last executing test programs: 3m6.215923272s ago: executing program 2 (id=21): keyctl$clear(0x3, 0xfffffffffffffffc) (async) keyctl$session_to_parent(0x12) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) keyctl$session_to_parent(0x12) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x134, r1, 0x1, 0x0, 0x25dfdbfc, {0x27}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, &(0x7f0000000080)) (async) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x2, 0x0, @auto=[0x3b, 0x3b, 0x14, 0x18, 0x12, 0x30, 0x18, 0x14, 0x10, 0x10]}, 0x12, r2) 3m6.121654369s ago: executing program 2 (id=22): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x100, 0x10004, 0x2c}, 0x50) (fail_nth: 1) 3m5.9917053s ago: executing program 2 (id=23): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000010100800c00"], 0x114}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x401, 0x0) mkdir(0x0, 0xeb) r4 = openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x11640, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(r0, 0x9, &(0x7f00000000c0)={0x4, 0x80000001}, &(0x7f0000000100)) dup2(r4, r4) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setreuid(0xee01, 0x0) r5 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000002c0), 0x4) 3m5.891472013s ago: executing program 2 (id=24): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbff}, 0xfffffffffffffee2}, 0x1, 0x0, 0x0, 0x804}, 0xc001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() (async) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (async) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010003"], 0x264d81) (async) open_by_handle_at(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010003"], 0x264d81) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) syz_usbip_server_init(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 3m5.441523232s ago: executing program 2 (id=26): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffe, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) write(r1, 0x0, 0xffffffa3) recvmsg(r1, &(0x7f0000000080)={0x0, 0x7, 0x0}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) get_robust_list(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, 0x0, 0x44010) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) get_robust_list(r0, &(0x7f00000004c0)=0x0, &(0x7f0000000500)) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = dup(r5) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 3m5.131676668s ago: executing program 2 (id=28): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000012c0)=0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000180), 0x240540, 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000080)="4e8fc38e", 0xb, 0x200000000004}]) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3m5.063963889s ago: executing program 32 (id=28): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000012c0)=0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000180), 0x240540, 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000080)="4e8fc38e", 0xb, 0x200000000004}]) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4.799987613s ago: executing program 4 (id=1649): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) rt_tgsigqueueinfo(r1, r0, 0xb, &(0x7f0000000000)={0x4, 0xfffffffe, 0x4}) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000540), 0x1, 0x0) write$sequencer(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') io_submit(0x0, 0x1, &(0x7f0000000880)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffb, r3, &(0x7f0000000700)="38d5d988", 0x4, 0x5, 0x0, 0x0, r3}]) r4 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r5 = io_uring_setup(0x2c43, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x1, 0xe7}) close(r5) r6 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r6, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r6, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x5, 0x0) 3.961505352s ago: executing program 4 (id=1656): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r1 = epoll_create(0xff9) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x50) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r2, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) 3.830255296s ago: executing program 4 (id=1657): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x84}}, 0x0) 3.829693389s ago: executing program 4 (id=1658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x20002}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9}]}}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x74}}, 0x0) 3.77013973s ago: executing program 4 (id=1659): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2.90991732s ago: executing program 4 (id=1669): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000300)={0x18, &(0x7f00000004c0)={0x20, 0xf, 0x34, "11cd5594cd75e6f0959eb0c386338b850ce8e383160f51b0ac25ac14a1beaf7009fe9819c2d1a6fa841e0177263fb03ea0c24df9"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000000240), 0x0}) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 1.860406784s ago: executing program 3 (id=1692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4089, 0xff9}], 0x1}, 0x20) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000180)) r4 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xeeeea000, 0x0, r4}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x2000fb) 1.720370968s ago: executing program 3 (id=1693): unshare(0x24020400) r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x52000775) 1.720044223s ago: executing program 3 (id=1694): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r1 = epoll_create(0xff9) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x50) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r2, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) 1.600382953s ago: executing program 3 (id=1695): r0 = socket$packet(0x11, 0x2, 0x300) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.600097733s ago: executing program 3 (id=1696): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r1 = epoll_create(0xff9) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) readahead(r1, 0x8, 0x7f) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x50) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r2, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) move_pages(r8, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8) ioctl$KVM_GET_EMULATED_CPUID(r7, 0xc008ae09, &(0x7f0000000000)={0x6666666666666ca, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}, {0xc0000001, 0x10000, 0x4, 0x1, 0x203a, 0x9, 0x200}]}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000001a80)={0x6, 'batadv0\x00', {0x2}, 0x869}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {}, 0x2}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x12, &(0x7f0000000180)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000240)='syzkaller\x00', 0x1ff, 0x35, &(0x7f0000000280)=""/53, 0x41100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000400)=r9, 0x4) 1.459891876s ago: executing program 3 (id=1697): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f0000000200)=[{0x7fff, 0x5850, 0x1, &(0x7f0000000780)="e0"}], 0x1}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x15, @string={0x15, 0x3, "ba7e266a756f55464bc71232eed8bff84b580d"}}}, &(0x7f0000000ac0)={0x18, &(0x7f0000000980)={0x20, 0xd, 0x12, "73676bf931e4104a1750edd8b130d17d0527"}, 0x0, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40), &(0x7f0000000a80)}) 1.160237149s ago: executing program 1 (id=1699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, 0x0, 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff800}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x40800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 839.984819ms ago: executing program 0 (id=1700): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 839.665946ms ago: executing program 0 (id=1701): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r0, &(0x7f0000006140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000001880)={&(0x7f00000010c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 699.966164ms ago: executing program 0 (id=1702): mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) syz_io_uring_setup(0x91f, &(0x7f0000000340)={0x0, 0x6f83, 0x800, 0x3}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x400000000000000, 0x9, 0x0, 0x0, 0x7fffffff, 0x5}, 0x0, 0x0) 699.724604ms ago: executing program 0 (id=1703): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r1 = epoll_create(0xff9) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x50) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r2, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) 568.25448ms ago: executing program 0 (id=1704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x0, 0x7, 0x0, 0xdc, 0x2, 0x6, 0x7, 0x7, 0x9, 0x3, 0x9, 0x0, 0x7, 0x100, 0xf7, 0x5, 0xf4, 0xc, '\x00', 0xfe, 0x629b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x1, 0x1, 0x3, 0x7, 0x3000000, 0x68a60afe, 0x3, 0x29c2, 0x101, 0x2, 0x9, 0x3, 0x7fffffffffffffff, 0x5, 0x2fd6, 0xa000000000000000], 0xb000, 0x88200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 459.342723ms ago: executing program 0 (id=1705): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() getpid() socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000540), 0x1, 0x0) write$sequencer(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') io_submit(0x0, 0x1, &(0x7f0000000880)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffb, r1, &(0x7f0000000700)="38d5d988", 0x4, 0x5, 0x0, 0x0, r1}]) r2 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r3 = io_uring_setup(0x2c43, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x1, 0xe7}) close(r3) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r4, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r4, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x5, 0x0) 270.247457ms ago: executing program 1 (id=1706): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000800000008500000086000000850000000e000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 269.871173ms ago: executing program 1 (id=1707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 70.177685ms ago: executing program 1 (id=1708): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x145, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) 69.914848ms ago: executing program 1 (id=1709): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 0s ago: executing program 1 (id=1710): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x7fffffff, 0x4) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYBLOB, @ANYRESHEX=r0, @ANYRES8=r1], 0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xa) listen(0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) sendto$inet6(r1, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) kernel console output (not intermixed with test programs): 150.193709][ T5352] loop6: unable to read partition table [ 151.007069][ T6009] usb 6-1: USB disconnect, device number 4 [ 151.661033][ T6817] netlink: 'syz.1.190': attribute type 2 has an invalid length. [ 151.697315][ T6817] !: entered promiscuous mode [ 151.711118][ T6817] netlink: 'syz.1.190': attribute type 2 has an invalid length. [ 152.000179][ T6823] tipc: Enabled bearer , priority 0 [ 152.004144][ T6823] syzkaller0: entered promiscuous mode [ 152.006438][ T6823] syzkaller0: entered allmulticast mode [ 152.031753][ T6823] tipc: Resetting bearer [ 152.047879][ T6822] tipc: Resetting bearer [ 152.071097][ T6822] tipc: Disabling bearer [ 152.158628][ T6829] xt_policy: output policy not valid in PREROUTING and INPUT [ 153.041596][ T40] audit: type=1326 audit(1768924467.035:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 153.059490][ T40] audit: type=1326 audit(1768924467.035:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 153.071176][ T40] audit: type=1326 audit(1768924467.035:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 153.081345][ T40] audit: type=1326 audit(1768924467.035:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 153.091514][ T40] audit: type=1326 audit(1768924467.035:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 153.103681][ T40] audit: type=1326 audit(1768924467.035:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 153.114998][ T40] audit: type=1326 audit(1768924467.045:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 153.125692][ T40] audit: type=1326 audit(1768924467.045:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 153.148743][ T6852] nftables ruleset with unbound chain [ 153.420449][ T6863] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 153.423810][ T6863] netlink: 'syz.1.206': attribute type 2 has an invalid length. [ 153.626013][ T6869] netlink: 'syz.0.207': attribute type 3 has an invalid length. [ 154.166031][ T40] audit: type=1326 audit(1768924468.155:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.1.212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 154.181541][ T6880] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.187810][ T6880] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 (while UP) [ 154.192668][ T40] audit: type=1326 audit(1768924468.155:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.1.212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 154.609906][ T6905] program syz.0.224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.621588][ T6905] mac80211_hwsim hwsim3 ..ãc¤±: renamed from wlan1 (while UP) [ 156.767340][ T6031] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 156.938219][ T6031] usb 5-1: Using ep0 maxpacket: 16 [ 156.944399][ T6031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 156.950965][ T6031] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.954699][ T6031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.958598][ T6031] usb 5-1: Product: syz [ 156.960401][ T6031] usb 5-1: Manufacturer: syz [ 156.962344][ T6031] usb 5-1: SerialNumber: syz [ 156.968511][ T6031] usb 5-1: config 0 descriptor?? [ 156.973440][ T6031] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.979702][ T6031] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 157.234965][ T7100] program syz.4.310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.580474][ T6031] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 157.955276][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.323'. [ 157.991789][ T6031] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 157.994366][ T6031] em28xx 5-1:0.0: board has no eeprom [ 158.043039][ T7141] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 158.045501][ T7141] netlink: 'syz.3.327': attribute type 2 has an invalid length. [ 158.248247][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 158.272966][ T40] kauditd_printk_skb: 188 callbacks suppressed [ 158.272979][ T40] audit: type=1326 audit(1768924472.265:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 158.281939][ T40] audit: type=1326 audit(1768924472.265:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 158.288669][ T40] audit: type=1326 audit(1768924472.265:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 158.295699][ T7156] program syz.1.