink: 96 bytes leftover after parsing attributes in process `syz.3.486'. [ 143.624863][ T5869] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 143.634470][ T5863] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.483: iget: bad i_size value: 360287970189639680 [ 143.648846][ T5869] FAT-fs (loop3): Filesystem has been set read-only [ 143.659524][ T5863] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.483: couldn't read orphan inode 15 (err -117) [ 143.731204][ T5863] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.190564][ T5886] syz.3.490 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 144.255793][ T5885] loop0: detected capacity change from 0 to 512 [ 144.885455][ T25] audit: type=1326 audit(1757566493.954:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7390fd0ba9 code=0x7ffc0000 [ 145.138306][ T25] audit: type=1326 audit(1757566493.954:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7390fd0ba9 code=0x7ffc0000 [ 145.282805][ T5885] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 145.298978][ T25] audit: type=1800 audit(1757566494.004:54): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.485" name="file1" dev="loop1" ino=1048619 res=0 errno=0 [ 145.321409][ T5885] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.398024][ T25] audit: type=1326 audit(1757566495.134:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7390fd0ba9 code=0x7ffc0000 [ 146.667057][ T5906] loop3: detected capacity change from 0 to 8 [ 146.691361][ T5906] Major/Minor mismatch, trying to mount newer 256.0 filesystem [ 146.780811][ T5906] Please update your kernel [ 146.817240][ T5916] loop0: detected capacity change from 0 to 256 [ 146.884080][ T5916] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb45ad1ca, utbl_chksum : 0xe619d30d) [ 148.119123][ T5942] loop1: detected capacity change from 0 to 1024 [ 148.189382][ T5945] loop0: detected capacity change from 0 to 764 [ 148.229700][ T5945] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 148.241602][ T5953] loop4: detected capacity change from 0 to 256 [ 148.303162][ T4814] hfsplus: b-tree write err: -5, ino 4 [ 148.398607][ T5953] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 148.445601][ T5953] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 148.691613][ T5971] loop3: detected capacity change from 0 to 512 [ 148.851588][ T25] audit: type=1800 audit(1757566498.584:56): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.518" name="file1" dev="loop4" ino=1048631 res=0 errno=0 [ 148.892513][ T5971] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.963208][ T5983] netlink: 96 bytes leftover after parsing attributes in process `syz.2.529'. [ 151.060782][ T6061] loop3: detected capacity change from 0 to 512 [ 151.082342][ T6062] loop1: detected capacity change from 0 to 512 [ 151.273468][ T6061] EXT4-fs (loop3): Ignoring removed orlov option [ 151.314172][ T6062] EXT4-fs (loop1): Mount option "norecovery" incompatible with ext2 [ 151.576661][ T6061] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002] [ 151.734307][ T6061] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.559: corrupted in-inode xattr [ 151.876686][ T6061] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.559: couldn't read orphan inode 15 (err -117) [ 152.022055][ T6061] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 152.335802][ T6061] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none. [ 152.888724][ T6081] loop0: detected capacity change from 0 to 1024 [ 153.161446][ T6085] loop1: detected capacity change from 0 to 128 [ 154.198195][ T6091] loop3: detected capacity change from 0 to 128 [ 154.309501][ T6081] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.406589][ T6081] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,dioread_nolock,,errors=continue. Quota mode: none. [ 154.483084][ T6091] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.514564][ T6081] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.536597][ T6091] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.386811][ T6107] loop1: detected capacity change from 0 to 512 [ 155.438067][ T6107] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.628437][ T6107] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.571: invalid indirect mapped block 4294967295 (level 1) [ 158.315485][ T25] audit: type=1326 audit(1757566508.024:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25b132ba9 code=0x7ffc0000 [ 160.347854][ T6107] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.571: invalid indirect mapped block 4294967295 (level 1) [ 160.376748][ T25] audit: type=1326 audit(1757566508.024:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25b132ba9 code=0x7ffc0000 [ 160.452743][ T6107] EXT4-fs (loop1): 2 truncates cleaned up [ 160.469117][ T6107] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 161.311081][ T6136] loop4: detected capacity change from 0 to 64 [ 161.513516][ T6142] loop3: detected capacity change from 0 to 1024 [ 161.733512][ T6142] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,dioread_lock,barrier=0x0000000000000000,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,errors=continue,. Quota mode: none. [ 162.563582][ T6162] loop0: detected capacity change from 0 to 64 [ 162.975471][ T25] audit: type=1326 audit(1757566512.624:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.3.585" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7390fd0ba9 code=0x0 [ 163.622768][ T25] audit: type=1326 audit(1757566513.344:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edbb4cba9 code=0x7ffc0000 [ 163.753397][ T25] audit: type=1326 audit(1757566513.344:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edbb4cba9 code=0x7ffc0000 [ 164.841528][ T6176] netlink: 'syz.0.594': attribute type 39 has an invalid length. [ 164.987942][ T6183] loop1: detected capacity change from 0 to 256 [ 165.114432][ T6185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.593'. [ 167.524748][ T6210] netlink: 80 bytes leftover after parsing attributes in process `syz.4.603'. [ 167.895987][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.603'. [ 167.932296][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.603'. [ 168.149933][ T6216] loop4: detected capacity change from 0 to 512 [ 168.703257][ T6216] EXT4-fs (loop4): Test dummy encryption mode enabled [ 168.715535][ T6216] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.748837][ T6216] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.606: bad orphan inode 131083 [ 168.765019][ T6216] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 171.151653][ T6238] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 171.209538][ T4256] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 171.255425][ T4256] Bluetooth: hci3: Injecting HCI hardware error event [ 171.263775][ T4198] Bluetooth: hci3: hardware error 0x00 [ 172.679375][ T6262] fuse: Unknown parameter '017777777777777777777770xffffffffffffffff' [ 173.315063][ T6276] loop3: detected capacity change from 0 to 2048 [ 173.888243][ T6276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.897780][ T6285] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.923812][ T6279] team0: Port device team_slave_0 removed [ 174.043608][ T6276] UDF-fs: error (device loop3): udf_read_inode: (ino 1409) failed !bh [ 175.180390][ T6285] syz.4.623 (6285) used greatest stack depth: 19776 bytes left [ 175.718281][ T26] Bluetooth: hci4: command 0x0406 tx timeout [ 175.729719][ T26] Bluetooth: hci1: command 0x0406 tx timeout [ 175.786446][ T26] Bluetooth: hci2: command 0x0406 tx timeout [ 175.880418][ T25] audit: type=1326 audit(1757566525.614:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.3.638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7390fd0ba9 code=0x0 [ 176.237920][ T6325] loop0: detected capacity change from 0 to 64 [ 176.244703][ T6329] loop4: detected capacity change from 0 to 1024 [ 176.319108][ T6329] hfsplus: failed to load catalog file [ 177.398444][ T6347] loop4: detected capacity change from 0 to 256 [ 178.026626][ T6347] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.060086][ T6347] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.366998][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'. [ 179.456667][ T4196] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 179.672331][ T6357] team0: Port device team_slave_0 removed [ 180.547701][ T6365] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 180.608691][ T6372] loop0: detected capacity change from 0 to 64 [ 180.992685][ T6382] netlink: 'syz.0.657': attribute type 39 has an invalid length. [ 181.080383][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'. [ 181.730607][ T6386] netlink: 104 bytes leftover after parsing attributes in process `syz.1.663'. [ 181.894086][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.665'. [ 182.057577][ T6391] team0: Port device team_slave_0 removed [ 182.214651][ T6398] loop1: detected capacity change from 0 to 2048 [ 183.906485][ T6398] UDF-fs: bad mount option "session=000000" or missing value [ 184.184888][ T6413] 9pnet: p9_errstr2errno: server reported unknown error  [ 184.308143][ T6417] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.806124][ T6418] loop0: detected capacity change from 0 to 256 [ 185.734332][ T6418] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104f4, chksum : 0x5f17efa6, utbl_chksum : 0xe619d30d) [ 185.741167][ T4247] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 186.505623][ T4247] usb 2-1: config index 0 descriptor too short (expected 19492, got 36) [ 186.560993][ T4247] usb 2-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 186.744527][ T4247] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 186.805133][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 186.807853][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 186.845772][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.862077][ T4247] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.885439][ T4247] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 186.908745][ T4247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.937212][ T4247] usb 2-1: config 0 descriptor?? [ 187.111132][ T6462] loop3: detected capacity change from 0 to 128 [ 187.711031][ T6449] team0: Port device team_slave_0 removed [ 187.792653][ T6462] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.822834][ T6462] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 188.109466][ T4247] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 188.117995][ T4247] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 188.124992][ T4247] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 188.132600][ T4247] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 188.139785][ T4247] lg-g15 0003:046D:C225.0002: unknown main item tag 0x0 [ 188.154764][ T4247] lg-g15 0003:046D:C225.0002: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.1-1/input0 [ 188.441533][ T6472] loop0: detected capacity change from 0 to 64 [ 188.642421][ T4247] usb 2-1: USB disconnect, device number 2 [ 188.860290][ T6477] fido_id[6477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 190.829007][ T6512] raw_sendmsg: syz.0.703 forgot to set AF_INET. Fix it! [ 190.880225][ T6516] loop3: detected capacity change from 0 to 128 [ 190.957339][ T6516] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.989692][ T6516] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.204549][ T6529] loop4: detected capacity change from 0 to 64 [ 193.616026][ T6571] loop1: detected capacity change from 0 to 128 [ 193.713454][ T6571] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.153992][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169704][ T6571] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 194.215587][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.668561][ T6585] loop0: detected capacity change from 0 to 64 [ 195.619455][ T6592] sctp: failed to load transform for md5: -2 [ 196.252227][ T6637] loop4: detected capacity change from 0 to 128 [ 196.362862][ T6637] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.415765][ T6637] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.580368][ T6651] loop0: detected capacity change from 0 to 64 [ 197.707449][ T6670] netlink: 'syz.0.746': attribute type 39 has an invalid length. [ 198.092706][ T6674] binder: 6673:6674 ioctl 4018620d 0 returned -22 [ 198.648530][ T6695] loop3: detected capacity change from 0 to 128 [ 198.713540][ T6697] binder: BINDER_SET_CONTEXT_MGR already set [ 198.734648][ T6697] binder: 6696:6697 ioctl 4018620d 200000000140 returned -16 [ 198.735059][ T6695] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.821120][ T6695] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 