last executing test programs: 16m31.492442737s ago: executing program 3 (id=4): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 16m31.161720814s ago: executing program 3 (id=11): unshare(0x2c060000) unshare(0x2c020400) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r0, 0x0, 0x0, 0x80800) 16m28.513211726s ago: executing program 3 (id=19): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007", @ANYRES32], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 16m27.322271559s ago: executing program 32 (id=19): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007", @ANYRES32], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 14m0.113969892s ago: executing program 2 (id=716): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0x8, 0x4f, 0xc, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x4, 0x9}, {0x8, 0xaff3, 0x0, 0x8, 0x4, 0x1, 0x8, 0x3, 0x4, 0x53, 0x1, 0x6, 0x10005}, {0x0, 0x7, 0x10, 0x10, 0x25, 0x2, 0x0, 0xfb, 0x4, 0x15, 0x1, 0x3, 0x40000000000006}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10004, 0xffffdffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10, 0x0, 0x0, 0x0, 0x8, 0x800000001], 0x0, 0x2011c0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m59.809003086s ago: executing program 2 (id=718): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 13m59.508167359s ago: executing program 2 (id=721): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x28000600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 13m58.461639955s ago: executing program 2 (id=736): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 13m57.266082547s ago: executing program 2 (id=732): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x474283, 0x0, 0x14}, 0x20) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) 13m56.561800398s ago: executing program 2 (id=735): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7276, 0x2, 0x28, 0x0, 0x0) 13m56.167477657s ago: executing program 33 (id=735): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7276, 0x2, 0x28, 0x0, 0x0) 11m29.71184611s ago: executing program 5 (id=1341): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000f80)={0x10, &(0x7f0000000ec0)={0x0, 0x30, 0x2, "f7e0"}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 11m25.535521893s ago: executing program 5 (id=1351): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x118, 0x137db) ptrace$pokeuser(0x6, r1, 0xfc, 0x6000003f) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x601) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b18, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124"], 0x40}}, 0x0) 11m21.736562472s ago: executing program 5 (id=1361): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001, 0x4c092, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m20.56700871s ago: executing program 5 (id=1364): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c03, r3) dup2(r2, r0) 11m20.198447256s ago: executing program 5 (id=1365): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) r4 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xd, "0062ba7d820700000000000000000000096304"}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0xdacc, 0x8000000, {"21edab2a4f34faeebdac77b05d04bf94"}, 0x8, 0x7, 0x1}}}, 0xa0) r5 = syz_open_pts(r0, 0x82080) dup3(r5, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) 11m20.07345395s ago: executing program 5 (id=1368): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0xc, 0x0, @fd, 0xe9b8, 0x0, 0x800, 0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 11m19.543382178s ago: executing program 34 (id=1368): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0xc, 0x0, @fd, 0xe9b8, 0x0, 0x800, 0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 6m38.643126281s ago: executing program 6 (id=2433): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_ep_write(r0, 0x3, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101302, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x5, 0x0}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="0000080000000804"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) io_setup(0x8, &(0x7f0000004200)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x8f, 0xd2, 0xfe, 0xff, 0x10b8, 0x2383, 0xe0f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xba, 0x0, 0x9, [{{0x9, 0x4, 0x37, 0x3, 0x0, 0xd, 0xd4, 0x95, 0x2}}]}}]}}, 0x0) 6m36.726634914s ago: executing program 6 (id=2454): syz_open_dev$vim2m(&(0x7f00000002c0), 0x8002, 0x2) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdff7fc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m35.714648883s ago: executing program 6 (id=2459): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x30, 0xf5, 0x53, 0xfffff01c}]}, 0x10) r0 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000380)={[0x1, 0xeeee8000, 0xeeef0000, 0x8000000], 0x7ff, 0xc81675ab98b5563b}) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) 6m34.825819614s ago: executing program 6 (id=2464): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) 6m33.736274956s ago: executing program 6 (id=2471): r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xc010) 6m33.290486722s ago: executing program 6 (id=2476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffff36, 0x0, 0x10, 0x9, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044060}, 0x4010) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 6m32.867947158s ago: executing program 35 (id=2476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffff36, 0x0, 0x10, 0x9, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044060}, 0x4010) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 15.703032952s ago: executing program 0 (id=3693): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000040)=[{0x0}], 0x1) 13.330148175s ago: executing program 0 (id=3696): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 9.334101135s ago: executing program 0 (id=3708): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty, 0x4}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x8, 0x1, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) poll(&(0x7f0000000240)=[{r4, 0x10}], 0x1, 0x1) 7.180699277s ago: executing program 8 (id=3719): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010026bd7000fe0000001c000000180001"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20008004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0xc, 0x4, 0x7fff0001}]}) eventfd(0x6) socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/keys\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000032c0)="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", 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$eventfd(r1, &(0x7f0000000000), 0x8) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) process_madvise(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, 0xa, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x20, 0x1) 7.053878088s ago: executing program 0 (id=3720): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_1\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000080), 0x0, 0x40000) listen(r0, 0x800000) socket$inet6(0xa, 0x6, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = msgget(0x1, 0x2b0) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = msgget(0x1, 0x2b0) msgrcv(r3, 0x0, 0x0, 0x2, 0x2000) msgsnd(r3, &(0x7f0000000cc0)={0x2}, 0x8, 0x800) 6.759909128s ago: executing program 8 (id=3722): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a6970006d616300000005000400000000000900020073797a3100000000200007800c0001800800014000000000080008000000000008"], 0x6c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 6.32614866s ago: executing program 8 (id=3724): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.125964446s ago: executing program 7 (id=3727): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f00000000c0)='./file1/file4/file6\x00', 0x8, 0x0) renameat2(r2, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 6.056605938s ago: executing program 7 (id=3728): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1d, 0x2, 0x6) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r4 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) io_uring_enter(r1, 0x7368, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0xfffffffffffffffe, 0x0, 0x4000000000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 6.017620938s ago: executing program 1 (id=3729): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x353, 0x4000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x160f}, {0x400000b1, 0x0, 0x8000000000000001}]}) openat$ttyprintk(0xffffff9c, 0x0, 0x181000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.003331679s ago: executing program 0 (id=3730): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.036720967s ago: executing program 7 (id=3731): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x805, 0x0) epoll_create(0x100806) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 4.270626965s ago: executing program 4 (id=3732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x3c7a997d82a3969f, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {0x0, 0x2}, {0x2, 0x10}}}, 0x24}}, 0x40004) 4.20217355s ago: executing program 4 (id=3733): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) 4.137082825s ago: executing program 1 (id=3734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3.861917302s ago: executing program 1 (id=3735): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x2000004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x82cb000}) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.236173433s ago: executing program 7 (id=3736): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ppoll(&(0x7f0000000240)=[{r1, 0x8509}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.885011062s ago: executing program 7 (id=3737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000080)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) 2.642395602s ago: executing program 8 (id=3738): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth1_macvtap\x00', 0x44}) socket$tipc(0x1e, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x24, 0x3, 0x0, 0x3, 0x0, 0x7, 0x6, 0x6, 0x7f}}) open(0x0, 0x143142, 0x80) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0x400ffc, 0x14000000215b9037, 0x40190, 0x1, 0x11, 0x8000000000f2, 0x7, 0x3, 0x20000005, 0x5, 0xc6bd, 0x568, 0x45, 0x5, 0x7], 0x6006, 0x1c0293}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.502485602s ago: executing program 7 (id=3739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0xe}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="a04c1250ac", 0x5}], 0x1}, 0x8d0) 2.45628637s ago: executing program 4 (id=3740): syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000300)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.372423s ago: executing program 1 (id=3741): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x3564}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0xc5, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) 2.032099761s ago: executing program 4 (id=3742): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x5) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x8040}, 0x18, 0x0) landlock_restrict_self(r3, 0x6) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r7, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x2, 0x0, 0x0) 1.741993482s ago: executing program 0 (id=3743): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xa5a1, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) socket$can_raw(0x1d, 0x3, 0x1) 1.741504925s ago: executing program 8 (id=3744): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x52aa, 0x400, 0x1, 0x8000087}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r2, 0x0, 0x0, 0x0, 0x80800}) ptrace(0x4207, 0x0) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 1.326903788s ago: executing program 1 (id=3745): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x3901, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r3, 0x1, 0x20, 0x6, @local}, 0x14) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000080)=0x9, 0x4) recvfrom$packet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x1, 0xfe, {0x2, 0x1f, 0x16, 0x16, 0x0, 0x8000}}) wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000180)) close(r1) 979.499353ms ago: executing program 1 (id=3746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x8, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 326.064861ms ago: executing program 4 (id=3747): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r1, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000}) close_range(r0, 0xffffffffffffffff, 0x0) 141.466413ms ago: executing program 4 (id=3748): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1}, 0xfe}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2002c000}, 0x4000000) 0s ago: executing program 8 (id=3749): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x0, 0x400250}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) listen(r0, 0x8b25714e) accept4(r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): high-speed USB device number 39 using dummy_hcd [ 858.226215][T12294] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 858.279088][T12294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.298974][T12294] usb 1-1: Product: syz [ 858.310800][T12294] usb 1-1: Manufacturer: syz [ 858.321448][T19615] tipc: Started in network mode [ 858.327250][T12294] usb 1-1: SerialNumber: syz [ 858.336297][T19615] tipc: Node identity 76657468115f, cluster identity 4711 [ 858.355804][T12294] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 858.380809][T19615] tipc: Enabled bearer , priority 0 [ 858.397156][ T5924] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 858.655900][T19624] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3015'. [ 858.781667][ T30] audit: type=1800 audit(1770289237.833:323): pid=19628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3016" name="/" dev="fuse" ino=1 res=0 errno=0 [ 858.874276][ T30] audit: type=1804 audit(1770289237.833:324): pid=19628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3016" name="/newroot/61/file1" dev="fuse" ino=1 res=1 errno=0 [ 859.197862][T19637] syzkaller0: entered promiscuous mode [ 859.230194][T19637] syzkaller0: entered allmulticast mode [ 859.338593][T12294] usb 8-1: new low-speed USB device number 36 using dummy_hcd [ 859.456906][ T5924] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 859.464154][ T5924] ath9k_htc: Failed to initialize the device [ 859.506799][ T984] usb 1-1: USB disconnect, device number 39 [ 859.611752][ T984] usb 1-1: ath9k_htc: USB layer deinitialized [ 859.623059][ T5919] tipc: Node number set to 1731884136 [ 859.633502][T12294] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 859.646531][T12294] usb 8-1: config 0 has no interface number 0 [ 859.683180][T12294] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 859.717103][T12294] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 859.756250][T12294] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 859.803995][T12294] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.842964][T12294] usb 8-1: config 0 descriptor?? [ 859.873647][T19634] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 859.916454][T12294] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 860.243004][T12294] usb 8-1: USB disconnect, device number 36 [ 860.249251][ C1] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 861.530188][ T11] blk_print_req_error: 11 callbacks suppressed [ 861.530224][ T11] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 861.584216][T19669] input: syz1 as /devices/virtual/input/input49 [ 861.602350][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3026'. [ 862.039358][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3026'. [ 