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.296051][ T40] audit: type=1326 audit(1768924472.265:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 158.307714][ T40] audit: type=1326 audit(1768924472.265:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 158.314397][ T40] audit: type=1326 audit(1768924472.265:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 158.322990][ T40] audit: type=1326 audit(1768924472.265:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 158.329883][ T40] audit: type=1326 audit(1768924472.265:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 158.336985][ T40] audit: type=1326 audit(1768924472.265:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 158.343873][ T40] audit: type=1326 audit(1768924472.265:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.1.334" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 158.672867][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 159.087965][ T7071] em28xx 5-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 159.147356][ T6031] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 159.151150][ T6031] em28xx 5-1:0.0: dvb set to bulk mode. [ 159.154278][ T6035] em28xx 5-1:0.0: Binding DVB extension [ 159.160252][ T6031] usb 5-1: USB disconnect, device number 3 [ 159.162860][ T6031] em28xx 5-1:0.0: Disconnecting em28xx [ 159.179886][ T6035] em28xx 5-1:0.0: Registering input extension [ 159.183074][ T6031] em28xx 5-1:0.0: Closing input extension [ 159.194369][ T6031] em28xx 5-1:0.0: Freeing device [ 160.763762][ T7378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.435'. [ 161.348754][ T7403] syz.4.443 uses obsolete (PF_INET,SOCK_PACKET) [ 161.368022][ T7403] netlink: 'syz.4.443': attribute type 4 has an invalid length. [ 161.386540][ T7403] netlink: 'syz.4.443': attribute type 4 has an invalid length. [ 161.537612][ T7405] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 161.541075][ T7405] netlink: 'syz.3.445': attribute type 2 has an invalid length. [ 161.703845][ T7413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.450'. [ 162.197241][ T1466] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.378626][ T1466] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.382571][ T1466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.385959][ T1466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 162.410497][ T1466] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.416132][ T1466] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.420106][ T1466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.426000][ T1466] usb 5-1: config 0 descriptor?? [ 162.842330][ T1466] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 162.861301][ T1466] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 163.547305][ T40] kauditd_printk_skb: 240 callbacks suppressed [ 163.547319][ T40] audit: type=1804 audit(1768924477.535:659): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.493" name="/newroot/133/file1" dev="fuse" ino=1 res=1 errno=0 [ 163.652965][ T6028] usb 5-1: USB disconnect, device number 4 [ 163.783157][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'. [ 163.952262][ T40] audit: type=1804 audit(1768924477.945:660): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.502" name="/newroot/142/file1" dev="fuse" ino=1 res=1 errno=0 [ 164.289318][ T6028] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 164.384310][ T7572] netlink: 'syz.4.512': attribute type 2 has an invalid length. [ 164.398066][ T7572] !: entered promiscuous mode [ 164.437242][ T6028] usb 8-1: Using ep0 maxpacket: 16 [ 164.441631][ T6028] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 164.447482][ T6028] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 164.450460][ T6028] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.454900][ T6028] usb 8-1: Product: syz [ 164.456477][ T6028] usb 8-1: Manufacturer: syz [ 164.458986][ T6028] usb 8-1: SerialNumber: syz [ 164.464194][ T6028] usb 8-1: config 0 descriptor?? [ 164.473214][ T6028] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 164.478222][ T6028] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 165.075645][ T6028] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 165.078887][ T40] audit: type=1326 audit(1768924479.075:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.4.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 165.094667][ T40] audit: type=1326 audit(1768924479.075:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.4.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 165.104815][ T40] audit: type=1326 audit(1768924479.075:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.4.521" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 165.117373][ T40] audit: type=1326 audit(1768924479.075:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.4.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 165.126202][ T40] audit: type=1326 audit(1768924479.075:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.4.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 165.135422][ T40] audit: type=1326 audit(1768924479.075:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.4.521" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 165.145246][ T40] audit: type=1326 audit(1768924479.085:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.4.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 165.158496][ T40] audit: type=1326 audit(1768924479.085:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.4.521" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 165.210615][ T7583] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 165.213691][ T7583] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 165.492433][ T6028] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 165.495433][ T6028] em28xx 8-1:0.0: board has no eeprom [ 165.837538][ T6028] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 165.840270][ T6028] em28xx 8-1:0.0: dvb set to bulk mode. [ 165.843386][ T1466] em28xx 8-1:0.0: Binding DVB extension [ 166.767599][ T7541] em28xx 8-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 166.771269][ T6031] usb 8-1: USB disconnect, device number 3 [ 166.773690][ T6031] em28xx 8-1:0.0: Disconnecting em28xx [ 166.789597][ T1466] em28xx 8-1:0.0: Registering input extension [ 166.798449][ T6031] em28xx 8-1:0.0: Closing input extension [ 166.806939][ T6031] em28xx 8-1:0.0: Freeing device [ 167.198524][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 167.817419][ T73] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 167.967505][ T73] usb 9-1: Using ep0 maxpacket: 16 [ 167.972775][ T73] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 167.983723][ T73] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 167.987791][ T73] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.991215][ T73] usb 9-1: Product: syz [ 167.998901][ T73] usb 9-1: Manufacturer: syz [ 168.000953][ T73] usb 9-1: SerialNumber: syz [ 168.008722][ T73] usb 9-1: config 0 descriptor?? [ 168.014786][ T73] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 168.018395][ T73] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 168.620265][ T73] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 169.027741][ T73] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 169.031187][ T73] em28xx 9-1:0.0: board has no eeprom [ 169.367293][ T73] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 169.369975][ T73] em28xx 9-1:0.0: dvb set to bulk mode. [ 169.375337][ T73] em28xx 9-1:0.0: Binding DVB extension [ 169.474656][ T40] kauditd_printk_skb: 88 callbacks suppressed [ 169.474667][ T40] audit: type=1804 audit(1768924483.465:757): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.631" name="/newroot/185/file1" dev="fuse" ino=1 res=1 errno=0 [ 169.563963][ T7850] netlink: 180 bytes leftover after parsing attributes in process `syz.3.636'. [ 169.576944][ T7850] netlink: 180 bytes leftover after parsing attributes in process `syz.3.636'. [ 169.629355][ T7850] netlink: 180 bytes leftover after parsing attributes in process `syz.3.636'. [ 169.665412][ T7856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.367652][ T7758] em28xx 9-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 170.374609][ T6076] usb 9-1: USB disconnect, device number 3 [ 170.380124][ T6076] em28xx 9-1:0.0: Disconnecting em28xx [ 170.395645][ T73] em28xx 9-1:0.0: Registering input extension [ 170.402279][ T6076] em28xx 9-1:0.0: Closing input extension [ 170.413587][ T6076] em28xx 9-1:0.0: Freeing device [ 170.762902][ T40] audit: type=1804 audit(1768924484.755:758): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.644" name="/newroot/146/file1" dev="fuse" ino=1 res=1 errno=0 [ 171.570696][ T40] audit: type=1804 audit(1768924485.565:759): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.653" name="/newroot/144/file1" dev="fuse" ino=1 res=1 errno=0 [ 171.634156][ T7916] netlink: 36 bytes leftover after parsing attributes in process `syz.4.658'. [ 171.757390][ T6035] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 171.845682][ T7927] ipip0: entered promiscuous mode [ 171.878797][ T7927] ipip0: entered allmulticast mode [ 171.953502][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 171.958590][ T6035] usb 6-1: Using ep0 maxpacket: 16 [ 171.965659][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 171.972420][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 171.984173][ T6035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 172.005129][ T6035] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 172.008769][ T6035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.011857][ T6035] usb 6-1: Product: syz [ 172.013611][ T6035] usb 6-1: Manufacturer: syz [ 172.015202][ T6035] usb 6-1: SerialNumber: syz [ 172.020457][ T6035] usb 6-1: config 0 descriptor?? [ 172.029601][ T6035] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 172.033517][ T6035] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 172.315514][ T7932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.634894][ T6035] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 172.761658][ T7947] netlink: 44 bytes leftover after parsing attributes in process `syz.0.668'. [ 172.786831][ T40] audit: type=1804 audit(1768924486.775:760): pid=7940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.665" name="/newroot/149/file1" dev="fuse" ino=1 res=1 errno=0 [ 173.068970][ T6035] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 173.071623][ T6035] em28xx 6-1:0.0: board has no eeprom [ 173.273870][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 173.328254][ T7974] netlink: 36 bytes leftover after parsing attributes in process `syz.0.678'. [ 173.407434][ T6035] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 173.410419][ T6035] em28xx 6-1:0.0: dvb set to bulk mode. [ 173.413012][ T6031] em28xx 6-1:0.0: Binding DVB extension [ 173.762733][ T8001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.929254][ T40] audit: type=1326 audit(1768924487.925:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.3.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 173.938567][ T40] audit: type=1326 audit(1768924487.925:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.3.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 173.948074][ T40] audit: type=1326 audit(1768924487.925:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.3.697" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 173.956947][ T40] audit: type=1326 audit(1768924487.925:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.3.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 173.967134][ T40] audit: type=1326 audit(1768924487.925:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.3.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 173.977956][ T40] audit: type=1326 audit(1768924487.925:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.3.697" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 174.368276][ T7910] em28xx 6-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 174.374644][ T29] usb 6-1: USB disconnect, device number 5 [ 174.379769][ T29] em28xx 6-1:0.0: Disconnecting em28xx [ 174.394452][ T6031] em28xx 6-1:0.0: Registering input extension [ 174.401943][ T29] em28xx 6-1:0.0: Closing input extension [ 174.410971][ T29] em28xx 6-1:0.0: Freeing device [ 174.754373][ T8026] __nla_validate_parse: 2 callbacks suppressed [ 174.754385][ T8026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.699'. [ 175.115406][ T8055] netlink: 'syz.3.711': attribute type 7 has an invalid length. [ 175.184924][ T8057] netlink: 124 bytes leftover after parsing attributes in process `syz.0.707'. [ 175.192084][ T8057] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 175.417472][ T6076] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 175.568043][ T6076] usb 8-1: too many configurations: 33, using maximum allowed: 8 [ 175.583327][ T6076] usb 8-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 175.587500][ T6076] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.590892][ T6076] usb 8-1: Product: syz [ 175.592819][ T6076] usb 8-1: Manufacturer: syz [ 175.594959][ T6076] usb 8-1: SerialNumber: syz [ 175.600239][ T6076] usb 8-1: config 0 descriptor?? [ 175.605669][ T6076] go7007-loader 8-1:0.0: can't handle multiple config [ 175.609214][ T6076] go7007-loader 8-1:0.0: probe failed [ 175.799665][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 175.971321][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 175.971336][ T40] audit: type=1804 audit(1768924489.965:780): pid=8066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.716" name="/newroot/183/file1" dev="fuse" ino=1 res=1 errno=0 [ 175.997693][ T8076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.719'. [ 176.149827][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'. [ 176.217703][ T6009] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 176.377914][ T6009] usb 9-1: Using ep0 maxpacket: 16 [ 176.381171][ T6009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 176.386230][ T6009] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 176.389512][ T6009] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.392410][ T6009] usb 9-1: Product: syz [ 176.393794][ T6009] usb 9-1: Manufacturer: syz [ 176.395388][ T6009] usb 9-1: SerialNumber: syz [ 176.400128][ T6009] usb 9-1: config 0 descriptor?? [ 176.406815][ T6009] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 176.410140][ T6009] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 176.481764][ T8097] netlink: 124 bytes leftover after parsing attributes in process `syz.1.726'. [ 176.485580][ T8097] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 177.011434][ T6009] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 177.075538][ T40] audit: type=1804 audit(1768924491.065:781): pid=8105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.729" name="/newroot/187/file1" dev="fuse" ino=1 res=1 errno=0 [ 177.117262][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 177.123949][ T8108] netlink: 'syz.0.730': attribute type 1 has an invalid length. [ 177.126412][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'. [ 177.163455][ T8110] loop6: detected capacity change from 0 to 2640 [ 177.165989][ T8110] buffer_io_error: 15872 callbacks suppressed [ 177.165998][ T8110] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.170554][ T8110] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.173056][ T8110] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.175511][ T8110] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.178399][ T8110] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.180890][ T8110] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.183365][ T8110] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.185783][ T8110] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.188470][ T8110] ldm_validate_partition_table(): Disk read failed. [ 177.190536][ T8110] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.193038][ T8110] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.195503][ T8110] Dev loop6: unable to read RDB block 0 [ 177.197661][ T8110] loop6: unable to read partition table [ 177.199631][ T8110] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 177.420985][ T6009] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 177.423777][ T6009] em28xx 9-1:0.0: board has no eeprom [ 177.777273][ T6009] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 177.779755][ T6009] em28xx 9-1:0.0: dvb set to bulk mode. [ 177.781512][ T6056] em28xx 9-1:0.0: Binding DVB extension [ 178.077011][ T1466] usb 8-1: USB disconnect, device number 4 [ 178.102188][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 178.414478][ T8149] loop6: detected capacity change from 0 to 2640 [ 178.418743][ T6644] ldm_validate_partition_table(): Disk read failed. [ 178.422859][ T6644] Dev loop6: unable to read RDB block 0 [ 178.426502][ T6644] loop6: unable to read partition table [ 178.432696][ T8149] ldm_validate_partition_table(): Disk read failed. [ 178.435017][ T8149] Dev loop6: unable to read RDB block 0 [ 178.437082][ T8149] loop6: unable to read partition table [ 178.441475][ T8149] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 178.443344][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 178.687812][ T8073] em28xx 9-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 178.692124][ T1466] usb 9-1: USB disconnect, device number 4 [ 178.694590][ T1466] em28xx 9-1:0.0: Disconnecting em28xx [ 178.729078][ T6056] em28xx 9-1:0.0: Registering input extension [ 178.735080][ T1466] em28xx 9-1:0.0: Closing input extension [ 178.743511][ T1466] em28xx 9-1:0.0: Freeing device [ 180.140857][ T8189] netlink: 'syz.3.757': attribute type 2 has an invalid length. [ 180.149011][ T8189] !: entered promiscuous mode [ 180.158354][ T8189] netlink: 'syz.3.757': attribute type 2 has an invalid length. [ 180.567244][ T6076] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 180.727266][ T6076] usb 5-1: Using ep0 maxpacket: 16 [ 180.730186][ T6076] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 180.734863][ T6076] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.739135][ T6076] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.741654][ T6076] usb 5-1: Product: syz [ 180.742980][ T6076] usb 5-1: Manufacturer: syz [ 180.744447][ T6076] usb 5-1: SerialNumber: syz [ 180.755660][ T6076] usb 5-1: config 0 descriptor?? [ 180.759721][ T6076] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 180.762731][ T6076] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 181.363675][ T6076] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 181.779330][ T6076] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 181.782219][ T6076] em28xx 5-1:0.0: board has no eeprom [ 182.117221][ T6076] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 182.120284][ T6076] em28xx 5-1:0.0: dvb set to bulk mode. [ 182.128654][ T73] em28xx 5-1:0.0: Binding DVB extension [ 182.140403][ T8243] netlink: 'syz.4.773': attribute type 2 has an invalid length. [ 182.160203][ T8243] netlink: 'syz.4.773': attribute type 2 has an invalid length. [ 182.349118][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 182.352003][ T8250] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 182.354402][ T8250] netlink: 'syz.3.779': attribute type 2 has an invalid length. [ 182.878318][ T40] audit: type=1326 audit(1768924496.875:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 182.885414][ T40] audit: type=1326 audit(1768924496.875:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 182.893372][ T40] audit: type=1326 audit(1768924496.885:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 182.901869][ T40] audit: type=1326 audit(1768924496.885:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 182.909177][ T40] audit: type=1326 audit(1768924496.885:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 182.916577][ T40] audit: type=1326 audit(1768924496.895:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 182.925059][ T40] audit: type=1326 audit(1768924496.895:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 182.933549][ T40] audit: type=1326 audit(1768924496.895:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 182.940465][ T40] audit: type=1326 audit(1768924496.905:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 182.946885][ T40] audit: type=1326 audit(1768924496.905:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 183.087540][ T8195] em28xx 5-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 183.092575][ T6035] usb 5-1: USB disconnect, device number 5 [ 183.096259][ T6035] em28xx 5-1:0.0: Disconnecting em28xx [ 183.120652][ T73] em28xx 5-1:0.0: Registering input extension [ 183.127612][ T6035] em28xx 5-1:0.0: Closing input extension [ 183.135000][ T6035] em28xx 5-1:0.0: Freeing device [ 183.278670][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'. [ 183.282090][ T8279] netlink: 'syz.3.790': attribute type 1 has an invalid length. [ 183.284576][ T8279] netlink: 'syz.3.790': attribute type 2 has an invalid length. [ 183.733567][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 183.737660][ T8302] netlink: 'syz.0.800': attribute type 1 has an invalid length. [ 183.740980][ T8302] netlink: 'syz.0.800': attribute type 2 has an invalid length. [ 185.583685][ T8362] netlink: 'syz.3.823': attribute type 1 has an invalid length. [ 185.586848][ T8362] netlink: 'syz.3.823': attribute type 2 has an invalid length. [ 185.674374][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 185.859302][ T8381] loop6: detected capacity change from 0 to 2640 [ 185.860637][ T8379] tipc: Enabled bearer , priority 0 [ 185.862115][ T6644] buffer_io_error: 36192 callbacks suppressed [ 185.862124][ T6644] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.864501][ T8379] syzkaller0: entered promiscuous mode [ 185.866133][ T6644] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.870082][ T8379] syzkaller0: entered allmulticast mode [ 185.871028][ T6644] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.877617][ T6644] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.880053][ T6644] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.882567][ T6644] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.884888][ T8379] tipc: Resetting bearer [ 185.885072][ T6644] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.885093][ T6644] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.892968][ T6644] ldm_validate_partition_table(): Disk read failed. [ 185.893145][ T8378] tipc: Resetting bearer [ 185.895074][ T6644] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.899608][ T6644] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.902362][ T6644] Dev loop6: unable to read RDB block 0 [ 185.904229][ T6644] loop6: unable to read partition table [ 185.911674][ T8381] ldm_validate_partition_table(): Disk read failed. [ 185.912867][ T8378] tipc: Disabling bearer [ 185.914049][ T8381] Dev loop6: unable to read RDB block 0 [ 185.918471][ T8381] loop6: unable to read partition table [ 185.920534][ T8381] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 186.186192][ T8403] loop6: detected capacity change from 0 to 2640 [ 186.190470][ T8403] ldm_validate_partition_table(): Disk read failed. [ 186.193507][ T8403] Dev loop6: unable to read RDB block 0 [ 186.195464][ T8403] loop6: unable to read partition table [ 186.198091][ T8403] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 186.716491][ T8418] tipc: Started in network mode [ 186.718230][ T8418] tipc: Node identity 52735380cb8, cluster identity 4711 [ 186.720511][ T8418] tipc: Enabled bearer , priority 0 [ 186.723919][ T8418] syzkaller0: entered promiscuous mode [ 186.725634][ T8418] syzkaller0: entered allmulticast mode [ 186.731725][ T8418] tipc: Resetting bearer [ 186.734804][ T8417] tipc: Resetting bearer [ 186.743563][ T8417] tipc: Disabling bearer [ 187.125320][ T8439] netlink: 'syz.4.855': attribute type 1 has an invalid length. [ 187.128958][ T8439] netlink: 'syz.4.855': attribute type 2 has an invalid length. [ 187.165717][ T8443] tipc: Enabled bearer , priority 0 [ 187.170943][ T8443] syzkaller0: entered promiscuous mode [ 187.172694][ T8443] syzkaller0: entered allmulticast mode [ 187.179428][ T8443] tipc: Resetting bearer [ 187.183930][ T8442] tipc: Resetting bearer [ 187.189942][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'. [ 187.194516][ T8442] tipc: Disabling bearer [ 187.555068][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 187.652097][ T8482] fuse: Bad value for 'fd' [ 187.937287][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 188.107526][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 188.112377][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.119075][ T29] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 188.122041][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.124700][ T29] usb 5-1: Product: syz [ 188.126041][ T29] usb 5-1: Manufacturer: syz [ 188.130449][ T29] usb 5-1: SerialNumber: syz [ 188.134018][ T29] usb 5-1: config 0 descriptor?? [ 188.138848][ T29] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 188.141981][ T29] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 188.278336][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 188.299802][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 188.389014][ T8507] fuse: Bad value for 'fd' [ 188.744079][ T29] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 189.157406][ T29] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 189.160052][ T29] em28xx 5-1:0.0: board has no eeprom [ 189.388664][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 189.507338][ T29] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 189.510771][ T29] em28xx 5-1:0.0: dvb set to bulk mode. [ 189.517102][ T6028] em28xx 5-1:0.0: Binding DVB extension [ 189.637334][ T8486] em28xx 5-1:0.0: write to i2c device at 0xfffe failed with unknown error (status=1) [ 189.688189][ T8543] tipc: Started in network mode [ 189.690251][ T8543] tipc: Node identity aad9419b0a84, cluster identity 4711 [ 189.693445][ T8543] tipc: Enabled bearer , priority 0 [ 189.698559][ T8543] syzkaller0: entered promiscuous mode [ 189.700965][ T8543] syzkaller0: entered allmulticast mode [ 189.729697][ T8543] tipc: Resetting bearer [ 189.777354][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 189.783334][ T8542] tipc: Resetting bearer [ 189.804134][ T8542] tipc: Disabling bearer [ 189.822319][ T1466] usb 5-1: USB disconnect, device number 6 [ 189.830714][ T1466] em28xx 5-1:0.0: Disconnecting em28xx [ 189.846102][ T6028] em28xx 5-1:0.0: Registering input extension [ 189.853682][ T1466] em28xx 5-1:0.0: Closing input extension [ 189.861697][ T1466] em28xx 5-1:0.0: Freeing device [ 189.957326][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 189.961334][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.964707][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 189.969157][ T29] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 189.972835][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.976217][ T29] usb 8-1: Product: syz [ 189.978559][ T29] usb 8-1: Manufacturer: syz [ 189.980461][ T29] usb 8-1: SerialNumber: syz [ 189.985471][ T29] usb 8-1: config 0 descriptor?? [ 190.137676][ T8551] netlink: 'syz.4.899': attribute type 2 has an invalid length. [ 190.204211][ T29] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input15 [ 190.530117][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 190.812530][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 191.627856][ T1466] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 191.787281][ T1466] usb 9-1: Using ep0 maxpacket: 16 [ 191.791103][ T1466] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 191.796054][ T1466] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 191.799271][ T1466] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.801863][ T1466] usb 9-1: Product: syz [ 191.803249][ T1466] usb 9-1: Manufacturer: syz [ 191.805373][ T1466] usb 9-1: SerialNumber: syz [ 191.808642][ T1466] usb 9-1: config 0 descriptor?? [ 191.817318][ T1466] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 191.820290][ T1466] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 192.419583][ T1466] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 192.422543][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 192.425434][ T29] imon:send_packet: packet tx failed (-71) [ 192.447450][ T29] imon 8-1:0.0: panel buttons/knobs setup failed [ 192.497284][ T29] rc_core: IR keymap rc-imon-pad not found [ 192.499181][ T29] Registered IR keymap rc-empty [ 192.500774][ T29] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 192.517632][ T29] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 192.522734][ T29] imon:send_packet: packet tx failed (-71) [ 192.574764][ T8590] tipc: Enabled bearer , priority 0 [ 192.577278][ T29] imon 8-1:0.0: remote input dev register failed [ 192.578486][ T8590] syzkaller0: entered promiscuous mode [ 192.579881][ T29] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 192.581910][ T8590] syzkaller0: entered allmulticast mode [ 192.589012][ T8590] tipc: Resetting bearer [ 192.604370][ T8589] tipc: Resetting bearer [ 192.617405][ T8589] tipc: Disabling bearer [ 192.631798][ T29] imon 8-1:0.0: unable to initialize intf0, err 0 [ 192.635280][ T29] imon:imon_probe: failed to initialize context! [ 192.637559][ T29] imon 8-1:0.0: unable to register, err -19 [ 192.644278][ T29] usb 8-1: USB disconnect, device number 5 [ 192.706352][ T8594] netlink: 'syz.0.912': attribute type 2 has an invalid length. [ 192.713451][ T8594] !: entered promiscuous mode [ 192.749698][ T40] kauditd_printk_skb: 67 callbacks suppressed [ 192.750073][ T40] audit: type=1326 audit(1768924506.745:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.1.915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 192.759383][ T40] audit: type=1326 audit(1768924506.745:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.1.915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 192.766200][ T40] audit: type=1326 audit(1768924506.745:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.1.915" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 192.773448][ T40] audit: type=1326 audit(1768924506.745:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.1.915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 192.780551][ T40] audit: type=1326 audit(1768924506.745:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.1.915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 192.798763][ T40] audit: type=1326 audit(1768924506.755:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.1.915" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 192.808629][ T40] audit: type=1326 audit(1768924506.755:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.1.915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 