200.003374][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.019473][ T6730] netlink: 679 bytes leftover after parsing attributes in process `syz.1.774'. [ 200.032649][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.056588][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.074966][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.096565][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.119204][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.135929][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.152450][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.185584][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.215622][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.231886][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.255400][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.277345][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.306354][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.313825][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.342071][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.370729][ T4256] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 200.860146][ T4256] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 201.445424][ T4233] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 201.476683][ T6756] loop4: detected capacity change from 0 to 128 [ 201.603574][ T6756] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.617292][ T6756] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 201.695444][ T4233] usb 4-1: Using ep0 maxpacket: 32 [ 201.700618][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 201.966226][ T4233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.976904][ T4233] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 202.321926][ T13] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 202.348606][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.396553][ T13] usb 2-1: Product: syz [ 202.407091][ T13] usb 2-1: Manufacturer: syz [ 202.412225][ T13] usb 2-1: SerialNumber: syz [ 202.451262][ T13] usb 2-1: config 0 descriptor?? [ 203.077197][ T4233] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 203.204615][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.390222][ T4233] usb 4-1: Product: syz [ 203.497600][ T4233] usb 4-1: Manufacturer: syz [ 203.518190][ T4233] usb 4-1: SerialNumber: syz [ 203.555047][ T4233] usb 4-1: config 0 descriptor?? [ 203.676798][ T4233] usb 4-1: can't set config #0, error -71 [ 203.715441][ T13] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 203.734008][ T4233] usb 4-1: USB disconnect, device number 4 [ 203.752020][ T13] asix: probe of 2-1:0.0 failed with error -71 [ 204.797602][ T13] usb 2-1: USB disconnect, device number 3 [ 204.845830][ T6816] loop3: detected capacity change from 0 to 128 [ 204.982864][ T6816] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.001526][ T6816] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 205.155597][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 205.205431][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 205.526305][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 205.657958][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.688945][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.733709][ T13] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 205.743581][ T7] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 205.764885][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.793250][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.814191][ T7] usb 5-1: Product: syz [ 205.835446][ T7] usb 5-1: Manufacturer: syz [ 205.856732][ T7] usb 5-1: SerialNumber: syz [ 205.907087][ T13] usb 2-1: config 0 descriptor?? [ 205.923433][ T7] usb 5-1: config 0 descriptor?? [ 205.963609][ T6851] overlayfs: failed to clone upperpath [ 206.615871][ T7] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 207.055514][ T7] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 207.089816][ T7] asix: probe of 5-1:0.0 failed with error -71 [ 207.134187][ T7] usb 5-1: USB disconnect, device number 3 [ 207.235472][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 207.242013][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 207.323269][ T13] usb 2-1: USB disconnect, device number 4 [ 207.527688][ T6881] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 207.555545][ T6881] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 208.585729][ T4247] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 208.660363][ T4247] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 209.084917][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 209.191618][ T6924] binder: 6923:6924 ioctl 4018620d 0 returned -22 [ 209.351641][ T6933] loop0: detected capacity change from 0 to 128 [ 209.534809][ T6933] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.565319][ T6933] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 209.872581][ T6953] /dev/loop0: Can't open blockdev [ 210.258099][ T6961] overlayfs: failed to clone upperpath [ 210.712119][ T6972] binder: 6970:6972 unknown command 0 [ 210.745458][ T4256] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 210.748521][ T6972] binder: 6970:6972 ioctl c0306201 200000000100 returned -22 [ 211.005716][ T4256] usb 4-1: Using ep0 maxpacket: 16 [ 211.125877][ T4256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.154158][ T4256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.207717][ T4256] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 211.251493][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.305520][ T4256] usb 4-1: config 0 descriptor?? [ 211.705074][ T7001] loop1: detected capacity change from 0 to 128 [ 211.837789][ T4256] konepure 0003:1E7D:2DB4.0005: unknown main item tag 0x0 [ 211.865639][ T7001] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.875309][ T4256] konepure 0003:1E7D:2DB4.0005: unknown main item tag 0x0 [ 211.921668][ T7001] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.923702][ T4256] konepure 0003:1E7D:2DB4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 212.575672][ T4256] usb 4-1: USB disconnect, device number 5 [ 212.909697][ T7011] fido_id[7011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 213.049845][ T7015] binder: 7014:7015 unknown command 0 [ 213.072537][ T7015] binder: 7014:7015 ioctl c0306201 200000000100 returned -22 [ 214.073727][ T7039] loop1: detected capacity change from 0 to 128 [ 214.188027][ T7039] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.312425][ T7039] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 215.119939][ T7062] input: syz1 as /devices/virtual/input/input5 [ 216.063137][ T7100] loop0: detected capacity change from 0 to 128 [ 216.202080][ T7100] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.234458][ T7100] ext4 filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 216.524320][ T7114] Zero length message leads to an empty skb [ 217.185514][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 217.575662][ T26] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 217.636308][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.644057][ T7137] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 217.685670][ T7137] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 217.687611][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.750352][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.794049][ T26] usb 2-1: config 0 descriptor?? [ 217.860529][ T7149] loop4: detected capacity change from 0 to 128 [ 217.875590][ T26] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 217.945730][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 217.974614][ T7149] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.008785][ T7149] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 218.426290][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.521266][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 218.721390][ T7] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 219.955656][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.965011][ T4232] usb 2-1: USB disconnect, device number 5 [ 220.009221][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.054681][ T7] usb 4-1: Product: syz [ 220.072964][ T7] usb 4-1: Manufacturer: syz [ 220.086417][ T7173] fuse: Bad value for 'fd' [ 220.091168][ T7] usb 4-1: SerialNumber: syz [ 220.182481][ T7] cdc_mbim 4-1:1.0: skipping garbage [ 220.265367][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 220.383150][ T7143] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 220.466836][ T4232] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 220.575373][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 220.885659][ T4232] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 220.894964][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.908663][ T4232] usb 2-1: config 0 descriptor?? [ 221.067678][ T7] cdc_mbim 4-1:1.0: bind() failure [ 221.186263][ T7] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 221.223648][ T7] cdc_ncm 4-1:1.1: bind() failure [ 221.381831][ T7] usb 4-1: USB disconnect, device number 6 [ 221.677434][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 221.688068][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.696574][ T26] usb 5-1: Product: syz [ 221.700757][ T26] usb 5-1: Manufacturer: syz [ 221.709377][ T26] usb 5-1: SerialNumber: syz [ 221.757095][ T4247] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 222.425414][ T4247] usb 1-1: Using ep0 maxpacket: 8 [ 222.641824][ T26] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 222.697454][ T26] usb 5-1: USB disconnect, device number 4 [ 222.798788][ T26] usblp0: removed [ 222.838011][ T4247] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 222.855462][ T4232] usb 2-1: Cannot set autoneg [ 222.856954][ T4247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.862630][ T4232] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 222.874340][ T4247] usb 1-1: Product: syz [ 222.883737][ T4247] usb 1-1: Manufacturer: syz [ 222.903668][ T4232] usb 2-1: USB disconnect, device number 6 [ 222.929686][ T4247] usb 1-1: SerialNumber: syz [ 223.232972][ T4247] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 223.995883][ T7228] loop3: detected capacity change from 0 to 128 [ 224.178222][ T7228] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.231897][ T7228] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 226.039564][ T26] usb 1-1: USB disconnect, device number 2 [ 226.072650][ T26] usblp0: removed [ 226.499384][ T7253] capability: warning: `syz.0.952' uses 32-bit capabilities (legacy support in use) [ 226.533340][ T7256] kvm: pic: single mode not supported [ 226.533682][ T7256] kvm: pic: non byte read [ 226.565921][ T7256] kvm: pic: non byte read [ 226.571154][ T7256] kvm: pic: non byte read [ 226.586585][ T7256] kvm: pic: single mode not supported [ 226.586785][ T7256] kvm: pic: level sensitive irq not supported [ 226.612757][ T7256] kvm: pic: non byte read [ 226.650317][ T7256] kvm: pic: non byte read [ 226.655207][ T7256] kvm: pic: non byte read [ 226.699379][ T7256] kvm: pic: non byte read [ 226.742151][ T7256] kvm: pic: non byte read [ 226.791965][ T7256] kvm: pic: non byte read [ 226.860195][ T7272] loop3: detected capacity change from 0 to 128 [ 227.062626][ T7272] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.096164][ T7272] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.200951][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 228.355640][ T13] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 228.585489][ T7] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 228.597757][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.607518][ T7] usb 4-1: config 0 descriptor?? [ 228.765468][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 228.845484][ T13] usb 5-1: config 9 has an invalid interface number: 233 but max is 1 [ 228.857596][ T13] usb 5-1: config 9 has an invalid interface number: 24 but max is 1 [ 228.867662][ T13] usb 5-1: config 9 has no interface number 0 [ 228.873790][ T13] usb 5-1: config 9 has no interface number 1 [ 228.881070][ T13] usb 5-1: config 9 interface 233 altsetting 128 has an invalid endpoint with address 0x80, skipping [ 228.893833][ T13] usb 5-1: config 9 interface 233 altsetting 128 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 228.908089][ T13] usb 5-1: config 9 interface 233 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 228.918986][ T13] usb 5-1: config 9 interface 233 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 228.929992][ T13] usb 5-1: config 9 interface 233 has no altsetting 0 [ 228.936864][ T13] usb 5-1: config 9 interface 24 has no altsetting 0 [ 229.175679][ T13] usb 5-1: string descriptor 0 read error: -22 [ 