last executing test programs: 20.176129832s ago: executing program 0 (id=2561): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a31000000001400048008000240000000000800014000000004"], 0xec}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x16) ioctl$KDSIGACCEPT(r2, 0x5607, 0x11) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x3, 0x9}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r3, 0x0, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x3, 0x2, 0xc}) truncate(&(0x7f0000000000)='./file1\x00', 0x40) truncate(0x0, 0xffffffffffffff01) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000008000000000000000400000073110f000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) set_mempolicy(0x8006, 0x0, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) 18.114011913s ago: executing program 0 (id=2566): syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000030000180080006000100000014000400fc020000000000000000000000000000060001000a000000060005"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) 17.113886008s ago: executing program 0 (id=2569): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4000801) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc45}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x161400, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.881472994s ago: executing program 0 (id=2574): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x400) getpeername$packet(r1, &(0x7f0000000100), &(0x7f00000003c0)=0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x6, &(0x7f0000006680)) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0102}}}, 0x52) connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a3300, 0x0) ppoll(&(0x7f0000000140), 0x0, &(0x7f0000000200), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x1000c080) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESDEC=r0, @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x24000844}, 0x0) r5 = syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r10, &(0x7f0000000140)='(', 0x1) 15.845981379s ago: executing program 0 (id=2575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000180)) 12.030525923s ago: executing program 0 (id=2585): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x10}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) syz_usb_connect(0x0, 0x32, 0x0, 0x0) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$pptp(0x18, 0x1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) 11.698015781s ago: executing program 4 (id=2587): execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, 0x0, &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.001335993s ago: executing program 2 (id=2590): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0x10000000000d08, 0x4, 0xfffffffffffffffe, 0x7, 0x0, 0x7, 0x80000000, 0x122, 0x6000, 0x10000, r2, r3, 0x982}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB="28000000120097003dbd7040000000a5c574"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000080)=0x10000, 0x8) ioctl$TIOCGPTPEER(r4, 0x4004092b, 0x4) 7.962690043s ago: executing program 2 (id=2592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fanotify_init(0x0, 0x40000) fanotify_mark(r3, 0x441, 0x1002, r3, 0x0) r4 = timerfd_create(0x0, 0x80800) readv(r4, &(0x7f00000000c0)=[{&(0x7f00000020c0)=""/4106, 0x100a}], 0x1) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xffffffffffffff3c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x204) r6 = socket$inet(0x2, 0x1, 0x0) r7 = socket$inet(0x2, 0x1, 0x6) bind(r7, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r7, 0x5) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r8 = socket$inet(0x2, 0x1, 0x6) connect(r8, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) write(r8, &(0x7f0000000400)='PASV\r\n\x00', 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_cmd={0x4c, 0xb, 0x76e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3f}}) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x2, 0x80000000, &(0x7f0000000000)) 7.829973447s ago: executing program 4 (id=2593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setrlimit(0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrlimit(0xb, &(0x7f0000000100)) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1}, 0x6e) 7.351016558s ago: executing program 4 (id=2594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 7.198421293s ago: executing program 2 (id=2595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000180)) 5.804249867s ago: executing program 2 (id=2598): r0 = memfd_create(0x0, 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x105401, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) unshare(0x20000400) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x8814) getdents64(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write(0xffffffffffffffff, 0x0, 0x0) 5.524369534s ago: executing program 3 (id=2599): execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, 0x0, &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.277212s ago: executing program 1 (id=2600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setrlimit(0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrlimit(0xb, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, 0x0, 0x0) 4.8529736s ago: executing program 1 (id=2601): syz_open_dev$usbmon(&(0x7f00000005c0), 0x1, 0x8a80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4.726779283s ago: executing program 2 (id=2602): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x802, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.274688279s ago: executing program 1 (id=2603): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x3ffffff, 0x1000003}) fcntl$addseals(r1, 0x409, 0xb) 2.774645922s ago: executing program 3 (id=2604): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x5) 2.42672699s ago: executing program 3 (id=2605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setrlimit(0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrlimit(0xb, &(0x7f0000000100)) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, 0x0, 0x0) 2.373023882s ago: executing program 1 (id=2606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fanotify_init(0x0, 0x40000) fanotify_mark(r3, 0x441, 0x1002, r3, 0x0) r4 = timerfd_create(0x0, 0x80800) readv(r4, &(0x7f00000000c0)=[{&(0x7f00000020c0)=""/4106, 0x100a}], 0x1) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xffffffffffffff3c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x204) r6 = socket$inet(0x2, 0x1, 0x0) r7 = socket$inet(0x2, 0x1, 0x6) bind(r7, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r7, 0x5) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r8 = socket$inet(0x2, 0x1, 0x6) connect(r8, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) write(r8, &(0x7f0000000400)='PASV\r\n\x00', 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_cmd={0x4c, 0xb, 0x76e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3f}}) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x2, 0x80000000, &(0x7f0000000000)) 2.058524919s ago: executing program 3 (id=2607): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x60000, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000180)=@other={0x20300002000006a7, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x4000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0xf32, 0x101400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nullb(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf25100000b2f925002400018006000200650000000600010002000000060004004e210000060002003a080000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81de) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) 1.808471426s ago: executing program 1 (id=2608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x800}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1.719572208s ago: executing program 4 (id=2609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1.390198646s ago: executing program 1 (id=2610): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(&(0x7f0000000100)='keyring\x00', 0x0, &(0x7f0000000500), 0x0, 0xfffffffffffffffd) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000406030000000000000000000000000005000100070000008b434b420557e3bc2663192cab715837"], 0x1c}}, 0x40000) mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') 1.297131288s ago: executing program 3 (id=2611): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @multicast1}, {0x6, @remote}, 0x20, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 'bridge_slave_1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x4000) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000195c0)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000019100)={&(0x7f0000019600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040228bd7000fc060025230000000910030073797a300000a8b0050004000100000084534accd106dd29b63dc7eefea10ee6fd493cc92e9f11ece246ddb6269d440d3391f3eadf88a9edca23123b4d8b64b9e41b4213fe32a83b37548074dc2b355f65411cad"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019180)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4fff, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x6, 0xfffffffa, 0x4, 0xba65, 0x1, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x210001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x3, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x1, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x81, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x9, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="201800c02500"/20, @ANYRES32=r4, @ANYBLOB="2010000000000400"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x1, 0x0, {0x4006, 0x5, 0x0, 0x6, 0x3, 0x0, 0x0, 0xfffffbff, 0x10, 0x6000, 0x2, r6, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180) write$P9_RCREATE(r7, &(0x7f0000000800)={0x18, 0x73, 0x1, {{0x40, 0x1, 0x1}, 0x101}}, 0x18) 1.243119529s ago: executing program 4 (id=2612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setrlimit(0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrlimit(0xb, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, 0x0, 0x0) 154.672696ms ago: executing program 4 (id=2613): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x16}, @fda={0x66646185, 0x9, 0x1, 0x2000000000000b4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 115.944057ms ago: executing program 2 (id=2614): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x12, '\x00', @buffer={"638391fa1b1e124b4d03b18e2244770b6a3cc3b15e16ebb2af56e062fea3cd65", 0x20}, 0x7ff}, {0x26, '\x00', @st={0x4, [{0x1, @uvalue=0x2}, {0x3}, {0x6255f814a0d23838, @svalue=0x101}, {0x3, @uvalue=0x1}]}, 0x40005}, {0xd, '\x00', @data=0x2, 0x7}]}) 0s ago: executing program 3 (id=2615): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./dev/mtdblock0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0xb1) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0xffffffffffffff7e) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @remote, 0x63}, 0x1c) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) writev(r5, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7) socket(0x2, 0x5, 0x0) kernel console output (not intermixed with test programs): 3][ T4318] usb 5-1: string descriptor 0 read error: -71 [ 245.775717][ T4318] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 245.838601][ T4318] usb 5-1: USB disconnect, device number 4 [ 246.147126][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 246.155975][ T5963] netlink: 'syz.4.423': attribute type 5 has an invalid length. [ 246.192058][ T5963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.423'. [ 247.295222][ T5977] netlink: 'syz.2.426': attribute type 10 has an invalid length. [ 248.405114][ T5968] device syzkaller0 entered promiscuous mode [ 249.321594][ T6000] netlink: 'syz.4.432': attribute type 29 has an invalid length. [ 249.375586][ T6004] netlink: 756 bytes leftover after parsing attributes in process `syz.4.432'. [ 252.976295][ T6000] netlink: 'syz.4.432': attribute type 29 has an invalid length. [ 252.987174][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 252.998564][ T6024] netlink: 'syz.0.440': attribute type 5 has an invalid length. [ 253.006358][ T6024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 254.741587][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.749558][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.844209][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.852208][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.342698][ T6068] device syzkaller0 entered promiscuous mode [ 255.399919][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.406272][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.234965][ T6093] netlink: 72 bytes leftover after parsing attributes in process `syz.2.457'. [ 260.973083][ T6107] netlink: 'syz.0.462': attribute type 10 has an invalid length. [ 261.159417][ T6121] fuse: Invalid rootmode [ 262.723169][ T6133] serio: Serial port ptm0 [ 263.715850][ T6140] netlink: 72 bytes leftover after parsing attributes in process `syz.3.475'. [ 263.755215][ T6145] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 264.733134][ T6149] netlink: 'syz.4.477': attribute type 10 has an invalid length. [ 267.581624][ T6183] serio: Serial port ptm0 [ 269.711113][ T6195] netlink: 72 bytes leftover after parsing attributes in process `syz.1.491'. [ 269.794172][ T6201] netlink: 'syz.3.492': attribute type 10 has an invalid length. [ 271.781674][ T6220] ima: Unable to open file: /e (-2) [ 272.440169][ T6212] ima: policy update failed [ 272.451820][ T26] audit: type=1802 audit(1786486116.049:2): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.497" res=0 errno=0 [ 272.589414][ T6224] netlink: 'syz.3.500': attribute type 10 has an invalid length. [ 273.898788][ T6231] serio: Serial port ptm0 [ 275.850491][ T6247] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 278.078851][ T26] audit: type=1800 audit(1786486121.679:3): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.516" name="size" dev="configfs" ino=42123 res=0 errno=0 [ 279.244630][ T6289] netlink: 'syz.1.522': attribute type 10 has an invalid length. [ 281.578835][ T49] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 283.930582][ T6335] netlink: 'syz.0.535': attribute type 10 has an invalid length. [ 285.636815][ T49] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 285.645425][ T49] Bluetooth: hci4: Injecting HCI hardware error event [ 285.656522][ T4284] Bluetooth: hci4: hardware error 0x00 [ 288.126762][ T4284] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 293.224988][ T6427] tmpfs: Unknown parameter 'usrquota' [ 293.835432][ T4284] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 295.053622][ T6448] fuse: Unknown parameter 'user_i00000000000000000000' [ 295.360828][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 295.426781][ T5251] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 295.592726][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 295.616778][ T5251] usb 2-1: Using ep0 maxpacket: 8 [ 295.624763][ T5251] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 295.641073][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.643622][ T5251] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 295.685058][ T5251] usb 2-1: config 135 has no interface number 0 [ 295.731642][ T5251] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.767375][ T5251] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 295.787290][ T5251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.804250][ T5251] usb 2-1: Product: syz [ 295.809125][ T5251] usb 2-1: Manufacturer: syz [ 295.813819][ T5251] usb 2-1: SerialNumber: syz [ 295.827914][ T5251] uvcvideo 2-1:135.230: Found Unit with invalid ID 0 [ 295.899442][ T22] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 296.029660][ T5251] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 296.036254][ T5251] usb 2-1: No valid video chain found. [ 296.061450][ T5251] usb 2-1: USB disconnect, device number 4 [ 298.122014][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 298.138238][ T6483] netlink: 'syz.1.579': attribute type 5 has an invalid length. [ 298.146915][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.579'. [ 298.252973][ T22] usb 1-1: USB disconnect, device number 6 [ 298.292007][ T6495] fuse: Unknown parameter 