192.818423][ T40] audit: type=1326 audit(1768924506.755:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.1.915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 192.827059][ T40] audit: type=1326 audit(1768924506.755:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.1.915" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 192.837549][ T40] audit: type=1326 audit(1768924506.755:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.1.915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 192.853922][ T1466] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 192.856486][ T1466] em28xx 9-1:0.0: board has no eeprom [ 193.197227][ T1466] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 193.199917][ T1466] em28xx 9-1:0.0: dvb set to bulk mode. [ 193.201953][ T29] em28xx 9-1:0.0: Binding DVB extension [ 193.300409][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 193.327294][ T8573] em28xx 9-1:0.0: write to i2c device at 0xfffe failed with unknown error (status=1) [ 193.506341][ T8612] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 193.519185][ T6008] usb 9-1: USB disconnect, device number 5 [ 193.521661][ T6008] em28xx 9-1:0.0: Disconnecting em28xx [ 193.543874][ T29] em28xx 9-1:0.0: Registering input extension [ 193.550293][ T6008] em28xx 9-1:0.0: Closing input extension [ 193.561490][ T6008] em28xx 9-1:0.0: Freeing device [ 194.138364][ T8637] netlink: 'syz.3.927': attribute type 2 has an invalid length. [ 194.325045][ T8640] tipc: Enabled bearer , priority 0 [ 194.331017][ T8640] syzkaller0: entered promiscuous mode [ 194.333111][ T8640] syzkaller0: entered allmulticast mode [ 194.346386][ T8640] tipc: Resetting bearer [ 194.352462][ T8639] tipc: Resetting bearer [ 194.364840][ T8639] tipc: Disabling bearer [ 195.019655][ T8663] tipc: Enabled bearer , priority 0 [ 195.023340][ T8663] syzkaller0: entered promiscuous mode [ 195.025628][ T8663] syzkaller0: entered allmulticast mode [ 195.036199][ T8663] tipc: Resetting bearer [ 195.040814][ T8662] tipc: Resetting bearer [ 195.051123][ T8662] tipc: Disabling bearer [ 195.364598][ T8683] netlink: 36 bytes leftover after parsing attributes in process `syz.4.955'. [ 195.496971][ T8687] netlink: 'syz.1.945': attribute type 2 has an invalid length. [ 196.047082][ T8697] tipc: Enabled bearer , priority 0 [ 196.051491][ T8697] syzkaller0: entered promiscuous mode [ 196.053741][ T8697] syzkaller0: entered allmulticast mode [ 196.066720][ T8697] tipc: Resetting bearer [ 196.075316][ T8696] tipc: Resetting bearer [ 196.085152][ T8696] tipc: Disabling bearer [ 196.326330][ T8714] openvswitch: netlink: Flow actions attr not present in new flow. [ 196.411982][ T8721] netlink: 36 bytes leftover after parsing attributes in process `syz.1.963'. [ 196.466545][ T8725] tipc: Enabled bearer , priority 0 [ 196.469658][ T8725] syzkaller0: entered promiscuous mode [ 196.471554][ T8725] syzkaller0: entered allmulticast mode [ 196.477528][ T8725] tipc: Resetting bearer [ 196.481662][ T8724] tipc: Resetting bearer [ 196.494406][ T8724] tipc: Disabling bearer [ 196.649053][ T8733] netlink: 'syz.4.964': attribute type 2 has an invalid length. [ 196.916738][ T8742] openvswitch: netlink: Flow actions attr not present in new flow. [ 197.042536][ T8748] tipc: Enabled bearer , priority 0 [ 197.045396][ T8748] syzkaller0: entered promiscuous mode [ 197.047840][ T8748] syzkaller0: entered allmulticast mode [ 197.058785][ T8747] tipc: Resetting bearer [ 197.071741][ T8747] tipc: Disabling bearer [ 197.263871][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 197.318149][ T8762] openvswitch: netlink: Flow actions attr not present in new flow. [ 197.518833][ T8773] futex_wake_op: syz.4.984 tries to shift op by 32; fix this program [ 197.572129][ T8778] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 197.574746][ T8778] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.584080][ T8778] vhci_hcd vhci_hcd.0: Device attached [ 197.827322][ T29] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 198.170359][ T8779] vhci_hcd: connection reset by peer [ 198.173718][ T13] vhci_hcd vhci_hcd.1: stop threads [ 198.175531][ T13] vhci_hcd vhci_hcd.1: release socket [ 198.178320][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 198.312193][ T8790] netlink: 'syz.0.987': attribute type 2 has an invalid length. [ 198.637591][ T8798] netlink: 'syz.3.988': attribute type 2 has an invalid length. [ 198.657804][ T8797] netlink: 'syz.3.988': attribute type 2 has an invalid length. [ 198.715113][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.990'. [ 199.040034][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.042838][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.211854][ T8812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.994'. [ 199.328314][ T8816] tipc: Enabled bearer , priority 0 [ 199.331097][ T8816] syzkaller0: entered promiscuous mode [ 199.333330][ T8816] syzkaller0: entered allmulticast mode [ 199.336121][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 199.336134][ T40] audit: type=1326 audit(1768924513.325:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.0.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 199.348234][ T40] audit: type=1326 audit(1768924513.345:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.0.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 199.357810][ T40] audit: type=1326 audit(1768924513.355:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.0.995" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 199.367100][ T8815] tipc: Resetting bearer [ 199.367300][ T40] audit: type=1326 audit(1768924513.355:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.0.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 199.379773][ T40] audit: type=1326 audit(1768924513.355:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.0.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 199.389920][ T40] audit: type=1326 audit(1768924513.365:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.0.995" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 199.398946][ T40] audit: type=1326 audit(1768924513.365:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.0.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 199.399862][ T8815] tipc: Disabling bearer [ 199.408307][ T40] audit: type=1326 audit(1768924513.365:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.0.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 199.418894][ T40] audit: type=1326 audit(1768924513.375:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.0.995" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 199.428687][ T40] audit: type=1326 audit(1768924513.375:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.0.995" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 199.967295][ T8837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1004'. [ 200.003361][ T8839] tipc: Enabled bearer , priority 0 [ 200.006487][ T8839] syzkaller0: entered promiscuous mode [ 200.009309][ T8839] syzkaller0: entered allmulticast mode [ 200.021292][ T8838] tipc: Resetting bearer [ 200.032735][ T8838] tipc: Disabling bearer [ 200.512187][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 201.207239][ T6031] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 201.357246][ T6031] usb 8-1: Using ep0 maxpacket: 16 [ 201.360638][ T6031] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 201.365788][ T6031] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 201.369020][ T6031] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.371580][ T6031] usb 8-1: Product: syz [ 201.372998][ T6031] usb 8-1: Manufacturer: syz [ 201.374545][ T6031] usb 8-1: SerialNumber: syz [ 201.385410][ T6031] usb 8-1: config 0 descriptor?? [ 201.396000][ T6031] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 201.469375][ T6031] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 201.654868][ T8920] openvswitch: netlink: Flow key attr not present in new flow. [ 201.702124][ T8924] tipc: Enabled bearer , priority 0 [ 201.704947][ T8924] syzkaller0: entered promiscuous mode [ 201.706587][ T8924] syzkaller0: entered allmulticast mode [ 201.718255][ T8923] tipc: Resetting bearer [ 201.728285][ T8923] tipc: Disabling bearer [ 201.917323][ T6056] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 201.939698][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 201.963285][ T8936] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 201.968645][ T8936] team0 (unregistering): Port device team_slave_0 removed [ 201.976824][ T8936] team0 (unregistering): Failed to send options change via netlink (err -105) [ 201.987250][ T8936] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 201.991504][ T8936] team0 (unregistering): Port device team_slave_1 removed [ 201.998344][ T6031] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 202.067279][ T6056] usb 5-1: Using ep0 maxpacket: 8 [ 202.072602][ T6056] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 202.077092][ T6056] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 202.081099][ T6056] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.084333][ T6056] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.090968][ T6056] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.097307][ T6056] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.170615][ T8949] tipc: Enabled bearer , priority 0 [ 202.176246][ T8949] tipc: Resetting bearer [ 202.184539][ T8948] tipc: Disabling bearer [ 202.310852][ T6056] usb 5-1: GET_CAPABILITIES returned 0 [ 202.313250][ T6056] usbtmc 5-1:16.0: can't read capabilities [ 202.404606][ T6031] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 202.408296][ T6031] em28xx 8-1:0.0: board has no eeprom [ 202.512694][ T6010] usb 5-1: USB disconnect, device number 7 [ 202.693552][ T6031] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 202.697067][ T6031] em28xx 8-1:0.0: dvb set to bulk mode. [ 202.709074][ T6010] em28xx 8-1:0.0: Binding DVB extension [ 202.859305][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 202.917332][ T29] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 203.017299][ T6028] usb 8-1: USB disconnect, device number 6 [ 203.020732][ T6028] em28xx 8-1:0.0: Disconnecting em28xx [ 203.044717][ T6010] em28xx 8-1:0.0: Registering input extension [ 203.046930][ T6028] em28xx 8-1:0.0: Closing input extension [ 203.058137][ T6028] em28xx 8-1:0.0: Freeing device [ 203.219646][ T8982] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1061'. [ 203.230389][ T8981] netlink: 'syz.1.1057': attribute type 4 has an invalid length. [ 203.281968][ T8981] netlink: 'syz.1.1057': attribute type 4 has an invalid length. [ 203.469147][ T8989] fuse: Bad value for 'fd' [ 203.575042][ T8994] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 203.593682][ T8994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.608708][ T8994] bond1: (slave gretap1): making interface the new active one [ 203.611948][ T8994] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 203.791057][ T9009] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 204.107278][ T6076] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 204.277374][ T6076] usb 5-1: Using ep0 maxpacket: 16 [ 204.283334][ T6076] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 204.289816][ T6076] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 204.293224][ T6076] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.296342][ T6076] usb 5-1: Product: syz [ 204.298486][ T6076] usb 5-1: Manufacturer: syz [ 204.300401][ T6076] usb 5-1: SerialNumber: syz [ 204.304548][ T6076] usb 5-1: config 0 descriptor?? [ 204.309780][ T6076] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 204.313704][ T6076] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 204.437942][ T9030] netlink: 'syz.4.1078': attribute type 2 has an invalid length. [ 204.459446][ T9029] netlink: 'syz.4.1078': attribute type 2 has an invalid length. [ 204.919072][ T6076] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 204.983598][ T9040] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 205.205023][ T9052] fuse: Bad value for 'fd' [ 205.332817][ T6076] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 205.335668][ T6076] em28xx 5-1:0.0: board has no eeprom [ 205.617242][ T6076] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 205.619887][ T6076] em28xx 5-1:0.0: dvb set to bulk mode. [ 205.625919][ T6076] em28xx 5-1:0.0: Binding DVB extension [ 205.944868][ T6008] usb 5-1: USB disconnect, device number 8 [ 205.949472][ T6008] em28xx 5-1:0.0: Disconnecting em28xx [ 205.966700][ T6076] em28xx 5-1:0.0: Registering input extension [ 205.969602][ T6008] em28xx 5-1:0.0: Closing input extension [ 205.979432][ T6008] em28xx 5-1:0.0: Freeing device [ 206.987326][ T6009] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 207.102462][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 207.102473][ T40] audit: type=1804 audit(1768924521.095:953): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1113" name="/newroot/253/file1" dev="fuse" ino=1 res=1 errno=0 [ 207.137252][ T6009] usb 9-1: Using ep0 maxpacket: 16 [ 207.140189][ T6009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 207.146427][ T6009] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 207.149755][ T6009] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.152376][ T6009] usb 9-1: Product: syz [ 207.153751][ T6009] usb 9-1: Manufacturer: syz [ 207.155410][ T6009] usb 9-1: SerialNumber: syz [ 207.163476][ T6009] usb 9-1: config 0 descriptor?? [ 207.171395][ T6009] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 207.174376][ T6009] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 207.776697][ T6009] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 208.137313][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 208.185459][ T6009] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 208.188677][ T6009] em28xx 9-1:0.0: board has no eeprom [ 208.287239][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 208.290286][ T29] usb 6-1: config index 0 descriptor too short (expected 1821, got 853) [ 208.294233][ T29] usb 6-1: config 0 has an invalid interface number: 103 but max is 2 [ 208.297657][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.301432][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 208.304533][ T29] usb 6-1: config 0 has no interface number 0 [ 208.307036][ T29] usb 6-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 208.311659][ T29] usb 6-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 208.316117][ T29] usb 6-1: config 0 interface 103 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 208.321515][ T29] usb 6-1: config 0 interface 103 has no altsetting 0 [ 208.326163][ T29] usb 6-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 208.330037][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.333308][ T29] usb 6-1: Product: syz [ 208.335064][ T29] usb 6-1: Manufacturer: syz [ 208.336956][ T29] usb 6-1: SerialNumber: syz [ 208.340361][ T29] usb 6-1: config 0 descriptor?? [ 208.467297][ T6009] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 208.470234][ T6009] em28xx 9-1:0.0: dvb set to bulk mode. [ 208.472196][ T6056] em28xx 9-1:0.0: Binding DVB extension [ 208.556293][ T9151] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.732515][ T29] usb 6-1: USB disconnect, device number 6 [ 208.760484][ T9159] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 208.801080][ T6009] usb 9-1: USB disconnect, device number 6 [ 208.803645][ T6009] em28xx 9-1:0.0: Disconnecting em28xx [ 208.825269][ T6056] em28xx 9-1:0.0: Registering input extension [ 208.828588][ T6009] em28xx 9-1:0.0: Closing input extension [ 208.840209][ T6009] em28xx 9-1:0.0: Freeing device [ 209.360824][ T9183] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 209.641740][ T9202] loop8: detected capacity change from 0 to 8 [ 209.647367][ T6644] Dev loop8: unable to read RDB block 8 [ 209.649402][ T6644] loop8: unable to read partition table [ 209.651613][ T6644] loop8: partition table beyond EOD, truncated [ 209.657504][ T9202] Dev loop8: unable to read RDB block 8 [ 209.659660][ T9202] loop8: unable to read partition table [ 209.662004][ T9202] loop8: partition table beyond EOD, truncated [ 209.664068][ T9202] loop_reread_partitions: partition scan of loop8 (þ被xü^6Ñ9%ƒä ) failed (rc=-5) [ 209.757366][ T6031] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 209.918471][ T6031] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.921243][ T6031] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.924558][ T6031] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.927648][ T6031] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.933363][ T6031] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.936915][ T6031] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.941015][ T6031] usb 8-1: Product: syz [ 209.942544][ T6031] usb 8-1: Manufacturer: syz [ 209.949490][ T6031] cdc_wdm 8-1:1.0: skipping garbage [ 209.951790][ T6031] cdc_wdm 8-1:1.0: skipping garbage [ 209.955897][ T6031] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 209.958100][ T6035] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 209.960512][ T6031] cdc_wdm 8-1:1.0: Unknown control protocol [ 210.107261][ T6035] usb 5-1: Using ep0 maxpacket: 16 [ 210.110916][ T6035] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 210.115311][ T6035] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 210.118199][ T6035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.120733][ T6035] usb 5-1: Product: syz [ 210.122068][ T6035] usb 5-1: Manufacturer: syz [ 210.123546][ T6035] usb 5-1: SerialNumber: syz [ 210.127701][ T6035] usb 5-1: config 0 descriptor?? [ 210.131376][ T6035] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 210.134803][ T6035] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 210.295690][ T9211] PM: Enabling pm_trace changes system date and time during resume. [ 210.295690][ T9211] PM: Correct system time has to be restored manually after resume. [ 210.301669][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1145'. [ 210.305261][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1145'. [ 210.380527][ T40] audit: type=1326 audit(1768924524.375:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1146" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 210.387678][ T40] audit: type=1326 audit(1768924524.385:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1146" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 210.395288][ T40] audit: type=1326 audit(1768924524.385:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1146" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 210.403997][ T40] audit: type=1326 audit(1768924524.385:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1146" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 210.411748][ T40] audit: type=1326 audit(1768924524.395:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1146" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 210.418660][ T40] audit: type=1326 audit(1768924524.395:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1146" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 210.425401][ T40] audit: type=1326 audit(1768924524.395:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1146" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 210.432126][ T40] audit: type=1326 audit(1768924524.395:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1146" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 210.438853][ T40] audit: type=1326 audit(1768924524.405:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1146" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 210.660987][ T6031] usb 8-1: USB disconnect, device number 7 [ 210.733928][ T6035] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 210.752245][ T9227] fuse: Bad value for 'fd' [ 210.857290][ T6009] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 211.008946][ T6009] usb 6-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 211.013754][ T6009] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 211.018445][ T6009] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 211.023119][ T6009] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 5853, setting to 64 [ 211.027841][ T6009] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.031712][ T6009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.039187][ T9224] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 211.042386][ T9224] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 211.049298][ T6009] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.053184][ T6009] usb 6-1: invalid MIDI in EP 0 [ 211.091004][ T6663] udevd[6663]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.108480][ T6009] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 211.148229][ T6035] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 211.150870][ T6035] em28xx 5-1:0.0: board has no eeprom [ 211.217313][ T9205] em28xx 5-1:0.0: write to i2c device at 0xfffe failed with unknown error (status=1) [ 211.252270][ T6008] usb 6-1: USB disconnect, device number 7 [ 211.652769][ T9256] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1162'. [ 211.667295][ T6035] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 211.670548][ T6035] em28xx 5-1:0.0: dvb set to bulk mode. [ 211.674377][ T6031] em28xx 5-1:0.0: Binding DVB extension [ 211.676934][ T6035] usb 5-1: USB disconnect, device number 9 [ 211.682191][ T6035] em28xx 5-1:0.0: Disconnecting em28xx [ 211.683181][ T9257] delete_channel: no stack [ 211.696086][ T6031] em28xx 5-1:0.0: Registering input extension [ 211.698405][ T6035] em28xx 5-1:0.0: Closing input extension [ 211.703577][ T6035] em28xx 5-1:0.0: Freeing device [ 211.983112][ T9275] fuse: Bad value for 'fd' [ 212.687368][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 212.777262][ T53] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 212.851922][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.854999][ T29] usb 8-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 212.857939][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.863363][ T29] usb 8-1: config 0 descriptor?? [ 212.937306][ T53] usb 9-1: Using ep0 maxpacket: 16 [ 212.940484][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 212.945330][ T53] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 212.948468][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.951039][ T53] usb 9-1: Product: syz [ 212.952445][ T53] usb 9-1: Manufacturer: syz [ 212.953933][ T53] usb 9-1: SerialNumber: syz [ 212.959244][ T53] usb 9-1: config 0 descriptor?? [ 212.964074][ T53] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 212.967394][ T53] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 213.280688][ T29] cypress 0003:04B4:DE61.0003: unknown main item tag 0x0 [ 213.282931][ T29] cypress 0003:04B4:DE61.0003: unknown main item tag 0x0 [ 213.285122][ T29] cypress 0003:04B4:DE61.0003: unknown main item tag 0x0 [ 213.288475][ T29] cypress 0003:04B4:DE61.0003: unknown main item tag 0x0 [ 213.290746][ T29] cypress 0003:04B4:DE61.0003: unknown main item tag 0x0 [ 213.292965][ T29] cypress 0003:04B4:DE61.0003: unknown main item tag 0x0 [ 213.295197][ T29] cypress 0003:04B4:DE61.0003: item fetching failed at offset 6/7 [ 213.298077][ T29] cypress 0003:04B4:DE61.0003: parse failed [ 213.300051][ T29] cypress 0003:04B4:DE61.0003: probe with driver cypress failed with error -22 [ 213.408834][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 213.408845][ T40] audit: type=1326 audit(1768924527.405:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 213.417780][ T40] audit: type=1326 audit(1768924527.405:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 213.426041][ T40] audit: type=1326 audit(1768924527.405:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 213.434777][ T40] audit: type=1326 audit(1768924527.405:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 213.442052][ T40] audit: type=1326 audit(1768924527.405:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 213.449693][ T40] audit: type=1326 audit(1768924527.405:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 213.457610][ T40] audit: type=1326 audit(1768924527.405:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 213.464723][ T40] audit: type=1326 audit(1768924527.405:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 213.472625][ T40] audit: type=1326 audit(1768924527.405:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 213.479079][ T40] audit: type=1326 audit(1768924527.405:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.0.1190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 213.480623][ T6028] usb 8-1: USB disconnect, device number 8 [ 213.566847][ T53] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 213.789131][ T9332] fuse: root generation should be zero [ 213.973769][ T53] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 213.976384][ T53] em28xx 9-1:0.0: board has no eeprom [ 214.077324][ T6008] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 214.237282][ T53] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 214.237364][ T6008] usb 6-1: Using ep0 maxpacket: 8 [ 214.239976][ T53] em28xx 9-1:0.0: dvb set to bulk mode. [ 214.243213][ T6008] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 214.243838][ T6028] em28xx 9-1:0.0: Binding DVB extension [ 214.246749][ T6008] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.249908][ T53] usb 9-1: USB disconnect, device number 7 [ 214.252527][ T6008] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.255072][ T53] em28xx 9-1:0.0: Disconnecting em28xx [ 214.258041][ T6008] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.263139][ T6008] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.268023][ T6008] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 214.271378][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.275016][ T6028] em28xx 9-1:0.0: Registering input extension [ 214.277909][ T53] em28xx 9-1:0.0: Closing input extension [ 214.290432][ T53] em28xx 9-1:0.0: Freeing device [ 214.484153][ T6008] usb 6-1: GET_CAPABILITIES returned 0 [ 214.485763][ T6008] usbtmc 6-1:16.0: can't read capabilities [ 214.792191][ T9336] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 214.792313][ T6010] usb 6-1: USB disconnect, device number 8 [ 215.077346][ T6008] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 215.167461][ T6035] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 215.238859][ T6008] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.241925][ T6008] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 215.247054][ T6008] usb 5-1: config 0 interface 0 has no altsetting 0 [ 215.249606][ T6008] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 215.252555][ T6008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.258299][ T6008] usb 5-1: config 0 descriptor?? [ 215.319164][ T6035] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.323358][ T6035] usb 9-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 215.327722][ T6035] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.332889][ T6035] usb 9-1: config 0 descriptor?? [ 215.333124][ T9371] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 215.355770][ T9370] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 215.762180][ T6035] cypress 0003:04B4:DE61.0005: unknown main item tag 0x0 [ 215.764505][ T6035] cypress 0003:04B4:DE61.0005: unknown main item tag 0x0 [ 215.767366][ T6035] cypress 0003:04B4:DE61.0005: unknown main item tag 0x0 [ 215.770094][ T6035] cypress 0003:04B4:DE61.0005: unknown main item tag 0x0 [ 215.772286][ T6035] cypress 0003:04B4:DE61.0005: item fetching failed at offset 6/7 [ 215.774882][ T6035] cypress 0003:04B4:DE61.0005: parse failed [ 215.776688][ T6035] cypress 0003:04B4:DE61.0005: probe with driver cypress failed with error -22 [ 215.963168][ T73] usb 9-1: USB disconnect, device number 8 [ 216.067298][ T6076] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 216.078521][ T6008] hid-led 0003:0FC5:B080.0004: probe with driver hid-led failed with error -71 [ 216.083266][ T6008] usb 5-1: USB disconnect, device number 10 [ 216.126875][ T9387] tipc: Enabled bearer , priority 0 [ 216.132224][ T9387] tipc: Resetting bearer [ 216.141210][ T9386] tipc: Disabling bearer [ 216.217362][ T6076] usb 6-1: Using ep0 maxpacket: 16 [ 216.221140][ T6076] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 216.228026][ T6076] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 216.231852][ T6076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.235134][ T6076] usb 6-1: Product: syz [ 216.237048][ T6076] usb 6-1: Manufacturer: syz [ 216.239409][ T6076] usb 6-1: SerialNumber: syz [ 216.244000][ T6076] usb 6-1: config 0 descriptor?? [ 216.249125][ T6076] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 216.252728][ T6076] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 216.865700][ T6076] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 217.153645][ T9396] syz.3.1214 (9396): drop_caches: 2 [ 217.292504][ T6076] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 217.295239][ T6076] em28xx 6-1:0.0: board has no eeprom [ 217.313933][ T9411] tipc: Enabled bearer , priority 0 [ 217.319893][ T9411] tipc: Resetting bearer [ 217.329523][ T9410] tipc: Disabling bearer [ 217.567528][ T6076] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 217.570101][ T6076] em28xx 6-1:0.0: dvb set to bulk mode. [ 217.571953][ T6008] em28xx 6-1:0.0: Binding DVB extension [ 217.586571][ T6076] usb 6-1: USB disconnect, device number 9 [ 217.598162][ T6076] em28xx 6-1:0.0: Disconnecting em28xx [ 217.606332][ T6008] em28xx 6-1:0.0: Registering input extension [ 217.612219][ T6076] em28xx 6-1:0.0: Closing input extension [ 217.620028][ T6076] em28xx 6-1:0.0: Freeing device [ 217.627942][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1224'. [ 217.807544][ T9433] tipc: Enabled bearer , priority 0 [ 217.813421][ T9433] tipc: Resetting bearer [ 217.822525][ T9432] tipc: Disabling bearer [ 218.046854][ T9447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1234'. [ 218.050380][ T9445] syz.4.1230 (9445): drop_caches: 2 [ 218.261186][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 218.265116][ T9463] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1241'. [ 218.268440][ T9463] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1241'. [ 218.537308][ T6031] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 218.687239][ T6031] usb 8-1: Using ep0 maxpacket: 16 [ 218.690267][ T6031] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 