229.183087][ T13] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=44.76 [ 229.194970][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.256741][ T13] zaurus 5-1:9.233: skipping garbage [ 229.262545][ T13] usb 5-1: bad CDC descriptors [ 229.464984][ T13] usb 5-1: USB disconnect, device number 5 [ 229.788691][ T7] usb 4-1: Cannot set autoneg [ 229.794463][ T7] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 229.832966][ T7] usb 4-1: USB disconnect, device number 7 [ 230.406995][ T7361] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 230.653781][ T405] tipc: Subscription rejected, illegal request [ 230.815392][ T4248] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 231.075493][ T4248] usb 5-1: Using ep0 maxpacket: 8 [ 231.429011][ T4248] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 231.448480][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.466928][ T4248] usb 5-1: Product: syz [ 231.471133][ T4248] usb 5-1: Manufacturer: syz [ 231.501002][ T4248] usb 5-1: SerialNumber: syz [ 231.635604][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 231.796852][ T4248] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 231.885481][ T4248] Bluetooth: hci0: command 0x0406 tx timeout [ 232.015091][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.237511][ T4335] tipc: Subscription rejected, illegal request [ 232.245657][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.255122][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.265378][ T7] usb 1-1: Product: syz [ 232.269706][ T7] usb 1-1: Manufacturer: syz [ 232.274321][ T7] usb 1-1: SerialNumber: syz [ 234.334834][ T7428] devpts: called with bogus options [ 234.408791][ T7] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 234.422941][ T7] cdc_ncm 1-1:1.0: bind() failure [ 234.443430][ T7] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 234.474381][ T7] cdc_ncm 1-1:1.1: bind() failure [ 234.515587][ T7] usb 1-1: USB disconnect, device number 3 [ 234.620800][ T7445] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 234.963747][ T7451] device pim6reg1 entered promiscuous mode [ 235.046567][ T7] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 235.343232][ T7461] binder: 7458:7461 ioctl c0306201 0 returned -14 [ 235.475379][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 235.555470][ T7] usb 1-1: config 9 has an invalid interface number: 233 but max is 1 [ 235.563762][ T7] usb 1-1: config 9 has an invalid interface number: 24 but max is 1 [ 235.572357][ T7] usb 1-1: config 9 has no interface number 0 [ 235.578785][ T7] usb 1-1: config 9 has no interface number 1 [ 235.584961][ T7] usb 1-1: config 9 interface 233 altsetting 128 has an invalid endpoint with address 0x80, skipping [ 235.596330][ T7] usb 1-1: config 9 interface 233 altsetting 128 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 235.608804][ T7] usb 1-1: config 9 interface 233 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 235.619955][ T7] usb 1-1: config 9 interface 233 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 235.631086][ T7] usb 1-1: config 9 interface 233 has no altsetting 0 [ 235.649704][ T7] usb 1-1: config 9 interface 24 has no altsetting 0 [ 235.905383][ T7] usb 1-1: string descriptor 0 read error: -22 [ 235.922495][ T7] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=44.76 [ 235.942177][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.986600][ T7] zaurus 1-1:9.233: skipping garbage [ 236.000174][ T7] usb 1-1: bad CDC descriptors [ 236.281956][ T4248] usb 1-1: USB disconnect, device number 4 [ 236.309290][ T7475] 8021q: VLANs not supported on hsr0 [ 236.339605][ T7475] syz.3.1039 uses obsolete (PF_INET,SOCK_PACKET) [ 238.505342][ T7] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 238.925561][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 239.025483][ T7] usb 4-1: config 9 has an invalid interface number: 233 but max is 1 [ 239.044153][ T7] usb 4-1: config 9 has an invalid interface number: 24 but max is 1 [ 239.085572][ T7] usb 4-1: config 9 has no interface number 0 [ 239.104135][ T7] usb 4-1: config 9 has no interface number 1 [ 239.131125][ T7] usb 4-1: config 9 interface 233 altsetting 128 has an invalid endpoint with address 0x80, skipping [ 239.193494][ T7] usb 4-1: config 9 interface 233 altsetting 128 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 239.245473][ T7] usb 4-1: config 9 interface 233 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 239.273641][ T7] usb 4-1: config 9 interface 233 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 239.303962][ T7] usb 4-1: config 9 interface 233 has no altsetting 0 [ 239.324214][ T7] usb 4-1: config 9 interface 24 has no altsetting 0 [ 239.466291][ T4233] usb 5-1: USB disconnect, device number 6 [ 239.482589][ T4233] usblp0: removed [ 240.415679][ T7] usb 4-1: string descriptor 0 read error: -22 [ 240.422007][ T7] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=44.76 [ 240.439272][ T7549] device ipvlan2 entered promiscuous mode [ 240.458361][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.552636][ T7] zaurus 4-1:9.233: skipping garbage [ 240.562601][ T7] usb 4-1: bad CDC descriptors [ 240.705359][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 240.758526][ T7557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.808519][ T4233] usb 4-1: USB disconnect, device number 8 [ 240.955391][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 241.087498][ T26] usb 1-1: config 0 has no interfaces? [ 241.255578][ T26] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 241.280863][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.312529][ T26] usb 1-1: Product: syz [ 241.358016][ T26] usb 1-1: Manufacturer: syz [ 241.385391][ T26] usb 1-1: SerialNumber: syz [ 241.423198][ T26] usb 1-1: config 0 descriptor?? [ 241.819640][ T7] usb 1-1: USB disconnect, device number 5 [ 242.185051][ T7591] loop4: detected capacity change from 0 to 128 [ 242.253575][ T7591] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.308628][ T7591] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 242.389119][ T7599] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.1084'. [ 242.595433][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 242.872640][ T7618] device vti0 entered promiscuous mode [ 242.878409][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 243.215512][ T7] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 243.242465][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.286452][ T7] usb 2-1: Product: syz [ 243.313769][ T7] usb 2-1: Manufacturer: syz [ 243.333224][ T7] usb 2-1: SerialNumber: syz [ 243.351140][ T7] usb 2-1: config 0 descriptor?? [ 243.407114][ T7] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 243.608092][ T4248] usb 2-1: USB disconnect, device number 7 [ 244.208816][ T7630] loop1: detected capacity change from 0 to 128 [ 244.361354][ T7630] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.386471][ T7630] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.714456][ T7640] device syzkaller0 entered promiscuous mode [ 245.065525][ T4233] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 245.143252][ T7657] program syz.3.1105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.283179][ T7658] [U]  [ 245.296802][ T7658] [U] K{‘ [ 245.302457][ T7658] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 245.315312][ T4233] usb 1-1: Using ep0 maxpacket: 8 [ 245.331019][ T7658] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 245.380628][ T7658] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 245.448366][ T7658] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 245.485634][ T4233] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 245.509039][ T4233] usb 1-1: config 135 has 0 interfaces, different from the descriptor's value: 1 [ 245.548272][ T7658] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 245.576366][ T7658] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 245.590533][ T7658] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 245.604286][ T7658] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2¥¢B¶³%>ÊRѶÖA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä{;Ž Õ¥Â\ [ 245.714498][ T7658] [U] Ù˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ ¦Ø:]‚{Ë©ÔÝÆȽ [ 245.731573][ T7658] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 245.748774][ T7658] [U] 22½“Æ©ÐÛ©X?0;3U± [ 245.754410][ T7658] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä Þ+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 245.778990][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 245.801505][ T7658] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 245.811468][ T4233] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 245.840604][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.860292][ T7662] loop1: detected capacity change from 0 to 128 [ 245.869016][ T4233] usb 1-1: Product: syz [ 245.873230][ T4233] usb 1-1: Manufacturer: syz [ 245.898462][ T7658] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 245.907737][ T4233] usb 1-1: SerialNumber: syz [ 245.931068][ T7658] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9¡¨ˆ…N?ÄÌ© [ 245.950965][ T7658] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 245.993498][ T7662] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.005398][ T7662] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 246.041166][ T7658] [U] ¹ EC [ 246.047048][ T7658] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 246.165522][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.182969][ T4233] usb 1-1: USB disconnect, device number 6 [ 246.347691][ T13] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 246.369841][ T13] usb 4-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 246.399220][ T13] usb 4-1: Product: syz [ 246.410640][ T13] usb 4-1: SerialNumber: syz [ 246.432697][ T13] usb 4-1: config 0 descriptor?? [ 246.517921][ T13] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 246.532650][ T13] usb 4-1: Detected SIO [ 246.552677][ T13] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 246.722709][ T4233] usb 4-1: USB disconnect, device number 9 [ 246.745478][ T4233] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 246.778848][ T4233] ftdi_sio 4-1:0.0: device disconnected [ 247.700824][ T7700] loop0: detected capacity change from 0 to 128 [ 247.810539][ T7700] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.821670][ T7700] ext4 filesystem being mounted at /220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 248.601814][ T7655] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 248.613287][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 249.896740][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 250.070251][ T7736] loop0: detected capacity change from 0 to 128 [ 250.145407][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 250.169143][ T7736] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.259160][ T7736] ext4 filesystem being mounted at /222/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 250.265544][ T13] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.303301][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.313274][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 250.323862][ T13] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.355675][ T13] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 250.364761][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.655528][ T13] usb 5-1: GET_CAPABILITIES returned 0 [ 250.661564][ T13] usbtmc 5-1:16.0: can't read capabilities [ 250.895339][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.905315][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.914614][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.923786][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.932846][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.941904][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.951018][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.960075][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.969244][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.978286][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.987407][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.996435][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.005676][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.014738][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.023853][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.032882][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.207759][ T4233] usb 5-1: USB disconnect, device number 7 [ 251.304539][ T7753] fuse: Bad value for 'fd' [ 252.431672][ T7768] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 253.005875][ T7777] loop0: detected