'user_i00000000000000000000' [ 299.030525][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 299.055366][ T6525] netlink: 'syz.3.593': attribute type 5 has an invalid length. [ 299.077810][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.593'. [ 299.087135][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 299.297066][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 299.319602][ T22] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 299.440521][ T22] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 299.614485][ T22] usb 2-1: config 135 has no interface number 0 [ 299.756196][ T22] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.931741][ T22] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 302.016222][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.505662][ T22] usb 2-1: Product: syz [ 302.510294][ T22] usb 2-1: Manufacturer: syz [ 302.514991][ T22] usb 2-1: SerialNumber: syz [ 302.531217][ T22] usb 2-1: can't set config #135, error -71 [ 302.538493][ T22] usb 2-1: USB disconnect, device number 5 [ 302.681932][ T6539] fuse: Unknown parameter 'user_i00000000000000000000' [ 302.928551][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 302.956918][ T6549] netlink: 'syz.1.600': attribute type 5 has an invalid length. [ 303.000764][ T6549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.600'. [ 304.659986][ T6578] fuse: Unknown parameter 'user_id00000000000000000000' [ 304.796805][ T4275] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 304.996944][ T4275] usb 3-1: Using ep0 maxpacket: 8 [ 305.004841][ T4275] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 305.023513][ T4275] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 305.054085][ T4275] usb 3-1: config 135 has no interface number 0 [ 305.074541][ T4275] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.096875][ T4317] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 305.137556][ T4275] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 305.166864][ T4275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.177278][ T4275] usb 3-1: Product: syz [ 305.181487][ T4275] usb 3-1: Manufacturer: syz [ 305.186115][ T4275] usb 3-1: SerialNumber: syz [ 305.239760][ T4275] uvcvideo 3-1:135.230: Found Unit with invalid ID 0 [ 305.258794][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 305.278624][ T4317] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.306753][ T4317] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 305.318441][ T6601] netlink: 'syz.0.617': attribute type 5 has an invalid length. [ 305.326152][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.617'. [ 305.347534][ T4317] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.356557][ T4317] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 305.395435][ T4317] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 305.435652][ T4275] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 305.445978][ T4275] usb 3-1: No valid video chain found. [ 305.452706][ T4317] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.554010][ T4275] usb 3-1: USB disconnect, device number 4 [ 305.575307][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.587874][ T4317] usb 2-1: Product: syz [ 305.592466][ T4317] usb 2-1: Manufacturer: syz [ 305.610232][ T4317] cdc_wdm 2-1:1.0: skipping garbage [ 305.615506][ T4317] cdc_wdm 2-1:1.0: skipping garbage [ 305.623341][ T4317] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 305.629701][ T4317] cdc_wdm 2-1:1.0: Unknown control protocol [ 306.092184][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 306.098846][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 306.105181][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 306.111822][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 306.118373][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 306.124998][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 306.139986][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 306.146617][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 306.154488][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 306.161094][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 306.169160][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 306.175799][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 306.289069][ T4275] usb 2-1: USB disconnect, device number 6 [ 306.302492][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 306.309128][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 306.315317][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 308.868958][ T6627] fuse: Unknown parameter 'user_id00000000000000000000' [ 312.382290][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'. [ 312.432356][ T6675] netlink: 'syz.4.638': attribute type 5 has an invalid length. [ 312.472042][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.638'. [ 312.650608][ T4317] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 312.858520][ T4317] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 312.901506][ T4317] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 313.003875][ T4317] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 313.058654][ T4317] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 313.224606][ T4317] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 313.411140][ T4317] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 313.432446][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 313.442266][ T4317] usb 1-1: Product: syz [ 313.446592][ T4317] usb 1-1: Manufacturer: syz [ 313.593018][ T4317] cdc_wdm 1-1:1.0: skipping garbage [ 313.652994][ T4317] cdc_wdm 1-1:1.0: skipping garbage [ 313.750211][ T4317] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 313.833286][ T4317] cdc_wdm 1-1:1.0: Unknown control protocol [ 314.039065][ T14] usb 1-1: USB disconnect, device number 7 [ 315.102618][ T6713] serio: Serial port ptm1 [ 316.340967][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 316.385121][ T6733] netlink: 'syz.0.652': attribute type 5 has an invalid length. [ 316.395862][ T6732] fuse: Bad value for 'fd' [ 316.430046][ T6733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.652'. [ 316.843087][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.849732][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.341621][ T4284] Bluetooth: hci2: unexpected event for opcode 0x080b [ 319.347735][ T4316] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 320.128237][ T4316] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 320.142057][ T4316] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 320.182848][ T4316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 320.224725][ T4316] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 320.474317][ T4316] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 321.220395][ T4316] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.229743][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.237896][ T4316] usb 3-1: Product: syz [ 321.242181][ T4316] usb 3-1: Manufacturer: syz [ 321.278318][ T4316] cdc_wdm 3-1:1.0: skipping garbage [ 321.283582][ T4316] cdc_wdm 3-1:1.0: skipping garbage [ 321.319430][ T4316] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 321.338731][ T4316] cdc_wdm 3-1:1.0: Unknown control protocol [ 321.394514][ T6785] fuse: Bad value for 'fd' [ 321.492137][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 321.498791][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 321.505418][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 321.512049][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 321.518621][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 321.525218][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 321.531593][ T4275] usb 3-1: USB disconnect, device number 5 [ 321.760383][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 321.972892][ T6793] netlink: 'syz.4.671': attribute type 5 has an invalid length. [ 322.332565][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.671'. [ 322.357961][ T4284] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 322.366617][ T4284] Bluetooth: hci2: Injecting HCI hardware error event [ 322.376341][ T49] Bluetooth: hci2: hardware error 0x00 [ 322.727330][ T6796] device dummy0 entered promiscuous mode [ 324.517534][ T49] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 324.949173][ T49] Bluetooth: hci0: unexpected event for opcode 0x080b [ 326.165347][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 326.215602][ T6839] fuse: Bad value for 'fd' [ 326.235857][ T6837] netlink: 'syz.3.681': attribute type 5 has an invalid length. [ 326.265039][ T6837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.681'. [ 326.660560][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 326.671682][ T4369] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 326.926931][ T4369] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 326.954397][ T6850] netlink: 'syz.3.686': attribute type 5 has an invalid length. [ 327.012262][ T4369] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 327.115225][ T6850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.686'. [ 327.169482][ T4369] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 327.288951][ T4369] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 327.396370][ T4369] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 327.460979][ T4369] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 327.521947][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.554574][ T4369] usb 1-1: Product: syz [ 327.586136][ T4369] usb 1-1: Manufacturer: syz [ 327.676795][ T6853] tmpfs: Bad value for 'nr_inodes' [ 327.689233][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 328.469983][ T4369] cdc_wdm 1-1:1.0: skipping garbage [ 329.037762][ T49] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 329.046561][ T49] Bluetooth: hci0: Injecting HCI hardware error event [ 329.056571][ T49] Bluetooth: hci0: hardware error 0x00 [ 329.897974][ T6872] device dummy0 entered promiscuous mode [ 330.106770][ T4369] cdc_wdm 1-1:1.0: skipping garbage [ 330.117010][ T4369] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 330.122997][ T4369] cdc_wdm 1-1:1.0: Unknown control protocol [ 330.141147][ T4369] usb 1-1: USB disconnect, device number 8 [ 330.805423][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 330.866055][ T6893] netlink: 'syz.4.696': attribute type 5 has an invalid length. [ 330.926917][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.696'. [ 332.053772][ T6910] fuse: Unknown parameter '0x0000000000000003' [ 332.089302][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 332.153737][ T6904] netlink: 'syz.1.699': attribute type 5 has an invalid length. [ 332.277520][ T49] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 332.740220][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.699'. [ 334.180687][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 335.146749][ T4275] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 335.358937][ T4275] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.918425][ T4275] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 336.929062][ T4275] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.938310][ T4275] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 336.949657][ T4275] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 336.977481][ T4275] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 337.007085][ T4275] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 337.015177][ T4275] usb 5-1: Product: syz [ 337.019873][ T4275] usb 5-1: Manufacturer: syz [ 337.034875][ T4275] cdc_wdm 5-1:1.0: skipping garbage [ 337.040534][ T4275] cdc_wdm 5-1:1.0: skipping garbage [ 337.048297][ T4275] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 337.055255][ T4275] cdc_wdm 5-1:1.0: Unknown control protocol [ 337.320879][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 338.085155][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 338.091829][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 338.115227][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 338.121890][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 338.137617][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 338.144250][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 338.153900][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 338.163788][ T6962] netlink: 'syz.3.712': attribute type 5 has an invalid length. [ 338.172087][ T4369] usb 5-1: USB disconnect, device number 5 [ 338.198719][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 338.205358][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 338.211462][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 338.217060][ T6962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.712'. [ 338.381328][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 338.398847][ T6964] netlink: 'syz.0.714': attribute type 5 has an invalid length. [ 338.406612][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.714'. [ 338.768849][ T6974] device dummy0 entered promiscuous mode [ 340.368014][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 343.369531][ T7008] input: syz0 as /devices/virtual/input/input24 [ 343.677390][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 343.787557][ T7018] netlink: 'syz.0.726': attribute type 5 has an invalid length. [ 343.894595][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.726'. [ 344.646868][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 344.688082][ T7030] netlink: 'syz.4.728': attribute type 5 has an invalid length. [ 344.712384][ T7030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.728'. [ 345.103085][ T7038] device dummy0 entered promiscuous mode [ 350.471070][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 350.509286][ T7074] netlink: 'syz.4.741': attribute type 5 has an invalid length. [ 350.518513][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'. [ 350.693234][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 350.741858][ T7083] netlink: 'syz.1.743': attribute type 5 has an invalid length. [ 350.784628][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.743'. [ 355.159953][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 355.187282][ T7131] netlink: 'syz.2.756': attribute type 5 has an invalid length. [ 355.210162][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.756'. [ 355.309321][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 355.334576][ T7134] netlink: 'syz.4.758': attribute type 5 has an invalid length. [ 355.356991][ T7134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.758'. [ 357.603970][ T7150] input: syz1 as /devices/virtual/input/input26 [ 357.713903][ T7159] usb usb1: usbfs: process 7159 (syz.2.766) did not claim interface 0 before use [ 358.709020][ T7166] tmpfs: Unknown parameter 'usrquota' [ 358.956826][ T4353] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 359.146945][ T4353] usb 1-1: Using ep0 maxpacket: 32 [ 359.178649][ T4353] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.206544][ T4353] usb 1-1: config 0 has no interface number 0 [ 359.244584][ T4353] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 359.288849][ T4353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.316839][ T4369] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 359.320779][ T4353] usb 1-1: Product: syz [ 359.324804][ T4316] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 359.349255][ T4353] usb 1-1: Manufacturer: syz [ 359.369293][ T4353] usb 1-1: SerialNumber: syz [ 359.437000][ T4353] usb 1-1: config 0 descriptor?? [ 359.501096][ T4353] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 359.536142][ T4353] usb 1-1: selecting invalid altsetting 1 [ 359.560388][ T4353] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 359.662021][ T4353] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 359.732735][ T4353] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 359.771250][ T4353] usb 1-1: media controller created [ 359.935044][ T4353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.036894][ T4316] usb 5-1: device descriptor read/64, error -71 [ 360.043299][ T4369] usb 3-1: device descriptor read/64, error -71 [ 360.205864][ T4353] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 360.337073][ T4316] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 360.337180][ T4369] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 360.506938][ T4369] usb 3-1: device descriptor read/64, error -71 [ 360.557093][ T4316] usb 5-1: device descriptor read/64, error -71 [ 360.653943][ T4369] usb usb3-port1: attempt power cycle [ 360.687426][ T4316] usb usb5-port1: attempt power cycle [ 360.993109][ T4353] usb 1-1: USB disconnect, device number 9 [ 361.101564][ T4369] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 361.116757][ T4316] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 361.174243][ T4369] usb 3-1: device descriptor read/8, error -71 [ 361.180927][ T4316] usb 5-1: device descriptor read/8, error -71 [ 361.487338][ T4369] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 361.487469][ T4316] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 361.533550][ T4316] usb 5-1: device descriptor read/8, error -71 [ 361.638740][ T4369] usb 3-1: device descriptor read/8, error -71 [ 361.669920][ T4316] usb usb5-port1: unable to enumerate USB device [ 361.828110][ T4369] usb usb3-port1: unable to enumerate USB device [ 364.267562][ T7223] tmpfs: Unknown parameter 'usrquota' [ 364.318904][ T7231] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 364.330852][ T7231] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 364.340986][ T7231] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 364.816908][ T6348] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 364.916980][ T4448] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 365.026879][ T6348] usb 5-1: Using ep0 maxpacket: 16 [ 365.040667][ T6348] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 365.077005][ T4448] usb 2-1: device descriptor read/64, error -71 [ 365.170315][ T6348] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 365.261844][ T6348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.364738][ T6348] usb 5-1: Product: syz [ 365.369806][ T4448] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 365.497386][ T6348] usb 5-1: Manufacturer: syz [ 365.526785][ T6348] usb 5-1: SerialNumber: syz [ 365.561076][ T6348] usb 5-1: config 0 descriptor?? [ 365.626713][ T4448] usb 2-1: device descriptor read/64, error -71 [ 365.759592][ T4448] usb usb2-port1: attempt power cycle [ 366.147229][ T4369] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 366.236733][ T4448] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 366.300824][ T4448] usb 2-1: device descriptor read/8, error -71 [ 366.356842][ T4369] usb 3-1: device descriptor read/64, error -71 [ 366.617436][ T4448] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 366.636839][ T4369] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 367.084892][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 367.434905][ T4448] usb 2-1: device descriptor read/8, error -71 [ 367.506770][ T4369] usb 3-1: device descriptor read/64, error -71 [ 367.558856][ T4448] usb usb2-port1: unable to enumerate USB device [ 367.626895][ T4369] usb usb3-port1: attempt power cycle [ 368.517434][ T6348] usb 5-1: USB disconnect, device number 10 [ 368.743365][ T7285] tmpfs: Unknown parameter 'usrquota' [ 368.796910][ T4369] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 368.869420][ T4369] usb 3-1: device descriptor read/8, error -71 [ 372.309754][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 372.697249][ T7333] ima: Unable to open file: /e (-2) [ 373.351026][ T7327] ima: policy update failed [ 373.364532][ T26] audit: type=1802 audit(1786486216.959:4): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.813" res=0 errno=0 [ 373.667011][ T4369] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 373.857157][ T4369] usb 5-1: device descriptor read/64, error -71 [ 374.026982][ T7341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.089846][ T7341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.136843][ T4369] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 374.155651][ T7341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.174201][ T7341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.284068][ T7350] netlink: 72 bytes leftover after parsing attributes in process `syz.1.819'. [ 374.302500][ T4369] usb 5-1: device descriptor read/64, error -71 [ 374.437936][ T4369] usb usb5-port1: attempt power cycle [ 374.876744][ T4369] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 375.517216][ T4369] usb 5-1: device descriptor read/8, error -71 [ 375.807280][ T4369] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 376.764234][ T4369] usb 5-1: device descriptor read/8, error -71 [ 376.906988][ T4369] usb usb5-port1: unable to enumerate USB device [ 378.103552][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 378.283495][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.289855][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.100274][ T7393] ima: Unable to open file: /e (-2) [ 379.136087][ T7394] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 379.789287][ T7388] ima: policy update failed [ 379.794324][ T26] audit: type=1802 audit(1786486223.389:5): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.831" res=0 errno=0 [ 380.917906][ T4353] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 381.146831][ T4353] usb 1-1: device descriptor read/64, error -71 [ 381.436977][ T4353] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 381.607011][ T4353] usb 1-1: device descriptor read/64, error -71 [ 381.796995][ T4353] usb usb1-port1: attempt power cycle [ 382.146370][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 382.246845][ T4353] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 382.907440][ T4353] usb 1-1: device descriptor read/8, error -71 [ 383.165364][ T7423] netlink: 72 bytes leftover after parsing attributes in process `syz.1.841'. [ 383.177178][ T4353] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 383.217413][ T4353] usb 1-1: device descriptor read/8, error -71 [ 383.339958][ T4353] usb usb1-port1: unable to enumerate USB device [ 383.834614][ T7429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.842578][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.226843][ T7429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.263953][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.730111][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 389.737053][ T4353] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 389.937749][ T4353] usb 2-1: device descriptor read/64, error -71 [ 390.226874][ T4353] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 395.617092][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'. [ 398.686753][ T4369] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 398.846749][ T4369] usb 2-1: device descriptor read/64, error -71 [ 398.976969][ T4275] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 399.166771][ T4275] usb 1-1: device descriptor read/64, error -71 [ 399.446849][ T4275] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 399.626784][ T4275] usb 1-1: device descriptor read/64, error -71 [ 399.856809][ T4369] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 400.508807][ T4275] usb usb1-port1: attempt power cycle [ 400.726404][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.876'. [ 400.917027][ T4275] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 401.480654][ T4275] usb 1-1: device descriptor read/8, error -71 [ 401.816808][ T4275] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 402.508886][ T4275] usb 1-1: device descriptor read/8, error -71 [ 402.637396][ T4275] usb usb1-port1: unable to enumerate USB device [ 404.089638][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 408.406881][ T4275] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 408.579628][ T4275] usb 1-1: device descriptor read/64, error -71 [ 408.877050][ T4275] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 409.821592][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 409.846944][ T4275] usb 1-1: device descriptor read/64, error -71 [ 410.099079][ T4275] usb usb1-port1: attempt power cycle [ 410.826779][ T4275] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 411.007389][ T4275] usb 1-1: device descriptor read/8, error -71 [ 411.287448][ T4275] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 412.056761][ T4275] usb 1-1: device descriptor read/8, error -71 [ 412.182474][ T4275] usb usb1-port1: unable to enumerate USB device [ 414.456707][ T4369] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 415.551648][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 416.271327][ T4369] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.596695][ T4369] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 416.605630][ T4369] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 416.619875][ T4369] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 416.629175][ T4369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.662498][ T4369] cdc_acm 4-1:1.0: skipping garbage [ 417.936884][ T1172] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 418.955519][ T4448] usb 4-1: USB disconnect, device number 4 [ 418.986773][ T1172] usb 1-1: Using ep0 maxpacket: 8 [ 419.003840][ T1172] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 419.028594][ T1172] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 419.040872][ T1172] usb 1-1: config 135 has no interface number 0 [ 419.056828][ T1172] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.102374][ T1172] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 419.131915][ T1172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.206214][ T1172] usb 1-1: Product: syz [ 419.266799][ T1172] usb 1-1: Manufacturer: syz [ 419.383700][ T1172] usb 1-1: SerialNumber: syz [ 419.436523][ T1172] uvcvideo 1-1:135.230: Found Unit with invalid ID 0 [ 419.443574][ T1172] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 419.452200][ T1172] usb 1-1: No valid video chain found. [ 420.067612][ T4448] usb 1-1: USB disconnect, device number 22 [ 421.094588][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 425.978096][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 426.005995][ T7772] netlink: 'syz.3.931': attribute type 5 has an invalid length. [ 426.016912][ T7772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.931'. [ 426.382571][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 426.746943][ T4261] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 426.956781][ T4261] usb 3-1: Using ep0 maxpacket: 8 [ 426.971998][ T4261] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 427.054913][ T4261] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 427.146827][ T4261] usb 3-1: config 135 has no interface number 0 [ 427.192762][ T4261] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.062157][ T4261] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 428.071773][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.080290][ T4261] usb 3-1: Product: syz [ 428.084557][ T4261] usb 3-1: Manufacturer: syz [ 428.090300][ T4261] usb 3-1: SerialNumber: syz [ 428.103857][ T4261] uvcvideo 3-1:135.230: Found Unit with invalid ID 0 [ 428.118363][ T4261] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 428.126978][ T4261] usb 3-1: No valid video chain found. [ 428.311158][ T4261] usb 3-1: USB disconnect, device number 14 [ 429.611585][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 429.637996][ T7813] netlink: 'syz.0.946': attribute type 5 has an invalid length. [ 429.645698][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.946'. [ 430.817174][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 431.638398][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'. [ 433.444648][ T7832] netlink: 'syz.2.949': attribute type 5 has an invalid length. [ 434.016155][ T7842] netlink: 72 bytes leftover after parsing attributes in process `syz.4.951'. [ 434.062248][ T7832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.949'. [ 434.426908][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 434.490836][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 434.626882][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 434.629425][ T7] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 434.629451][ T7] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 434.629472][ T7] usb 2-1: config 135 has no interface number 0 [ 434.629505][ T7] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.631744][ T7] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 434.631821][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.631841][ T7] usb 2-1: Product: syz [ 434.631856][ T7] usb 2-1: Manufacturer: syz [ 434.631871][ T7] usb 2-1: SerialNumber: syz [ 434.636406][ T7] uvcvideo 2-1:135.230: Found Unit with invalid ID 0 [ 434.636454][ T7] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 434.636474][ T7] usb 2-1: No valid video chain found. [ 434.861909][ T1172] usb 2-1: USB disconnect, device number 15 [ 435.625191][ T49] Bluetooth: hci3: unexpected event for opcode 0x080b [ 438.344624][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 438.386559][ T7884] netlink: 'syz.1.962': attribute type 5 has an invalid length. [ 438.396026][ T7884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.962'. [ 439.637038][ T49] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 439.646477][ T49] Bluetooth: hci3: Injecting HCI hardware error event [ 439.660517][ T4284] Bluetooth: hci3: hardware error 0x00 [ 439.719348][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.725726][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.522769][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 440.670941][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 440.736940][ T7896] netlink: 'syz.4.965': attribute type 5 has an invalid length. [ 440.762903][ T7896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.965'. [ 442.016114][ T7914] netlink: 72 bytes leftover after parsing attributes in process `syz.3.969'. [ 442.247078][ T4284] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 443.346691][ T4318] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 445.116755][ T4318] usb 2-1: Using ep0 maxpacket: 8 [ 445.123762][ T4318] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 445.220580][ T4318] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 445.249590][ T4318] usb 2-1: config 135 has no interface number 0 [ 445.280476][ T4318] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.352463][ T4318] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 445.363987][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'. [ 445.404468][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.425561][ T7936] netlink: 'syz.0.976': attribute type 5 has an invalid length. [ 445.450718][ T4318] usb 2-1: Product: syz [ 445.455138][ T4318] usb 2-1: Manufacturer: syz [ 445.472447][ T4318] usb 2-1: SerialNumber: syz [ 445.499110][ T7936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.976'. [ 445.541007][ T4318] uvcvideo 2-1:135.230: Found Unit with invalid ID 0 [ 445.561714][ T4318] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 445.574231][ T4318] usb 2-1: No valid video chain found. [ 445.751204][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 445.815366][ T4275] usb 2-1: USB disconnect, device number 16 [ 447.144836][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'. [ 447.174152][ T7960] netlink: 'syz.2.982': attribute type 5 has an invalid length. [ 447.184265][ T7960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.982'. [ 449.806541][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 449.865986][ T7991] netlink: 'syz.2.990': attribute type 5 has an invalid length. [ 449.936823][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.990'. [ 457.661513][ T8059] serio: Serial port ptm0 [ 460.581599][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 460.614481][ T8095] netlink: 'syz.4.1022': attribute type 5 has an invalid length. [ 460.646765][ T8095] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1022'. [ 461.429778][ T4275] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 461.512469][ T8104] serio: Serial port ptm0 [ 461.616687][ T4275] usb 1-1: Using ep0 maxpacket: 32 [ 461.625326][ T4275] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 1024 [ 461.720146][ T4275] usb 