862.275549][T19687] syzkaller0: entered promiscuous mode [ 862.304481][T19687] syzkaller0: entered allmulticast mode [ 863.507650][T19716] input: syz0 as /devices/virtual/input/input50 [ 864.906067][ T10] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 865.262870][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 865.271568][ T10] usb 1-1: config 0 has no interface number 0 [ 865.303272][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 865.366601][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 865.412216][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 865.475411][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.536717][ T10] usb 1-1: config 0 descriptor?? [ 865.550418][T19730] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 865.626319][ T10] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 865.805333][T15273] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 865.816942][ T10] usb 1-1: USB disconnect, device number 40 [ 866.004296][T15273] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 866.050189][T15273] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.079445][T15273] usb 8-1: config 0 descriptor?? [ 866.088927][T15273] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 867.134545][T11856] bond0 (unregistering): Released all slaves [ 867.883335][T11856] bond1 (unregistering): (slave veth3): Releasing active interface [ 867.892685][T11856] dummy0: entered promiscuous mode [ 867.952201][T11856] bond1 (unregistering): (slave veth5): Releasing active interface [ 867.964462][T11856] bond1 (unregistering): (slave dummy0): Releasing active interface [ 867.980797][T11856] bond1 (unregistering): Released all slaves [ 868.271308][T15273] usb 8-1: USB disconnect, device number 37 [ 868.302190][T11856] : left promiscuous mode [ 868.555927][T19764] syzkaller0: entered promiscuous mode [ 868.562933][T19764] syzkaller0: entered allmulticast mode [ 868.595613][T11856] tipc: Left network mode [ 869.027246][T11856] hsr_slave_0: left promiscuous mode [ 869.049421][T11856] hsr_slave_1: left promiscuous mode [ 869.326524][ T5897] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 869.519560][ T5897] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 869.528132][ T5897] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.540778][ T5897] usb 8-1: config 0 has no interfaces? [ 869.553192][ T5897] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 869.562800][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.594343][ T5897] usb 8-1: config 0 descriptor?? [ 870.976657][ T11] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 871.003102][T19796] input: syz1 as /devices/virtual/input/input51 [ 871.441745][T19804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.476539][T19804] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.514065][T19804] batman_adv: batadv0: Interface activated: dummy0 [ 871.524892][T19804] batadv0: mtu less than device minimum [ 871.542567][T19804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 871.554192][T19804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 871.565645][T19804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 871.576986][T19804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 871.588791][T19804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 871.600159][T19804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 871.611427][T19804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 871.623152][T19804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 871.634632][T19804] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 871.774718][T19808] input: syz0 as /devices/virtual/input/input52 [ 871.977408][ T5924] usb 8-1: USB disconnect, device number 38 [ 872.339379][T15273] IPVS: starting estimator thread 0... [ 872.475071][T19819] IPVS: using max 28 ests per chain, 67200 per kthread [ 873.045855][T19836] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 873.736254][T19847] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3076'. [ 873.790562][T19847] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3076'. [ 874.280426][T19849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.288774][T19849] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.311052][T19856] input: syz0 as /devices/virtual/input/input53 [ 874.451184][T19859] loop2: detected capacity change from 0 to 7 [ 874.459777][T19859] loop2: [ 874.462883][T19859] loop2: partition table partially beyond EOD, truncated [ 875.353134][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.363598][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.930624][T19892] batman_adv: batadv0: Interface deactivated: dummy0 [ 877.111124][T13031] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.121847][T13031] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.149913][T13031] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.170227][T13031] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.168194][T19908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.186667][T19908] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.221342][T19908] net_ratelimit: 12 callbacks suppressed [ 878.221355][T19908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 879.550789][ T5919] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 879.712692][ T5919] usb 9-1: Using ep0 maxpacket: 8 [ 879.736113][ T5919] usb 9-1: config 0 has an invalid interface number: 191 but max is 0 [ 879.745932][ T5919] usb 9-1: config 0 has no interface number 0 [ 879.759884][ T5919] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=f5.41 [ 879.769819][ T5919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.778498][ T5919] usb 9-1: Product: syz [ 879.784192][ T5919] usb 9-1: Manufacturer: syz [ 879.789412][ T5919] usb 9-1: SerialNumber: syz [ 879.805441][ T5919] usb 9-1: config 0 descriptor?? [ 880.323714][ T5919] usb 9-1: MBOX3: Invalid descriptor size=18. [ 880.396138][ T5919] usb 9-1: USB disconnect, device number 11 [ 881.215512][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 881.316036][T19948] syzkaller0: entered promiscuous mode [ 881.321584][T19948] syzkaller0: entered allmulticast mode [ 881.447612][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 881.457653][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.474880][ T10] usb 5-1: Product: syz [ 881.479110][ T10] usb 5-1: Manufacturer: syz [ 881.483736][ T10] usb 5-1: SerialNumber: syz [ 881.512542][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 881.576923][ T5897] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 881.999905][ T10] usb 5-1: USB disconnect, device number 42 [ 882.656127][ T5897] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 882.669374][ T5897] ath9k_htc: Failed to initialize the device [ 882.686912][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 882.726517][T19961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 882.998195][ T5919] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 883.663456][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 883.675098][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.695893][ T5919] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 883.705381][ T5919] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 883.713561][ T5919] usb 1-1: Manufacturer: syz [ 883.732910][ T5919] usb 1-1: config 0 descriptor?? [ 885.585108][ T5924] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 885.640951][ T5919] usbhid 1-1:0.0: can't add hid device: -71 [ 885.647820][ T5919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 885.685205][ T5919] usb 1-1: USB disconnect, device number 41 [ 886.213384][ T5924] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 886.259096][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.287671][ T5924] usb 8-1: Product: syz [ 886.324798][ T5924] usb 8-1: Manufacturer: syz [ 886.349286][ T5924] usb 8-1: SerialNumber: syz [ 886.451361][ T5924] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 886.527010][ T984] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 886.541102][T19991] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.548817][T19991] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.578432][ T5897] usb 8-1: USB disconnect, device number 39 [ 887.619720][ T984] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 887.634981][ T984] ath9k_htc: Failed to initialize the device [ 887.665899][ T5897] usb 8-1: ath9k_htc: USB layer deinitialized [ 887.737212][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.763024][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.968344][T11848] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.990769][T11848] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.010150][T11848] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.037918][T11848] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.224872][ T5897] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 888.435676][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 888.458074][ T5897] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 888.556171][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.597094][ T5897] usb 1-1: Product: syz [ 888.601477][ T5897] usb 1-1: Manufacturer: syz [ 888.607519][ T5897] usb 1-1: SerialNumber: syz [ 888.621277][ T5897] usb 1-1: config 0 descriptor?? [ 888.831102][ T5897] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 890.337400][ T5897] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 890.352665][ T5897] usb 1-1: USB disconnect, device number 42 [ 890.999164][T20031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3143'. [ 891.076551][T20031] : entered promiscuous mode [ 893.469791][T20052] binder: 20049:20052 ioctl c0306201 80001a80 returned -11 [ 901.794849][ T5897] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 901.954864][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 901.980848][ T5897] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 902.000823][ T5897] usb 1-1: config 0 has no interface number 0 [ 902.045059][ T5897] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 902.123637][ T5897] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 902.145673][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.152107][T20151] team0: left allmulticast mode [ 902.174394][ T5897] usb 1-1: Product: syz [ 902.194834][ T5897] usb 1-1: Manufacturer: syz [ 902.199503][ T5897] usb 1-1: SerialNumber: syz [ 902.302299][T20151] team_slave_0: left allmulticast mode [ 902.312414][T20151] team_slave_1: left allmulticast mode [ 902.322583][T20151] team0: left promiscuous mode [ 902.332074][T20151] team_slave_0: left promiscuous mode [ 902.345086][T20151] team_slave_1: left promiscuous mode [ 902.352066][T20151] bridge0: port 3(team0) entered disabled state [ 902.370122][ T5897] usb 1-1: config 0 descriptor?? [ 902.381496][T20151] bridge_slave_0: left allmulticast mode [ 902.397953][T20151] bridge_slave_0: left promiscuous mode [ 902.411308][T20143] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 902.421838][T20151] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.440944][T20151] bridge_slave_1: left allmulticast mode [ 902.448946][T20151] bridge_slave_1: left promiscuous mode [ 902.454922][T20151] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.563273][T20151] bond0: (slave bond_slave_0): Releasing backup interface [ 902.685425][T20151] bond0: (slave bond_slave_1): Releasing backup interface [ 902.780325][T20151] team0: Port device team_slave_0 removed [ 902.795350][T20143] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 902.831378][T20151] team0: Port device team_slave_1 removed [ 902.839207][T20151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.847699][T20151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.858305][T20151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.866437][T20151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.878618][T20151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 902.994232][T20156] ip6gre1: entered allmulticast mode [ 903.076102][T20156] team0: Device ip6gre1 is of different type [ 903.600715][T20171] syzkaller0: entered promiscuous mode [ 903.615563][T20171] syzkaller0: entered allmulticast mode [ 904.170620][ T30] audit: type=1804 audit(1770289283.133:325): pid=20178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3171" name="/newroot/135/file1" dev="fuse" ino=1 res=1 errno=0 [ 904.219808][ T30] audit: type=1804 audit(1770289283.133:326): pid=20176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3171" name="/newroot/135/file1" dev="fuse" ino=1 res=1 errno=0 [ 905.070386][T15273] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 905.251773][T15273] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 905.265382][T15273] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.293825][T15273] usb 9-1: Product: syz [ 905.304026][T15273] usb 9-1: Manufacturer: syz [ 905.316090][T15273] usb 9-1: SerialNumber: syz [ 905.515389][ T5897] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 905.530916][ T5897] asix 1-1:0.188: probe with driver asix failed with error -71 [ 905.605060][ T5897] usb 1-1: USB disconnect, device number 43 [ 905.775961][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 905.813528][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 906.197532][T20203] syzkaller0: entered promiscuous mode [ 906.203124][T20203] syzkaller0: entered allmulticast mode [ 906.345409][ T984] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 906.874997][ T984] usb 2-1: Using ep0 maxpacket: 16 [ 906.900818][ T984] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 906.934564][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 906.963898][ T984] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 906.973257][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.983104][ T984] usb 2-1: Product: syz [ 906.987689][ T984] usb 2-1: Manufacturer: syz [ 906.992304][ T984] usb 2-1: SerialNumber: syz [ 907.000348][ T984] usb 2-1: config 0 descriptor?? [ 907.017954][ T984] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 907.045175][ T984] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 907.643272][ T984] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 907.660723][ T984] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 907.698426][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 907.900079][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 907.922184][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 907.974081][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 908.005472][T12294] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 908.031513][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 908.071260][T15273] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 908.105784][T15273] usb 9-1: USB disconnect, device number 12 [ 908.175320][T12294] usb 8-1: Using ep0 maxpacket: 32 [ 908.186067][T12294] usb 8-1: config 0 has no interfaces? [ 908.202406][T12294] usb 8-1: New USB device found, idVendor=19d2, idProduct=1072, bcdDevice=cd.0c [ 908.247228][T12294] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.371927][ T984] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 908.649248][T12294] usb 8-1: Product: syz [ 908.655727][T12294] usb 8-1: Manufacturer: syz [ 908.666718][T12294] usb 8-1: SerialNumber: syz [ 908.732161][T12294] usb 8-1: config 0 descriptor?? [ 909.398929][ T984] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 909.405982][ T984] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 909.455469][ T984] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 909.483136][ T984] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 909.556753][ T984] usb 2-1: USB disconnect, device number 41 [ 909.628349][ T797] usb 8-1: USB disconnect, device number 40 [ 910.174958][ T797] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 910.407329][ T797] usb 5-1: Using ep0 maxpacket: 8 [ 910.433245][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 910.446777][ T797] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 910.456945][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.487004][ T797] usb 5-1: config 0 descriptor?? [ 910.723183][ T797] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 911.191238][ T5924] usb 5-1: USB disconnect, device number 43 [ 911.592684][T15273] IPVS: starting estimator thread 0... [ 911.685427][T20294] IPVS: using max 28 ests per chain, 67200 per kthread [ 913.671305][T20326] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3220'. [ 914.165282][ T5924] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 914.357840][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 914.365389][ T5924] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 914.375915][ T5924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 914.385299][ T984] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 914.413460][ T5924] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 914.830437][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.925128][ T5924] usb 5-1: Product: syz [ 915.075432][ T984] usb 2-1: Using ep0 maxpacket: 8 [ 915.081416][ T5924] usb 5-1: Manufacturer: syz [ 915.100157][ T984] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 915.117379][ T5924] usb 5-1: SerialNumber: syz [ 915.122148][ T984] usb 2-1: config 0 has no interface number 0 [ 915.145156][ T984] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 915.172035][ T984] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 915.334171][ T984] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 915.405606][ T5924] usb 5-1: 0:2 : does not exist [ 915.410887][ T984] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 915.430317][ T5924] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 915.466105][ T984] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 915.495806][ T5924] usb 5-1: USB disconnect, device number 44 [ 915.502594][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.542158][ T984] usb 2-1: config 0 descriptor?? [ 915.605226][ T984] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 915.631331][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 915.839564][T15273] usb 2-1: USB disconnect, device number 42 [ 915.863996][T15273] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 915.945295][ T5924] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 916.183136][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 916.206571][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.217853][ T5924] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 916.227433][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.250812][ T5924] usb 1-1: config 0 descriptor?? [ 916.265651][ T5924] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 917.105715][ T5924] gspca_vc032x: reg_w err -71 [ 917.110535][ T5924] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 917.119945][ T5924] usb 1-1: USB disconnect, device number 44 [ 917.237563][T20368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 917.735907][T20373] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3233'. [ 918.214838][ T797] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 918.294105][T20385] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 918.307356][T20385] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 918.379440][T20373] macvlan2: entered promiscuous mode [ 918.385978][T20373] macvlan2: entered allmulticast mode [ 918.411088][T20373] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 918.604135][ T797] usb 2-1: Using ep0 maxpacket: 16 [ 918.716744][ T797] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 918.725878][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.733872][ T797] usb 2-1: Product: syz [ 918.738224][ T797] usb 2-1: Manufacturer: syz [ 918.742819][ T797] usb 2-1: SerialNumber: syz [ 918.782295][ T797] usb 2-1: config 0 descriptor?? [ 919.003029][ T797] usb 2-1: Invalid number of CPorts: 0 [ 919.008698][ T797] es2_ap_driver 2-1:0.0: probe with driver es2_ap_driver failed with error -22 [ 919.135760][T20389] syzkaller0: entered promiscuous mode [ 919.141323][T20389] syzkaller0: entered allmulticast mode [ 919.289969][ T5924] usb 2-1: USB disconnect, device number 43 [ 920.705183][ T797] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 921.437156][ T797] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 921.454926][ T797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.491325][ T797] usb 8-1: config 0 descriptor?? [ 921.532716][ T797] cp210x 8-1:0.0: cp210x converter detected [ 921.943168][ T797] usb 8-1: cp210x converter now attached to ttyUSB0 [ 922.143768][T20414] bridge0: entered allmulticast mode [ 922.176296][T15273] usb 8-1: USB disconnect, device number 41 [ 922.187323][T15273] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 922.214290][T20429] syzkaller0: entered promiscuous mode [ 922.237287][T20429] syzkaller0: entered allmulticast mode [ 922.291366][T15273] cp210x 8-1:0.0: device disconnected [ 922.730895][T20436] batman_adv: batadv0: Removing interface: dummy0 [ 922.741691][T20436] bond0: (slave bond_slave_0): Releasing backup interface [ 922.757006][T20436] bond0: (slave bond_slave_1): Releasing backup interface [ 922.768654][T20436] team0: Port device team_slave_0 removed [ 922.781888][T20436] team0: Port device team_slave_1 removed [ 922.789874][T20436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.801939][T20436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.812924][T20436] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 922.839048][T20437] ip6gre2: entered allmulticast mode [ 922.846499][T20437] team0: Device ip6gre2 is of different type [ 923.260760][ T984] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 923.741429][T20443] netlink: 'syz.0.3255': attribute type 1 has an invalid length. [ 923.808063][ T984] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 923.808414][T20443] bond5: entered promiscuous mode [ 923.827410][ T984] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 923.846538][ T984] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 923.862456][ T984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.886401][T20439] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 923.898305][T20443] 8021q: adding VLAN 0 to HW filter on device bond5 [ 923.943671][ T984] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 924.196344][ T984] usb 8-1: USB disconnect, device number 42 [ 924.283218][T20447] 8021q: adding VLAN 0 to HW filter on device bond6 [ 924.388015][T20447] bond5: (slave bond6): making interface the new active one [ 924.523097][T20447] bond6: entered promiscuous mode [ 924.545757][T20447] bond5: (slave bond6): Enslaving as an active interface with an up link [ 924.580937][T20443] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 924.604332][T20443] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 925.448882][ T797] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 925.520823][T15273] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 925.735936][ T797] usb 1-1: Using ep0 maxpacket: 8 [ 925.784194][T15273] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 925.804110][T15273] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.813074][ T797] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 925.831571][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.840075][T15273] usb 9-1: Product: syz [ 925.844255][T15273] usb 9-1: Manufacturer: syz [ 925.879410][ T797] usb 1-1: Product: syz [ 925.883649][ T797] usb 1-1: Manufacturer: syz [ 925.894818][T15273] usb 9-1: SerialNumber: syz [ 925.915419][ T797] usb 1-1: SerialNumber: syz [ 925.927371][ T797] usb 1-1: config 0 descriptor?? [ 925.963863][ T797] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 926.386875][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 926.454969][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 926.593892][ T5897] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 927.145476][ T797] gspca_sonixj: reg_r err -110 [ 927.151920][ T797] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 927.234904][ T5897] usb 8-1: Using ep0 maxpacket: 16 [ 927.361404][ T5897] usb 8-1: config 252 has too many interfaces: 129, using maximum allowed: 32 [ 927.379132][ T5897] usb 8-1: config 252 has 1 interface, different from the descriptor's value: 129 [ 927.393500][ T5897] usb 8-1: config 252 has no interface number 0 [ 927.406837][ T5897] usb 8-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 927.426915][ T5897] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 927.449730][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.458335][ T5897] usb 8-1: Product: syz [ 927.462635][ T5897] usb 8-1: Manufacturer: syz [ 927.480475][ T5897] usb 8-1: SerialNumber: syz [ 927.545116][ T5897] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 927.782771][T11848] usb 8-1: Failed to submit usb control message: -71 [ 927.866582][ T5897] usb 8-1: USB disconnect, device number 43 [ 927.903629][T11848] usb 8-1: unable to send the bmi data to the device: -71 [ 927.957098][T11848] usb 8-1: unable to get target info from device [ 927.974256][T11848] usb 8-1: could not get target info (-71) [ 928.140995][T11848] usb 8-1: could not probe fw (-71) [ 928.355179][ T984] usb 1-1: USB disconnect, device number 45 [ 929.037526][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 929.059257][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 929.100841][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 929.125316][T20499] netlink: 'syz.1.3269': attribute type 1 has an invalid length. [ 929.133228][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 929.146786][T15273] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 929.213843][T15273] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 929.223146][T20499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 929.245349][T15273] usb 9-1: USB disconnect, device number 13 [ 930.059533][T20503] bond2: (slave veth9): Enslaving as an active interface with a down link [ 930.171909][T20508] vlan2: entered allmulticast mode [ 930.195202][T20508] veth1: entered allmulticast mode [ 930.201349][T20508] bond2: (slave vlan2): Opening slave failed [ 930.792428][T20516] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 931.004819][T15273] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 931.175253][T15273] usb 8-1: Using ep0 maxpacket: 16 [ 931.202612][T15273] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.232146][T15273] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.274831][T15273] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 931.314308][ T30] audit: type=1800 audit(1770289310.343:327): pid=20511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3267" name="bus" dev="ramfs" ino=83504 res=0 errno=0 [ 931.355114][T15273] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 931.395315][T15273] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.459954][T15273] usb 8-1: config 0 descriptor?? [ 931.912408][T15273] HID 045e:07da: Invalid code 65791 type 1 [ 932.037679][T15273] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0021/input/input54 [ 932.217416][T15273] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 932.242782][T15273] usb 8-1: USB disconnect, device number 44 [ 932.271279][T20527] syzkaller0: entered promiscuous mode [ 932.319124][T20527] syzkaller0: entered allmulticast mode [ 932.564077][T20529] fido_id[20529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 932.748964][T20533] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 934.065426][ T5897] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 934.255338][ T5897] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 934.264517][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.309407][ T5897] usb 8-1: Product: syz [ 934.313599][ T5897] usb 8-1: Manufacturer: syz [ 934.325221][ T5897] usb 8-1: SerialNumber: syz [ 935.198026][ T5897] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 935.268762][ T5897] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 936.520801][T20578] bridge3: entered allmulticast mode [ 936.580711][ T5897] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 936.661330][T20570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3286'. [ 936.712800][T20581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3289'. [ 936.722683][T20572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3286'. [ 936.746900][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.753276][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.773823][T20584] bond0: (slave bridge0): Releasing backup interface [ 936.787089][T20581] netlink: 'syz.0.3289': attribute type 7 has an invalid length. [ 936.798132][T20584] team0: left allmulticast mode [ 936.809138][T20584] team_slave_0: left allmulticast mode [ 936.815513][T20584] team_slave_1: left allmulticast mode [ 936.821332][T20581] netlink: 'syz.0.3289': attribute type 8 has an invalid length. [ 936.830649][T20584] bridge1: left allmulticast mode [ 936.836190][T20584] team0: left promiscuous mode [ 936.841130][T20581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3289'. [ 936.853015][T20584] team_slave_0: left promiscuous mode [ 936.858823][T20584] team_slave_1: left promiscuous mode [ 936.866780][T20584] bridge1: left promiscuous mode [ 936.878363][T20584] bridge0: port 3(team0) entered disabled state [ 936.907937][T20584] bridge_slave_0: left allmulticast mode [ 936.913950][T20584] bridge_slave_0: left promiscuous mode [ 936.924359][T20584] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.949382][T20584] bridge_slave_1: left allmulticast mode [ 936.966157][T20584] bridge_slave_1: left promiscuous mode [ 936.985968][T20584] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.015252][T20584] bond0: (slave bond_slave_0): Releasing backup interface [ 937.040742][T20584] bond0: (slave bond_slave_1): Releasing backup interface [ 937.064078][T20584] team0: Port device team_slave_0 removed [ 937.073012][T20584] team0: Port device team_slave_1 removed [ 937.081293][T20584] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 937.106926][T20586] ip6gre1: entered allmulticast mode [ 937.115529][T20586] team0: Device ip6gre1 is of different type [ 937.596900][ T5897] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 937.611475][ T5897] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 937.619919][T20581] ip6gretap0: entered promiscuous mode [ 937.646864][T20581] syz_tun: entered promiscuous mode [ 937.654488][T20581] gretap0: entered promiscuous mode [ 937.663177][T20581] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 937.676146][T20581] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 937.695146][T20581] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 937.697677][ T5897] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 937.858165][ T5897] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 937.890554][ T5897] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 938.139205][ T5897] usb 8-1: USB disconnect, device number 45 [ 938.793806][T20600] tipc: Resetting bearer [ 939.220768][ T30] audit: type=1326 audit(1770289318.273:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20604 comm="syz.4.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 939.245110][ T984] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 939.246548][ T30] audit: type=1326 audit(1770289318.303:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20604 comm="syz.4.