218.694947][ T6031] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 218.697822][ T6031] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.700342][ T6031] usb 8-1: Product: syz [ 218.701684][ T6031] usb 8-1: Manufacturer: syz [ 218.703192][ T6031] usb 8-1: SerialNumber: syz [ 218.706485][ T6031] usb 8-1: config 0 descriptor?? [ 218.711788][ T6031] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 218.715163][ T6031] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 218.891293][ T9471] fuse: Bad value for 'fd' [ 219.077261][ T53] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 219.227282][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 219.230816][ T53] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 219.238517][ T53] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.241676][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.245033][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.249562][ T53] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.254039][ T53] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.257323][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.317245][ T6031] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 219.468168][ T53] usb 9-1: GET_CAPABILITIES returned 0 [ 219.470105][ T53] usbtmc 9-1:16.0: can't read capabilities [ 219.526425][ T9492] syz.1.1252 (9492): drop_caches: 2 [ 219.774066][ T9469] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 219.774669][ T53] usb 9-1: USB disconnect, device number 9 [ 219.776217][ T9493] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -19 [ 219.787329][ T9465] em28xx 8-1:0.0: write to i2c device at 0xfffe failed with unknown error (status=1) [ 220.176010][ T6031] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 220.183337][ T6031] em28xx 8-1:0.0: board has no eeprom [ 220.250307][ T6031] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 220.252880][ T6031] em28xx 8-1:0.0: dvb set to bulk mode. [ 220.267842][ T6035] em28xx 8-1:0.0: Binding DVB extension [ 220.277818][ T6031] usb 8-1: USB disconnect, device number 9 [ 220.280218][ T6031] em28xx 8-1:0.0: Disconnecting em28xx [ 220.308868][ T6035] em28xx 8-1:0.0: Registering input extension [ 220.311759][ T6031] em28xx 8-1:0.0: Closing input extension [ 220.320340][ T6031] em28xx 8-1:0.0: Freeing device [ 220.370171][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 220.370190][ T40] audit: type=1326 audit(1768924534.365:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9500 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 220.383394][ T40] audit: type=1326 audit(1768924534.365:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9500 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 220.391904][ T40] audit: type=1326 audit(1768924534.365:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9500 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 220.399429][ T40] audit: type=1326 audit(1768924534.365:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9500 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 220.408535][ T40] audit: type=1326 audit(1768924534.365:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9500 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 220.417443][ T40] audit: type=1326 audit(1768924534.365:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9500 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 220.426245][ T40] audit: type=1326 audit(1768924534.365:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9500 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 220.435224][ T40] audit: type=1326 audit(1768924534.365:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9500 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 220.444315][ T40] audit: type=1326 audit(1768924534.365:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9500 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 220.453502][ T40] audit: type=1326 audit(1768924534.365:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9500 comm="syz.1.1254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 220.533595][ T9504] fuse: Bad value for 'fd' [ 220.763508][ T9514] fuse: Bad value for 'group_id' [ 220.765303][ T9514] fuse: Bad value for 'group_id' [ 220.926411][ T9520] tipc: Enabled bearer , priority 0 [ 220.935426][ T9520] tipc: Resetting bearer [ 220.946395][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 220.953032][ T9521] netlink: 'syz.3.1260': attribute type 10 has an invalid length. [ 221.036133][ T9519] tipc: Disabling bearer [ 221.045366][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.049600][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.060628][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.063743][ T9521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.068079][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.071102][ T9521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.118398][ T9521] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 221.127235][ T9524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1262'. [ 221.210788][ T9528] fuse: Bad value for 'fd' [ 221.518261][ T9538] fuse: Bad value for 'group_id' [ 221.520051][ T9538] fuse: Bad value for 'group_id' [ 221.608066][ T9544] tipc: Enabling of bearer rejected, failed to enable media [ 221.667284][ T6076] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 221.817262][ T6076] usb 6-1: Using ep0 maxpacket: 16 [ 221.821183][ T6076] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 221.827119][ T6076] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 221.831099][ T6076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.834436][ T6076] usb 6-1: Product: syz [ 221.835934][ T6076] usb 6-1: Manufacturer: syz [ 221.838088][ T6076] usb 6-1: SerialNumber: syz [ 221.842124][ T6076] usb 6-1: config 0 descriptor?? [ 221.850215][ T6076] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 221.853792][ T6076] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 222.450151][ T6076] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 222.471500][ T9570] fuse: Bad value for 'group_id' [ 222.473423][ T9570] fuse: Bad value for 'group_id' [ 222.700842][ T9581] tipc: Enabling of bearer rejected, failed to enable media [ 222.957355][ T6031] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 223.066387][ T9597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1285'. [ 223.086602][ T6076] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 223.094491][ T6076] em28xx 6-1:0.0: board has no eeprom [ 223.119182][ T6031] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 223.123841][ T6031] usb 5-1: config 0 has no interface number 0 [ 223.137872][ T6031] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.145240][ T6031] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 223.149312][ T6031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.152765][ T6031] usb 5-1: Product: syz [ 223.154629][ T6031] usb 5-1: Manufacturer: syz [ 223.156566][ T6031] usb 5-1: SerialNumber: syz [ 223.157472][ T6076] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 223.161051][ T6076] em28xx 6-1:0.0: dvb set to bulk mode. [ 223.161160][ T6031] usb 5-1: config 0 descriptor?? [ 223.163306][ T73] em28xx 6-1:0.0: Binding DVB extension [ 223.172164][ T6076] usb 6-1: USB disconnect, device number 10 [ 223.183045][ T6031] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 223.196205][ T73] em28xx 6-1:0.0: Registering input extension [ 223.202165][ T6076] em28xx 6-1:0.0: Disconnecting em28xx [ 223.205051][ T6076] em28xx 6-1:0.0: Closing input extension [ 223.232247][ T6076] em28xx 6-1:0.0: Freeing device [ 223.603643][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'. [ 223.672690][ T9613] tipc: Enabling of bearer rejected, failed to enable media [ 223.943396][ T9628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1294'. [ 224.362065][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 224.386272][ T9644] veth3: entered promiscuous mode [ 225.516770][ T9687] netlink: 'syz.3.1311': attribute type 2 has an invalid length. [ 225.520535][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 225.520552][ T40] audit: type=1804 audit(1768924539.515:1124): pid=9685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1321" name="/newroot/352/file1" dev="fuse" ino=1 res=1 errno=0 [ 225.535636][ T9687] netlink: 'syz.3.1311': attribute type 2 has an invalid length. [ 225.617574][ T6056] usb 5-1: USB disconnect, device number 11 [ 225.626840][ T6056] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 225.700975][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 225.720171][ T9692] veth3: entered promiscuous mode [ 226.242487][ T9703] tipc: Enabling of bearer rejected, failed to enable media [ 226.290473][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'. [ 226.480348][ T40] audit: type=1804 audit(1768924540.475:1125): pid=9719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1323" name="/newroot/323/file1" dev="fuse" ino=1 res=1 errno=0 [ 226.594407][ T40] audit: type=1326 audit(1768924540.585:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.3.1325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 226.601483][ T40] audit: type=1326 audit(1768924540.595:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.3.1325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 226.608459][ T6076] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 226.611698][ T40] audit: type=1326 audit(1768924540.595:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.3.1325" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 226.621022][ T40] audit: type=1326 audit(1768924540.595:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.3.1325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 226.637288][ T40] audit: type=1326 audit(1768924540.595:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.3.1325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 226.657416][ T40] audit: type=1326 audit(1768924540.595:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.3.1325" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 226.665078][ T40] audit: type=1326 audit(1768924540.595:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.3.1325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 226.672102][ T40] audit: type=1326 audit(1768924540.595:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.3.1325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 226.761888][ T9736] netlink: 'syz.0.1328': attribute type 2 has an invalid length. [ 226.765811][ T9736] netlink: 'syz.0.1328': attribute type 2 has an invalid length. [ 226.767288][ T6076] usb 9-1: Using ep0 maxpacket: 32 [ 226.772321][ T6076] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.774894][ T6076] usb 9-1: config 0 has no interface number 0 [ 226.781874][ T6076] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 226.784714][ T6076] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.789737][ T6076] usb 9-1: Product: syz [ 226.792399][ T6076] usb 9-1: Manufacturer: syz [ 226.795275][ T6076] usb 9-1: SerialNumber: syz [ 226.799407][ T6076] usb 9-1: config 0 descriptor?? [ 226.805574][ T6076] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 226.810748][ T6076] usb 9-1: selecting invalid altsetting 1 [ 226.813701][ T6076] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 226.819344][ T6076] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 226.825402][ T6076] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 226.831232][ T6076] usb 9-1: media controller created [ 226.844397][ T6076] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.005129][ T6076] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 227.008532][ T6076] zl10353_read_register: readreg error (reg=127, ret==-71) [ 227.013738][ T6076] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 227.038947][ T6076] usb 9-1: USB disconnect, device number 10 [ 227.535886][ T9745] tipc: Enabling of bearer rejected, failed to enable media [ 227.657252][ T9754] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1331'. [ 227.879266][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'. [ 227.882995][ T9770] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1336'. [ 228.767379][ T9785] netlink: 'syz.0.1338': attribute type 2 has an invalid length. [ 228.771717][ T9785] netlink: 'syz.0.1338': attribute type 2 has an invalid length. [ 228.808841][ T9787] fuse: Bad value for 'fd' [ 229.684453][ T9818] tipc: Enabling of bearer rejected, failed to enable media [ 230.117330][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 230.229934][ T9836] netlink: 'syz.1.1358': attribute type 2 has an invalid length. [ 230.234633][ T9836] netlink: 'syz.1.1358': attribute type 2 has an invalid length. [ 230.299107][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 230.309726][ T29] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 230.313345][ T29] usb 5-1: config 179 has no interface number 0 [ 230.316140][ T29] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 230.321166][ T29] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 230.325143][ T29] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 230.329226][ T29] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 230.333568][ T29] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 230.338427][ T29] usb 5-1: config 179 interface 65 has no altsetting 0 [ 230.341259][ T29] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 230.344867][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.373885][ T29] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input26 [ 230.417663][ T5337] input input26: unable to receive magic message: -110 [ 230.442129][ T5337] input input26: unable to receive magic message: -32 [ 230.456955][ T5337] input input26: unable to receive magic message: -32 [ 230.462966][ T5337] input input26: unable to receive magic message: -32 [ 230.477319][ T5337] input input26: unable to receive magic message: -32 [ 230.568873][ T9829] input input26: unable to receive magic message: -32 [ 230.584532][ T6031] usb 5-1: USB disconnect, device number 12 [ 230.584536][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 230.668583][ T9846] fuse: Unknown parameter 'grou00000000000000000000' [ 230.727611][ T9850] tipc: Enabling of bearer rejected, failed to enable media [ 231.123821][ T9878] fuse: Bad value for 'fd' [ 231.132901][ T9877] fuse: Unknown parameter 'grou00000000000000000000' [ 231.182620][ T9882] tipc: Enabling of bearer rejected, failed to enable media [ 231.442524][ T9897] netlink: 'syz.1.1375': attribute type 2 has an invalid length. [ 231.446406][ T9897] netlink: 'syz.1.1375': attribute type 2 has an invalid length. [ 231.719633][ T9901] fuse: Bad value for 'fd' [ 231.878440][ T9911] fuse: Unknown parameter 'grou00000000000000000000' [ 231.882114][ T9907] fuse: Bad value for 'fd' [ 231.914748][ T9914] tipc: Enabling of bearer rejected, failed to enable media [ 232.095638][ T9932] fuse: Bad value for 'fd' [ 232.164819][ T9938] netlink: 'syz.1.1391': attribute type 10 has an invalid length. [ 232.192958][ T9940] syzkaller0: entered promiscuous mode [ 232.194877][ T9940] syzkaller0: entered allmulticast mode [ 232.263029][ T9943] fuse: Unknown parameter 'group_i00000000000000000000' [ 232.350061][ T9946] fuse: Bad value for 'fd' [ 232.504076][ T9957] fuse: Bad value for 'fd' [ 232.646958][ T9967] fuse: Unknown parameter 'group_i00000000000000000000' [ 232.698586][ T9969] netlink: 'syz.0.1400': attribute type 2 has an invalid length. [ 232.704676][ T9969] netlink: 'syz.0.1400': attribute type 2 has an invalid length. [ 233.022806][ T9989] fuse: Unknown parameter 'group_i00000000000000000000' [ 233.429086][ T9999] vlan2: entered promiscuous mode [ 233.430778][ T9999] bridge0: entered promiscuous mode [ 233.446518][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 233.894878][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 233.894890][ T40] audit: type=1326 audit(1768924547.885:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9992 comm="syz.4.