1-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice= 0.40 [ 461.729899][ T4275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.754424][ T4275] usb 1-1: Product: syz [ 462.423805][ T4275] usb 1-1: Manufacturer: syz [ 462.431026][ T4275] usb 1-1: SerialNumber: syz [ 463.721209][ T4275] gspca_main: STV06xx-2.14.0 probing 046d:08f5 [ 463.736936][ T4275] gspca_stv06xx: st6422 sensor detected [ 464.028339][ T4275] STV06xx: probe of 1-1:1.0 failed with error -71 [ 464.913501][ T4275] usb 1-1: USB disconnect, device number 23 [ 465.076192][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'. [ 465.104354][ T8146] netlink: 'syz.1.1033': attribute type 5 has an invalid length. [ 465.136350][ T8146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1033'. [ 465.306097][ T5223] udevd[5223]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.469298][ T8162] serio: Serial port ptm0 [ 469.899059][ T8186] netlink: 'syz.1.1045': attribute type 10 has an invalid length. [ 469.907051][ T8186] device dummy0 left promiscuous mode [ 470.727564][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 470.764368][ T8203] netlink: 'syz.3.1052': attribute type 5 has an invalid length. [ 470.830269][ T8203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1052'. [ 471.003027][ T8214] serio: Serial port ptm0 [ 471.347344][ T8219] ima: Unable to open file: /e (-2) [ 471.894161][ T8213] ima: policy update failed [ 471.905587][ T26] audit: type=1802 audit(1786486315.499:6): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1055" res=0 errno=0 [ 473.811214][ T8232] netlink: 'syz.1.1060': attribute type 10 has an invalid length. [ 475.228044][ T8254] serio: Serial port ptm1 [ 475.752836][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 475.815085][ T8263] netlink: 'syz.2.1068': attribute type 5 has an invalid length. [ 475.899774][ T8263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1068'. [ 476.304061][ T8279] ima: Unable to open file: /e (-2) [ 477.010246][ T8274] ima: policy update failed [ 477.020472][ T26] audit: type=1802 audit(1786486320.619:7): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1072" res=0 errno=0 [ 477.143028][ T8282] netlink: 'syz.2.1074': attribute type 10 has an invalid length. [ 477.151534][ T8282] device dummy0 left promiscuous mode [ 480.146601][ T8314] serio: Serial port ptm1 [ 480.349327][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 480.415871][ T8317] netlink: 'syz.0.1084': attribute type 5 has an invalid length. [ 480.446455][ T8317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1084'. [ 480.829630][ T8327] netlink: 'syz.2.1086': attribute type 10 has an invalid length. [ 481.960387][ T8345] ima: Unable to open file: /e (-2) [ 482.693079][ T8339] ima: policy update failed [ 482.703405][ T26] audit: type=1802 audit(1786486326.299:8): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1090" res=0 errno=0 [ 485.542882][ T8375] serio: Serial port ptm1 [ 486.342545][ T8384] netlink: 'syz.4.1100': attribute type 10 has an invalid length. [ 486.350643][ T8384] device dummy0 left promiscuous mode [ 486.441634][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 487.120137][ T8383] netlink: 'syz.3.1099': attribute type 5 has an invalid length. [ 487.128050][ T8383] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1099'. [ 487.506720][ T127] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 488.506853][ T127] usb 2-1: Using ep0 maxpacket: 8 [ 488.521285][ T127] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 488.550202][ T127] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 488.589566][ T127] usb 2-1: config 135 has no interface number 0 [ 488.597404][ T127] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.638608][ T127] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 488.720523][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.759404][ T127] usb 2-1: Product: syz [ 488.763696][ T127] usb 2-1: Manufacturer: syz [ 488.772293][ T127] usb 2-1: SerialNumber: syz [ 489.046026][ T4369] usb 2-1: USB disconnect, device number 17 [ 489.312110][ T8422] serio: Serial port ptm1 [ 490.305088][ T8435] netlink: 'syz.1.1113': attribute type 10 has an invalid length. [ 491.117206][ T26] audit: type=1800 audit(1786486334.719:9): pid=8438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1117" name="size" dev="configfs" ino=52421 res=0 errno=0 [ 491.439267][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 491.587578][ T8448] netlink: 'syz.2.1116': attribute type 5 has an invalid length. [ 492.196919][ T8448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1116'. [ 493.107530][ T8473] serio: Serial port ptm1 [ 493.117825][ T6348] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 493.118979][ T4316] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 493.406851][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 493.448979][ T4316] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 493.530455][ T6348] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.609065][ T4316] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 493.630010][ T6348] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 493.648683][ T4316] usb 4-1: config 135 has no interface number 0 [ 493.655337][ T6348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.685999][ T4316] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.706506][ T6348] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 493.719643][ T4316] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 493.738338][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.746773][ T4316] usb 4-1: Product: syz [ 493.751040][ T4316] usb 4-1: Manufacturer: syz [ 493.755743][ T4316] usb 4-1: SerialNumber: syz [ 493.982243][ T4316] usb 4-1: USB disconnect, device number 5 [ 494.195086][ T8486] ima: Unable to open file: /e (-2) [ 494.762029][ T8481] ima: policy update failed [ 494.772356][ T26] audit: type=1802 audit(1786486338.369:10): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1128" res=0 errno=0 [ 494.960683][ T8491] netlink: 'syz.4.1129': attribute type 10 has an invalid length. [ 495.837821][ T26] audit: type=1800 audit(1786486339.439:11): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1130" name="size" dev="configfs" ino=52589 res=0 errno=0 [ 496.042774][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 496.851722][ T8504] netlink: 'syz.1.1133': attribute type 5 has an invalid length. [ 496.859606][ T8504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1133'. [ 497.932390][ T7] usb 3-1: USB disconnect, device number 15 [ 498.194618][ T8520] serio: Serial port ptm1 [ 499.249049][ T8545] netlink: 'syz.3.1145': attribute type 10 has an invalid length. [ 499.306715][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 500.226693][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 500.233623][ T7] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 500.388527][ T8551] ima: Unable to open file: /e (-2) [ 500.964282][ T8546] ima: policy update failed [ 500.974533][ T26] audit: type=1802 audit(1786486344.569:12): pid=8546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1144" res=0 errno=0 [ 501.019897][ T7] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 501.052547][ T7] usb 2-1: config 135 has no interface number 0 [ 501.075106][ T7] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.159888][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.166345][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.962063][ T7] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 501.983702][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.991805][ T7] usb 2-1: Product: syz [ 501.996172][ T7] usb 2-1: Manufacturer: syz [ 502.000912][ T7] usb 2-1: SerialNumber: syz [ 502.089767][ T1172] usb 2-1: USB disconnect, device number 18 [ 502.212281][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 502.456819][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 502.468646][ T8565] netlink: 'syz.3.1150': attribute type 5 has an invalid length. [ 502.693310][ T7] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.892659][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 502.921144][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1150'. [ 503.045040][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.102557][ T7] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 503.302261][ T8574] serio: Serial port ptm0 [ 504.908534][ T8596] netlink: 'syz.1.1157': attribute type 10 has an invalid length. [ 505.851554][ T1172] usb 5-1: USB disconnect, device number 15 [ 506.097727][ T8609] ima: Unable to open file: /e (-2) [ 506.597374][ T8607] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 506.818334][ T8599] ima: policy update failed [ 506.823507][ T26] audit: type=1802 audit(1786486350.419:13): pid=8599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1159" res=0 errno=0 [ 507.448980][ T8620] serio: Serial port ptm0 [ 508.291148][ T8631] netlink: 'syz.2.1168': attribute type 10 has an invalid length. [ 510.472072][ T8647] ima: Unable to open file: /e (-2) [ 510.472264][ T8646] ima: policy update failed [ 510.482720][ T8653] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 510.517970][ T26] audit: type=1802 audit(1786486354.119:14): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1173" res=0 errno=0 [ 510.721046][ T26] audit: type=1800 audit(1786486354.319:15): pid=8657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1174" name="size" dev="configfs" ino=53573 res=0 errno=0 [ 510.748828][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'. [ 512.896513][ T8686] netlink: 'syz.3.1182': attribute type 10 has an invalid length. [ 515.091982][ T8705] ima: Unable to open file: /e (-2) [ 515.238786][ T127] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 515.773841][ T8694] ima: policy update failed [ 515.782556][ T26] audit: type=1802 audit(1786486359.379:16): pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1185" res=0 errno=0 [ 516.076825][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 516.084615][ T127] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 516.146743][ T127] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 516.161250][ T26] audit: type=1800 audit(1786486359.759:17): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1190" name="size" dev="configfs" ino=52952 res=0 errno=0 [ 516.222853][ T127] usb 1-1: config 135 has no interface number 0 [ 516.251366][ T127] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.307881][ T127] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 516.423439][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.481472][ T127] usb 1-1: Product: syz [ 516.509066][ T127] usb 1-1: Manufacturer: syz [ 516.518629][ T127] usb 1-1: SerialNumber: syz [ 516.867023][ T5251] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 516.937664][ T4261] usb 1-1: USB disconnect, device number 24 [ 517.108639][ T5251] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 517.190451][ T5251] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 517.261190][ T5251] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 517.308381][ T5251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.379372][ T5251] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 517.420190][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1193'. [ 519.231660][ T8740] netlink: 'syz.0.1198': attribute type 10 has an invalid length. [ 519.239935][ T8740] device dummy0 left promiscuous mode [ 520.990065][ T4318] usb 4-1: USB disconnect, device number 6 [ 522.376965][ T8765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.384728][ T8765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.814496][ T8765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.826447][ T8765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.084762][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1206'. [ 525.076768][ T4317] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 525.098688][ T8789] netlink: 'syz.2.1213': attribute type 10 has an invalid length. [ 526.046655][ T4317] usb 1-1: Using ep0 maxpacket: 8 [ 526.053967][ T4317] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 526.091824][ T4317] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 526.256665][ T4318] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 526.906784][ T4317] usb 1-1: config 135 has no interface number 0 [ 526.913334][ T4317] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.939213][ T4317] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 527.114139][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.122387][ T4317] usb 1-1: Product: syz [ 527.126770][ T4317] usb 1-1: Manufacturer: syz [ 527.131474][ T4317] usb 1-1: SerialNumber: syz [ 527.379593][ T4317] usb 1-1: USB disconnect, device number 25 [ 527.569808][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.586784][ T4318] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 527.595923][ T4318] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 527.606708][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.640885][ T4318] usb 2-1: config 0 descriptor?? [ 527.664261][ T4318] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 527.673218][ T4318] dvb-usb: bulk message failed: -22 (3/0) [ 527.710788][ T4318] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 527.724954][ T4318] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 527.807731][ T4318] usb 2-1: media controller created [ 527.835585][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 527.859058][ T8790] dvb-usb: bulk message failed: -22 (2/0) [ 527.896206][ T4318] dvb-usb: bulk message failed: -22 (6/0) [ 527.938605][ T4318] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 527.949455][ T4318] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input58 [ 528.011389][ T4318] dvb-usb: schedule remote query interval to 150 msecs. [ 528.025361][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1217'. [ 528.037629][ T4318] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 528.052002][ T4318] usb 2-1: USB disconnect, device number 19 [ 528.103919][ T4318] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 530.473330][ T8829] netlink: 'syz.4.1224': attribute type 10 has an invalid length. [ 532.776738][ T6621] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 532.846209][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1230'. [ 533.786669][ T6621] usb 1-1: Using ep0 maxpacket: 8 [ 533.794288][ T6621] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 533.826653][ T6621] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 533.837504][ T6621] usb 1-1: config 135 has no interface number 0 [ 533.843894][ T6621] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.861984][ T6621] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 533.872290][ T6621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.880707][ T6621] usb 1-1: Product: syz [ 533.885078][ T6621] usb 1-1: Manufacturer: syz [ 533.890113][ T6621] usb 1-1: SerialNumber: syz [ 534.723074][ T4317] usb 1-1: USB disconnect, device number 26 [ 536.773472][ T8874] netlink: 'syz.2.1236': attribute type 10 has an invalid length. [ 537.055875][ T8879] jffs2: notice: (8879) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 537.800856][ T8879] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 538.150580][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'. [ 538.169266][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1242'. [ 538.978431][ T8889] netlink: 'syz.2.1240': attribute type 5 has an invalid length. [ 538.997688][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1240'. [ 539.366633][ T127] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 539.580108][ T127] usb 5-1: config 0 has no interfaces? [ 539.585863][ T127] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 539.633448][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.697946][ T127] usb 5-1: config 0 descriptor?? [ 540.194312][ T127] usb 5-1: USB disconnect, device number 16 [ 540.784105][ T8920] netlink: 'syz.2.1250': attribute type 10 has an invalid length. [ 541.951284][ T8931] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1253'. [ 542.073881][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1256'. [ 542.096795][ T8938] netlink: 'syz.1.1256': attribute type 5 has