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 939.277497][ T30] audit: type=1326 audit(1770289318.333:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20604 comm="syz.4.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 939.307004][ T30] audit: type=1326 audit(1770289318.333:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20604 comm="syz.4.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf748d567 code=0x7ffc0000 [ 939.344500][ T30] audit: type=1326 audit(1770289318.333:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20604 comm="syz.4.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 939.402991][ T30] audit: type=1326 audit(1770289318.333:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20604 comm="syz.4.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 939.435132][ T984] usb 8-1: Using ep0 maxpacket: 16 [ 939.436188][ T30] audit: type=1326 audit(1770289318.333:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20604 comm="syz.4.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 939.468926][ T984] usb 8-1: config 12 has an invalid interface number: 66 but max is 0 [ 939.478191][ T984] usb 8-1: config 12 has no interface number 0 [ 939.484589][ T984] usb 8-1: config 12 interface 66 has no altsetting 0 [ 939.493631][ T30] audit: type=1326 audit(1770289318.333:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20604 comm="syz.4.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 939.518476][ T30] audit: type=1326 audit(1770289318.333:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20604 comm="syz.4.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 939.534293][ T984] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=9d.aa [ 939.550732][ T984] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.561951][ T984] usb 8-1: Product: syz [ 939.565140][ T30] audit: type=1326 audit(1770289318.333:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20604 comm="syz.4.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 939.594580][ T984] usb 8-1: Manufacturer: syz [ 939.605951][ T984] usb 8-1: SerialNumber: syz [ 939.837484][ T984] usbhid 8-1:12.66: couldn't find an input interrupt endpoint [ 939.848339][ T984] usb 8-1: USB disconnect, device number 46 [ 944.201631][T15273] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 944.387707][T15273] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 944.395986][T15273] usb 8-1: config 1 has no interface number 0 [ 944.402089][T15273] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 944.490070][T20649] kAFS: unable to lookup cell '' [ 944.514941][T15273] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 944.912863][T15273] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.947688][T15273] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 944.971045][T15273] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.004895][T15273] usb 8-1: Product: syz [ 945.010089][T15273] usb 8-1: Manufacturer: syz [ 945.020607][T15273] usb 8-1: SerialNumber: syz [ 945.037312][T20643] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 945.275544][T20643] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 945.736667][T15273] sierra_net 8-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 946.087731][T20658] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 946.097663][T20658] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 946.522067][T15273] usb 8-1: USB disconnect, device number 47 [ 946.622670][T15273] sierra_net 8-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem [ 946.899978][T20667] fuse: Bad value for 'fd' [ 947.048852][T15273] sierra_net 8-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 952.168798][T20743] syzkaller0: entered promiscuous mode [ 952.195439][T20743] syzkaller0: entered allmulticast mode [ 952.246723][T20748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3331'. [ 953.840185][T20771] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 954.491655][T20783] netlink: 'syz.8.3340': attribute type 1 has an invalid length. [ 955.046265][T20782] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 955.085540][T20786] veth5: entered promiscuous mode [ 955.094242][T20786] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 955.355587][T20788] bond_slave_1: entered promiscuous mode [ 955.370220][T20788] bond_slave_1: left promiscuous mode [ 956.276624][T15273] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 956.485796][T15273] usb 5-1: Using ep0 maxpacket: 16 [ 956.528091][T15273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 956.586105][T15273] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 956.595460][T15273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.603467][T15273] usb 5-1: Product: syz [ 956.608504][T15273] usb 5-1: Manufacturer: syz [ 956.613108][T15273] usb 5-1: SerialNumber: syz [ 956.741046][T15273] usb 5-1: config 0 descriptor?? [ 956.750931][T15273] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 956.791324][T15273] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 957.403842][T15273] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 957.966387][T15273] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 957.974590][T15273] em28xx 5-1:0.0: board has no eeprom [ 958.054895][ T5924] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 958.395104][ T5924] usb 9-1: Using ep0 maxpacket: 16 [ 958.402049][ T5924] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 958.417599][ T5924] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 958.452513][ T5924] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 958.462433][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.471411][ T5924] usb 9-1: Product: syz [ 958.477100][ T5924] usb 9-1: Manufacturer: syz [ 958.482346][ T5924] usb 9-1: SerialNumber: syz [ 958.515219][T15273] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 958.533642][T15273] em28xx 5-1:0.0: dvb set to bulk mode. [ 958.549515][ T5897] em28xx 5-1:0.0: Binding DVB extension [ 958.809525][ T5924] usb 9-1: 0:2 : does not exist [ 958.839777][ T5924] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 958.934002][ T5924] usb 9-1: USB disconnect, device number 14 [ 959.320807][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 959.825160][T20790] em28xx 5-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 959.886239][T16302] usb 5-1: USB disconnect, device number 45 [ 959.893079][T16302] em28xx 5-1:0.0: Disconnecting em28xx [ 960.088525][ T5897] em28xx 5-1:0.0: Registering input extension [ 960.600787][T16302] em28xx 5-1:0.0: Closing input extension [ 960.872273][T16302] em28xx 5-1:0.0: Freeing device [ 962.136841][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 962.136860][ T30] audit: type=1326 audit(1770289341.193:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.4.3358" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748d539 code=0x0 [ 963.106344][T16302] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 963.301798][T20852] netlink: 'syz.4.3359': attribute type 12 has an invalid length. [ 963.335139][T16302] usb 2-1: Using ep0 maxpacket: 32 [ 963.446733][T16302] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 963.542121][T16302] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 963.561713][T16302] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 963.580274][T16302] usb 2-1: Product: syz [ 963.588402][T16302] usb 2-1: Manufacturer: syz [ 963.604443][T16302] usb 2-1: SerialNumber: syz [ 963.730480][T16302] usb 2-1: config 0 descriptor?? [ 963.751087][T20840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 965.141463][T15273] usb 2-1: USB disconnect, device number 44 [ 965.816451][ T5924] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 966.157055][ T5924] usb 9-1: Using ep0 maxpacket: 16 [ 966.169361][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.222591][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.289762][ T5924] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 966.695362][ T5924] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 966.745055][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.772172][ T5924] usb 9-1: config 0 descriptor?? [ 967.260968][ T5924] HID 045e:07da: Invalid code 65791 type 1 [ 967.385620][ T5924] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0022/input/input56 [ 967.449943][ T5924] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 967.729415][T16302] usb 9-1: USB disconnect, device number 15 [ 967.940714][T20911] fido_id[20911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 968.400236][T20924] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 968.867177][T20937] syzkaller0: entered promiscuous mode [ 968.883443][T20937] syzkaller0: entered allmulticast mode [ 968.899151][T20934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3375'. [ 969.388922][T20946] bond_slave_1: entered promiscuous mode [ 969.474817][ T5897] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 969.502930][T20946] bond_slave_1: left promiscuous mode [ 969.808990][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 969.818139][ T5897] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 969.827881][ T5897] usb 1-1: config 0 has no interface number 0 [ 969.840391][ T5897] usb 1-1: config 0 interface 12 has no altsetting 0 [ 969.868100][ T5897] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 969.974840][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.020455][ T5897] usb 1-1: Product: syz [ 970.035510][ T5897] usb 1-1: Manufacturer: syz [ 970.045243][ T5897] usb 1-1: SerialNumber: syz [ 970.065102][ T5897] usb 1-1: config 0 descriptor?? [ 970.713745][T20958] vlan2: entered promiscuous mode [ 970.875256][T20958] vlan2: entered allmulticast mode [ 970.917977][T20958] hsr_slave_1: entered allmulticast mode [ 972.058789][T20962] xt_policy: neither incoming nor outgoing policy selected [ 972.114139][ T30] audit: type=1800 audit(1770289351.163:524): pid=20956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3382" name="bus" dev="ramfs" ino=85972 res=0 errno=0 [ 972.414951][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 972.576621][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 972.587308][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.624860][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.634954][T15273] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 972.675487][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 972.694849][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 972.724300][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.748740][ T10] usb 2-1: config 0 descriptor?? [ 972.936591][T15273] usb 8-1: Using ep0 maxpacket: 16 [ 972.952532][T15273] usb 8-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.964171][T15273] usb 8-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.988312][T15273] usb 8-1: config 1 interface 0 has no altsetting 0 [ 973.017157][T20977] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 973.162677][ T5897] f81534 1-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 973.174000][ T5897] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 973.402457][ T5897] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 973.413046][ T5897] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 973.433882][ T5897] usb 1-1: USB disconnect, device number 46 [ 973.480160][T15273] usb 8-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 973.510703][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 973.527550][T15273] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.595187][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0023/input/input57 [ 973.614900][T15273] usb 8-1: Product: syz [ 973.619125][T15273] usb 8-1: Manufacturer: syz [ 973.623741][T15273] usb 8-1: SerialNumber: syz [ 973.658318][ T10] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 973.688197][T15273] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input58 [ 973.898593][ T984] usb 2-1: USB disconnect, device number 45 [ 973.917030][ T5183] bcm5974 8-1:1.0: could not read from device [ 973.962624][T20979] fido_id[20979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 974.006256][ T5183] bcm5974 8-1:1.0: could not read from device [ 974.019884][T15273] usb 8-1: USB disconnect, device number 48 [ 974.781630][T20992] syzkaller0: entered promiscuous mode [ 974.787223][T20992] syzkaller0: entered allmulticast mode [ 974.938126][T20992] tipc: Enabled bearer , priority 0 [ 975.204126][T20991] tipc: Resetting bearer [ 975.243868][T20991] tipc: Disabling bearer [ 976.071992][T21005] kAFS: unable to lookup cell '' [ 976.837135][T21010] syzkaller0: entered promiscuous mode [ 976.863568][T21010] syzkaller0: entered allmulticast mode [ 977.861826][T21020] binder_alloc: 21017: pid 21017 spamming oneway? 1 buffers allocated for a total size of 4096 [ 979.100044][T15273] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 979.235169][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 979.267136][T15273] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 979.276089][T15273] usb 5-1: config 0 has no interface number 0 [ 979.284641][T15273] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 979.295143][T15273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.303299][T15273] usb 5-1: Product: syz [ 979.310332][T15273] usb 5-1: Manufacturer: syz [ 979.315460][T15273] usb 5-1: SerialNumber: syz [ 979.322879][T15273] usb 5-1: config 0 descriptor?? [ 979.388868][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 979.400399][ T10] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 979.409857][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.420088][ T10] usb 9-1: Product: syz [ 979.424332][ T10] usb 9-1: Manufacturer: syz [ 979.429849][ T10] usb 9-1: SerialNumber: syz [ 979.439848][ T10] usb 9-1: config 0 descriptor?? [ 979.857753][ T10] dvb_usb_dtv5100 9-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 979.878503][ T10] usb 9-1: USB disconnect, device number 16 [ 979.926765][T15273] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 979.941858][T15273] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 979.950653][T15273] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 979.963888][T15273] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 979.980440][T15273] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 980.147122][T21014] lo: entered allmulticast mode [ 980.157838][T21015] pimreg: entered allmulticast mode [ 980.166779][ T5924] usb 5-1: USB disconnect, device number 46 [ 980.177966][ T5924] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 980.199716][ T5924] keyspan 5-1:0.133: device disconnected [ 980.207253][T21019] pimreg: left allmulticast mode [ 980.212480][T21019] lo: left allmulticast mode [ 980.314038][ T30] audit: type=1326 audit(1770289359.363:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21042 comm="syz.0.3407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 980.364296][ T30] audit: type=1326 audit(1770289359.363:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21042 comm="syz.0.3407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 980.420463][ T30] audit: type=1326 audit(1770289359.393:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21042 comm="syz.0.3407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 980.457503][ T30] audit: type=1326 audit(1770289359.393:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21042 comm="syz.0.3407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 980.483788][ T30] audit: type=1326 audit(1770289359.393:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21042 comm="syz.0.3407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 980.528554][ T30] audit: type=1326 audit(1770289359.393:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21042 