capacity change from 0 to 128 [ 253.102380][ T7777] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 253.115546][ T7777] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 254.776870][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1156'. [ 254.812353][ T7815] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.821889][ T7815] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.832133][ T7815] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.841144][ T7815] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.856679][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1156'. [ 255.407376][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.423788][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.799557][ T7837] tipc: Started in network mode [ 255.813884][ T7837] tipc: Node identity 821ed86439ae, cluster identity 4711 [ 255.838931][ T7837] tipc: Enabled bearer , priority 0 [ 255.876640][ T7837] device syzkaller0 entered promiscuous mode [ 255.923365][ T7837] tipc: Resetting bearer [ 255.943655][ T7836] tipc: Resetting bearer [ 255.963351][ T7836] tipc: Disabling bearer [ 256.395382][ T4233] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 256.655472][ T4233] usb 4-1: Using ep0 maxpacket: 8 [ 256.785645][ T4233] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.786820][ T7863] kvm [7862]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 256.811497][ T4233] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.827847][ T4233] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.842863][ T4233] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.863898][ T4233] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 256.873583][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.882075][ T7863] kvm [7862]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 256.972917][ T7863] kvm [7862]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 257.165479][ T4233] usb 4-1: GET_CAPABILITIES returned 0 [ 257.171091][ T4233] usbtmc 4-1:16.0: can't read capabilities [ 257.415305][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.424413][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.433681][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.442761][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.451813][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.460932][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.469969][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.479008][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.488029][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.497171][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.506295][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.515329][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.524364][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.533478][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.542513][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.551662][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 257.567849][ T4233] usb 4-1: USB disconnect, device number 10 [ 258.438055][ T7937] input: syz1 as /devices/virtual/input/input6 [ 258.759919][ T7950] loop4: detected capacity change from 0 to 64 [ 259.589736][ T7957] loop4: detected capacity change from 0 to 128 [ 259.804367][ T7957] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.901364][ T7957] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 260.325422][ T4248] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 260.397816][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1192'. [ 260.408597][ T7979] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1192'. [ 260.585322][ T4248] usb 1-1: Using ep0 maxpacket: 8 [ 260.639141][ T7981] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 260.697347][ T7981] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 260.707297][ T4248] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.730098][ T4248] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.778596][ T4248] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.882467][ T4248] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.905396][ T4248] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 260.937993][ T4248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.415997][ T4248] usb 1-1: GET_CAPABILITIES returned 0 [ 261.422726][ T4248] usbtmc 1-1:16.0: can't read capabilities [ 261.665314][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.674607][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.683753][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.692794][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.701867][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.710956][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.720009][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.729051][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.738089][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.747212][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.756783][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.765998][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.775028][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.784062][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.793097][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.802226][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 261.867593][ T4248] usb 1-1: USB disconnect, device number 7 [ 262.499849][ T8009] program syz.3.1200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.638886][ T8012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1211'. [ 262.663775][ T8012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1211'. [ 262.816933][ T8016] loop0: detected capacity change from 0 to 128 [ 262.969138][ T8016] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 263.000218][ T8016] ext4 filesystem being mounted at /237/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 263.032446][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.341138][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 264.139074][ T8047] loop3: detected capacity change from 0 to 128 [ 264.302851][ T8047] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.318147][ T8047] ext4 filesystem being mounted at /241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 265.809803][ T8083] loop1: detected capacity change from 0 to 64 [ 266.666256][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 267.421503][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.429850][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.909090][ T8115] netlink: 'syz.3.1235': attribute type 29 has an invalid length. [ 268.011074][ T8117] netlink: 548 bytes leftover after parsing attributes in process `syz.3.1235'. [ 268.443951][ T8092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.498684][ T8092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.352212][ T8092] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.361815][ T8092] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.371438][ T8092] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.381746][ T8092] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.468943][ T8092] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.478143][ T8092] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.487070][ T8092] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.495991][ T8092] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.525404][ T8115] netlink: 'syz.3.1235': attribute type 29 has an invalid length. [ 269.548270][ T8127] IPv6: Can't replace route, no match found [ 269.674824][ T8133] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 269.682011][ T8133] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 269.712198][ T8133] vhci_hcd vhci_hcd.0: Device attached [ 269.755574][ T8142] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 269.762148][ T8142] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 269.771582][ T8144] tipc: Started in network mode [ 269.795632][ T8142] vhci_hcd vhci_hcd.0: Device attached [ 269.803239][ T8144] tipc: Node identity 82c1fe90cc5b, cluster identity 4711 [ 269.816747][ T8133] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(6) [ 269.823318][ T8133] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 269.832356][ T8144] tipc: Enabled bearer , priority 0 [ 269.856345][ T8152] device syzkaller0 entered promiscuous mode [ 269.870262][ T8133] vhci_hcd vhci_hcd.0: Device attached [ 269.870313][ T8142] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.915535][ T4256] vhci_hcd: vhci_device speed not set [ 269.923033][ T8133] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.931673][ T8144] tipc: Resetting bearer [ 269.968117][ T8143] tipc: Resetting bearer [ 270.001061][ T4256] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 270.011906][ T8143] tipc: Disabling bearer [ 270.036000][ T8158] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(15) [ 270.042651][ T8158] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 270.065582][ T8133] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(18) [ 270.072241][ T8133] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 270.143116][ T8133] vhci_hcd vhci_hcd.0: Device attached [ 270.156781][ T8158] vhci_hcd vhci_hcd.0: Device attached [ 270.210999][ T8162] vhci_hcd: connection closed [ 270.212996][ T8148] vhci_hcd: connection closed [ 270.220466][ T7916] vhci_hcd: stop threads [ 270.220636][ T8145] vhci_hcd: connection closed [ 270.236966][ T8135] vhci_hcd: connection reset by peer [ 270.238089][ T7916] vhci_hcd: release socket [ 270.244866][ T8160] vhci_hcd: connection closed [ 270.263760][ T7916] vhci_hcd: disconnect device [ 270.277422][ T7916] vhci_hcd: stop threads [ 270.282733][ T7916] vhci_hcd: release socket [ 270.290150][ T7916] vhci_hcd: disconnect device [ 270.305288][ T7916] vhci_hcd: stop threads [ 270.310350][ T8170] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1247'. [ 270.324511][ T7916] vhci_hcd: release socket [ 270.334513][ T7916] vhci_hcd: disconnect device [ 270.352099][ T7916] vhci_hcd: stop threads [ 270.365673][ T7916] vhci_hcd: release socket [ 270.382753][ T7916] vhci_hcd: disconnect device [ 270.398587][ T7916] vhci_hcd: stop threads [ 270.410896][ T7916] vhci_hcd: release socket [ 270.429905][ T7916] vhci_hcd: disconnect device [ 270.585384][ T8131] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 270.827176][ T8178] loop4: detected capacity change from 0 to 64 [ 271.425494][ T8131] usb 1-1: config 0 has no interfaces? [ 271.625816][ T8131] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 271.642832][ T8131] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.660213][ T8131] usb 1-1: Product: syz [ 271.671828][ T8131] usb 1-1: Manufacturer: syz [ 271.681096][ T8131] usb 1-1: SerialNumber: syz [ 271.720469][ T8131] usb 1-1: config 0 descriptor?? [ 272.052241][ T8170] udc-core: couldn't find an available UDC or it's busy [ 272.060796][ T8170] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 272.265399][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 272.300318][ T8204] IPv6: Can't replace route, no match found [ 272.438367][ T8208] loop3: detected capacity change from 0 to 64 [ 273.086260][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.121598][ T13] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 273.146679][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.160358][ T13] usb 5-1: config 0 descriptor?? [ 273.264626][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 273.765426][ T13] pwc: recv_control_msg error -32 req 02 val 2b00 [ 273.955521][ T13] pwc: recv_control_msg error -32 req 02 val 2700 [ 274.025468][ T13] pwc: recv_control_msg error -32 req 02 val 2c00 [ 274.095406][ T13] pwc: recv_control_msg error -32 req 04 val 1000 [ 274.155433][ T13] pwc: recv_control_msg error -32 req 04 val 1300 [ 274.192234][ T7] usb 1-1: USB disconnect, device number 8 [ 274.198730][ T13] pwc: recv_control_msg error -32 req 04 val 1400 [ 274.265479][ T13] pwc: recv_control_msg error -32 req 02 val 2000 [ 274.315507][ T13] pwc: recv_control_msg error -32 req 02 val 2100 [ 274.367794][ T13] pwc: recv_control_msg error -32 req 04 val 1500 [ 274.435549][ T13] pwc: recv_control_msg error -32 req 02 val 2500 [ 274.485611][ T13] pwc: recv_control_msg error -32 req 02 val 2400 [ 274.545364][ T13] pwc: recv_control_msg error -32 req 02 val 2600 [ 274.606066][ T13] pwc: recv_control_msg error -32 req 02 val 2900 [ 274.665373][ T13] pwc: recv_control_msg error -32 req 02 val 2800 [ 274.716356][ T13] pwc: recv_control_msg error -32 req 04 val 1100 [ 274.771669][ T13] pwc: Registered as video103. [ 274.811018][ T13] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 