an invalid length. [ 542.123236][ T8938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1256'. [ 542.636822][ T4369] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 542.653572][ T8954] netlink: 'syz.2.1262': attribute type 10 has an invalid length. [ 542.866387][ T4369] usb 2-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0x79, skipping [ 542.933528][ T4369] usb 2-1: config 0 interface 0 has no altsetting 0 [ 543.037188][ T4369] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 543.151195][ T4369] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 543.266279][ T4369] usb 2-1: Product: syz [ 543.340476][ T4369] usb 2-1: Manufacturer: syz [ 543.405441][ T4369] usb 2-1: SerialNumber: syz [ 543.483614][ T4369] usb 2-1: config 0 descriptor?? [ 544.536491][ T4369] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 544.545984][ T4369] usb 2-1: USB disconnect, device number 20 [ 544.691217][ T8966] ======================================================= [ 544.691217][ T8966] WARNING: The mand mount option has been deprecated and [ 544.691217][ T8966] and is ignored by this kernel. Remove the mand [ 544.691217][ T8966] option from the mount to silence this warning. [ 544.691217][ T8966] ======================================================= [ 544.728015][ T8966] 9pnet_fd: Insufficient options for proto=fd [ 546.337280][ T5223] udevd[5223]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.446618][ T4353] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 547.656945][ T4353] usb 5-1: config 3 has an invalid interface number: 195 but max is 0 [ 547.665181][ T4353] usb 5-1: config 3 has no interface number 0 [ 547.730187][ T8989] netlink: 'syz.3.1275': attribute type 10 has an invalid length. [ 548.297166][ T4353] usb 5-1: config 3 interface 195 has no altsetting 0 [ 548.310807][ T4353] usb 5-1: New USB device found, idVendor=04cb, idProduct=010b, bcdDevice=7d.d3 [ 548.320079][ T4353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.329657][ T4353] usb 5-1: Product: syz [ 548.333862][ T4353] usb 5-1: Manufacturer: syz [ 548.339159][ T4353] usb 5-1: SerialNumber: syz [ 548.568454][ T4353] gspca_main: finepix-2.14.0 probing 04cb:010b [ 548.616830][ T4353] usb 5-1: USB disconnect, device number 17 [ 548.956930][ T4318] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 548.976906][ T7] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 549.147926][ T4318] usb 3-1: Using ep0 maxpacket: 32 [ 549.155125][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.162062][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 549.186321][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.203160][ T4318] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 549.213046][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 549.223735][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.231761][ T7] usb 4-1: config 200 has an invalid interface number: 97 but max is 0 [ 549.231784][ T7] usb 4-1: config 200 has no interface number 0 [ 549.231808][ T7] usb 4-1: config 200 interface 97 has no altsetting 0 [ 549.236762][ T7] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 549.278629][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.287008][ T7] usb 4-1: Product: syz [ 549.288807][ T4318] usb 3-1: config 0 descriptor?? [ 549.291206][ T7] usb 4-1: Manufacturer: syz [ 549.302030][ T7] usb 4-1: SerialNumber: syz [ 549.381293][ T9022] netlink: 'syz.0.1286': attribute type 10 has an invalid length. [ 550.334391][ T4318] savu 0003:1E7D:2D5A.0002: ignoring exceeding usage max [ 550.360684][ T4318] savu 0003:1E7D:2D5A.0002: item fetching failed at offset 5/8 [ 550.376278][ T4318] savu 0003:1E7D:2D5A.0002: parse failed [ 550.382333][ T4318] savu: probe of 0003:1E7D:2D5A.0002 failed with error -22 [ 552.975815][ T4320] usb 3-1: USB disconnect, device number 16 [ 553.690296][ T7] go7007: probe of 4-1:200.97 failed with error -12 [ 553.708572][ T7] usb 4-1: USB disconnect, device number 7 [ 553.716239][ T9032] device syzkaller0 entered promiscuous mode [ 554.343974][ T9059] netlink: 'syz.1.1298': attribute type 10 has an invalid length. [ 558.790949][ T9098] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1310'. [ 562.599307][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.606017][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.305974][ T9150] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 565.223527][ T9156] random: crng reseeded on system resumption [ 571.206663][ T4448] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 571.949379][ T4448] usb 2-1: unable to get BOS descriptor or descriptor too short [ 571.967336][ T4448] usb 2-1: not running at top speed; connect to a high speed hub [ 571.986490][ T4448] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 572.011391][ T4448] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 572.036751][ T4448] usb 2-1: config 14 has no interface number 0 [ 572.053244][ T4448] usb 2-1: config 14 has no interface number 1 [ 572.083710][ T4448] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 572.110302][ T4448] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0x1B, skipping [ 572.137877][ T4448] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 572.155157][ T4448] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 572.340975][ T4448] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 572.350966][ T4448] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.364158][ T4448] usb 2-1: config 14 interface 57 has no altsetting 0 [ 572.371610][ T4448] usb 2-1: config 14 interface 228 has no altsetting 0 [ 572.382603][ T4448] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 572.414005][ T4448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.242611][ T4448] usb 2-1: Product: syz [ 573.248067][ T4448] usb 2-1: Manufacturer: syz [ 573.252843][ T4448] usb 2-1: SerialNumber: syz [ 573.846672][ T4448] legousbtower 2-1:14.57: interrupt endpoints not found [ 574.063687][ T4448] legousbtower 2-1:14.228: interrupt endpoints not found [ 575.886100][ T4448] usb 2-1: USB disconnect, device number 21 [ 576.042606][ T9257] device syzkaller0 entered promiscuous mode [ 576.172373][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 576.289437][ T9265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1362'. [ 576.508446][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.528428][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.308520][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.401677][ T7] usb 3-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 577.434409][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.477558][ T7] usb 3-1: config 0 descriptor?? [ 577.663805][ T9284] tmpfs: Unknown parameter 'quota' [ 577.952581][ T7] thrustmaster 0003:044F:B324.0003: item 0 0 0 9 parsing failed [ 578.541583][ T7] thrustmaster 0003:044F:B324.0003: parse failed [ 578.548183][ T7] thrustmaster: probe of 0003:044F:B324.0003 failed with error -22 [ 578.580837][ T7] usb 3-1: USB disconnect, device number 17 [ 583.821138][ T9331] 9pnet_fd: Insufficient options for proto=fd [ 587.684297][ T9380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1394'. [ 588.892144][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.900453][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.988849][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.996937][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.281599][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1421'. [ 595.350069][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1422'. [ 599.195879][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 602.647756][ T9553] XFS (mtdblock0): Invalid superblock magic number [ 604.240083][ T9551] ip_tables: iptables: counters copy to user failed while replacing table [ 607.053356][ T9618] device syzkaller0 entered promiscuous mode [ 608.238172][ T9635] ima: Unable to open file: /e (-2) [ 608.773788][ T9631] ima: policy update failed [ 608.785455][ T26] audit: type=1802 audit(1786486452.379:18): pid=9631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1469" res=0 errno=0 [ 610.688782][ T9642] Bluetooth: MGMT ver 1.22 [ 613.038355][ T9671] device syzkaller0 entered promiscuous mode [ 616.812952][ T9692] ima: Unable to open file: /e (-2) [ 616.940643][ T9688] ima: policy update failed [ 616.951013][ T26] audit: type=1802 audit(1786486460.549:19): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1485" res=0 errno=0 [ 617.579818][ T9721] tmpfs: Unknown parameter 'usrquota' [ 620.525613][ T9732] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 621.492589][ T9751] syz.1.1499 uses obsolete (PF_INET,SOCK_PACKET) [ 621.636855][ T9741] device syzkaller0 entered promiscuous mode [ 622.180258][ T9769] ima: Unable to open file: /e (-2) [ 622.808519][ T9762] ima: policy update failed [ 622.818811][ T26] audit: type=1802 audit(1786486466.419:20): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1503" res=0 errno=0 [ 624.936913][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.943278][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.250750][ T9802] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1511'. [ 635.814592][ T9867] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 640.868599][ T9918] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1543'. [ 646.125565][ T9953] device syzkaller0 entered promiscuous mode [ 651.014181][ T9976] netlink: 'syz.3.1563': attribute type 39 has an invalid length. [ 651.776698][ T1172] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 652.485947][T10002] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1573'. [ 652.538340][ T1172] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 652.549427][ T1172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.789815][ T1172] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 652.836781][ T6348] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 654.614949][ T6348] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 655.098351][ T6348] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.243061][ T6348] usb 3-1: config 0 has no interface number 0 [ 655.392067][ T6348] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 655.716311][ T6348] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.817413][ T6348] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 655.849990][ T6348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.906111][ T6348] usb 3-1: config 0 descriptor?? [ 655.931399][ T6348] usb 3-1: can't set config #0, error -71 [ 656.808957][ T6348] usb 3-1: USB disconnect, device number 18 [ 657.102023][T10024] XFS (mtdblock0): Invalid superblock magic number [ 659.967150][ T6348] usb 2-1: USB disconnect, device number 22 [ 660.237539][T10044] kvm [10043]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800100000080 [ 660.260471][T10044] kvm [10043]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000080 [ 660.276907][T10044] kvm [10043]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 660.286151][T10044] kvm [10043]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 660.303820][T10044] kvm [10043]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffff000000000080 [ 660.358074][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1590'. [ 660.369117][T10057] netlink: 'syz.4.1590': attribute type 5 has an invalid length. [ 660.387579][T10057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1590'. [ 660.398960][T10044] kvm [10043]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 660.429080][T10044] kvm [10043]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 660.459323][T10044] kvm [10043]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffff000000000080 [ 662.303814][ T4369] kernel write not supported for file /sequencer2 (pid: 4369 comm: kworker/1:7) [ 664.556599][ T1172] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 664.940288][ T1172] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 664.956898][ T1172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.200276][ T1172] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 665.223211][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 665.651556][T10113] netlink: 'syz.4.1602': attribute type 5 has an invalid length. [ 665.660030][T10113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1602'. [ 666.495155][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 666.515362][T10123] netlink: 'syz.4.1605': attribute type 5 has an invalid length. [ 666.542663][T10123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1605'. [ 666.949270][T10131] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1601'. [ 667.457936][ T6348] usb 4-1: USB disconnect, device number 8 [ 668.916600][ T7] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 669.886915][ T7] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 669.954070][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.977338][ T7] usb 5-1: Product: syz [ 669.981546][ T7] usb 5-1: Manufacturer: syz [ 669.986243][ T7] usb 5-1: SerialNumber: syz [ 669.995199][ T7] usb 5-1: config 0 descriptor?? [ 670.056656][T10151] ima: Unable to open file: /e (-2) [ 670.070207][T10150] ima: policy update failed [ 670.130735][ T26] audit: type=1802 audit(1786486513.729:21): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1614" res=0 errno=0 [ 670.305137][ T7] usb 5-1: USB disconnect, device number 18 [ 670.706096][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'. [ 670.761411][T10167] netlink: 'syz.0.1617': attribute type 5 has an invalid length. [ 670.829217][T10167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1617'. [ 670.913086][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 670.957078][T10166] netlink: 'syz.1.1615': attribute type 5 has an invalid length. [ 670.966164][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1615'. [ 670.974184][ T6348] libceph: connect (1)[c::]:6789 error -101 [ 671.127368][ T6348] libceph: mon0 (1)[c::]:6789 connect error [ 671.404434][ T6348] libceph: connect (1)[c::]:6789 error -101 [ 671.423496][ T6348] libceph: mon0 (1)[c::]:6789 connect error [ 672.000931][ T1172] libceph: connect (1)[c::]:6789 error -101 [ 672.021132][ T1172] libceph: mon0 (1)[c::]:6789 connect error [ 672.196193][T10165] ceph: No mds server is up or the cluster is laggy [ 673.076599][ T4369] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 673.639750][ T4369] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 673.808716][T10204] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 673.820133][ T4369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.829863][T10201] ima: Unable to open file: /e (-2) [ 673.841928][T10200] ima: policy update failed [ 673.874783][ T26] audit: type=1802 audit(1786486517.469:22): pid=10200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1626" res=0 errno=0 [ 674.036001][ T4369] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 674.291838][T10214] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1627'. [ 679.566934][ T6621] usb 4-1: USB disconnect, device number 9 [ 680.867091][T10271] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 680.946105][T10264] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1642'. [ 681.098564][T10265] ima: Unable to open file: /e (-2) [ 681.109279][T10259] ima: policy update failed [ 681.247842][ T26] audit: type=1802 audit(1786486524.839:23): pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1640" res=0 errno=0 [ 682.898258][T10287] jffs2: notice: (10287) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 683.089638][T10287] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 683.117907][T10292] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1648'. [ 683.254739][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1647'. [ 683.336621][T10291] netlink: 'syz.4.1647': attribute type 5 has an invalid length. [ 683.350749][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1647'. [ 684.456841][T10312] netlink: 'syz.1.1653': attribute type 10 has an invalid length. [ 685.489376][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.495754][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.016627][ T7] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 686.888772][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.902401][ T7] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 