comm="syz.0.3407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 980.581487][ T30] audit: type=1326 audit(1770289359.393:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21042 comm="syz.0.3407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 980.631541][ T30] audit: type=1326 audit(1770289359.393:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21042 comm="syz.0.3407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 980.659279][ T30] audit: type=1326 audit(1770289359.403:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21042 comm="syz.0.3407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 980.688879][ T30] audit: type=1326 audit(1770289359.403:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21042 comm="syz.0.3407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 980.845217][T21051] bond_slave_1: entered promiscuous mode [ 980.876602][T21051] bond_slave_1: left promiscuous mode [ 981.136719][T21060] tipc: Cannot configure node identity twice [ 983.056613][T21073] input: syz0 as /devices/virtual/input/input59 [ 983.558435][ T984] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 983.854960][ T984] usb 8-1: Using ep0 maxpacket: 16 [ 983.871001][ T984] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.881762][ T984] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 983.923535][ T984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.958277][ T984] usb 8-1: config 0 descriptor?? [ 983.980206][ T984] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input60 [ 984.197035][ T5183] bcm5974 8-1:0.0: could not read from device [ 984.215967][ T5183] bcm5974 8-1:0.0: could not read from device [ 984.225066][ T5183] bcm5974 8-1:0.0: could not read from device [ 984.240516][ T5183] bcm5974 8-1:0.0: could not read from device [ 984.258243][ T984] usb 8-1: USB disconnect, device number 49 [ 984.331529][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 984.545663][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 984.607880][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.631674][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.663076][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 984.925207][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.951060][ T10] usb 1-1: config 0 descriptor?? [ 985.474810][ T10] savu 0003:1E7D:2D5A.0024: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 985.839686][ T10] usb 1-1: USB disconnect, device number 47 [ 985.921490][T21093] fido_id[21093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 986.636108][ T10] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 986.799705][ T30] kauditd_printk_skb: 217 callbacks suppressed [ 986.799720][ T30] audit: type=1326 audit(1770289365.853:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21098 comm="syz.1.3425" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fd539 code=0x0 [ 986.834814][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 986.851234][ T10] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 986.859775][ T10] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 986.913210][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 986.934572][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 986.959949][ T10] usb 9-1: config 1 has no interface number 0 [ 986.977688][ T10] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 987.015750][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.085048][ T10] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 987.298186][ T10] snd_usb_pod 9-1:1.1: set_interface failed [ 987.318636][ T10] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 987.334995][ T10] snd_usb_pod 9-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 987.402269][ T10] usb 9-1: USB disconnect, device number 17 [ 987.505148][ T984] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 987.678245][ T984] usb 8-1: Using ep0 maxpacket: 32 [ 987.692352][ T984] usb 8-1: config 211 has an invalid interface number: 98 but max is 0 [ 987.713017][ T984] usb 8-1: config 211 has no interface number 0 [ 987.735355][ T984] usb 8-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 987.767441][ T984] usb 8-1: config 211 interface 98 has no altsetting 0 [ 987.790521][ T984] usb 8-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 987.820768][ T984] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.861308][ T984] usb 8-1: Product: syz [ 987.882668][ T984] usb 8-1: Manufacturer: syz [ 987.899891][ T984] usb 8-1: SerialNumber: syz [ 987.977873][T21108] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 988.224398][T21108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.275208][T21108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.335355][ T984] mct_u232 8-1:211.98: MCT U232 converter detected [ 988.356711][ T984] mct_u232 ttyUSB0: expected endpoint missing [ 988.388283][ T984] usb 8-1: USB disconnect, device number 50 [ 988.428812][ T5924] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 988.441451][ T984] mct_u232 8-1:211.98: device disconnected [ 988.596425][ T5924] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.623971][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 988.646544][T21125] netlink: 'syz.8.3433': attribute type 2 has an invalid length. [ 988.654518][T21125] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3433'. [ 988.843886][ T5924] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 988.854508][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 988.864478][ T5924] usb 2-1: SerialNumber: syz [ 989.093719][ T5924] usb 2-1: 0:2 : does not exist [ 989.194935][ T5924] usb 2-1: USB disconnect, device number 46 [ 989.633638][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 989.727213][T21134] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3437'. [ 989.998179][T12294] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 990.195128][T12294] usb 9-1: Using ep0 maxpacket: 16 [ 990.205832][T12294] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 990.228869][T12294] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 990.245687][T12294] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.380520][T12294] usb 9-1: Product: syz [ 990.385790][T12294] usb 9-1: Manufacturer: syz [ 990.389554][T21144] kvm: kvm [21143]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 990.421936][T12294] usb 9-1: SerialNumber: syz [ 990.435861][T12294] usb 9-1: config 0 descriptor?? [ 990.450455][T12294] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 990.462597][T12294] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 990.921746][T21152] syzkaller0: entered promiscuous mode [ 990.932249][T21152] syzkaller0: entered allmulticast mode [ 991.107035][T12294] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 991.530757][T12294] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 991.545070][T12294] em28xx 9-1:0.0: board has no eeprom [ 991.948380][T12294] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 991.975601][T12294] em28xx 9-1:0.0: dvb set to bulk mode. [ 991.992477][ T5924] em28xx 9-1:0.0: Binding DVB extension [ 993.255447][T21136] em28xx 9-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 993.314842][ T10] usb 9-1: USB disconnect, device number 18 [ 993.322191][ T10] em28xx 9-1:0.0: Disconnecting em28xx [ 993.393453][ T5924] em28xx 9-1:0.0: Registering input extension [ 993.417118][ T10] em28xx 9-1:0.0: Closing input extension [ 993.536586][ T10] em28xx 9-1:0.0: Freeing device [ 993.855123][T21193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3453'. [ 996.052515][ T30] audit: type=1326 audit(1770289375.093:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21215 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 996.095614][ T30] audit: type=1326 audit(1770289375.093:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21215 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 996.246746][ T30] audit: type=1326 audit(1770289375.093:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21215 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 996.268957][ T30] audit: type=1326 audit(1770289375.103:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21215 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 996.291438][ T30] audit: type=1326 audit(1770289375.103:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21215 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 996.357972][ T30] audit: type=1326 audit(1770289375.103:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21215 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 996.637259][ T30] audit: type=1326 audit(1770289375.103:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21215 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 997.080906][ T30] audit: type=1326 audit(1770289375.103:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21215 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 997.285160][ T30] audit: type=1326 audit(1770289375.103:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21215 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 997.396945][ T30] audit: type=1326 audit(1770289375.103:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21215 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 997.775516][ T10] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 997.830772][T15273] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 997.967629][ T10] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 997.978306][ T10] usb 1-1: config 0 has no interface number 0 [ 997.995552][ T5897] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 998.013026][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 998.022307][T15273] usb 8-1: Using ep0 maxpacket: 32 [ 998.031103][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.050769][T15273] usb 8-1: config 0 has no interfaces? [ 998.072906][T15273] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 998.100188][ T10] usb 1-1: Product: syz [ 998.105102][T15273] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.122973][ T10] usb 1-1: Manufacturer: syz [ 998.134377][ T10] usb 1-1: SerialNumber: syz [ 998.146859][T15273] usb 8-1: config 0 descriptor?? [ 998.165056][ T5897] usb 9-1: Using ep0 maxpacket: 8 [ 998.177373][ T5897] usb 9-1: config 0 has no interfaces? [ 998.189644][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.196791][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.201982][ T10] usb 1-1: config 0 descriptor?? [ 998.221512][ T5897] usb 9-1: config 0 has no interfaces? [ 998.246756][ T5897] usb 9-1: config 0 has no interfaces? [ 998.291456][ T5897] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 998.321691][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.343781][ T5897] usb 9-1: Product: syz [ 998.352962][ T5897] usb 9-1: Manufacturer: syz [ 998.364086][ T5897] usb 9-1: SerialNumber: syz [ 998.382162][ T5897] usb 9-1: config 0 descriptor?? [ 998.391378][T21235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.425243][T21235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.516721][T21235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.715090][T21235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.783309][ T5924] usb 8-1: USB disconnect, device number 51 [ 998.816081][ T10] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 998.894123][ T10] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 998.904374][ T10] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 998.912426][ T10] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 998.924121][ T10] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 999.125813][ T5897] usb 1-1: USB disconnect, device number 48 [ 999.137913][ T5897] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 999.156987][ T5897] keyspan 1-1:0.133: device disconnected [ 999.225413][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 999.372885][ T5924] usb 9-1: USB disconnect, device number 19 [ 999.416125][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 999.453391][ T10] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 999.468863][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.505796][ T10] usb 2-1: Product: syz [ 999.510038][ T10] usb 2-1: Manufacturer: syz [ 999.514668][ T10] usb 2-1: SerialNumber: syz [ 999.578530][ T10] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 999.693047][T21262] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1000.072669][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1000.239552][ T10] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1000.297399][ T10] usb 2-1: media controller created [ 1000.333714][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1000.345120][ T984] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1000.687369][ T984] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1000.748117][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.865380][ T984] usb 1-1: Product: syz [ 1000.869924][ T984] usb 1-1: Manufacturer: syz [ 1000.895639][ T984] usb 1-1: SerialNumber: syz [ 1001.033648][ T5924] usb 2-1: USB disconnect, device number 47 [ 1001.327678][ T984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1001.340091][ T984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1002.019927][T21283] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 1002.823835][ T984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1002.857157][ T984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1003.139256][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3481'. [ 1003.150574][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3481'. [ 1003.161819][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3481'. [ 1003.186731][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3481'. [ 1003.589424][ T984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1003.619958][ T984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1003.685423][ T984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1003.737363][ T984] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1004.246219][ T984] usb 1-1: USB disconnect, device number 49 [ 1005.013699][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1005.013724][ T30] audit: type=1804 audit(1770289383.723:826): pid=21308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3484" name="bus" dev="ramfs" ino=92579 res=1 errno=0 [ 1005.221975][T21310] netlink: 'syz.4.3486': attribute type 10 has an invalid length. [ 1005.258864][T21310] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1005.555628][T21319] kAFS: unable to lookup cell '' [ 1005.765689][T21321] binder_alloc: 21320: pid 21320 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1005.792622][T21321] binder_alloc: 21320: pid 21320 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1007.291475][T21338] syzkaller0: entered promiscuous mode [ 1007.301735][T21338] syzkaller0: entered allmulticast mode [ 1007.345696][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1007.390279][T21338] tipc: Started in network mode [ 1007.395320][T21338] tipc: Node identity 6af32a94ff63, cluster identity 4711 [ 1007.412884][T21338] tipc: Enabled bearer , priority 0 [ 1007.426422][T21337] tipc: Resetting bearer [ 1007.526600][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.565341][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.575521][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1007.590007][T21337] tipc: Disabling bearer [ 1007.605751][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1007.625190][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.654269][ T10] usb 1-1: config 0 descriptor?? [ 1008.055025][ T5897] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1008.088910][ T10] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xd [ 1008.105325][T21347] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3496'. [ 