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7fc00000 [ 233.916786][ T40] audit: type=1326 audit(1768924547.885:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9992 comm="syz.4.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d579 code=0x7fc00000 [ 233.930160][ T40] audit: type=1326 audit(1768924547.885:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9992 comm="syz.4.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7fc00000 [ 233.936994][ T40] audit: type=1326 audit(1768924547.885:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9992 comm="syz.4.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7fc00000 [ 233.944504][ T40] audit: type=1326 audit(1768924547.885:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9992 comm="syz.4.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7fc00000 [ 234.042587][T10033] netlink: 'syz.1.1423': attribute type 2 has an invalid length. [ 234.056139][T10033] netlink: 'syz.1.1423': attribute type 2 has an invalid length. [ 235.897367][ T6035] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 236.057305][ T6035] usb 6-1: Using ep0 maxpacket: 16 [ 236.060788][ T6035] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.064684][ T6035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.070247][ T6035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 236.077350][ T6035] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 236.080597][ T6035] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.089343][ T6035] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 236.092274][ T6035] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 236.094813][ T6035] usb 6-1: Manufacturer: syz [ 236.105575][ T6035] usb 6-1: config 0 descriptor?? [ 236.277939][T10072] tipc: Enabled bearer , priority 0 [ 236.289191][T10072] tipc: Resetting bearer [ 236.302173][T10071] tipc: Disabling bearer [ 236.368133][ T6035] rc_core: IR keymap rc-hauppauge not found [ 236.370740][ T6035] Registered IR keymap rc-empty [ 236.373174][ T6035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.397328][ T6035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.421800][ T6035] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 236.426811][ T6035] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input28 [ 236.433069][ T6035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.447428][ T6035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.468239][ T6035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.491635][ T6035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.507520][ T6035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.525407][T10065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.530763][T10065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.533980][ T6035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.547568][ T6035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.567666][ T6035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.587429][ T6035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.595591][T10091] fuse: Unknown parameter 'group_id00000000000000000000' [ 236.607393][ T6035] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.612245][T10090] netlink: 'syz.4.1443': attribute type 2 has an invalid length. [ 236.619433][T10090] netlink: 'syz.4.1443': attribute type 2 has an invalid length. [ 236.629244][ T6035] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 236.632341][ T6035] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 236.809434][T10065] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.812909][T10065] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.919314][ T6035] usb 6-1: USB disconnect, device number 11 [ 237.416348][T10102] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1447'. [ 237.457473][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1449'. [ 237.717252][ T6076] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 237.874591][ T6076] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.877898][ T6076] usb 9-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 237.883212][ T6076] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.889899][ T6076] usb 9-1: config 0 descriptor?? [ 237.956123][ T40] audit: type=1326 audit(1768924551.945:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10107 comm="syz.1.1452" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x0 [ 238.301930][ T6076] hid_parser_main: 2 callbacks suppressed [ 238.301943][ T6076] cypress 0003:04B4:DE61.0006: unknown main item tag 0x0 [ 238.307680][ T6076] cypress 0003:04B4:DE61.0006: unknown main item tag 0x0 [ 238.310637][ T6076] cypress 0003:04B4:DE61.0006: unknown main item tag 0x0 [ 238.313817][ T6076] cypress 0003:04B4:DE61.0006: unknown main item tag 0x0 [ 238.317002][ T6076] cypress 0003:04B4:DE61.0006: unknown main item tag 0x0 [ 238.320245][ T6076] cypress 0003:04B4:DE61.0006: unknown main item tag 0x0 [ 238.323349][ T6076] cypress 0003:04B4:DE61.0006: item fetching failed at offset 6/7 [ 238.327464][ T6076] cypress 0003:04B4:DE61.0006: parse failed [ 238.330101][ T6076] cypress 0003:04B4:DE61.0006: probe with driver cypress failed with error -22 [ 238.377814][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'. [ 238.512626][ T6076] usb 9-1: USB disconnect, device number 11 [ 238.530310][T10132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1460'. [ 238.598980][T10132] Set syz1 is full, maxelem 2 reached [ 238.609912][ T40] audit: type=1326 audit(1768924552.605:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10133 comm="syz.1.1461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 238.618669][ T40] audit: type=1326 audit(1768924552.605:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10133 comm="syz.1.1461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 238.629918][ T40] audit: type=1326 audit(1768924552.605:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10133 comm="syz.1.1461" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 238.637635][ T40] audit: type=1326 audit(1768924552.615:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10133 comm="syz.1.1461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 239.127718][T10151] netlink: 'syz.1.1464': attribute type 12 has an invalid length. [ 239.387430][T10160] netlink: 'syz.4.1468': attribute type 2 has an invalid length. [ 239.391827][T10160] netlink: 'syz.4.1468': attribute type 2 has an invalid length. [ 239.682308][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 239.682321][ T40] audit: type=1326 audit(1768924553.675:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.1.1471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 239.691574][ T40] audit: type=1326 audit(1768924553.675:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.1.1471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 239.699008][ T40] audit: type=1326 audit(1768924553.675:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.1.1471" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 239.705548][ T40] audit: type=1326 audit(1768924553.685:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.1.1471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 239.713833][ T40] audit: type=1326 audit(1768924553.685:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.1.1471" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 239.720515][ T40] audit: type=1326 audit(1768924553.685:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.1.1471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 239.727029][ T40] audit: type=1326 audit(1768924553.685:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.1.1471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 239.734324][ T40] audit: type=1326 audit(1768924553.685:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.1.1471" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 239.741027][ T40] audit: type=1326 audit(1768924553.685:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.1.1471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 239.747944][ T40] audit: type=1326 audit(1768924553.685:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.1.1471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 239.755275][T10175] syzkaller0: entered promiscuous mode [ 240.203063][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1487'. [ 240.392524][T10217] fuse: Bad value for 'user_id' [ 240.394911][T10217] fuse: Bad value for 'user_id' [ 241.432911][T10240] SET target dimension over the limit! [ 241.479443][T10243] fuse: Bad value for 'fd' [ 241.708119][T10250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1502'. [ 242.284965][T10270] fuse: Bad value for 'fd' [ 242.316099][T10271] fuse: Bad value for 'fd' [ 242.340680][T10271] ipip0: entered promiscuous mode [ 242.342373][T10271] ipip0: entered allmulticast mode [ 242.352071][T10273] syzkaller0: entered promiscuous mode [ 242.353952][T10273] syzkaller0: entered allmulticast mode [ 242.361021][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'. [ 242.370823][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'. [ 242.374612][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'. [ 243.185730][T10287] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.395175][T10303] syzkaller0: entered promiscuous mode [ 243.398125][T10303] syzkaller0: entered allmulticast mode [ 243.551547][T10309] fuse: Bad value for 'group_id' [ 243.553367][T10309] fuse: Bad value for 'group_id' [ 243.808974][T10333] syzkaller0: entered promiscuous mode [ 243.810793][T10333] syzkaller0: entered allmulticast mode [ 244.044218][T10335] could not allocate digest TFM handle cryptd(blake2b-160) [ 244.217272][ T6076] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 244.378856][ T6076] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.381744][ T6076] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 244.385401][ T6076] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 244.388601][ T6076] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 244.392054][ T6076] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 244.396864][ T6076] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 244.399941][ T6076] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 244.402454][ T6076] usb 9-1: Product: syz [ 244.403748][ T6076] usb 9-1: Manufacturer: syz [ 244.408256][ T6076] cdc_wdm 9-1:1.0: skipping garbage [ 244.410211][ T6076] cdc_wdm 9-1:1.0: skipping garbage [ 244.412844][ T6076] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 244.414832][ T6076] cdc_wdm 9-1:1.0: Unknown control protocol [ 244.546316][T10347] fuse: Bad value for 'group_id' [ 244.548395][T10347] fuse: Bad value for 'group_id' [ 244.662630][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 244.662696][ T6076] usb 9-1: USB disconnect, device number 12 [ 244.664860][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 244.668871][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 244.676546][T10353] fuse: Bad value for 'fd' [ 244.823595][ T40] kauditd_printk_skb: 82 callbacks suppressed [ 244.823611][ T40] audit: type=1326 audit(1768924558.815:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.3.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 244.835865][ T40] audit: type=1326 audit(1768924558.825:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.3.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 244.844992][ T40] audit: type=1326 audit(1768924558.825:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.3.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 244.851881][T10367] netlink: 'syz.0.1543': attribute type 4 has an invalid length. [ 244.863808][ T40] audit: type=1326 audit(1768924558.825:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.3.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 244.872762][ T40] audit: type=1326 audit(1768924558.825:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.3.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 244.874236][T10367] netlink: 'syz.0.1543': attribute type 4 has an invalid length. [ 244.888196][ T40] audit: type=1326 audit(1768924558.835:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.3.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 244.896446][ T40] audit: type=1326 audit(1768924558.835:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.3.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 244.911439][ T40] audit: type=1326 audit(1768924558.835:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.3.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 244.922482][ T40] audit: type=1326 audit(1768924558.835:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.3.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 244.935854][ T40] audit: type=1326 audit(1768924558.835:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.3.