686.937075][ T7] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 687.812770][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.795183][T10327] ima: Unable to open file: /e (-2) [ 688.795313][ T7] usb 3-1: can't set config #1, error -71 [ 688.800835][T10325] ima: policy update failed [ 688.800954][ T26] audit: type=1802 audit(1786486532.399:24): pid=10325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1658" res=0 errno=0 [ 688.836181][ T7] usb 3-1: USB disconnect, device number 19 [ 690.899091][T10359] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1665'. [ 694.365976][T10378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1671'. [ 694.809689][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'. [ 694.857176][T10391] netlink: 'syz.3.1674': attribute type 5 has an invalid length. [ 694.886691][T10391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1674'. [ 694.917048][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 694.991108][T10393] netlink: 'syz.2.1675': attribute type 5 has an invalid length. [ 695.781108][T10393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1675'. [ 696.189473][T10409] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1680'. [ 698.779662][ T1172] kernel write not supported for file /sequencer2 (pid: 1172 comm: kworker/1:2) [ 699.451025][T10431] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1686'. [ 699.678429][T10434] ima: Unable to open file: /e (-2) [ 699.678684][T10433] ima: policy update failed [ 699.740214][ T26] audit: type=1802 audit(1786486543.339:25): pid=10433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1688" res=0 errno=0 [ 699.875779][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 699.898189][T10439] netlink: 'syz.1.1689': attribute type 5 has an invalid length. [ 699.906044][T10439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1689'. [ 700.855864][T10453] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1694'. [ 704.187094][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 706.367430][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 706.376357][T10500] netlink: 'syz.4.1705': attribute type 5 has an invalid length. [ 706.512178][T10500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1705'. [ 707.819728][T10516] netlink: 'syz.0.1709': attribute type 10 has an invalid length. [ 709.404519][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1716'. [ 712.385334][ T1172] kernel write not supported for file /sequencer2 (pid: 1172 comm: kworker/1:2) [ 712.884000][T10563] netlink: 'syz.1.1723': attribute type 39 has an invalid length. [ 713.086669][T10565] netlink: 'syz.3.1724': attribute type 10 has an invalid length. [ 713.787773][T10568] netlink: 'syz.0.1721': attribute type 10 has an invalid length. [ 713.810313][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1721'. [ 718.479128][T10602] netlink: 'syz.3.1736': attribute type 10 has an invalid length. [ 718.626622][ T4448] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 718.847425][ T4448] usb 1-1: Using ep0 maxpacket: 8 [ 718.876873][ T4448] usb 1-1: unable to get BOS descriptor or descriptor too short [ 718.980575][ T4448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 719.119061][ T4448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 719.182632][ T4448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 719.254758][ T4448] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 719.413566][ T4448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 719.431885][ T4448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 719.449700][T10611] netlink: 'syz.3.1739': attribute type 39 has an invalid length. [ 720.208129][ T4448] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 720.227150][ T4448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.244026][ T4448] usb 1-1: Product: syz [ 720.250973][ T4448] usb 1-1: Manufacturer: syz [ 720.324105][ T4448] usb 1-1: SerialNumber: syz [ 720.454400][ T4448] usb 1-1: config 0 descriptor?? [ 720.539257][T10600] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 723.441132][ T4448] usb 1-1: USB disconnect, device number 27 [ 723.652130][ T8129] udevd[8129]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 725.471912][T10653] netlink: 'syz.4.1749': attribute type 10 has an invalid length. [ 733.931331][T10727] netlink: 'syz.4.1763': attribute type 10 has an invalid length. [ 734.944845][T10735] netlink: 'syz.0.1773': attribute type 39 has an invalid length. [ 736.645275][T10752] XFS (mtdblock0): Invalid superblock magic number [ 738.375567][T10777] netlink: 'syz.4.1782': attribute type 10 has an invalid length. [ 744.012931][ T1172] kernel write not supported for file /sequencer2 (pid: 1172 comm: kworker/1:2) [ 745.881509][T10823] netlink: 'syz.3.1795': attribute type 10 has an invalid length. [ 746.918806][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.925171][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.967138][T10830] tmpfs: Unknown parameter 'usrquota' [ 747.922485][T10852] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1804'. [ 748.095616][T10858] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1807'. [ 749.293648][T10875] netlink: 'syz.2.1812': attribute type 10 has an invalid length. [ 749.376600][ T6621] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 750.106451][ T1172] kernel write not supported for file /sequencer2 (pid: 1172 comm: kworker/1:2) [ 750.269558][ T6621] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 750.328209][ T6621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.725954][ T6621] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 751.089243][ T6621] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 751.257372][T10894] tmpfs: Unknown parameter 'usrquota' [ 751.331062][ T6621] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 751.386584][ T6621] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 751.436507][ T6621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.490606][ T6621] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 751.518918][T10905] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1821'. [ 752.567044][T10917] netlink: 'syz.0.1823': attribute type 10 has an invalid length. [ 752.597377][ T6621] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 753.373845][ T6621] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 753.382901][ T6621] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 753.592522][ T7] usb 4-1: USB disconnect, device number 10 [ 755.686638][ T4369] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 755.887131][ T4369] usb 1-1: unable to get BOS descriptor or descriptor too short [ 755.903505][ T4369] usb 1-1: not running at top speed; connect to a high speed hub [ 755.925642][ T4369] usb 1-1: config 200 has an invalid interface number: 97 but max is 0 [ 755.945491][ T4369] usb 1-1: config 200 has no interface number 0 [ 755.961257][ T4369] usb 1-1: config 200 interface 97 has no altsetting 0 [ 755.982377][ T4369] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 755.996216][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.004864][ T4369] usb 1-1: Product: syz [ 756.013498][ T4369] usb 1-1: Manufacturer: syz [ 756.021786][ T4369] usb 1-1: SerialNumber: syz [ 756.259994][ T4369] go7007: probe of 1-1:200.97 failed with error -12 [ 756.292262][ T4369] usb 1-1: USB disconnect, device number 28 [ 756.325556][ T1172] usb 2-1: USB disconnect, device number 23 [ 756.856632][T10955] tmpfs: Unknown parameter 'usrquota' [ 756.960922][T10958] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1835'. [ 758.693753][T10967] ima: Unable to open file: /e (-2) [ 758.820670][T10960] ima: policy update failed [ 758.830988][ T26] audit: type=1802 audit(1786486602.429:26): pid=10960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1834" res=0 errno=0 [ 760.086576][ T4369] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 761.086594][ T4369] usb 1-1: Using ep0 maxpacket: 32 [ 761.093997][ T4369] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 761.114564][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.131784][ T4369] usb 1-1: config 0 descriptor?? [ 761.159208][ T4369] as10x_usb: device has been detected [ 761.165091][ T4369] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 761.193657][ T4369] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 761.232002][ T4369] as10x_usb: error during firmware upload part1 [ 761.239861][ T4369] Registered device nBox DVB-T Dongle [ 762.376793][ T6621] usb 1-1: USB disconnect, device number 29 [ 762.398258][ T6621] Unregistered device nBox DVB-T Dongle [ 762.399679][ T6621] as10x_usb: device has been disconnected [ 768.171790][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'. [ 768.205216][T11064] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.212828][T11064] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.773350][T11091] netlink: 'syz.2.1869': attribute type 39 has an invalid length. [ 771.268767][T11100] binder: 11098:11100 ioctl c0306201 0 returned -14 [ 774.397354][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 774.498203][T11145] netlink: 'syz.0.1881': attribute type 5 has an invalid length. [ 774.511872][T11145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1881'. [ 774.523731][T11117] capability: warning: `syz.3.1876' uses 32-bit capabilities (legacy support in use) [ 774.545493][T11132] tmpfs: Unknown parameter 'usrquota' [ 774.657137][ T14] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 774.867416][ T14] usb 2-1: too many configurations: 25, using maximum allowed: 8 [ 774.887107][ T14] usb 2-1: config index 0 descriptor too short (expected 137, got 18) [ 774.902246][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 774.946937][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 774.992050][ T14] usb 2-1: config index 1 descriptor too short (expected 137, got 18) [ 775.021130][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 775.070934][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 775.135711][ T14] usb 2-1: config index 2 descriptor too short (expected 137, got 18) [ 775.162653][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 775.183992][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 776.110334][ T14] usb 2-1: config index 3 descriptor too short (expected 137, got 18) [ 776.227103][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 776.313118][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 776.455083][T11168] binder: 11165:11168 ioctl c0306201 0 returned -14 [ 777.194080][ T14] usb 2-1: config index 4 descriptor too short (expected 137, got 18) [ 777.202690][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 777.218086][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 777.253615][ T14] usb 2-1: config index 5 descriptor too short (expected 137, got 18) [ 777.271471][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 777.286666][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 777.311371][ T14] usb 2-1: config index 6 descriptor too short (expected 137, got 18) [ 777.326668][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 777.335698][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 777.357393][ T14] usb 2-1: config index 7 descriptor too short (expected 137, got 18) [ 777.385333][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 777.435663][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 777.437142][T11170] netlink: 'syz.2.1886': attribute type 39 has an invalid length. [ 777.516771][ T14] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 777.560396][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.594678][ T14] usb 2-1: can't set config #1, error -71 [ 777.617998][ T14] usb 2-1: USB disconnect, device number 24 [ 778.671099][T11204] tmpfs: Unknown parameter 'usrquota' [ 778.791868][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 778.896497][T11211] netlink: 'syz.3.1893': attribute type 5 has an invalid length. [ 778.904284][T11211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1893'. [ 779.400023][ T7] kernel write not supported for file /sequencer2 (pid: 7 comm: kworker/0:0) [ 782.617787][T11263] tmpfs: Unknown parameter 'usrquota' [ 782.983977][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'. [ 783.010512][T11279] netlink: 'syz.1.1911': attribute type 5 has an invalid length. [ 783.034106][T11279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1911'. [ 783.511810][T11291] netlink: 'syz.2.1916': attribute type 10 has an invalid length. [ 786.665677][T11306] ima: Unable to open file: /e (-2) [ 787.358447][T11302] ima: policy update failed [ 787.368748][ T26] audit: type=1802 audit(1786486630.969:27): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1920" res=0 errno=0 [ 787.973173][T11318] tmpfs: Unknown parameter 'usrquota' [ 788.152469][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 788.167725][T11328] netlink: 'syz.0.1925': attribute type 5 has an invalid length. [ 788.175551][T11328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1925'. [ 788.581349][T11338] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1928'. [ 789.486242][T11342] netlink: 'syz.4.1930': attribute type 10 has an invalid length. [ 791.440824][T11360] ima: Unable to open file: /e (-2) [ 792.060720][T11354] ima: policy update failed [ 792.070859][ T26] audit: type=1802 audit(1786486635.669:28): pid=11354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1934" res=0 errno=0 [ 792.700012][T11375] tmpfs: Unknown parameter 'usrquota' [ 794.265776][T11390] netlink: 'syz.0.1943': attribute type 10 has an invalid length. [ 795.091031][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 795.106578][T11392] netlink: 'syz.4.1942': attribute type 5 has an invalid length. [ 795.151701][T11392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1942'. [ 798.316515][ T4317] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 798.507953][ T4317] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 798.526511][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.615181][T11428] netlink: 'syz.2.1955': attribute type 10 has an invalid length. [ 800.065217][ T4317] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 800.475487][T11437] tmpfs: Unknown parameter 'usrquota' [ 801.419452][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 801.467200][T11442] netlink: 'syz.3.1957': attribute type 5 has an invalid length. [ 801.530950][T11442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1957'. [ 802.510067][ T4448] usb 5-1: USB disconnect, device number 19 [ 802.627970][T11455] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1961'. [ 804.079549][T11480] netlink: 'syz.2.1968': attribute type 10 has an invalid length. [ 805.247674][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'. [ 805.283560][T11485] netlink: 'syz.0.1971': attribute type 5 has an invalid length. [ 805.303258][T11485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1971'. [ 805.406111][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1972'. [ 806.556709][ T4317] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 806.848400][ T4317] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 806.866503][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.104888][ T4317] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 808.358874][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.365218][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.867144][T11496] ttyACM ttyACM0: ldisc open failed (-12), clearing slot 0 [ 810.074728][ T4317] usb 2-1: USB disconnect, device number 25 [ 811.465390][T11548] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1985'. [ 813.154865][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1992'. [ 816.086519][ T6621] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 816.882031][ T6621] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 817.395151][ T6621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.666922][ T6621] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 817.999891][T11599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2002'. [ 818.929327][T11591] XFS (mtdblock0): Invalid superblock magic number [ 819.452080][T11616] ima: Unable to open file: /e (-2) [ 820.152375][T11609] ima: policy update failed [ 820.162754][ T26] audit: type=1802 