274.942812][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1271'. [ 275.013568][ T13] usb 5-1: USB disconnect, device number 8 [ 275.155580][ T4256] vhci_hcd: vhci_device speed not set [ 275.356370][ T8258] loop1: detected capacity change from 0 to 64 [ 275.627220][ T8260] netlink: 'syz.1.1274': attribute type 39 has an invalid length. [ 278.296180][ T8295] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 278.302947][ T8295] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 278.402056][ T8295] vhci_hcd vhci_hcd.0: Device attached [ 278.413646][ T8298] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 278.420191][ T8298] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 278.491429][ T8298] vhci_hcd vhci_hcd.0: Device attached [ 278.537079][ T8295] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(6) [ 278.543633][ T8295] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 278.594921][ T8298] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 278.604377][ T8295] vhci_hcd vhci_hcd.0: Device attached [ 278.611863][ T8298] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 278.631515][ T8295] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(11) [ 278.638276][ T8295] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 278.665364][ T4256] vhci_hcd: vhci_device speed not set [ 278.699931][ T8295] vhci_hcd vhci_hcd.0: Device attached [ 278.748800][ T8298] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(18) [ 278.755621][ T8298] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 278.765524][ T4256] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 278.778624][ T8298] vhci_hcd vhci_hcd.0: Device attached [ 278.852322][ T8299] vhci_hcd: connection closed [ 278.852535][ T8309] vhci_hcd: connection closed [ 278.855513][ T7908] vhci_hcd: stop threads [ 278.857425][ T8301] vhci_hcd: connection closed [ 278.862005][ T7908] vhci_hcd: release socket [ 278.862246][ T7908] vhci_hcd: disconnect device [ 278.866465][ T4233] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 278.890420][ T8296] vhci_hcd: connection reset by peer [ 278.903838][ T8312] vhci_hcd: connection closed [ 278.915654][ T7908] vhci_hcd: stop threads [ 278.942575][ T7908] vhci_hcd: release socket [ 278.947163][ T7908] vhci_hcd: disconnect device [ 278.952228][ T7908] vhci_hcd: stop threads [ 278.963605][ T7908] vhci_hcd: release socket [ 278.968701][ T7908] vhci_hcd: disconnect device [ 278.975465][ T8131] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 278.980637][ T7908] vhci_hcd: stop threads [ 278.988731][ T7908] vhci_hcd: release socket [ 279.014713][ T7908] vhci_hcd: disconnect device [ 279.022309][ T7908] vhci_hcd: stop threads [ 279.028196][ T7908] vhci_hcd: release socket [ 279.037935][ T7908] vhci_hcd: disconnect device [ 279.286258][ T4233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.296613][ T8131] usb 4-1: Using ep0 maxpacket: 16 [ 279.312288][ T4233] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 279.329507][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.365377][ T26] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 279.377452][ T4233] usb 1-1: config 0 descriptor?? [ 279.425633][ T8131] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 279.438782][ T4233] pwc: Askey VC010 type 2 USB webcam detected. [ 279.645408][ T8131] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 279.656023][ T8131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.664194][ T8131] usb 4-1: Product: syz [ 279.672649][ T8131] usb 4-1: Manufacturer: syz [ 279.683998][ T8131] usb 4-1: SerialNumber: syz [ 279.698062][ T8131] usb 4-1: config 0 descriptor?? [ 279.795451][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.813395][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.815343][ T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 279.833988][ T26] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 279.855402][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.875441][ T4233] pwc: recv_control_msg error -32 req 02 val 2b00 [ 279.885928][ T26] usb 2-1: config 0 descriptor?? [ 279.915399][ T4233] pwc: recv_control_msg error -32 req 02 val 2700 [ 279.955592][ T4233] pwc: recv_control_msg error -32 req 02 val 2c00 [ 280.005428][ T4233] pwc: recv_control_msg error -32 req 04 val 1000 [ 280.045412][ T4233] pwc: recv_control_msg error -32 req 04 val 1300 [ 280.085396][ T4233] pwc: recv_control_msg error -32 req 04 val 1400 [ 280.125861][ T4233] pwc: recv_control_msg error -32 req 02 val 2000 [ 280.166832][ T4233] pwc: recv_control_msg error -32 req 02 val 2100 [ 280.205310][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 280.217006][ T4233] pwc: recv_control_msg error -32 req 04 val 1500 [ 280.256739][ T4233] pwc: recv_control_msg error -32 req 02 val 2500 [ 280.295847][ T4233] pwc: recv_control_msg error -32 req 02 val 2400 [ 280.335572][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.338584][ T4233] pwc: recv_control_msg error -32 req 02 val 2600 [ 280.364846][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.376398][ T26] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 280.383635][ T26] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 280.399392][ T26] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0006/input/input8 [ 280.427583][ T4233] pwc: recv_control_msg error -32 req 02 val 2900 [ 280.434147][ T13] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 280.434433][ T26] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 280.465338][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.495396][ T13] usb 5-1: config 0 descriptor?? [ 280.498653][ T4233] pwc: recv_control_msg error -32 req 02 val 2800 [ 280.545478][ T4233] pwc: recv_control_msg error -32 req 04 val 1100 [ 280.599687][ T4233] pwc: Registered as video103. [ 280.625998][ T4233] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 280.655922][ T8131] usb 2-1: USB disconnect, device number 8 [ 280.846984][ T7] usb 1-1: USB disconnect, device number 9 [ 280.966382][ T8327] Disabled LAPIC found during irq injection [ 281.050330][ T4232] usb 4-1: USB disconnect, device number 11 [ 281.056513][ T13] usbhid 5-1:0.0: can't add hid device: -71 [ 281.062548][ T13] usbhid: probe of 5-1:0.0 failed with error -71 [ 281.111091][ T13] usb 5-1: USB disconnect, device number 9 [ 281.525404][ T4232] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 281.892188][ T8355] tipc: Started in network mode [ 281.899352][ T8355] tipc: Node identity 3eba9f52d0f8, cluster identity 4711 [ 281.912147][ T8355] tipc: Enabled bearer , priority 0 [ 281.926029][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.937112][ T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 281.950788][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.963303][ T4232] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 281.983067][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.012621][ T4232] usb 4-1: config 0 descriptor?? [ 282.035467][ T8355] device syzkaller0 entered promiscuous mode [ 282.048912][ T8355] tipc: Resetting bearer [ 282.076390][ T8354] tipc: Resetting bearer [ 282.091881][ T8354] tipc: Disabling bearer [ 282.186364][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 282.288875][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 282.304869][ T8337] device bridge0 entered promiscuous mode [ 282.311332][ T13] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 282.351569][ T13] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 282.373608][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.393797][ T8364] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 282.400396][ T8364] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 282.411609][ T13] usb 5-1: config 0 descriptor?? [ 282.425148][ T8337] device bridge0 left promiscuous mode [ 282.435720][ T8351] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 282.462083][ T13] hub 5-1:0.0: bad descriptor, ignoring hub [ 282.468269][ T8367] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 282.474776][ T8367] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 282.483092][ T8364] vhci_hcd vhci_hcd.0: Device attached [ 282.492218][ T13] hub: probe of 5-1:0.0 failed with error -5 [ 282.503985][ T8367] vhci_hcd vhci_hcd.0: Device attached [ 282.513833][ T13] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 282.535681][ T8370] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(6) [ 282.542229][ T8370] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 282.575671][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 282.584059][ T8364] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.611140][ T8370] vhci_hcd vhci_hcd.0: Device attached [ 282.619349][ T8364] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.681405][ T8364] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(11) [ 282.688048][ T8364] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 282.697490][ T4233] vhci_hcd: vhci_device speed not set [ 282.703729][ T8364] vhci_hcd vhci_hcd.0: Device attached [ 282.717967][ T8367] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(18) [ 282.724619][ T8367] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 282.739917][ T8367] vhci_hcd vhci_hcd.0: Device attached [ 282.753719][ T8378] vhci_hcd: connection closed [ 282.755151][ T7914] vhci_hcd: stop threads [ 282.765410][ T4232] usbhid 4-1:0.0: can't add hid device: -71 [ 282.774310][ T4233] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 282.775511][ T4232] usbhid: probe of 4-1:0.0 failed with error -71 [ 282.782155][ T8375] vhci_hcd: connection closed [ 282.789222][ T8371] vhci_hcd: connection closed [ 282.794797][ T8368] vhci_hcd: connection closed [ 282.799302][ T8366] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 282.799865][ T8365] vhci_hcd: connection closed [ 282.808737][ T7914] vhci_hcd: release socket [ 282.815339][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 282.830466][ T7914] vhci_hcd: disconnect device [ 282.842169][ T7914] vhci_hcd: stop threads [ 282.853175][ T7914] vhci_hcd: release socket [ 282.856370][ T4232] usb 4-1: USB disconnect, device number 12 [ 282.858026][ T7914] vhci_hcd: disconnect device [ 282.891012][ T7914] vhci_hcd: stop threads [ 282.898958][ T7914] vhci_hcd: release socket [ 282.915368][ T7914] vhci_hcd: disconnect device [ 282.937132][ T7914] vhci_hcd: stop threads [ 282.941429][ T7914] vhci_hcd: release socket [ 282.945494][ T7] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 282.960620][ T7914] vhci_hcd: disconnect device [ 282.964260][ T7] usb 2-1: config 0 has no interface number 0 [ 282.971667][ T7] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 282.981634][ T7914] vhci_hcd: stop threads [ 282.992987][ T7914] vhci_hcd: release socket [ 282.995667][ T7] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 283.001586][ T7914] vhci_hcd: disconnect device [ 283.028735][ T7] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 283.062442][ T7] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 283.072561][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.103299][ T7] usb 2-1: config 0 descriptor?? [ 283.146973][ T7] ldusb 2-1:0.55: Interrupt in endpoint not found [ 283.362258][ T8131] usb 2-1: USB disconnect, device number 9 [ 283.867616][ T8131] usb 5-1: USB disconnect, device number 10 [ 283.875514][ T4256] vhci_hcd: vhci_device speed not set [ 283.981765][ T8409] tipc: Enabled bearer , priority 0 [ 283.986166][ T8409] device syzkaller0 entered promiscuous mode [ 284.029890][ T8409] tipc: Resetting bearer [ 284.095603][ T8407] tipc: Resetting bearer [ 284.143218][ T8407] tipc: Disabling bearer [ 284.214379][ T8416] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1318'. [ 284.567634][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 284.955376][ T7] usb 2-1: config 0 has no interfaces? [ 285.175368][ T7] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 285.195413][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.235326][ T7] usb 2-1: Product: syz [ 285.257299][ T7] usb 2-1: Manufacturer: syz [ 285.285657][ T7] usb 2-1: SerialNumber: syz [ 285.309892][ T7] usb 2-1: config 0 descriptor?? [ 285.942120][ T8416] udc-core: couldn't find an available UDC or it's busy [ 285.949336][ T8416] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 286.082211][ T8451] netlink: 'syz.2.1329': attribute type 39 has an invalid length. [ 286.893595][ T8455] device syzkaller1 entered promiscuous mode [ 287.350283][ T8460] netlink: 'syz.0.1343': attribute type 12 has an invalid length. [ 287.571986][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1334'. [ 287.710167][ T8468] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1333'. [ 287.956332][ T4233] vhci_hcd: vhci_device speed not set [ 288.031946][ T8480] tipc: Enabled bearer , priority 0 [ 288.089734][ T8480] device syzkaller0 entered promiscuous mode [ 288.173848][ T8480] tipc: Resetting bearer [ 288.199322][ T8478] tipc: Resetting bearer [ 288.225185][ T8478] tipc: Disabling bearer [ 288.341268][ T7] usb 2-1: USB disconnect, device number 10 [ 288.432800][ T8487] loop1: detected capacity change from 0 to 64 [ 289.413459][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 289.435480][ T8131] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 289.454715][ T8505] device vlan2 entered promiscuous mode [ 289.483587][ T8505] device macvlan1 entered promiscuous mode [ 289.497818][ T8507] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1349'. [ 289.571316][ T8508] device bridge_slave_0 left promiscuous mode [ 289.594434][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.629529][ T8508] device bridge_slave_1 left promiscuous mode [ 289.637778][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.650888][ T8508] bond0: (slave bond_slave_0): Releasing backup interface [ 289.715373][ T8131] usb 4-1: Using ep0 maxpacket: 32 [ 289.721208][ T8508] bond0: (slave bond_slave_1): Releasing backup interface [ 289.834273][ T8508] team0: Port device team_slave_1 removed [ 289.840194][ T7] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 289.840285][ T8131] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.865662][ T8131] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.876635][ T8131] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 289.888530][ T8131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.892899][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.925755][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.949373][ T8131] usb 4-1: config 0 descriptor?? [ 290.305579][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.322092][ T7] usb 1-1: config 0 has no interfaces? [ 290.339317][ T7] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 290.361376][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.393035][ T7] usb 1-1: config 0 descriptor?? [ 290.416379][ T8494] Disabled LAPIC found during irq injection [ 290.495399][ T8131] usbhid 4-1:0.0: can't add hid device: -71 [ 290.501414][ T8131] usbhid: probe of 4-1:0.0 failed with error -71 [ 290.535816][ T8131] usb 4-1: USB disconnect, device number 13 [ 290.671309][ T7] usb 1-1: USB disconnect, device number 10 [ 290.739525][ T8517] tipc: Started in network mode [ 290.751846][ T8517] tipc: Node identity 080211, cluster identity 4711 [ 290.759712][ T8517] tipc: Enabled bearer , priority 0 [ 290.865855][ T8523] loop4: detected capacity change from 0 to 64 [ 291.491333][ T8532] netlink: 'syz.3.1357': attribute type 12 has an invalid length. [ 291.850445][ T8545] tipc: Enabled bearer , priority 0 [ 291.874479][ T8545] device syzkaller0 entered promiscuous mode [ 291.886435][ T4256] tipc: Node number set to 134353152 [ 291.943751][ T8545] tipc: Resetting bearer [ 291.964896][ T8544] tipc: Resetting bearer [ 292.027525][ T8544] tipc: Disabling bearer [ 292.353538][ T8551] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1364'. [ 292.816558][ T8566] loop3: detected capacity change from 0 to 64 [ 293.418331][ T4256] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 293.665456][ T4256] usb 2-1: device descriptor read/64, error -71 [ 293.955696][ T4256] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 294.177794][ T4256] usb 2-1: device descriptor read/64, error -71 [ 294.315877][ T4256] usb usb2-port1: attempt power cycle [ 294.737285][ T4256] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 294.846822][ T4256] usb 2-1: device descriptor read/8, error -71 [ 295.436443][ T4256] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 295.642534][ T4256] usb 2-1: device descriptor read/8, error -71 [ 295.833788][ T4256] usb usb2-port1: unable to enumerate USB device [ 296.392850][ T8642] loop0: detected capacity change from 0 to 64 [ 296.705427][ T4256] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 297.265490][ T4256] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.285352][ T4256] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 297.314147][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.361785][ T4256] usb 4-1: config 0 descriptor?? [ 297.406385][ T4256] pwc: Askey VC010 type 2 USB webcam detected. [ 297.615466][ T8131] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 297.835435][ T4256] pwc: recv_control_msg error -32 req 02 val 2b00 [ 297.895406][ T4256] pwc: recv_control_msg error -32 req 02 val 2700 [ 297.975561][ T4256] pwc: recv_control_msg error -32 req 02 val 2c00 [ 297.995456][ T8131] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 298.023310][ T8131] usb 2-1: config 0 has no interface number 0 [ 298.045387][ T4256] pwc: recv_control_msg error -32 req 04 val 1000 [ 298.052585][ T8131] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 298.085461][ T4256] pwc: recv_control_msg error -32 req 04 val 1300 [ 298.135348][ T4256] pwc: recv_control_msg error -32 req 04 val 1400 [ 298.175496][ T4256] pwc: recv_control_msg error -32 req 02 val 2000 [ 298.215356][ T4256] pwc: recv_control_msg error -32 req 02 val 2100 [ 298.225402][ T8131] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 298.245604][ T8131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.253828][ T8131] usb 2-1: Product: syz [ 298.275387][ T4256] pwc: recv_control_msg error -32 req 04 val 1500 [ 298.295920][ T8131] usb 2-1: Manufacturer: syz [ 298.315421][ T8131] usb 2-1: SerialNumber: syz [ 298.325482][ T4256] pwc: recv_control_msg error -32 req 02 val 2500 [ 298.346917][ T8131] usb 2-1: config 0 descriptor?? [ 298.365537][ T8663] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 298.375497][ T4256] pwc: recv_control_msg error -32 req 02 val 2400 [ 298.385813][ T8131] usb-storage 2-1:0.20: USB Mass Storage device detected [ 298.416643][ T4256] pwc: recv_control_msg error -32 req 02 val 2600 [ 298.428710][ T8131] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 298.525382][ T4256] pwc: recv_control_msg error -32 req 02 val 2900 [ 298.546960][ T8681] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1407'. [ 298.585382][ T4256] pwc: recv_control_msg error -32 req 02 val 2800 [ 298.602910][ T8131] scsi host1: usb-storage 2-1:0.20 [ 298.614729][ T8131] usb 2-1: USB disconnect, device number 15 [ 298.846248][ T4256] pwc: recv_control_msg error -71 req 04 val 1200 [ 298.853914][ T4256] pwc: Registered as video103. [ 298.860737][ T4256] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 298.883225][ T4256] usb 4-1: USB disconnect, device number 14 [ 299.840701][ T8700] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1409'. [ 300.165631][ T8708] loop4: detected capacity change from 0 to 64 [ 300.904178][ T25] audit: type=1326 audit(1757566650.634:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb76dfdba9 code=0x7ffc0000 [ 300.958653][ T25] audit: type=1326 audit(1757566650.694:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb76dfdba9 code=0x7ffc0000 [ 301.001731][ T25] audit: type=1326 audit(1757566650.724:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fcb76dfdba9 code=0x7ffc0000 [ 301.091316][ T25] audit: type=1326 audit(1757566650.724:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb76dfdba9 code=0x7ffc0000 [ 301.447374][ T8736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1426'. [ 301.480796][ T8736] bridge: RTM_NEWNEIGH with invalid ether address [ 301.490873][ T8736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1426'. [ 301.501494][ T8736] bridge: RTM_NEWNEIGH with invalid ether address [ 301.512429][ T8738] tipc: Started in network mode [ 301.517886][ T8738] tipc: Node identity 1efb71da3cb5, cluster identity 4711 [ 301.526417][ T8738] tipc: Enabled bearer , priority 0 [ 301.553147][ T8738] device syzkaller0 entered promiscuous mode [ 301.597049][ T8738] tipc: Resetting bearer [ 301.606863][ T8737] tipc: Resetting bearer [ 301.619178][ T8737] tipc: Disabling bearer [ 301.742393][ T8743] loop3: detected capacity change from 0 to 64 [ 301.753610][ T8744] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 301.797748][ T8744] netlink: 'syz.0.1427': attribute type 1 has an invalid length. [ 301.835639][ T8744] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 302.540398][ T8752] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1429'. [ 302.660304][ T8753] netlink: 'syz.2.1439': attribute type 39 has an invalid length. [ 303.746180][ T8770] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1437'. [ 303.815434][ T8771] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1438'. [ 303.879263][ T8771] openvswitch: netlink: Flow key attr not present in new flow. [ 305.715337][ T4256] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 306.035462][ T4256] usb 2-1: Using ep0 maxpacket: 8 [ 306.195382][ T4256] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 306.389713][ T4256] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 306.404576][ T4256] usb 2-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 306.428350][ T4256] usb 2-1: Product: syz [ 306.439263][ T4256] usb 2-1: Manufacturer: syz [ 306.454008][ T4256] usb 2-1: SerialNumber: syz [ 306.480546][ T4256] usb 2-1: config 0 descriptor?? [ 306.591125][ T8820] input: syz0 as /devices/virtual/input/input11 [ 306.759115][ T4256] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 307.644007][ T8836] tipc: Enabling of bearer rejected, already enabled [ 307.787144][ T8842] netlink: 'syz.2.1463': attribute type 10 has an invalid length. [ 307.869850][ T8842] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 308.056686][ T4256] gspca_sunplus: reg_w_riv err -71 [ 308.061992][ T4256] sunplus: probe of 2-1:0.0 failed with error -71 [ 308.108542][ T4256] usb 2-1: USB disconnect, device number 16 [ 308.454805][ T8862] tipc: Enabling of bearer rejected, already enabled [ 308.658387][ T8875] netlink: 'syz.1.1478': attribute type 10 has an invalid length. [ 308.701609][ T8875] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 309.078677][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1484'. [ 309.387827][ T8902] tipc: Enabled bearer , priority 0 [ 309.485846][ T8902] device syzkaller0 entered promiscuous mode [ 309.505976][ T8902] tipc: Resetting bearer [ 309.559280][ T8901] tipc: Resetting bearer [ 309.576272][ T8901] tipc: Disabling bearer [ 310.137936][ T25] audit: type=1326 audit(1757566659.874:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edbb4cba9 code=0x7ffc0000 [ 310.218573][ T25] audit: type=1326 audit(1757566659.874:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edbb4cba9 code=0x7ffc0000 [ 310.301913][ T25] audit: type=1326 audit(1757566659.904:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f0edbb4cba9 code=0x7ffc0000 [ 310.327919][ T8942] tipc: Enabling of bearer rejected, failed to enable media [ 310.356661][ T25] audit: type=1326 audit(1757566659.904:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0edbb4cba9 code=0x7ffc0000 [ 310.380046][ T8131] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 310.536417][ T8947] tipc: Enabled bearer , priority 0 [ 310.543821][ T8947] device syzkaller0 entered promiscuous mode [ 310.559719][ T8947] tipc: Resetting bearer [ 310.569099][ T8946] tipc: Resetting bearer [ 310.579087][ T8946] tipc: Disabling bearer [ 310.745428][ T8131] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.794716][ T8131] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 310.844043][ T8131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.880204][ T8131] usb 5-1: config 0 descriptor?? [ 310.947791][ T8131] pwc: Askey VC010 type 2 USB webcam detected. [ 311.385676][ T8131] pwc: recv_control_msg error -32 req 02 val 2b00 [ 311.465439][ T8131] pwc: recv_control_msg error -32 req 02 val 2700 [ 311.525429][ T8131] pwc: recv_control_msg error -32 req 02 val 2c00 [ 311.605363][ T8131] pwc: recv_control_msg error -32 req 04 val 1000 [ 311.665522][ T8131] pwc: recv_control_msg error -32 req 04 val 1300 [ 311.705462][ T8131] pwc: recv_control_msg error -32 req 04 val 1400 [ 311.760476][ T8131] pwc: recv_control_msg error -32 req 02 val 2000 [ 311.818900][ T8993] tipc: Enabling of bearer rejected, already enabled [ 311.868965][ T8131] pwc: recv_control_msg error -32 req 02 val 2100 [ 311.936590][ T8131] pwc: recv_control_msg error -32 req 04 val 1500 [ 311.985445][ T8131] pwc: recv_control_msg error -32 req 02 val 2500 [ 312.036685][ T8131] pwc: recv_control_msg error -32 req 02 val 2400 [ 312.075503][ T8131] pwc: recv_control_msg error -32 req 02 val 2600 [ 312.125368][ T8131] pwc: recv_control_msg error -32 req 02 val 2900 [ 312.175377][ T8131] pwc: recv_control_msg error -32 req 02 val 2800 [ 312.245724][ T9004] usb usb8: usbfs: process 9004 (syz.1.1527) did not