1008.118116][T21347] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3496'. [ 1008.134790][T21347] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3496'. [ 1008.146139][ T10] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1008.165827][T21347] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3496'. [ 1008.251372][ T5897] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.272440][ T5897] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1008.294170][ T5897] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1008.324384][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1008.332653][ T5897] usb 9-1: SerialNumber: syz [ 1008.356630][T15273] usb 1-1: USB disconnect, device number 50 [ 1008.573249][ T5897] usb 9-1: 0:2 : does not exist [ 1008.586649][ T5897] usb 9-1: unit 255 not found! [ 1008.608310][ T5897] usb 9-1: 5:0: cannot get min/max values for control 1 (id 5) [ 1008.633350][ T5897] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1008.672659][ T5897] usb 9-1: USB disconnect, device number 20 [ 1008.760449][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.195990][T21362] syzkaller0: entered promiscuous mode [ 1009.218922][T21362] syzkaller0: entered allmulticast mode [ 1010.367640][ T5897] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1010.555959][ T5897] usb 8-1: Using ep0 maxpacket: 32 [ 1010.584034][ T5897] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1010.602716][ T5897] usb 8-1: config 0 has no interface number 0 [ 1010.618225][ T5897] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1010.636776][ T5897] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1010.671798][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.690813][ T5897] usb 8-1: Product: syz [ 1010.704898][ T5897] usb 8-1: Manufacturer: syz [ 1010.714754][ T5897] usb 8-1: SerialNumber: syz [ 1010.735439][ T5897] usb 8-1: config 0 descriptor?? [ 1010.752737][ T5897] smsc75xx v1.0.0 [ 1011.005154][ T5924] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1011.172720][ T5924] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1011.182051][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.190565][ T5924] usb 9-1: Product: syz [ 1011.194962][ T5924] usb 9-1: Manufacturer: syz [ 1011.199896][ T5924] usb 9-1: SerialNumber: syz [ 1011.208124][ T5924] usb 9-1: config 0 descriptor?? [ 1011.359007][ T5897] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1011.370602][ T5897] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1011.423132][ T5924] hso 9-1:0.0: Failed to find BULK IN ep [ 1011.433367][ T5924] usb-storage 9-1:0.0: USB Mass Storage device detected [ 1011.637602][T21403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.647859][T21403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.667407][T21403] sctp: Trying to GSO but underlying device doesn't support it. [ 1011.681459][ T5924] usb 9-1: USB disconnect, device number 21 [ 1013.261005][ T5897] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 1013.434977][ T5897] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 1013.456738][T21424] kvm: pic: single mode not supported [ 1013.457146][T21424] kvm: pic: single mode not supported [ 1013.474859][ T5897] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1013.532153][T21424] kvm: pic: non byte write [ 1013.533314][ T5897] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1013.541256][T21424] kvm: pic: single mode not supported [ 1013.548082][T21424] kvm: pic: non byte write [ 1013.602887][T21424] kvm: pic: non byte write [ 1013.611539][ T5897] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1013.623256][T21424] kvm: pic: non byte write [ 1013.639187][ T5897] usb 8-1: USB disconnect, device number 52 [ 1013.679033][T21424] kvm: pic: single mode not supported [ 1013.679058][T21424] kvm: pic: level sensitive irq not supported [ 1013.807457][T21431] syzkaller0: entered promiscuous mode [ 1013.835203][T21431] syzkaller0: entered allmulticast mode [ 1014.335130][T15273] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 1014.577196][T15273] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 1014.586350][T15273] usb 8-1: config 0 has no interface number 0 [ 1014.595896][T15273] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1014.605311][T15273] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.613318][T15273] usb 8-1: Product: syz [ 1014.618208][T15273] usb 8-1: Manufacturer: syz [ 1014.622869][T15273] usb 8-1: SerialNumber: syz [ 1014.629698][T15273] usb 8-1: config 0 descriptor?? [ 1015.201637][T15273] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 1015.212272][T15273] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 1015.224379][T15273] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 1015.232634][T15273] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 1015.242173][T15273] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1015.426427][ T5924] usb 8-1: USB disconnect, device number 53 [ 1015.439087][ T5924] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1015.458279][ T5924] keyspan 8-1:0.133: device disconnected [ 1017.235672][T21457] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3529'. [ 1017.264920][T21457] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3529'. [ 1022.928349][T21518] netlink: 'syz.0.3546': attribute type 1 has an invalid length. [ 1023.036837][T21520] netlink: 'syz.7.3545': attribute type 2 has an invalid length. [ 1023.044765][T21520] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3545'. [ 1023.257082][T21523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3546'. [ 1023.361461][T21528] bond7: (slave geneve3): making interface the new active one [ 1023.507759][T21528] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 1023.536343][T21523] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1023.549043][ T6003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1023.608061][ T6003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1023.624812][ T5897] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1023.642755][ T6003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1023.966575][ T6003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1023.984786][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 1023.992380][ T5897] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1024.000982][ T5897] usb 5-1: config 0 has no interface number 0 [ 1024.359571][ T5897] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1024.369054][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.398415][ T5897] usb 5-1: Product: syz [ 1024.402719][ T5897] usb 5-1: Manufacturer: syz [ 1024.407590][ T30] audit: type=1800 audit(1770289403.143:827): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3549" name="bus" dev="tmpfs" ino=1128 res=0 errno=0 [ 1024.447131][ T5897] usb 5-1: SerialNumber: syz [ 1024.458197][ T5897] usb 5-1: config 0 descriptor?? [ 1024.477358][ T5897] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1024.673635][ T5897] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1024.689527][ T5897] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1025.808126][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1025.809493][ T5924] usb 5-1: USB disconnect, device number 47 [ 1025.860994][ T5924] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1025.934472][ T5924] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1026.005516][ T5924] quatech2 5-1:0.51: device disconnected [ 1027.201655][T21571] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 1027.213652][T21571] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 1027.650914][T21583] netlink: 'syz.1.3563': attribute type 2 has an invalid length. [ 1027.770740][ T30] audit: type=1804 audit(1770289406.723:828): pid=21584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3561" name="bus" dev="ramfs" ino=94464 res=1 errno=0 [ 1027.837055][T21583] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1029.758606][ T30] audit: type=1800 audit(1770289408.813:829): pid=21606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3569" name="bus" dev="tmpfs" ino=982 res=0 errno=0 [ 1030.853068][ T30] audit: type=1326 audit(1770289409.903:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21589 comm="syz.0.3565" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x0 [ 1030.967442][T21598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3565'. [ 1031.929632][T21621] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1032.605105][ T5897] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1032.929358][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 1032.936975][ T5897] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1032.950443][ T5897] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1032.971960][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.981268][T21638] netlink: 'syz.4.3578': attribute type 2 has an invalid length. [ 1032.989129][T21638] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3578'. [ 1033.016960][ T5897] usb 1-1: Product: syz [ 1033.269647][ T5897] usb 1-1: Manufacturer: syz [ 1033.307592][ T5897] usb 1-1: SerialNumber: syz [ 1033.670697][ T5897] usb 1-1: config 0 descriptor?? [ 1033.800811][T21627] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1033.833967][ T5897] hub 1-1:0.0: bad descriptor, ignoring hub [ 1033.865881][ T5897] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1033.895178][ T5897] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input63 [ 1034.050604][ T30] audit: type=1804 audit(1770289413.073:831): pid=21645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3579" name="bus" dev="ramfs" ino=94619 res=1 errno=0 [ 1034.294349][ T5924] usb 1-1: USB disconnect, device number 51 [ 1034.294461][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1036.728910][ T30] audit: type=1800 audit(1770289415.723:832): pid=21664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3584" name="bus" dev="tmpfs" ino=3795 res=0 errno=0 [ 1037.367343][T21667] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1038.262198][T21685] syzkaller0: entered promiscuous mode [ 1038.285112][T21685] syzkaller0: entered allmulticast mode [ 1038.390540][T21691] binder_alloc: 21689: binder_alloc_buf, no vma [ 1038.584829][ T5897] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1038.736545][T15273] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1038.751885][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 1038.783447][ T5897] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1038.829314][ T5897] usb 2-1: config 0 has no interface number 0 [ 1038.901817][ T5897] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1038.921901][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.930354][T15273] usb 1-1: Using ep0 maxpacket: 32 [ 1038.942027][T15273] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1038.956784][ T5897] usb 2-1: Product: syz [ 1038.961221][T15273] usb 1-1: config 0 has no interface number 0 [ 1038.990442][ T5897] usb 2-1: Manufacturer: syz [ 1038.999227][T15273] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1039.009602][ T5897] usb 2-1: SerialNumber: syz [ 1039.022238][ T5897] usb 2-1: config 0 descriptor?? [ 1039.038516][T15273] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1039.060725][T15273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.101176][T15273] usb 1-1: Product: syz [ 1039.116928][T15273] usb 1-1: Manufacturer: syz [ 1039.121633][T15273] usb 1-1: SerialNumber: syz [ 1039.159324][T15273] usb 1-1: config 0 descriptor?? [ 1039.165965][T21696] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1039.266566][ T5897] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1039.274318][ T5897] uvcvideo 2-1:0.31: Failed to initialize entity for entity 6 [ 1039.309035][ T5897] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 1039.429500][T21696] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1039.512585][ T984] usb 2-1: USB disconnect, device number 48 [ 1041.668153][T21715] netlink: 'syz.1.3599': attribute type 39 has an invalid length. [ 1041.982110][T16302] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1042.107809][T15273] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1042.124835][T15273] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1042.140857][T15273] usb 1-1: USB disconnect, device number 52 [ 1042.167069][T16302] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1042.196636][T16302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.235062][T16302] usb 2-1: config 0 has no interface number 0 [ 1042.241238][T16302] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1042.284837][T16302] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1042.365088][T16302] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1042.374176][T16302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.394956][T16302] usb 2-1: Product: syz [ 1042.399192][T16302] usb 2-1: Manufacturer: syz [ 1042.403851][T16302] usb 2-1: SerialNumber: syz [ 1042.428453][T16302] usb 2-1: config 0 descriptor?? [ 1042.706263][T15273] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1042.877923][T15273] usb 5-1: Using ep0 maxpacket: 8 [ 1042.895814][T15273] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1042.912625][T15273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.935616][T21727] loop4: detected capacity change from 0 to 7 [ 1042.964815][ T30] audit: type=1800 audit(1770289422.013:833): pid=21728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3603" name="bus" dev="tmpfs" ino=3992 res=0 errno=0 [ 1042.987289][T15273] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1042.994372][T15273] pvrusb2: ********** [ 1043.025179][T21727] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1043.035535][T15273] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1043.047679][T21727] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 1043.087893][T16302] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.117/input/input64 [ 1043.089479][T21727] loop4: p2 start 4294901760 is beyond EOD, [ 1043.108171][T15273] pvrusb2: Important functionality might not be entirely working. [ 1043.136042][T21727] truncated [ 1043.145127][T21727] loop4: p3 start 4294836224 is beyond EOD, truncated [ 1043.158081][T15273] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1043.174354][T21727] loop4: p4 size 327680 extends beyond EOD, truncated [ 1043.214202][T21727] loop4: p5 size 8323072 extends beyond EOD, truncated [ 1043.225652][T15273] pvrusb2: ********** [ 1043.255382][ T2345] pvrusb2: Invalid write control endpoint [ 1043.270065][T21727] loop4: p6 start 8192 is beyond EOD, truncated [ 1043.477046][T21718] pvrusb2: Invalid write control endpoint [ 1043.486005][ T8947] udevd[8947]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1043.494990][ T5936] udevd[5936]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1043.520829][ T6562] udevd[6562]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1043.540528][T15273] usb 5-1: USB disconnect, device number 48 [ 1043.604531][ T2345] pvrusb2: Invalid write control endpoint [ 1043.640583][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1043.704613][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1043.740720][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1043.787694][ T2345] pvrusb2: Device being rendered inoperable [ 1043.814079][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1043.832943][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1043.875435][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1043.900939][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1043.924160][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1044.600143][T15273] usb 2-1: USB disconnect, device number 49 [ 1044.755196][ T5924] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1044.871390][T21757] syzkaller0: entered promiscuous mode [ 1044.888257][T21757] syzkaller0: entered allmulticast mode [ 1044.924988][T16302] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1044.950260][ T5924] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 1044.981935][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.043138][ T5924] usb 5-1: config 0 descriptor?? [ 1045.100620][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input65 [ 1045.134967][T16302] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1045.164830][ T984] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1045.236950][T16302] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1045.290770][T16302] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1045.371735][T16302] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1045.410409][T16302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.419047][ T984] usb 2-1: Using ep0 maxpacket: 8 [ 1045.437175][ T984] usb 2-1: config 0 interface 0 altsetting 108 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1045.450502][T16302] usb 1-1: Product: 큐熞疴赹ᠷޯ뼿垠瑾馄⵺鋇Թ颳䊛暰亙뮐ᑚ⶘붊⟳㪢溥霊घ͜ﱕﷆ䇙颓뙙㉎렵㒞䇠㉃짤ਾ쵫農镼⩳酐皥ᇛ멬竉쾀쒊霓犌扟춺넛唞＠닗뛳戠괷誴풂詪箰밑坴ⶥὂ䎪헒쬺②晛눥㖘⫼ [ 1045.487062][ T984] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1045.500058][ T984] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 1045.585427][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.602644][T16302] usb 1-1: Manufacturer: 䐊 [ 1045.642152][T16302] usb 1-1: SerialNumber: щ [ 1045.651283][ T984] usb 2-1: config 0 descriptor?? [ 1045.921180][T16302] usb 1-1: 0:2 : does not exist [ 1046.013126][T16302] usb 1-1: USB disconnect, device number 53 [ 1046.334128][ T984] usbhid 2-1:0.0: can't add hid device: -71 [ 1046.373589][ T984] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1046.421618][ T984] usb 2-1: USB disconnect, device number 50 [ 1047.456978][T15273] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1047.737408][T21781] syzkaller0: entered promiscuous mode [ 1047.780745][T15273] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1047.795818][T15273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.803977][T15273] usb 2-1: Product: syz [ 1047.808621][T21781] syzkaller0: entered allmulticast mode [ 1047.895445][T15273] usb 2-1: Manufacturer: syz [ 1047.905352][T15273] usb 2-1: SerialNumber: syz [ 1048.048556][ T10] usb 5-1: USB disconnect, device number 49 [ 1048.244348][T21789] netlink: 'syz.0.3621': attribute type 1 has an invalid length. [ 1048.377855][T15273] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1048.396553][T15273] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1048.533421][T21792] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 1048.558062][T21792] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 1048.580882][T21792] kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 1048.601057][T21792] kvm: requested 196114 ns i8254 timer period limited to 200000 ns [ 1048.624362][T21792] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 1048.653203][T21792] kvm: requested 104761 ns i8254 timer period limited to 200000 ns [ 1048.679397][T21792] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 1048.698267][T21792] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 1048.718759][T21792] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 1048.733950][T21792] kvm: requested 69561 ns i8254 timer period limited to 200000 ns [ 1048.865235][T16302] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1049.037791][T16302] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1049.053652][T16302] usb 1-1: not running at top speed; connect to a high speed hub [ 1049.082462][T16302] usb 1-1: config 7 has an invalid interface number: 135 but max is 0 [ 1049.091964][T16302] usb 1-1: config 7 has no interface number 0 [ 1049.113245][T16302] usb 1-1: config 7 interface 135 has no altsetting 0 [ 1049.146339][T16302] usb 1-1: New USB device found, idVendor=d26f, idProduct=e881, bcdDevice=d0.cb [ 1049.185051][T16302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.193139][T16302] usb 1-1: Product: syz [ 1049.209726][T16302] usb 1-1: Manufacturer: syz [ 1049.214395][T16302] usb 1-1: SerialNumber: syz [ 1049.264930][ T984] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1049.447216][ T984] usb 8-1: Using ep0 maxpacket: 16 [ 1049.457514][T16302] usb-storage 1-1:7.135: USB Mass Storage device detected [ 1049.484256][ T984] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1049.507665][ T984] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1049.545245][T16302] usb 1-1: USB disconnect, device number 54 [ 1049.561027][ T984] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1049.579416][ T984] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.598212][ T984] usb 8-1: Product: syz [ 1049.602885][ T5884] udevd[5884]: setting mode of /dev/bus/usb/001/054 to 020664 failed: No such file or directory [ 1049.613854][ T984] usb 8-1: Manufacturer: syz [ 1049.631642][ T5884] udevd[5884]: setting owner of /dev/bus/usb/001/054 to uid=0, gid=0 failed: No such file or directory [ 1049.637231][ T984] usb 8-1: SerialNumber: syz [ 1049.883368][T21811] kvm: kvm [21810]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6f1b0000005b [ 1049.895869][ T984] usb 8-1: 0:2 : does not exist [ 1049.906869][ T984] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1049.953631][ T984] usb 8-1: USB disconnect, device number 54 [ 1049.990674][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1050.200418][T21816] syzkaller0: entered promiscuous mode [ 1050.222682][T21816] syzkaller0: entered allmulticast mode [ 1050.766855][T15273] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1050.805976][T15273] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1050.840242][T15273] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 1050.865017][T15273] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1050.892142][T15273] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1050.918113][T15273] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1050.967962][T15273] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1050.986482][T15273] usb 2-1: USB disconnect, device number 51 [ 1051.431851][T21822] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3633'. [ 1051.458954][T21822] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3633'. [ 1051.499169][T21822] netlink: 'syz.7.3633': attribute type 5 has an invalid length. [ 1051.529048][T21822] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3633'. [ 1051.754817][T15273] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1051.959732][T15273] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1051.972402][T15273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.983475][T15273] usb 5-1: Product: syz [ 1052.000788][T15273] usb 5-1: Manufacturer: syz [ 1052.007035][T15273] usb 5-1: SerialNumber: syz [ 1052.052440][T15273] usb 5-1: config 0 descriptor?? [ 1052.094052][T21837] kvm: kvm [21836]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 1052.278749][T15273] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1052.437952][T21842] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3637'. [ 1052.834882][ T984] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1053.014777][ T984] usb 8-1: Using ep0 maxpacket: 8 [ 1053.026602][ T984] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1053.038410][ T984] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1053.051986][ T984] usb 8-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1053.063157][ T984] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.071549][ T984] usb 8-1: Product: syz [ 1053.076173][ T984] usb 8-1: Manufacturer: syz [ 1053.080901][ T984] usb 8-1: SerialNumber: syz [ 1053.090087][ T984] usb 8-1: config 0 descriptor?? [ 1053.907103][T15273] usb 8-1: USB disconnect, device number 55 [ 1054.560479][ T984] usb 5-1: USB disconnect, device number 50 [ 1057.115872][ T984] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1057.430254][ T984] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1057.451376][ T984] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1057.551871][ T984] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1057.610709][ T984] usb 8-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1057.625583][ T984] usb 8-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1057.633800][ T984] usb 8-1: Manufacturer: syz [ 1057.649813][ T984] usb 8-1: config 0 descriptor?? [ 1057.681189][ T984] smsusb:smsusb_probe: board id=9, interface number 0 [ 1057.719623][ T984] smsusb:smsusb_probe: Device initialized with return code -19 [ 1058.049089][ T984] usb 8-1: USB disconnect, device number 56 [ 1058.688278][T21907] syzkaller0: entered promiscuous mode [ 1058.714003][T21910] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3657'. [ 1058.723432][T21907] syzkaller0: entered allmulticast mode [ 1058.729766][T21910] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3657'. [ 1059.174164][T21918] syzkaller0: entered promiscuous mode [ 1059.224043][T21918] syzkaller0: entered allmulticast mode [ 1059.620650][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.627356][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.193183][T21925] syzkaller0: entered promiscuous mode [ 1060.218736][T21925] syzkaller0: entered allmulticast mode [ 1061.464008][T21938] create_pit_timer: 7 callbacks suppressed [ 1061.464028][T21938] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1061.532869][T21938] kvm: pic: non byte read [ 1061.557420][T21938] kvm: pic: level sensitive irq not supported [ 1061.557504][T21938] kvm: pic: non byte read [ 1061.611757][T21938] kvm: pic: level sensitive irq not supported [ 1061.611833][T21938] kvm: pic: non byte read [ 1061.663871][T21938] kvm: pic: level sensitive irq not supported [ 1061.663978][T21938] kvm: pic: non byte read [ 1061.905063][T15273] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1062.088478][T15273] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.110329][T15273] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1062.132477][T15273] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.155972][T15273] usb 8-1: config 0 descriptor?? [ 1062.173720][T15273] pwc: Askey VC010 type 2 USB webcam detected. [ 1062.625144][T15273] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1062.635003][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1062.643643][T15273] pwc: recv_control_msg error -32 req 02 val 2700 [ 1062.653604][T15273] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1062.662530][T15273] pwc: recv_control_msg error -32 req 04 val 1000 [ 1062.682929][T15273] pwc: recv_control_msg error -32 req 04 val 1300 [ 1062.707172][T15273] pwc: recv_control_msg error -32 req 04 val 1400 [ 1062.733259][T15273] pwc: recv_control_msg error -32 req 02 val 2000 [ 1062.765023][T15273] pwc: recv_control_msg error -32 req 02 val 2100 [ 1062.790386][T15273] pwc: recv_control_msg error -32 req 04 val 1500 [ 1062.799981][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.820153][T15273] pwc: recv_control_msg error -32 req 02 val 2500 [ 1062.828671][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1062.860508][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.895022][ T10] usb 1-1: config 0 descriptor?? [ 1062.941108][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1063.065552][T15273] pwc: recv_control_msg error -71 req 02 val 2600 [ 1063.092046][T15273] pwc: recv_control_msg error -71 req 02 val 2900 [ 1063.123210][T15273] pwc: recv_control_msg error -71 req 02 val 2800 [ 1063.163556][T15273] pwc: recv_control_msg error -71 req 04 val 1100 [ 1063.182815][T15273] pwc: recv_control_msg error -71 req 04 val 1200 [ 1063.222751][T15273] pwc: Registered as video103. [ 1063.273161][T15273] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input66 [ 1063.366462][T15273] usb 8-1: USB disconnect, device number 57 [ 1063.375159][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1063.421111][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1063.443077][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1063.507131][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1063.534150][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1063.556466][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1063.582158][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1063.627861][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1063.666720][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1063.701733][T21971] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3674'. [ 1063.711349][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 1063.743350][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 1063.987217][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 1064.005673][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 1064.055211][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1064.075862][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1064.106535][ T10] pwc: Registered as video103. [ 1064.113560][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input67 [ 1064.228965][ T10] usb 1-1: USB disconnect, device number 55 [ 1064.825086][T15273] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1065.008725][T15273] usb 9-1: Using ep0 maxpacket: 8 [ 1065.030505][T15273] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1065.078772][T15273] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1065.195015][T15273] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1065.224564][T15273] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1065.333965][T15273] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.440017][T15273] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1065.528037][T15273] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.858117][T15273] usb 9-1: usb_control_msg returned -32 [ 1065.876779][T15273] usbtmc 9-1:16.0: can't read capabilities [ 1066.238401][T21987] usbtmc 9-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 1066.443185][T15273] usb 9-1: USB disconnect, device number 22 [ 1067.074858][ T984] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1067.266341][ T984] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1067.274414][ T984] usb 5-1: config 0 has no interface number 0 [ 1067.330663][ T984] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1067.361254][T22020] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3689'. [ 1067.379557][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.410441][T22020] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3689'. [ 1067.423330][ T984] usb 5-1: Product: syz [ 1067.443197][ T984] usb 5-1: Manufacturer: syz [ 1067.463268][ T984] usb 5-1: SerialNumber: syz [ 1067.504165][ T984] usb 5-1: config 0 descriptor?? [ 1067.535688][T22020] vlan0: entered allmulticast mode [ 1067.548179][T22020] bridge_slave_0: entered allmulticast mode [ 1067.744452][ T984] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1067.791638][ T984] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1067.808893][ T984] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1067.833894][ T984] usb 5-1: media controller created [ 1067.896425][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1068.250824][ T984] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1068.425362][ T984] usb 5-1: USB disconnect, device number 51 [ 1069.354830][ T984] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1069.544922][ T984] usb 5-1: device descriptor read/64, error -71 [ 1069.855099][ T984] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1070.025137][ T984] usb 5-1: device descriptor read/64, error -71 [ 1070.168683][ T984] usb usb5-port1: attempt power cycle [ 1070.574846][ T984] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1070.642544][ T984] usb 5-1: device descriptor read/8, error -71 [ 1070.935157][ T984] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1070.964873][T15273] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1070.997356][ T984] usb 5-1: device descriptor read/8, error -71 [ 1071.143932][ T984] usb usb5-port1: unable to enumerate USB device [ 1071.174865][T15273] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1071.193379][T15273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.201603][T15273] usb 1-1: Product: syz [ 1071.206149][T15273] usb 1-1: Manufacturer: syz [ 1071.225747][T15273] usb 1-1: SerialNumber: syz [ 1071.261390][T22053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3698'. [ 1071.484851][T16302] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1071.658706][T16302] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1071.688207][T16302] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1071.726582][T15273] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1071.758999][T15273] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1071.769832][T16302] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1071.798089][T16302] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1071.823556][T16302] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.862982][T16302] usb 8-1: Product: syz [ 1071.878328][T16302] usb 8-1: Manufacturer: syz [ 1071.895872][T16302] usb 8-1: SerialNumber: syz [ 1071.923420][T16302] usb 8-1: config 0 descriptor?? [ 1071.951314][T22054] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1071.976806][T16302] usb 8-1: ucan: probing device on interface #0 [ 1072.020616][T16302] usb 8-1: ucan: invalid endpoint configuration [ 1072.054241][T16302] usb 8-1: ucan: probe failed; try to update the device firmware [ 1072.975378][ T984] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1073.080444][T15273] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1073.123255][T15273] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1073.148533][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 1073.167538][ T984] usb 5-1: config 2 has an invalid interface number: 15 but max is 0 [ 1073.192754][ T984] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 1073.248969][ T984] usb 5-1: config 2 has no interface number 1 [ 1073.278921][ T984] usb 5-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1073.350344][ T984] usb 5-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1073.420715][ T984] usb 5-1: config 2 interface 0 has no altsetting 0 [ 1073.460992][ T984] usb 5-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 1073.491764][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.520160][ T984] usb 5-1: Product: syz [ 1073.548497][ T984] usb 5-1: Manufacturer: syz [ 1073.584738][ T984] usb 5-1: SerialNumber: syz [ 1073.675999][ T984] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 1073.843576][T15273] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 1073.870643][T15273] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1073.893485][T15273] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1073.959285][T15273] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1074.009904][T15273] usb 1-1: USB disconnect, device number 56 [ 1074.119997][ T984] pwc: Failed to set LED on/off time (-71) [ 1074.132766][ T984] pwc: send_video_command error -71 [ 1074.138356][ T984] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1074.146536][ T984] Philips webcam 5-1:2.0: probe with driver Philips webcam failed with error -71 [ 1074.164081][ T984] usb 5-1: USB disconnect, device number 56 [ 1074.220602][ T797] usb 8-1: USB disconnect, device number 58 [ 1074.861328][T22090] binder: transaction release 677 bad handle 1, ret = -22 [ 1074.902138][ T984] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1075.035288][T16302] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1075.065215][ T984] usb 1-1: Using ep0 maxpacket: 32 [ 1075.074229][ T984] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1075.122287][ T984] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1075.159318][ T984] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1075.221130][T16302] usb 9-1: Using ep0 maxpacket: 8 [ 1075.260128][ T984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1075.294961][T16302] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1075.302710][T16302] usb 9-1: no configurations [ 1075.303991][T22096] syzkaller0: entered promiscuous mode [ 1075.333798][ T984] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1075.341417][T22096] syzkaller0: entered allmulticast mode [ 1075.371742][T16302] usb 9-1: can't read configurations, error -22 [ 1075.383840][ T984] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1075.466893][ T984] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1075.525055][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.586358][ T984] usb 1-1: config 0 descriptor?? [ 1075.766333][T22101] syzkaller0: entered promiscuous mode [ 1075.779112][T22101] syzkaller0: entered allmulticast mode [ 1075.833271][ T984] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1076.494774][T15273] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1076.662821][ T984] usb 1-1: USB disconnect, device number 57 [ 1076.686031][T15273] usb 2-1: config 0 has no interfaces? [ 1076.694641][ T984] usblp0: removed [ 1076.723867][T15273] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1076.787317][T15273] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1076.814781][T15273] usb 2-1: Product: syz [ 1076.830209][T15273] usb 2-1: SerialNumber: syz [ 1076.877016][T15273] usb 2-1: config 0 descriptor?? [ 1076.906453][T22119] netlink: 'syz.8.3719': attribute type 12 has an invalid length. [ 1077.140892][T22127] syzkaller0: entered promiscuous mode [ 1077.155000][T22126] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3721'. [ 1077.190097][T22127] syzkaller0: entered allmulticast mode [ 1077.203877][T22126] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3721'. [ 1077.591778][T22138] sit1: entered promiscuous mode [ 1077.705315][ T984] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1077.748576][T15273] usb 2-1: USB disconnect, device number 52 [ 1077.875191][ T984] usb 9-1: Using ep0 maxpacket: 16 [ 1077.898263][ T984] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1077.920147][ T984] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1077.964179][ T984] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1077.984211][ T984] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.006872][ T984] usb 9-1: Product: syz [ 1078.022217][ T984] usb 9-1: Manufacturer: syz [ 1078.040931][ T984] usb 9-1: SerialNumber: syz [ 1078.070461][ T984] usb 9-1: config 0 descriptor?? [ 1078.098750][ T984] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1078.141270][ T984] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1078.185034][T15273] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1078.354772][T15273] usb 1-1: Using ep0 maxpacket: 8 [ 1078.388928][T15273] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1078.414085][T15273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.448262][T15273] usb 1-1: Product: syz [ 1078.463999][T15273] usb 1-1: Manufacturer: syz [ 1078.478008][T15273] usb 1-1: SerialNumber: syz [ 1078.518043][T15273] usb 1-1: config 0 descriptor?? [ 1078.548986][T15273] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1078.736458][ T984] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1078.785078][ T984] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1079.186669][ T797] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1079.377004][ T797] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.436558][ T797] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1079.461906][ T797] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1079.475598][ T797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1079.484286][ T797] usb 8-1: SerialNumber: syz [ 1079.740919][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3734'. [ 1079.771674][ T797] usb 8-1: 0:2 : does not exist [ 1079.835714][ T797] usb 8-1: USB disconnect, device number 59 [ 1079.884890][ T984] em28xx 9-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1079.978734][T22167] netlink: 'syz.4.3733': attribute type 6 has an invalid length. [ 1080.011905][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1080.486907][ T984] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1080.510841][ T984] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1080.543311][ T984] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1080.574431][ T984] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1080.602442][ T984] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1080.626693][ T984] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1080.661281][ T984] usb 9-1: USB disconnect, device number 25 [ 1081.022216][T22175] syzkaller0: entered promiscuous mode [ 1081.034874][T22175] syzkaller0: entered allmulticast mode [ 1081.421608][T22177] kvm: pic: non byte write [ 1081.445410][T22177] kvm: pic: non byte write [ 1081.449979][T22177] kvm: pic: non byte write [ 1081.455979][T15273] gspca_sonixj: i2c_w8 err -71 [ 1081.478585][T22177] kvm: pic: non byte write [ 1081.492846][T22177] kvm: pic: non byte write [ 1081.497678][T15273] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 1081.517523][T22177] kvm: pic: non byte write [ 1081.523152][T15273] usb 1-1: USB disconnect, device number 58 [ 1081.529848][T22177] kvm: pic: non byte write [ 1081.546435][T22177] kvm: pic: non byte write [ 1081.550983][T22177] kvm: pic: non byte write [ 1081.573487][T22177] kvm: pic: non byte write [ 1081.583584][T22181] syzkaller0: entered promiscuous mode [ 1081.589829][T22181] syzkaller0: entered allmulticast mode [ 1082.664843][T22203] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1082.793936][ T984] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1082.835498][ T984] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1082.865489][ T984] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1082.898949][ T984] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1082.969165][ T984] rtc rtc0: __rtc_set_alarm: err=-22 [ 1083.852197][T22216] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN PTI [ 1083.864184][T22216] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 1083.872663][T22216] CPU: 0 UID: 0 PID: 22216 Comm: syz.8.3749 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.883647][T22216] Tainted: [L]=SOFTLOCKUP [ 1083.888005][T22216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1083.898105][T22216] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 1083.905030][T22216] Code: c3 31 ff 89 c6 e8 56 19 ce f7 85 db 74 5b e8 0d 15 ce f7 eb 05 e8 06 15 ce f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 1083.924691][T22216] RSP: 0018:ffffc9000ecd7500 EFLAGS: 00010202 [ 1083.930798][T22216] RAX: 0000000000000007 RBX: 0000000000000039 RCX: 0000000000080000 [ 1083.938814][T22216] RDX: ffffc9000ef51000 RSI: 0000000000000923 RDI: 0000000000000924 [ 1083.946791][T22216] RBP: 0000000080000000 R08: ffff888030558000 R09: 0000000000000003 [ 1083.955029][T22216] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 1083.963014][T22216] R13: 0000000000000000 R14: ffff888077172358 R15: ffffffffffffffff [ 1083.970995][T22216] FS: 0000000000000000(0000) GS:ffff8881256f5000(0063) knlGS:00000000f5406b40 [ 1083.979937][T22216] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1083.986521][T22216] CR2: 0000000080004ff0 CR3: 000000003163a000 CR4: 00000000003526f0 [ 1083.994517][T22216] Call Trace: [ 1083.997799][T22216] [ 1084.000737][T22216] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1084.006405][T22216] ip_route_output_key_hash+0x18d/0x2a0 [ 1084.011979][T22216] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1084.018055][T22216] ? crng_fast_key_erasure+0x196/0x270 [ 1084.023554][T22216] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 1084.029400][T22216] ip_route_output_flow+0x2a/0x150 [ 1084.034546][T22216] sctp_v4_get_dst+0x3f8/0x12b0 [ 1084.039493][T22216] ? crng_make_state+0x2c5/0x600 [ 1084.044436][T22216] ? lockdep_hardirqs_on+0x7a/0x110 [ 1084.049636][T22216] ? crng_make_state+0x36a/0x600 [ 1084.054584][T22216] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 1084.059867][T22216] ? _get_random_bytes+0x1e7/0x260 [ 1084.065017][T22216] ? dst_release+0x72/0x1b0 [ 1084.069538][T22216] sctp_transport_route+0x118/0x2f0 [ 1084.074754][T22216] sctp_assoc_add_peer+0x650/0x13b0 [ 1084.079977][T22216] sctp_connect_new_asoc+0x329/0x6b0 [ 1084.085271][T22216] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1084.091105][T22216] ? __local_bh_enable_ip+0xd0/0x130 [ 1084.096400][T22216] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1084.101952][T22216] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1084.107761][T22216] sctp_sendmsg+0x1528/0x2c10 [ 1084.112449][T22216] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1084.117477][T22216] ? aa_sk_perm+0x15a/0x960 [ 1084.121985][T22216] ? aa_sk_perm+0x82d/0x960 [ 1084.126485][T22216] ? __might_fault+0xaf/0x130 [ 1084.131182][T22216] ? __pfx_aa_sk_perm+0x10/0x10 [ 1084.136041][T22216] ? sock_rps_record_flow+0x19/0x400 [ 1084.141336][T22216] ? inet_sendmsg+0x2f4/0x370 [ 1084.146019][T22216] __sys_sendto+0x627/0x7a0 [ 1084.150529][T22216] ? __pfx___sys_sendto+0x10/0x10 [ 1084.155559][T22216] ? do_futex+0x395/0x420 [ 1084.159916][T22216] ? rcu_is_watching+0x15/0xb0 [ 1084.164709][T22216] __ia32_sys_sendto+0xdd/0x100 [ 1084.169581][T22216] __do_fast_syscall_32+0x1d2/0x540 [ 1084.174785][T22216] ? do_fast_syscall_32+0x33/0x70 [ 1084.179830][T22216] ? irqentry_exit+0x10e/0x620 [ 1084.184595][T22216] do_fast_syscall_32+0x33/0x70 [ 1084.189451][T22216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1084.195778][T22216] RIP: 0023:0xf73dd539 [ 1084.199955][T22216] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1084.219651][T22216] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1084.228069][T22216] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1084.236042][T22216] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 0000000080004ff0 [ 1084.244014][T22216] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 1084.252002][T22216] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1084.259976][T22216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1084.267958][T22216] [ 1084.270983][T22216] Modules linked in: [ 1084.275957][T22216] ---[ end trace 0000000000000000 ]--- [ 1084.298696][T22216] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 1084.306436][T22216] Code: c3 31 ff 89 c6 e8 56 19 ce f7 85 db 74 5b e8 0d 15 ce f7 eb 05 e8 06 15 ce f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 1084.329180][T22216] RSP: 0018:ffffc9000ecd7500 EFLAGS: 00010202 [ 1084.338865][T22216] RAX: 0000000000000007 RBX: 0000000000000039 RCX: 0000000000080000 [ 1084.348194][T22216] RDX: ffffc9000ef51000 RSI: 0000000000000923 RDI: 0000000000000924 [ 1084.358301][T22216] RBP: 0000000080000000 R08: ffff888030558000 R09: 0000000000000003 [ 1084.381400][T22216] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 1084.398765][T22216] R13: 0000000000000000 R14: ffff888077172358 R15: ffffffffffffffff [ 1084.418026][T22216] FS: 0000000000000000(0000) GS:ffff8881256f5000(0063) knlGS:00000000f5406b40 [ 1084.427733][T22216] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1084.449003][T22216] CR2: 0000000080000000 CR3: 000000003163a000 CR4: 00000000003526f0 [ 1084.457412][T22216] Kernel panic - not syncing: Fatal exception [ 1084.464145][T22216] Kernel Offset: disabled [ 1084.468477][T22216] Rebooting in 86400 seconds..