audit(1786486663.759:29): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2005" res=0 errno=0 [ 823.660174][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 823.669409][T11668] netlink: 'syz.1.2020': attribute type 5 has an invalid length. [ 823.678208][T11668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2020'. [ 823.805743][ T4448] usb 5-1: USB disconnect, device number 20 [ 827.346661][ T14] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 827.509493][T11720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2035'. [ 827.564744][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 828.295535][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.537027][ T14] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 832.346568][ T6621] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 832.548982][ T6621] usb 3-1: unable to get BOS descriptor or descriptor too short [ 832.567419][ T6621] usb 3-1: not running at top speed; connect to a high speed hub [ 832.587082][ T6621] usb 3-1: config 200 has an invalid interface number: 97 but max is 0 [ 832.595398][ T6621] usb 3-1: config 200 has no interface number 0 [ 832.602115][ T6621] usb 3-1: config 200 interface 97 has no altsetting 0 [ 832.611748][ T6621] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 832.621467][ T6621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.629820][ T6621] usb 3-1: Product: syz [ 832.634130][ T6621] usb 3-1: Manufacturer: syz [ 832.640439][ T6621] usb 3-1: SerialNumber: syz [ 834.207461][ T4317] usb 1-1: USB disconnect, device number 30 [ 835.547118][ T6621] go7007: probe of 3-1:200.97 failed with error -12 [ 835.577241][ T6621] usb 3-1: USB disconnect, device number 20 [ 836.715729][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2057'. [ 837.220951][T11806] netlink: 'syz.3.2057': attribute type 5 has an invalid length. [ 837.281374][T11806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2057'. [ 838.466607][ T4317] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 838.673269][ T4317] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 838.715992][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.854615][ T4317] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 846.237477][ T1172] usb 4-1: USB disconnect, device number 11 [ 846.404851][T11893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2080'. [ 847.354841][T11899] fuse: Bad value for 'fd' [ 848.477928][T11910] tmpfs: Unknown parameter 'usrquota' [ 849.528011][T11909] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2084'. [ 851.776517][ T1172] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 852.548439][ T1172] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 853.322789][ T1172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.585036][T11945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2098'. [ 853.876963][ T1172] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 855.901265][T11969] tmpfs: Unknown parameter 'usrquota' [ 856.249023][T11975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2106'. [ 856.429149][T11976] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2105'. [ 859.317583][ T7] usb 2-1: USB disconnect, device number 26 [ 859.619917][T12002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2112'. [ 862.098858][T12017] tmpfs: Unknown parameter 'usrquota' [ 862.587239][T12037] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2121'. [ 862.846582][ T7] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 863.776187][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 863.840192][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.944447][T12042] ima: Unable to open file: /e (-2) [ 863.951022][T12041] ima: policy update failed [ 864.006699][ T26] audit: type=1802 audit(1786486707.609:30): pid=12041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2123" res=0 errno=0 [ 864.085685][ T7] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 865.753689][T12065] tmpfs: Unknown parameter 'usrquota' [ 869.558910][ T7] usb 2-1: USB disconnect, device number 27 [ 869.799327][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.805806][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.883002][T12087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2139'. [ 870.108232][ T4448] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 870.299019][ T4448] usb 3-1: unable to get BOS descriptor or descriptor too short [ 870.408698][ T4448] usb 3-1: not running at top speed; connect to a high speed hub [ 870.419592][ T4448] usb 3-1: config 200 has an invalid interface number: 97 but max is 0 [ 870.432450][ T4448] usb 3-1: config 200 has no interface number 0 [ 870.439679][ T4448] usb 3-1: config 200 interface 97 has no altsetting 0 [ 870.470670][ T4448] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 870.506987][ T4448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.539851][ T4448] usb 3-1: Product: syz [ 870.550091][ T4448] usb 3-1: Manufacturer: syz [ 870.554823][ T4448] usb 3-1: SerialNumber: syz [ 873.862151][T12104] tmpfs: Unknown parameter 'usrquota' [ 874.883399][ T4448] go7007: probe of 3-1:200.97 failed with error -12 [ 874.931494][ T4448] usb 3-1: USB disconnect, device number 21 [ 875.403939][T12111] ima: Unable to open file: /e (-2) [ 875.404228][T12110] ima: policy update failed [ 875.504191][ T26] audit: type=1802 audit(1786486719.099:31): pid=12110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2146" res=0 errno=0 [ 876.293183][T12127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2152'. [ 876.306818][ T4448] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 876.623320][ T4448] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 876.667152][ T4448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.065907][ T4448] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 878.957689][T12149] tmpfs: Unknown parameter 'usrquota' [ 879.046513][ T1172] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 879.798949][ T1172] usb 5-1: unable to get BOS descriptor or descriptor too short [ 879.817581][ T1172] usb 5-1: not running at top speed; connect to a high speed hub [ 879.829354][ T1172] usb 5-1: config 200 has an invalid interface number: 97 but max is 0 [ 879.839163][ T1172] usb 5-1: config 200 has no interface number 0 [ 879.851169][ T1172] usb 5-1: config 200 interface 97 has no altsetting 0 [ 879.861534][ T1172] usb 5-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 879.871774][ T1172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.882528][ T1172] usb 5-1: Product: syz [ 879.887072][ T1172] usb 5-1: Manufacturer: syz [ 879.892536][ T1172] usb 5-1: SerialNumber: syz [ 882.427414][ T1172] go7007: probe of 5-1:200.97 failed with error -12 [ 882.467850][ T1172] usb 5-1: USB disconnect, device number 21 [ 882.611391][ T6621] usb 3-1: USB disconnect, device number 22 [ 883.361208][T12178] ima: Unable to open file: /e (-2) [ 883.366103][T12177] ima: policy update failed [ 883.396871][ T26] audit: type=1802 audit(1786486726.999:32): pid=12177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2170" res=0 errno=0 [ 885.549712][T12194] tmpfs: Unknown parameter 'usrquota' [ 885.926487][ T1172] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 886.268579][ T1172] usb 5-1: unable to get BOS descriptor or descriptor too short [ 886.290296][ T1172] usb 5-1: not running at top speed; connect to a high speed hub [ 886.322386][ T1172] usb 5-1: config 200 has an invalid interface number: 97 but max is 0 [ 886.336539][ T1172] usb 5-1: config 200 has no interface number 0 [ 886.342948][ T1172] usb 5-1: config 200 interface 97 has no altsetting 0 [ 886.368317][ T1172] usb 5-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 886.380323][ T1172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.388742][ T1172] usb 5-1: Product: syz [ 886.392944][ T1172] usb 5-1: Manufacturer: syz [ 886.397899][ T1172] usb 5-1: SerialNumber: syz [ 886.696523][ T6621] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 888.847107][ T6621] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 888.856259][ T6621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.527851][ T1172] go7007: probe of 5-1:200.97 failed with error -12 [ 889.630910][ T1172] usb 5-1: USB disconnect, device number 22 [ 889.650750][ T6621] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 889.694278][T12219] ima: Unable to open file: /e (-2) [ 889.694461][T12218] ima: policy update failed [ 890.568020][ T26] audit: type=1802 audit(1786486734.169:33): pid=12218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2183" res=0 errno=0 [ 891.582138][ T1172] usb 4-1: USB disconnect, device number 12 [ 894.733909][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2201'. [ 894.776655][T12289] netlink: 'syz.3.2201': attribute type 5 has an invalid length. [ 894.794743][T12289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2201'. [ 897.152944][T12326] XFS (mtdblock0): Invalid superblock magic number [ 906.846294][T12425] netlink: 'syz.1.2240': attribute type 39 has an invalid length. [ 911.562207][T12480] netlink: 'syz.2.2256': attribute type 39 has an invalid length. [ 911.889637][T12492] device syzkaller0 entered promiscuous mode [ 912.419071][T12504] tmpfs: Unknown parameter 'usrquota' [ 916.911167][T12539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2271'. [ 919.086775][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2277'. [ 919.294936][T12575] tmpfs: Unknown parameter 'usrquota' [ 919.894123][T12571] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2277'. [ 920.121473][T12571] device geneve3 entered promiscuous mode [ 922.507491][T12608] ima: Unable to open file: /e (-2) [ 923.222634][T12603] ima: policy update failed [ 923.233156][ T26] audit: type=1802 audit(1786486766.829:34): pid=12603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2289" res=0 errno=0 [ 924.227231][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2294'. [ 924.374268][T12627] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2294'. [ 925.025272][T12627] device geneve3 entered promiscuous mode [ 925.249621][T12637] tmpfs: Unknown parameter 'usrquota' [ 926.117159][ T4353] kworker/dying (4353) used greatest stack depth: 16464 bytes left [ 929.312761][T12667] netlink: 'syz.4.2305': attribute type 39 has an invalid length. [ 931.220034][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2310'. [ 931.239463][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.245857][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.277857][T12683] netlink: 'syz.3.2310': attribute type 5 has an invalid length. [ 931.324698][T12683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2310'. [ 931.339882][T12683] device geneve3 entered promiscuous mode [ 931.428750][T12689] XFS (mtdblock0): Invalid superblock magic number [ 931.486622][ T14] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 932.391365][ T14] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 932.400876][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.633808][ T14] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 935.077653][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2323'. [ 935.086741][T12739] netlink: 'syz.4.2323': attribute type 5 has an invalid length. [ 935.094553][T12739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2323'. [ 935.109891][T12739] device geneve4 entered promiscuous mode [ 935.537553][T12748] XFS (mtdblock0): Invalid superblock magic number [ 935.822731][T12762] tmpfs: Unknown parameter 'usrquota' [ 937.456650][ T1172] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 938.189904][ T6621] usb 2-1: USB disconnect, device number 28 [ 938.378183][ T1172] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 938.393685][ T1172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.457728][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 938.545583][T12785] netlink: 'syz.3.2335': attribute type 5 has an invalid length. [ 938.554683][T12785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2335'. [ 938.628290][ T1172] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 940.501524][T12819] tmpfs: Unknown parameter 'usrquota' [ 942.266532][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2347'. [ 943.157944][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2350'. [ 943.258875][T12838] netlink: 'syz.3.2350': attribute type 5 has an invalid length. [ 943.296489][T12838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2350'. [ 943.387776][T12838] device geneve4 entered promiscuous mode [ 944.244137][ T14] usb 1-1: USB disconnect, device number 31 [ 944.635222][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2354'. [ 944.767844][T12852] netlink: 'syz.2.2354': attribute type 5 has an invalid length. [ 944.775722][T12852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2354'. [ 945.093957][T12867] tmpfs: Unknown parameter 'usrquota' [ 947.493642][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2362'. [ 948.478378][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 948.708582][T12902] netlink: 'syz.3.2365': attribute type 5 has an invalid length. [ 948.752226][T12902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2365'. [ 949.449545][T12916] netlink: 'syz.4.2369': attribute type 39 has an invalid length. [ 949.631040][T12919] tmpfs: Unknown parameter 'usrquota' [ 950.714584][T12933] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2376'. [ 951.373370][T12944] tmpfs: Unknown parameter 'quota' [ 951.393109][T12944] VFS: file-max limit 0 reached [ 952.141881][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2378'. [ 953.732494][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'. [ 953.816603][T12961] netlink: 'syz.2.2381': attribute type 5 has an invalid length. [ 953.834124][T12961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2381'. [ 953.929069][T12961] device geneve4 entered promiscuous mode [ 954.041295][T12968] netlink: 'syz.4.2384': attribute type 39 has an invalid length. [ 954.254691][T12979] tmpfs: Unknown parameter 'usrquota' [ 957.355379][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2397'. [ 957.372735][T13009] netlink: 'syz.3.2397': attribute type 5 has an invalid length. [ 957.382140][T13009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2397'. [ 957.396713][ T4318] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 957.586527][ T4318] usb 5-1: Using ep0 maxpacket: 16 [ 957.594107][ T4318] usb 5-1: unable to get BOS descriptor or descriptor too short [ 957.630206][ T4318] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 957.683657][ T4318] usb 5-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 957.758374][ T4318] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 957.787910][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.796090][ T4318] usb 5-1: Product: syz [ 957.831267][ T4318] usb 5-1: Manufacturer: syz [ 957.836003][ T4318] usb 5-1: SerialNumber: syz [ 957.935219][T13021] tmpfs: Unknown parameter 'usrquota' [ 958.188838][ T4318] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 958.197799][ T4318] snd-usb-audio: probe of 5-1:5.0 failed with error -22 [ 958.790337][ T4318] usb 5-1: USB disconnect, device number 23 [ 958.863314][T13039] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2407'. [ 959.037269][ T5223] udevd[5223]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 960.128084][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2417'. [ 961.202342][T13073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2420'. [ 961.446466][ T1172] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 962.938903][ T1172] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 962.956935][ T1172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.197603][ T1172] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 963.419331][ T1172] usb 1-1: USB disconnect, device number 32 [ 963.850166][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2431'. [ 964.830449][T13116] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2434'. [ 972.013383][T13162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'. [ 973.615164][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2451'. [ 973.644410][T13178] netlink: 'syz.4.2451': attribute type 5 has an invalid length. [ 973.679903][T13178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2451'. [ 