claim interface 0 before use [ 312.445469][ T8131] pwc: recv_control_msg error -71 req 04 val 1200 [ 312.490082][ T8131] pwc: Registered as video103. [ 312.515098][ T8131] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 312.571806][ T8131] usb 5-1: USB disconnect, device number 11 [ 312.675357][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 313.045447][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.064667][ T9022] tipc: Enabled bearer , priority 0 [ 313.072353][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.083567][ T7] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 313.093207][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.104381][ T7] usb 2-1: config 0 descriptor?? [ 313.141142][ T9022] device syzkaller0 entered promiscuous mode [ 313.212028][ T9021] tipc: Resetting bearer [ 313.237195][ T9021] tipc: Disabling bearer [ 313.539169][ T9029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1537'. [ 313.587238][ T7] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 313.609331][ T7] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 313.632323][ T7] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 313.652203][ T7] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 313.665799][ T7] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 313.675563][ T7] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 313.682595][ T7] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 313.691777][ T7] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 313.816072][ T7] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 313.986763][ T9046] netlink: 'syz.2.1543': attribute type 12 has an invalid length. [ 314.082015][ T9050] tipc: Enabled bearer , priority 0 [ 314.107858][ T9050] device syzkaller0 entered promiscuous mode [ 314.124352][ T9048] tipc: Resetting bearer [ 314.185413][ T9048] tipc: Disabling bearer [ 314.851329][ T9008] cp2112 0003:10C4:EA90.0007: Error starting transaction: -38 [ 315.195533][ T7] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 315.252447][ T7] usb 2-1: USB disconnect, device number 17 [ 315.467301][ T9084] netlink: 'syz.2.1557': attribute type 12 has an invalid length. [ 315.478504][ T9079] fido_id[9079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 315.832249][ T9094] tipc: Enabled bearer , priority 0 [ 315.871852][ T9094] device syzkaller0 entered promiscuous mode [ 315.919114][ T9093] tipc: Resetting bearer [ 315.957654][ T9093] tipc: Disabling bearer [ 316.838695][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.845607][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.372608][ T9115] netlink: 'syz.1.1569': attribute type 12 has an invalid length. [ 317.424069][ T9117] tipc: Enabling of bearer rejected, failed to enable media [ 317.563329][ T9124] tipc: Enabled bearer , priority 0 [ 317.606289][ T9124] device syzkaller0 entered promiscuous mode [ 317.619635][ T9123] tipc: Resetting bearer [ 317.700248][ T9123] tipc: Disabling bearer [ 317.815329][ T4256] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 318.075411][ T4256] usb 1-1: Using ep0 maxpacket: 32 [ 318.195385][ T4256] usb 1-1: config index 0 descriptor too short (expected 249, got 27) [ 318.207371][ T4256] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.227870][ T4225] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 318.228820][ T4256] usb 1-1: config 0 has no interfaces? [ 318.254564][ T4256] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 318.284583][ T4256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.314182][ T4256] usb 1-1: config 0 descriptor?? [ 318.475485][ T4225] usb 4-1: Using ep0 maxpacket: 8 [ 318.571687][ T8131] usb 1-1: USB disconnect, device number 11 [ 318.605529][ T4225] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 318.622862][ T4225] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 318.642121][ T4225] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.658747][ T4225] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 318.668734][ T4225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.726413][ T4225] usbtmc 4-1:16.0: bulk endpoints not found [ 318.774925][ T9140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1577'. [ 319.955378][ T4225] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 320.296899][ T9158] netlink: 'syz.0.1584': attribute type 12 has an invalid length. [ 320.355475][ T4225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.395665][ T4225] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 320.441686][ T4225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.476203][ T4225] usb 2-1: config 0 descriptor?? [ 320.526372][ T4225] pwc: Askey VC010 type 2 USB webcam detected. [ 320.550888][ T7] usb 4-1: USB disconnect, device number 15 [ 320.654147][ T9166] tipc: Enabled bearer , priority 0 [ 320.673957][ T9166] device syzkaller0 entered promiscuous mode [ 320.734728][ T9164] tipc: Resetting bearer [ 320.755146][ T9164] tipc: Disabling bearer [ 320.965415][ T4225] pwc: recv_control_msg error -32 req 02 val 2b00 [ 321.005556][ T4225] pwc: recv_control_msg error -32 req 02 val 2700 [ 321.055431][ T4225] pwc: recv_control_msg error -32 req 02 val 2c00 [ 321.135452][ T4225] pwc: recv_control_msg error -32 req 04 val 1000 [ 321.175479][ T4225] pwc: recv_control_msg error -32 req 04 val 1300 [ 321.658807][ T4256] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 322.045376][ T4225] pwc: recv_control_msg error -32 req 04 val 1400 [ 322.095405][ T4225] pwc: recv_control_msg error -32 req 02 val 2000 [ 322.205634][ T4225] pwc: recv_control_msg error -32 req 02 val 2100 [ 322.265582][ T4225] pwc: recv_control_msg error -32 req 04 val 1500 [ 322.329835][ T4225] pwc: recv_control_msg error -32 req 02 val 2500 [ 322.395561][ T4225] pwc: recv_control_msg error -32 req 02 val 2400 [ 322.436654][ T4256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.445470][ T4225] pwc: recv_control_msg error -32 req 02 val 2600 [ 322.462451][ T4256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.495482][ T4225] pwc: recv_control_msg error -32 req 02 val 2900 [ 322.506093][ T9193] netlink: 'syz.2.1595': attribute type 12 has an invalid length. [ 322.524027][ T4256] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 322.535445][ T4225] pwc: recv_control_msg error -32 req 02 val 2800 [ 322.554759][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.601000][ T4256] usb 4-1: config 0 descriptor?? [ 322.685853][ T9199] tipc: Enabled bearer , priority 0 [ 322.695945][ T9199] device syzkaller0 entered promiscuous mode [ 322.736095][ T9197] tipc: Resetting bearer [ 322.801110][ T4225] pwc: recv_control_msg error -71 req 04 val 1200 [ 322.815740][ T4225] pwc: Registered as video103. [ 322.821661][ T4225] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 322.863141][ T9197] tipc: Disabling bearer [ 322.884761][ T4225] usb 2-1: USB disconnect, device number 18 [ 323.087091][ T4256] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 323.104602][ T4256] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 323.121639][ T4256] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 323.131755][ T4256] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 323.139908][ T4256] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 323.147470][ T4256] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 323.157526][ T4256] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 323.176515][ T4256] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 323.270701][ T9208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1599'. [ 323.310510][ T4256] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00 [ 323.938959][ T9174] cp2112 0003:10C4:EA90.0008: Error starting transaction: -38 [ 323.965585][ T4256] cp2112 0003:10C4:EA90.0008: error reading lock byte: -71 [ 324.003572][ T4256] usb 4-1: USB disconnect, device number 16 [ 324.124617][ T9219] fido_id[9219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 324.316423][ T9227] netlink: 'syz.0.1607': attribute type 12 has an invalid length. [ 324.603515][ T9235] tipc: Enabled bearer , priority 0 [ 324.640973][ T9235] tipc: Resetting bearer [ 324.662177][ T9234] tipc: Disabling bearer [ 325.216505][ T4225] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 325.585422][ T4225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.625534][ T4225] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 325.670094][ T4225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.719591][ T4225] usb 2-1: config 0 descriptor?? [ 325.777480][ T4225] pwc: Askey VC010 type 2 USB webcam detected. [ 326.206464][ T4225] pwc: recv_control_msg error -32 req 02 val 2b00 [ 326.219745][ T9260] netlink: 'syz.3.1618': attribute type 12 has an invalid length. [ 326.266240][ T4225] pwc: recv_control_msg error -32 req 02 val 2700 [ 326.274268][ T9262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1616'. [ 326.335335][ T4225] pwc: recv_control_msg error -32 req 02 val 2c00 [ 326.375572][ T4225] pwc: recv_control_msg error -32 req 04 val 1000 [ 326.415441][ T4225] pwc: recv_control_msg error -32 req 04 val 1300 [ 326.495500][ T4225] pwc: recv_control_msg error -32 req 04 val 1400 [ 326.535843][ T4225] pwc: recv_control_msg error -32 req 02 val 2000 [ 326.591004][ T4225] pwc: recv_control_msg error -32 req 02 val 2100 [ 326.635574][ T4225] pwc: recv_control_msg error -32 req 04 val 1500 [ 326.675452][ T4225] pwc: recv_control_msg error -32 req 02 val 2500 [ 326.715353][ T4225] pwc: recv_control_msg error -32 req 02 val 2400 [ 326.755426][ T4225] pwc: recv_control_msg error -32 req 02 val 2600 [ 326.795381][ T4225] pwc: recv_control_msg error -32 req 02 val 2900 [ 326.835335][ T4225] pwc: recv_control_msg error -32 req 02 val 2800 [ 327.004133][ T9275] tipc: Enabling of bearer rejected, already enabled [ 327.096110][ T4225] pwc: recv_control_msg error -71 req 04 val 1200 [ 327.105128][ T4225] pwc: Registered as video103. [ 327.125975][ T4225] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 327.171539][ T4225] usb 2-1: USB disconnect, device number 19 [ 328.197930][ T9303] delete_channel: no stack [ 328.560170][ T9310] tipc: Enabled bearer , priority 0 [ 328.617088][ T9310] tipc: Resetting bearer [ 328.662887][ T9309] tipc: Disabling bearer [ 329.530675][ T9340] tipc: Enabling of bearer rejected, already enabled [ 330.855890][ T9370] tipc: Enabled bearer , priority 0 [ 330.919793][ T9370] device syzkaller0 entered promiscuous mode [ 330.957998][ T9370] tipc: Resetting bearer [ 330.993940][ T9369] tipc: Resetting bearer [ 331.056614][ T9369] tipc: Disabling bearer [ 331.102196][ T9377] tipc: Enabling of bearer rejected, failed to enable media [ 331.120250][ T25] audit: type=1326 audit(1757566680.854:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7390fd0ba9 code=0x7ffc0000 [ 331.168108][ T25] audit: type=1326 audit(1757566680.884:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7390fd0ba9 code=0x7ffc0000 [ 331.328493][ T25] audit: type=1326 audit(1757566680.884:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7390fd0ba9 code=0x7ffc0000 [ 331.412062][ T25] audit: type=1326 audit(1757566680.884:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7390fd0ba9 code=0x7ffc0000 [ 331.462474][ T25] audit: type=1326 audit(1757566680.884:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7390fd0ba9 code=0x7ffc0000 [ 331.554479][ T25] audit: type=1326 audit(1757566680.884:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f7390fd0ba9 code=0x7ffc0000 [ 331.699417][ T25] audit: type=1326 audit(1757566680.884:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7390fd0ba9 code=0x7ffc0000 [ 331.807290][ T25] audit: type=1326 audit(1757566680.884:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7390fd0ba9 code=0x7ffc0000 [ 331.911438][ T25] audit: type=1326 audit(1757566680.914:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7390fd0ba9 code=0x7ffc0000 [ 332.033818][ T25] audit: type=1326 audit(1757566680.914:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7390fd0ba9 code=0x7ffc0000 [ 332.724714][ T9410] binder: BINDER_SET_CONTEXT_MGR already set [ 332.753869][ T9410] binder: 9409:9410 ioctl 4018620d 2000000002c0 returned -16 [ 334.984207][ T9453] device syzkaller0 entered promiscuous mode [ 336.799879][ T9496] device syzkaller0 entered promiscuous mode [ 338.301725][ T9521] loop3: detected capacity change from 0 to 64 [ 338.435916][ T4225] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 338.965354][ T4225] usb 5-1: Using ep0 maxpacket: 8 [ 339.043682][ T25] kauditd_printk_skb: 11 callbacks suppressed [ 339.043699][ T25] audit: type=1326 audit(1757566688.774:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.0.1712" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb76dfdba9 code=0x0 [ 