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 245.495487][T10375] syzkaller0: entered promiscuous mode [ 245.497735][T10375] syzkaller0: entered allmulticast mode [ 245.701684][T10379] fuse: Bad value for 'fd' [ 245.737731][T10388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1554'. [ 245.802802][T10394] syzkaller0: entered promiscuous mode [ 245.805284][T10394] syzkaller0: entered allmulticast mode [ 246.167324][ T6076] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 246.339381][ T6076] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.343605][ T6076] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 246.346434][ T6076] usb 8-1: New USB device found, idVendor=0cf3, idProduct=0475, bcdDevice=1a.00 [ 246.349644][ T6076] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.354622][ T6076] usb 8-1: config 0 descriptor?? [ 246.466882][T10406] netlink: 'syz.1.1561': attribute type 4 has an invalid length. [ 246.475406][T10406] netlink: 'syz.1.1561': attribute type 4 has an invalid length. [ 246.559586][T10383] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3394018074 (6788036148 ns) > initial count (6222627426 ns). Using initial count to start timer. [ 246.565858][ T6076] usb 8-1: USB disconnect, device number 10 [ 246.894084][T10424] fuse: Bad value for 'group_id' [ 246.895856][T10424] fuse: Bad value for 'group_id' [ 247.477722][T10462] fuse: Bad value for 'fd' [ 247.733881][T10490] fuse: Bad value for 'fd' [ 247.863791][T10498] fuse: Invalid rootmode [ 248.354780][T10522] fuse: Bad value for 'fd' [ 248.870446][T10535] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1613'. [ 249.243378][T10553] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 249.675066][T10582] fuse: Bad value for 'rootmode' [ 249.909419][T10591] netlink: 'syz.0.1632': attribute type 2 has an invalid length. [ 249.933272][T10590] netlink: 'syz.0.1632': attribute type 2 has an invalid length. [ 249.947241][ T6028] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 250.098988][ T6028] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 250.101595][ T6028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.106524][ T6028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.111031][ T6028] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.116509][ T6028] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.120962][ T6028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.126727][ T6028] usb 9-1: config 0 descriptor?? [ 250.284586][T10593] sctp: [Deprecated]: syz.1.1634 (pid 10593) Use of int in max_burst socket option. [ 250.284586][T10593] Use struct sctp_assoc_value instead [ 250.336412][T10595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1635'. [ 250.553828][ T6028] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 250.556649][ T6028] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 250.562823][ T6028] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 250.566101][ T6028] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 250.569532][ T6028] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 250.571958][ T6028] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 250.574470][ T6028] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 250.585273][ T6028] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 250.598433][ T6028] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 250.602420][ T6028] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 250.602995][T10601] syzkaller0: entered promiscuous mode [ 250.611972][T10601] syzkaller0: entered allmulticast mode [ 250.628533][ T6028] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 250.808255][ T6035] usb 9-1: USB disconnect, device number 13 [ 250.837499][ T6076] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 251.000580][ T6076] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 251.004786][ T6076] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.010270][ T6076] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 251.013949][ T6076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.031372][ T6076] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 251.077048][ T6076] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 251.236822][T10598] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 251.304532][T10626] netlink: 'syz.0.1646': attribute type 2 has an invalid length. [ 251.310329][T10626] netlink: 'syz.0.1646': attribute type 2 has an invalid length. [ 251.443060][T10630] syzkaller0: entered promiscuous mode [ 251.445403][T10630] syzkaller0: entered allmulticast mode [ 251.616023][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 251.616039][ T40] audit: type=1326 audit(1768924565.605:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.4.1649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 251.626172][ T40] audit: type=1326 audit(1768924565.605:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.4.1649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 251.634064][ T40] audit: type=1326 audit(1768924565.605:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.4.1649" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 251.640916][ T40] audit: type=1326 audit(1768924565.625:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.4.1649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 251.647810][ T40] audit: type=1326 audit(1768924565.625:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.4.1649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 251.654651][ T40] audit: type=1326 audit(1768924565.635:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.4.1649" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 251.661389][ T40] audit: type=1326 audit(1768924565.635:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.4.1649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 251.668207][ T40] audit: type=1326 audit(1768924565.635:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.4.1649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 251.674877][ T40] audit: type=1326 audit(1768924565.635:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.4.1649" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 251.681718][ T40] audit: type=1326 audit(1768924565.635:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.4.1649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 252.240124][T10643] fuse: Unknown parameter 'grou00000000000000000000' [ 252.481821][T10651] fuse: Unknown parameter 'user_i00000000000000000000' [ 253.500198][ T29] usb 6-1: USB disconnect, device number 12 [ 253.502850][T10599] delete_channel: no stack [ 253.615367][T10691] fuse: Unknown parameter 'user_i00000000000000000000' [ 253.673000][T10694] fuse: Unknown parameter 'group_i00000000000000000000' [ 253.717298][ T6056] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 253.812299][T10702] netlink: 'syz.0.1674': attribute type 2 has an invalid length. [ 253.867230][ T6056] usb 9-1: Using ep0 maxpacket: 16 [ 253.874837][ T6056] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 253.878957][ T6056] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.882168][ T6056] usb 9-1: Product: syz [ 253.883512][ T6056] usb 9-1: Manufacturer: syz [ 253.893157][ T6056] usb 9-1: SerialNumber: syz [ 253.893285][T10695] netlink: 'syz.0.1674': attribute type 2 has an invalid length. [ 253.907408][ T6056] usb 9-1: config 0 descriptor?? [ 254.137356][T10716] fuse: Unknown parameter 'user_id00000000000000000000' [ 254.318820][ T6056] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 254.323449][ T6056] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.326917][ T6056] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 254.329498][ T6056] usb 9-1: media controller created [ 254.336693][ T6056] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.410456][T10728] raw_sendmsg: syz.1.1688 forgot to set AF_INET. Fix it! [ 254.415219][T10728] netlink: 'syz.1.1688': attribute type 10 has an invalid length. [ 254.522291][ T6056] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 254.530575][ T6056] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 254.718466][T10741] fuse: Unknown parameter 'user_id00000000000000000000' [ 254.857414][T10749] fuse: Unknown parameter 'group_id00000000000000000000' [ 255.147233][ T6028] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 255.317279][ T6028] usb 8-1: Using ep0 maxpacket: 16 [ 255.323401][ T6028] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 255.329352][ T6028] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 255.332581][ T6028] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.335495][ T6028] usb 8-1: Product: syz [ 255.336907][ T6028] usb 8-1: Manufacturer: syz [ 255.361195][ T6028] usb 8-1: SerialNumber: syz [ 255.364716][ T6028] usb 8-1: config 0 descriptor?? [ 255.368955][T10758] netlink: 'syz.1.1699': attribute type 2 has an invalid length. [ 255.371203][ T6028] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 255.373002][T10758] netlink: 'syz.1.1699': attribute type 2 has an invalid length. [ 255.374756][ T6028] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 255.569302][T10762] fuse: Unknown parameter 'group_id00000000000000000000' [ 255.752318][T10766] fuse: Unknown parameter 'user_id00000000000000000000' [ 255.813642][T10768] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.971531][ T6028] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 256.121447][T10776] syzkaller0: entered promiscuous mode [ 256.123306][T10776] syzkaller0: entered allmulticast mode [ 256.388001][T10751] ------------[ cut here ]------------ [ 256.390199][T10751] usb 9-1: BOGUS control dir, pipe 80000e80 doesn't match bRequestType c0 [ 256.392993][T10751] WARNING: drivers/usb/core/urb.c:412 at usb_submit_urb+0x153e/0x1970, CPU#1: syz.3.1697/10751 [ 256.396416][T10751] Modules linked in: [ 256.398097][T10751] CPU: 1 UID: 0 PID: 10751 Comm: syz.3.1697 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.401684][T10751] Tainted: [L]=SOFTLOCKUP [ 256.403180][T10751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 256.406607][T10751] RIP: 0010:usb_submit_urb+0x1549/0x1970 [ 256.408596][T10751] Code: 30 48 89 7c 24 38 e8 26 1d aa fa 48 8b 7c 24 38 e8 dc 7f d0 fe 48 89 c6 48 8d 3d 92 a0 80 09 48 8b 54 24 30 45 89 e8 44 89 f9 <67> 48 0f b9 3a e9 fd ed ff ff 48 89 7c 24 30 e8 f3 1c aa fa 48 8b [ 256.414888][T10751] RSP: 0018:ffffc900079b7950 EFLAGS: 00010283 [ 256.416913][T10751] RAX: ffffffff8c5456a0 RBX: ffff8880267acf00 RCX: 0000000080000e80 [ 256.420616][T10751] RDX: ffff888073778240 RSI: ffffffff8c5456a0 RDI: ffffffff9094e540 [ 256.423241][T10751] RBP: ffff888025a8a058 R08: 00000000000000c0 R09: 0000000000000000 [ 256.426043][T10751] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88806c210780 [ 256.428758][T10751] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080000e80 [ 256.432042][T10751] FS: 0000000000000000(0000) GS:ffff8880977f8000(0063) knlGS:00000000f5496b40 [ 256.435855][T10751] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 256.438753][T10751] CR2: 00000000800bd01c CR3: 000000001364a000 CR4: 0000000000352ef0 [ 256.442177][T10751] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 256.445596][T10751] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 256.449337][T10751] Call Trace: [ 256.450914][T10751] [ 256.452299][T10751] ? __init_swait_queue_head+0xca/0x150 [ 256.454754][T10751] usb_start_wait_urb+0x104/0x4e0 [ 256.457116][T10751] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 256.460301][T10751] ? __asan_memset+0x23/0x50 [ 256.462496][T10751] usb_control_msg+0x326/0x4a0 [ 256.464820][T10751] ? __pfx_usb_control_msg+0x10/0x10 [ 256.467252][T10751] dtv5100_i2c_msg+0x1fa/0x360 [ 256.469482][T10751] dtv5100_i2c_xfer+0x1e0/0x420 [ 256.471862][T10751] __i2c_transfer+0x6b6/0x2100 [ 256.473985][T10751] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.476363][T10751] ? __pfx___i2c_transfer+0x10/0x10 [ 256.478976][T10751] ? rt_mutex_slowtrylock+0xc9/0x100 [ 256.481136][T10751] i2c_transfer+0x1da/0x380 [ 256.482943][T10751] i2cdev_ioctl_rdwr+0x373/0x710 [ 256.484916][T10751] compat_i2cdev_ioctl+0x464/0x530 [ 256.486948][T10751] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 256.489316][T10751] ? __fget_files+0x20e/0x3c0 [ 256.491075][T10751] ? __ia32_compat_sys_openat+0x150/0x210 [ 256.492971][T10751] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 256.494982][T10751] __ia32_compat_sys_ioctl+0x242/0x370 [ 256.497046][T10751] __do_fast_syscall_32+0xe8/0x680 [ 256.499113][T10751] do_fast_syscall_32+0x32/0x80 [ 256.500844][T10751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.502931][T10751] RIP: 0023:0xf7fa3579 [ 256.504299][T10751] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 256.510991][T10751] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 256.513928][T10751] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 256.516478][T10751] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.519241][T10751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.522163][T10751] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 256.524724][T10751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.527676][T10751] [ 256.528704][T10751] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 256.531220][T10751] CPU: 1 UID: 0 PID: 10751 Comm: syz.3.1697 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.534781][T10751] Tainted: [L]=SOFTLOCKUP [ 256.536199][T10751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.539625][T10751] Call Trace: [ 256.540757][T10751] [ 256.541750][T10751] dump_stack_lvl+0x3d/0x1f0 [ 256.543420][T10751] vpanic+0x640/0x6f0 [ 256.544795][T10751] ? usb_submit_urb+0x153e/0x1970 [ 256.546449][T10751] panic+0xca/0xd0 [ 256.547697][T10751] ? __pfx_panic+0x10/0x10 [ 256.549168][T10751] check_panic_on_warn+0xab/0xb0 [ 256.550832][T10751] __warn+0x108/0x3c0 [ 256.552152][T10751] __report_bug+0x2a0/0x520 [ 256.553635][T10751] ? usb_submit_urb+0x153e/0x1970 [ 256.555469][T10751] ? __pfx___report_bug+0x10/0x10 [ 256.557127][T10751] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.558836][T10751] ? kasan_save_stack+0x42/0x60 [ 256.560461][T10751] ? kasan_save_stack+0x33/0x60 [ 256.562409][T10751] report_bug_entry+0xe1/0x290 [ 256.564138][T10751] ? usb_submit_urb+0x1549/0x1970 [ 256.565810][T10751] handle_bug+0x18a/0x260 [ 256.567256][T10751] exc_invalid_op+0x17/0x50 [ 256.568768][T10751] asm_exc_invalid_op+0x1a/0x20 [ 256.570431][T10751] RIP: 0010:usb_submit_urb+0x1549/0x1970 [ 256.572353][T10751] Code: 30 48 89 7c 24 38 e8 26 1d aa fa 48 8b 7c 24 38 e8 dc 7f d0 fe 48 89 c6 48 8d 3d 92 a0 80 09 48 8b 54 24 30 45 89 e8 44 89 f9 <67> 48 0f b9 3a e9 fd ed ff ff 48 89 7c 24 30 e8 f3 1c aa fa 48 8b [ 256.579484][T10751] RSP: 0018:ffffc900079b7950 EFLAGS: 00010283 [ 256.581715][T10751] RAX: ffffffff8c5456a0 RBX: ffff8880267acf00 RCX: 0000000080000e80 [ 256.584687][T10751] RDX: ffff888073778240 RSI: ffffffff8c5456a0 RDI: ffffffff9094e540 [ 256.587243][T10751] RBP: ffff888025a8a058 R08: 00000000000000c0 R09: 0000000000000000 [ 256.589951][T10751] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88806c210780 [ 256.592575][T10751] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080000e80 [ 256.595193][T10751] ? __init_swait_queue_head+0xca/0x150 [ 256.597007][T10751] usb_start_wait_urb+0x104/0x4e0 [ 256.598805][T10751] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 256.600736][T10751] ? __asan_memset+0x23/0x50 [ 256.602297][T10751] usb_control_msg+0x326/0x4a0 [ 256.604012][T10751] ? __pfx_usb_control_msg+0x10/0x10 [ 256.605735][T10751] dtv5100_i2c_msg+0x1fa/0x360 [ 256.607332][T10751] dtv5100_i2c_xfer+0x1e0/0x420 [ 256.608950][T10751] __i2c_transfer+0x6b6/0x2100 [ 256.610570][T10751] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.612281][T10751] ? __pfx___i2c_transfer+0x10/0x10 [ 256.613942][T10751] ? rt_mutex_slowtrylock+0xc9/0x100 [ 256.615644][T10751] i2c_transfer+0x1da/0x380 [ 256.617237][T10751] i2cdev_ioctl_rdwr+0x373/0x710 [ 256.618867][T10751] compat_i2cdev_ioctl+0x464/0x530 [ 256.620599][T10751] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 256.622375][T10751] ? __fget_files+0x20e/0x3c0 [ 256.623834][T10751] ? __ia32_compat_sys_openat+0x150/0x210 [ 256.625611][T10751] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 256.627342][T10751] __ia32_compat_sys_ioctl+0x242/0x370 [ 256.629159][T10751] __do_fast_syscall_32+0xe8/0x680 [ 256.630865][T10751] do_fast_syscall_32+0x32/0x80 [ 256.632426][T10751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.634445][T10751] RIP: 0023:0xf7fa3579 [ 256.635763][T10751] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 256.641811][T10751] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 256.644415][T10751] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 256.647087][T10751] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.649792][T10751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.652378][T10751] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 256.654936][T10751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.657467][T10751] [ 256.659209][T10751] Kernel Offset: disabled [ 256.660629][T10751] Rebooting in 86400 seconds..