979.635890][T13222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2466'. [ 981.109312][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2469'. [ 981.128787][T13232] netlink: 'syz.0.2469': attribute type 5 has an invalid length. [ 981.156509][T13232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2469'. [ 982.186690][ T14] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 984.738132][ T14] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 985.093111][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.164278][ T14] usb 3-1: can't set config #1, error -71 [ 985.178603][ T14] usb 3-1: USB disconnect, device number 23 [ 986.070632][T13280] device syzkaller0 entered promiscuous mode [ 986.197537][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 986.240427][T13282] netlink: 'syz.1.2487': attribute type 5 has an invalid length. [ 986.266449][T13282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2487'. [ 986.956800][ T7] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 988.181596][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 988.220193][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.238163][ T7] usb 3-1: Product: syz [ 988.247997][ T7] usb 3-1: Manufacturer: syz [ 988.258317][ T7] usb 3-1: SerialNumber: syz [ 988.297307][ T7] usb 3-1: config 0 descriptor?? [ 989.397248][ T7] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 989.989498][ T7] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110 [ 990.425664][ T7] usb 3-1: USB disconnect, device number 24 [ 991.571626][T13326] tmpfs: Unknown parameter 'usrquota' [ 992.678872][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.685304][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.075298][T13343] Bluetooth: MGMT ver 1.22 [ 993.266435][ T1172] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 993.704950][ T1172] usb 5-1: Using ep0 maxpacket: 32 [ 993.712790][ T1172] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 512, setting to 64 [ 993.744121][ T1172] usb 5-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 993.764157][ T1172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.772560][ T1172] usb 5-1: Product: syz [ 993.777107][ T4448] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 993.787536][ T1172] usb 5-1: Manufacturer: syz [ 993.792971][ T1172] usb 5-1: SerialNumber: syz [ 994.016430][ T4448] usb 1-1: device descriptor read/64, error -71 [ 994.102921][ T1172] usb 5-1: MIDIStreaming interface descriptor not found [ 994.179471][ T1172] usb 5-1: USB disconnect, device number 24 [ 994.346513][ T4448] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 994.526528][ T4448] usb 1-1: device descriptor read/64, error -71 [ 994.606604][ T5262] udevd[5262]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 996.336563][ T4448] usb usb1-port1: attempt power cycle [ 997.826156][T13383] tmpfs: Unknown parameter 'usrquota' [ 999.251588][T13400] 9pnet_fd: Insufficient options for proto=fd [ 1000.087996][T13401] tmpfs: Unknown parameter 'usrquota' [ 1002.466627][ T4448] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1002.545406][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2533'. [ 1002.671942][ T4448] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1003.397624][ T4448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.435534][T13447] ima: Unable to open file: /e (-2) [ 1003.513807][T13439] ima: policy update failed [ 1003.546711][ T26] audit: type=1802 audit(1786486846.151:35): pid=13439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2532" res=0 errno=0 [ 1003.614068][T13449] device syzkaller0 entered promiscuous mode [ 1003.643871][ T4448] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1004.387980][T13472] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2542'. [ 1005.455511][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2545'. [ 1005.854867][ T4448] usb 3-1: USB disconnect, device number 25 [ 1006.029807][T13492] binder: 13491:13492 ioctl c0306201 200000000080 returned -14 [ 1006.043501][T13490] ima: Unable to open file: /e (-2) [ 1006.043767][T13489] ima: policy update failed [ 1006.055648][T13492] binder: 13491:13492 ioctl c0306201 2000000003c0 returned -14 [ 1006.084145][ T26] audit: type=1802 audit(1786486848.681:36): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2547" res=0 errno=0 [ 1007.128559][T13500] device syzkaller0 entered promiscuous mode [ 1007.908676][T13525] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2558'. [ 1008.096473][ T4317] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1008.302320][ T4317] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1008.889466][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.260752][T13538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2561'. [ 1009.290059][ T4317] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1010.032883][T13537] 9pnet_fd: Insufficient options for proto=fd [ 1010.132455][T13547] ima: Unable to open file: /e (-2) [ 1010.149215][T13542] ima: policy update failed [ 1010.169428][T13546] device syzkaller0 entered promiscuous mode [ 1010.201125][ T26] audit: type=1802 audit(1786486852.801:37): pid=13542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2563" res=0 errno=0 [ 1011.340807][ T4448] usb 5-1: USB disconnect, device number 25 [ 1011.570973][T13572] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2571'. [ 1012.697231][T13582] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2576'. [ 1012.954504][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2577'. [ 1016.153090][T13603] device syzkaller0 entered promiscuous mode [ 1016.506436][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1016.726844][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1016.765286][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.925838][T13623] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2588'. [ 1017.034632][ T14] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1019.393383][T13628] md130: error: bitmap file must be a regular file [ 1019.905204][ T14] usb 4-1: USB disconnect, device number 13 [ 1021.497771][T13645] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2596'. [ 1021.972654][T13653] tmpfs: Unknown parameter 'usrquota' [ 1025.666614][ T1172] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1025.882540][ T1172] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1025.912144][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.338102][ T1172] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1026.917179][T13683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2607'. [ 1027.391701][T13699] tmpfs: Unknown parameter 'usrquota' [ 1028.288442][ T7] usb 3-1: USB disconnect, device number 26 [ 1028.432285][T13703] ================================================================== [ 1028.440457][T13703] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 1028.447890][T13703] Read of size 8 at addr ffff888141267818 by task syz.2.2614/13703 [ 1028.455828][T13703] [ 1028.458181][T13703] CPU: 1 PID: 13703 Comm: syz.2.2614 Not tainted syzkaller #0 [ 1028.465716][T13703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1028.475778][T13703] Call Trace: [ 1028.479089][T13703] [ 1028.482079][T13703] dump_stack_lvl+0x188/0x24e [ 1028.486840][T13703] ? read_lock_is_recursive+0x10/0x10 [ 1028.492268][T13703] ? show_regs_print_info+0x12/0x12 [ 1028.497497][T13703] ? load_image+0x410/0x410 [ 1028.502024][T13703] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1028.507534][T13703] ? __virt_addr_valid+0x188/0x540 [ 1028.512699][T13703] ? __virt_addr_valid+0x467/0x540 [ 1028.517838][T13703] ? dvb_device_open+0xc5/0x360 [ 1028.522750][T13703] print_report+0xa8/0x210 [ 1028.527204][T13703] kasan_report+0x10b/0x140 [ 1028.531736][T13703] ? dvb_device_open+0xc5/0x360 [ 1028.536598][T13703] dvb_device_open+0xc5/0x360 [ 1028.541284][T13703] chrdev_open+0x585/0x5f0 [ 1028.545737][T13703] ? cd_forget+0x160/0x160 [ 1028.550155][T13703] ? fsnotify_perm+0x39b/0x550 [ 1028.554958][T13703] ? cd_forget+0x160/0x160 [ 1028.559400][T13703] do_dentry_open+0x7dd/0x10b0 [ 1028.564203][T13703] path_openat+0x2674/0x2f10 [ 1028.568836][T13703] ? verify_lock_unused+0x140/0x140 [ 1028.574039][T13703] ? do_sys_openat2+0xdd/0x4f0 [ 1028.578858][T13703] ? do_filp_open+0x420/0x420 [ 1028.583538][T13703] do_filp_open+0x1ee/0x420 [ 1028.588057][T13703] ? vfs_tmpfile+0x470/0x470 [ 1028.592655][T13703] ? _raw_spin_unlock+0x24/0x40 [ 1028.597521][T13703] ? alloc_fd+0x590/0x640 [ 1028.601875][T13703] do_sys_openat2+0x14b/0x4f0 [ 1028.606575][T13703] ? do_sys_open+0xe0/0xe0 [ 1028.611001][T13703] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1028.616998][T13703] ? lock_chain_count+0x20/0x20 [ 1028.621863][T13703] __x64_sys_openat+0x135/0x160 [ 1028.626734][T13703] do_syscall_64+0x4c/0xa0 [ 1028.631184][T13703] ? clear_bhb_loop+0x60/0xb0 [ 1028.635898][T13703] ? clear_bhb_loop+0x60/0xb0 [ 1028.640578][T13703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1028.646509][T13703] RIP: 0033:0x7fdb37b5e90e [ 1028.650985][T13703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1028.670733][T13703] RSP: 002b:00007fdb389dcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1028.679189][T13703] RAX: ffffffffffffffda RBX: 00007fdb389dd6c0 RCX: 00007fdb37b5e90e [ 1028.687168][T13703] RDX: 0000000000000002 RSI: 00007fdb389dcc00 RDI: ffffffffffffff9c [ 1028.695142][T13703] RBP: 00007fdb389dcc00 R08: 0000000000000000 R09: 0000000000000000 [ 1028.703112][T13703] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1028.711077][T13703] R13: 00007fdb37e26038 R14: 00007fdb37e25fa0 R15: 00007ffe1e108af8 [ 1028.719066][T13703] [ 1028.722082][T13703] [ 1028.724400][T13703] Allocated by task 1: [ 1028.728460][T13703] kasan_set_track+0x4b/0x70 [ 1028.733051][T13703] __kasan_kmalloc+0x8e/0xa0 [ 1028.737659][T13703] dvb_register_device+0x305/0x1dc0 [ 1028.742870][T13703] dvb_register_frontend+0x629/0x900 [ 1028.748188][T13703] vidtv_bridge_probe+0x9cf/0xf50 [ 1028.753282][T13703] platform_probe+0x137/0x1c0 [ 1028.758005][T13703] really_probe+0x24a/0xb40 [ 1028.762546][T13703] __driver_probe_device+0x1f5/0x390 [ 1028.767849][T13703] driver_probe_device+0x4f/0x420 [ 1028.772896][T13703] __driver_attach+0x43d/0x6c0 [ 1028.777706][T13703] bus_for_each_dev+0x182/0x1f0 [ 1028.782557][T13703] bus_add_driver+0x324/0x5d0 [ 1028.787253][T13703] driver_register+0x32d/0x430 [ 1028.792035][T13703] vidtv_bridge_init+0x39/0x67 [ 1028.796922][T13703] do_one_initcall+0x257/0x800 [ 1028.801710][T13703] do_initcall_level+0x13d/0x1ed [ 1028.806708][T13703] do_initcalls+0x4b/0x8a [ 1028.811039][T13703] kernel_init_freeable+0x401/0x5ab [ 1028.816241][T13703] kernel_init+0x19/0x1b0 [ 1028.820571][T13703] ret_from_fork+0x1f/0x30 [ 1028.825004][T13703] [ 1028.827328][T13703] The buggy address belongs to the object at ffff888141267800 [ 1028.827328][T13703] which belongs to the cache kmalloc-256 of size 256 [ 1028.841438][T13703] The buggy address is located 24 bytes inside of [ 1028.841438][T13703] 256-byte region [ffff888141267800, ffff888141267900) [ 1028.854716][T13703] [ 1028.857043][T13703] The buggy address belongs to the physical page: [ 1028.863498][T13703] page:ffffea0005049980 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888141267800 pfn:0x141266 [ 1028.875041][T13703] head:ffffea0005049980 order:1 compound_mapcount:0 compound_pincount:0 [ 1028.883363][T13703] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 1028.891438][T13703] raw: 057ff00000010200 ffffea0005049008 ffffea0005317088 ffff888017441b40 [ 1028.900020][T13703] raw: ffff888141267800 000000000010000f 00000001ffffffff 0000000000000000 [ 1028.908596][T13703] page dumped because: kasan: bad access detected [ 1028.914999][T13703] page_owner tracks the page as allocated [ 1028.920722][T13703] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16181997948, free_ts 0 [ 1028.940438][T13703] post_alloc_hook+0x173/0x1a0 [ 1028.945279][T13703] get_page_from_freelist+0x206b/0x2180 [ 1028.950825][T13703] __alloc_pages+0x1ec/0x4f0 [ 1028.955427][T13703] alloc_page_interleave+0x24/0x1e0 [ 1028.960663][T13703] alloc_slab_page+0x5d/0x180 [ 1028.965337][T13703] new_slab+0x87/0x2d0 [ 1028.969406][T13703] ___slab_alloc+0xbc5/0x1240 [ 1028.974097][T13703] __kmem_cache_alloc_node+0x126/0x270 [ 1028.979576][T13703] kmalloc_trace+0x26/0xe0 [ 1028.984042][T13703] bus_add_driver+0xdc/0x5d0 [ 1028.988632][T13703] driver_register+0x32d/0x430 [ 1028.993395][T13703] usb_register_driver+0x201/0x3c0 [ 1028.998547][T13703] do_one_initcall+0x257/0x800 [ 1029.003321][T13703] do_initcall_level+0x13d/0x1ed [ 1029.008266][T13703] do_initcalls+0x4b/0x8a [ 1029.012602][T13703] kernel_init_freeable+0x401/0x5ab [ 1029.017806][T13703] page_owner free stack trace missing [ 1029.023176][T13703] [ 1029.025495][T13703] Memory state around the buggy address: [ 1029.031167][T13703] ffff888141267700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1029.039225][T13703] ffff888141267780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1029.047287][T13703] >ffff888141267800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.055344][T13703] ^ [ 1029.060187][T13703] ffff888141267880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.068241][T13703] ffff888141267900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1029.076395][T13703] ================================================================== [ 1029.117926][T13703] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1029.125169][T13703] CPU: 0 PID: 13703 Comm: syz.2.2614 Not tainted syzkaller #0 [ 1029.132659][T13703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1029.142750][T13703] Call Trace: [ 1029.146047][T13703] [ 1029.148979][T13703] dump_stack_lvl+0x188/0x24e [ 1029.153665][T13703] ? memcpy+0x3c/0x60 [ 1029.157731][T13703] ? show_regs_print_info+0x12/0x12 [ 1029.162953][T13703] ? load_image+0x410/0x410 [ 1029.167474][T13703] panic+0x2d3/0x710 [ 1029.171393][T13703] ? bpf_jit_dump+0xd0/0xd0 [ 1029.175927][T13703] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1029.181934][T13703] ? _raw_spin_unlock+0x40/0x40 [ 1029.186797][T13703] check_panic_on_warn+0x80/0xa0 [ 1029.191789][T13703] ? dvb_device_open+0xc5/0x360 [ 1029.196647][T13703] end_report+0x66/0x110 [ 1029.200893][T13703] kasan_report+0x118/0x140 [ 1029.205408][T13703] ? dvb_device_open+0xc5/0x360 [ 1029.210290][T13703] dvb_device_open+0xc5/0x360 [ 1029.214977][T13703] chrdev_open+0x585/0x5f0 [ 1029.219407][T13703] ? cd_forget+0x160/0x160 [ 1029.223837][T13703] ? fsnotify_perm+0x39b/0x550 [ 1029.228623][T13703] ? cd_forget+0x160/0x160 [ 1029.233257][T13703] do_dentry_open+0x7dd/0x10b0 [ 1029.238062][T13703] path_openat+0x2674/0x2f10 [ 1029.242696][T13703] ? verify_lock_unused+0x140/0x140 [ 1029.247920][T13703] ? do_sys_openat2+0xdd/0x4f0 [ 1029.252741][T13703] ? do_filp_open+0x420/0x420 [ 1029.257445][T13703] do_filp_open+0x1ee/0x420 [ 1029.261968][T13703] ? vfs_tmpfile+0x470/0x470 [ 1029.266576][T13703] ? _raw_spin_unlock+0x24/0x40 [ 1029.271438][T13703] ? alloc_fd+0x590/0x640 [ 1029.275788][T13703] do_sys_openat2+0x14b/0x4f0 [ 1029.280503][T13703] ? do_sys_open+0xe0/0xe0 [ 1029.284933][T13703] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1029.290937][T13703] ? lock_chain_count+0x20/0x20 [ 1029.295808][T13703] __x64_sys_openat+0x135/0x160 [ 1029.300677][T13703] do_syscall_64+0x4c/0xa0 [ 1029.305135][T13703] ? clear_bhb_loop+0x60/0xb0 [ 1029.309830][T13703] ? clear_bhb_loop+0x60/0xb0 [ 1029.314555][T13703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.320466][T13703] RIP: 0033:0x7fdb37b5e90e [ 1029.324894][T13703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1029.344510][T13703] RSP: 002b:00007fdb389dcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1029.352933][T13703] RAX: ffffffffffffffda RBX: 00007fdb389dd6c0 RCX: 00007fdb37b5e90e [ 1029.360917][T13703] RDX: 0000000000000002 RSI: 00007fdb389dcc00 RDI: ffffffffffffff9c [ 1029.368906][T13703] RBP: 00007fdb389dcc00 R08: 0000000000000000 R09: 0000000000000000 [ 1029.376985][T13703] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1029.384975][T13703] R13: 00007fdb37e26038 R14: 00007fdb37e25fa0 R15: 00007ffe1e108af8 [ 1029.392970][T13703] [ 1029.396574][T13703] Kernel Offset: disabled [ 1029.400928][T13703] Rebooting in 86400 seconds..