339.115518][ T4225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.159987][ T4225] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 339.192538][ T4225] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 339.243340][ T4225] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 339.268642][ T4225] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 339.281918][ T4225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.346305][ T4225] hub 5-1:1.0: bad descriptor, ignoring hub [ 339.354287][ T4225] hub: probe of 5-1:1.0 failed with error -5 [ 339.383400][ T4225] cdc_wdm 5-1:1.0: skipping garbage [ 339.400858][ T4225] cdc_wdm 5-1:1.0: skipping garbage [ 339.434636][ T4225] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 339.455145][ T4225] cdc_wdm 5-1:1.0: Unknown control protocol [ 339.662248][ T9544] netlink: 'syz.1.1724': attribute type 12 has an invalid length. [ 339.996855][ T9512] usb 5-1: reset high-speed USB device number 12 using dummy_hcd [ 340.624152][ T9558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1719'. [ 340.966929][ T9577] netlink: 'syz.1.1726': attribute type 12 has an invalid length. [ 341.085809][ T8131] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 341.345337][ T8131] usb 1-1: Using ep0 maxpacket: 8 [ 341.467184][ T8131] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 341.492893][ T8131] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.509342][ T8131] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 341.520271][ T8131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.577289][ T4233] usb 5-1: USB disconnect, device number 12 [ 342.465834][ T8131] usbtmc 1-1:16.0: bulk endpoints not found [ 342.565603][ T8131] usb 1-1: USB disconnect, device number 12 [ 342.906819][ T9612] netlink: 'syz.2.1737': attribute type 12 has an invalid length. [ 342.938462][ T9608] device syzkaller0 entered promiscuous mode [ 344.455607][ T13] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 344.649491][ T9654] netlink: 'syz.2.1748': attribute type 12 has an invalid length. [ 344.815056][ T9663] tipc: Enabled bearer , priority 0 [ 344.822513][ T9663] device syzkaller0 entered promiscuous mode [ 344.839702][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.854703][ T9663] tipc: Resetting bearer [ 344.861214][ T13] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 345.247056][ T9662] tipc: Resetting bearer [ 345.743049][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.755012][ T13] usb 5-1: config 0 descriptor?? [ 345.764346][ T9662] tipc: Disabling bearer [ 345.773916][ T25] audit: type=1326 audit(1757566695.514:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.1756" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0edbb4cba9 code=0x0 [ 345.842954][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 345.910332][ T9677] loop1: detected capacity change from 0 to 64 [ 346.300730][ T9686] netlink: 'syz.1.1758': attribute type 39 has an invalid length. [ 347.008276][ T13] pwc: recv_control_msg error -32 req 02 val 2b00 [ 347.065351][ T13] pwc: recv_control_msg error -32 req 02 val 2700 [ 347.115587][ T13] pwc: recv_control_msg error -32 req 02 val 2c00 [ 347.165769][ T13] pwc: recv_control_msg error -32 req 04 val 1000 [ 347.225377][ T13] pwc: recv_control_msg error -32 req 04 val 1300 [ 347.265345][ T13] pwc: recv_control_msg error -32 req 04 val 1400 [ 348.125381][ T13] pwc: recv_control_msg error -32 req 02 val 2000 [ 348.165533][ T13] pwc: recv_control_msg error -32 req 02 val 2100 [ 348.205471][ T13] pwc: recv_control_msg error -32 req 04 val 1500 [ 348.245393][ T13] pwc: recv_control_msg error -32 req 02 val 2500 [ 348.295513][ T13] pwc: recv_control_msg error -32 req 02 val 2400 [ 348.338015][ T13] pwc: recv_control_msg error -32 req 02 val 2600 [ 348.385353][ T13] pwc: recv_control_msg error -32 req 02 val 2900 [ 348.435420][ T13] pwc: recv_control_msg error -32 req 02 val 2800 [ 348.705354][ T13] pwc: recv_control_msg error -71 req 04 val 1200 [ 348.741011][ T13] pwc: Registered as video103. [ 348.778183][ T13] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 348.894725][ T13] usb 5-1: USB disconnect, device number 13 [ 348.953991][ T9737] input: syz0 as /devices/virtual/input/input16 [ 349.122685][ T4256] [ 349.125079][ T4256] ====================================================== [ 349.132410][ T4256] WARNING: possible circular locking dependency detected [ 349.139793][ T4256] syzkaller #0 Not tainted [ 349.144223][ T4256] ------------------------------------------------------ [ 349.151350][ T4256] kworker/1:7/4256 is trying to acquire lock: [ 349.157475][ T4256] ffff888066b80c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 349.168559][ T4256] [ 349.168559][ T4256] but task is already holding lock: [ 349.176051][ T4256] ffffffff8d4c01a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 349.185185][ T4256] [ 349.185185][ T4256] which lock already depends on the new lock. [ 349.185185][ T4256] [ 349.195664][ T4256] [ 349.195664][ T4256] the existing dependency chain (in reverse order) is: [ 349.204759][ T4256] [ 349.204759][ T4256] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 349.212722][ T4256] __mutex_lock_common+0x1eb/0x2390 [ 349.218509][ T4256] mutex_lock_nested+0x17/0x20 [ 349.223859][ T4256] rfkill_register+0x33/0x8a0 [ 349.229032][ T4256] hci_register_dev+0x452/0x970 [ 349.234414][ T4256] vhci_create_device+0x32c/0x5c0 [ 349.239933][ T4256] vhci_write+0x391/0x450 [ 349.244759][ T4256] vfs_write+0x712/0xd00 [ 349.249514][ T4256] ksys_write+0x14d/0x250 [ 349.254510][ T4256] do_syscall_64+0x4c/0xa0 [ 349.259531][ T4256] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 349.265945][ T4256] [ 349.265945][ T4256] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 349.274047][ T4256] __mutex_lock_common+0x1eb/0x2390 [ 349.280071][ T4256] mutex_lock_nested+0x17/0x20 [ 349.285358][ T4256] vhci_send_frame+0x88/0x100 [ 349.290557][ T4256] hci_send_frame+0x1a9/0x2e0 [ 349.295769][ T4256] hci_tx_work+0x9f9/0x1710 [ 349.300971][ T4256] process_one_work+0x863/0x1000 [ 349.306511][ T4256] worker_thread+0xaa8/0x12a0 [ 349.311863][ T4256] kthread+0x436/0x520 [ 349.316452][ T4256] ret_from_fork+0x1f/0x30 [ 349.321639][ T4256] [ 349.321639][ T4256] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 349.330907][ T4256] __flush_work+0xdd/0x1b0 [ 349.335839][ T4256] hci_dev_do_close+0x1e7/0x1030 [ 349.341667][ T4256] hci_unregister_dev+0x2d7/0x580 [ 349.347216][ T4256] vhci_release+0x73/0xc0 [ 349.352156][ T4256] __fput+0x234/0x930 [ 349.356634][ T4256] task_work_run+0x125/0x1a0 [ 349.361826][ T4256] do_exit+0x61e/0x20a0 [ 349.366503][ T4256] do_group_exit+0x12e/0x300 [ 349.371691][ T4256] get_signal+0x6ca/0x12c0 [ 349.376621][ T4256] arch_do_signal_or_restart+0xc1/0x1300 [ 349.382752][ T4256] exit_to_user_mode_loop+0x9e/0x130 [ 349.388553][ T4256] exit_to_user_mode_prepare+0xb1/0x140 [ 349.394605][ T4256] syscall_exit_to_user_mode+0x16/0x40 [ 349.400595][ T4256] ret_from_fork+0x15/0x30 [ 349.405533][ T4256] [ 349.405533][ T4256] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 349.413297][ T4256] __mutex_lock_common+0x1eb/0x2390 [ 349.419008][ T4256] mutex_lock_nested+0x17/0x20 [ 349.424282][ T4256] bg_scan_update+0x44/0x3b0 [ 349.429453][ T4256] process_one_work+0x863/0x1000 [ 349.434912][ T4256] worker_thread+0xaa8/0x12a0 [ 349.440118][ T4256] kthread+0x436/0x520 [ 349.444693][ T4256] ret_from_fork+0x1f/0x30 [ 349.449708][ T4256] [ 349.449708][ T4256] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 349.459507][ T4256] __lock_acquire+0x2c33/0x7c60 [ 349.464946][ T4256] lock_acquire+0x197/0x3f0 [ 349.469964][ T4256] __flush_work+0xdd/0x1b0 [ 349.474888][ T4256] __cancel_work_timer+0x3ac/0x520 [ 349.480511][ T4256] hci_request_cancel_all+0xcc/0x300 [ 349.486325][ T4256] hci_dev_do_close+0x4e/0x1030 [ 349.491773][ T4256] hci_rfkill_set_block+0x10a/0x190 [ 349.498214][ T4256] rfkill_set_block+0x1c6/0x420 [ 349.503768][ T4256] rfkill_epo+0x75/0x170 [ 349.508615][ T4256] rfkill_op_handler+0x76/0x220 [ 349.514057][ T4256] process_one_work+0x863/0x1000 [ 349.519520][ T4256] worker_thread+0xaa8/0x12a0 [ 349.524779][ T4256] kthread+0x436/0x520 [ 349.529373][ T4256] ret_from_fork+0x1f/0x30 [ 349.534302][ T4256] [ 349.534302][ T4256] other info that might help us debug this: [ 349.534302][ T4256] [ 349.544702][ T4256] Chain exists of: [ 349.544702][ T4256] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 349.544702][ T4256] [ 349.560633][ T4256] Possible unsafe locking scenario: [ 349.560633][ T4256] [ 349.568159][ T4256] CPU0 CPU1 [ 349.573600][ T4256] ---- ---- [ 349.578944][ T4256] lock(rfkill_global_mutex); [ 349.583698][ T4256] lock(&data->open_mutex); [ 349.590799][ T4256] lock(rfkill_global_mutex); [ 349.598064][ T4256] lock((work_completion)(&hdev->bg_scan_update)); [ 349.604937][ T4256] [ 349.604937][ T4256] *** DEADLOCK *** [ 349.604937][ T4256] [ 349.613165][ T4256] 3 locks held by kworker/1:7/4256: [ 349.618457][ T4256] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 349.628956][ T4256] #1: ffffc9000334fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 349.639295][ T4256] #2: ffffffff8d4c01a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 349.648857][ T4256] [ 349.648857][ T4256] stack backtrace: [ 349.654738][ T4256] CPU: 1 PID: 4256 Comm: kworker/1:7 Not tainted syzkaller #0 [ 349.662294][ T4256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.672434][ T4256] Workqueue: events rfkill_op_handler [ 349.677858][ T4256] Call Trace: [ 349.681153][ T4256] [ 349.684093][ T4256] dump_stack_lvl+0x168/0x230 [ 349.688775][ T4256] ? load_image+0x3b0/0x3b0 [ 349.693271][ T4256] ? show_regs_print_info+0x20/0x20 [ 349.698475][ T4256] ? print_circular_bug+0x12b/0x1a0 [ 349.703851][ T4256] check_noncircular+0x274/0x310 [ 349.708772][ T4256] ? add_chain_block+0x940/0x940 [ 349.713780][ T4256] ? lockdep_lock+0xdc/0x1e0 [ 349.718452][ T4256] ? __lock_acquire+0x12d9/0x7c60 [ 349.723601][ T4256] ? lockdep_lock+0x1e0/0x1e0 [ 349.728287][ T4256] ? mark_lock+0x94/0x320 [ 349.732625][ T4256] __lock_acquire+0x2c33/0x7c60 [ 349.737499][ T4256] ? unwind_next_frame+0x1296/0x1d90 [ 349.742799][ T4256] ? verify_lock_unused+0x140/0x140 [ 349.747991][ T4256] ? ret_from_fork+0x1e/0x30 [ 349.752746][ T4256] lock_acquire+0x197/0x3f0 [ 349.757359][ T4256] ? __flush_work+0xc1/0x1b0 [ 349.762050][ T4256] ? __lock_acquire+0x7c60/0x7c60 [ 349.767263][ T4256] ? read_lock_is_recursive+0x10/0x10 [ 349.772612][ T4256] ? start_flush_work+0x776/0x820 [ 349.777615][ T4256] ? kasan_set_track+0x62/0x70 [ 349.782620][ T4256] __flush_work+0xdd/0x1b0 [ 349.787118][ T4256] ? __flush_work+0xc1/0x1b0 [ 349.791682][ T4256] ? flush_work+0x20/0x20 [ 349.795987][ T4256] ? try_to_grab_pending+0xf3/0x7e0 [ 349.801172][ T4256] ? lockdep_hardirqs_off+0x70/0x100 [ 349.806526][ T4256] ? mark_lock+0x94/0x320 [ 349.810851][ T4256] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 349.816910][ T4256] ? lock_chain_count+0x20/0x20 [ 349.821738][ T4256] ? lockdep_hardirqs_off+0x70/0x100 [ 349.827098][ T4256] ? mark_lock+0x94/0x320 [ 349.831421][ T4256] ? __cancel_work_timer+0x331/0x520 [ 349.836687][ T4256] __cancel_work_timer+0x3ac/0x520 [ 349.841899][ T4256] ? cancel_work_sync+0x20/0x20 [ 349.846765][ T4256] ? __cancel_work+0x1f4/0x2d0 [ 349.851523][ T4256] ? lockdep_hardirqs_on+0x94/0x140 [ 349.856716][ T4256] ? __cancel_work+0x26f/0x2d0 [ 349.861595][ T4256] ? cancel_work+0x20/0x20 [ 349.866094][ T4256] hci_request_cancel_all+0xcc/0x300 [ 349.871575][ T4256] hci_dev_do_close+0x4e/0x1030 [ 349.876420][ T4256] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 349.882398][ T4256] ? _raw_spin_unlock+0x40/0x40 [ 349.887399][ T4256] ? kobject_uevent_env+0x371/0x890 [ 349.892630][ T4256] hci_rfkill_set_block+0x10a/0x190 [ 349.897904][ T4256] ? rcu_lock_release+0x20/0x20 [ 349.902926][ T4256] rfkill_set_block+0x1c6/0x420 [ 349.907762][ T4256] rfkill_epo+0x75/0x170 [ 349.912067][ T4256] rfkill_op_handler+0x76/0x220 [ 349.917241][ T4256] process_one_work+0x863/0x1000 [ 349.922175][ T4256] ? worker_detach_from_pool+0x240/0x240 [ 349.927977][ T4256] ? lockdep_hardirqs_off+0x70/0x100 [ 349.933252][ T4256] ? _raw_spin_lock_irq+0xab/0xe0 [ 349.938254][ T4256] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 349.943607][ T4256] ? wq_worker_running+0x97/0x170 [ 349.948620][ T4256] worker_thread+0xaa8/0x12a0 [ 349.953276][ T4256] ? lockdep_hardirqs_on+0x94/0x140 [ 349.959141][ T4256] ? lockdep_hardirqs_on+0x94/0x140 [ 349.964402][ T4256] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 349.970311][ T4256] kthread+0x436/0x520 [ 349.974353][ T4256] ? rcu_lock_release+0x20/0x20 [ 349.979201][ T4256] ? kthread_blkcg+0xd0/0xd0 [ 349.983782][ T4256] ret_from_fork+0x1f/0x30 [ 349.988315][ T4256]