last executing test programs: 25m50.743633248s ago: executing program 32 (id=364): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 25m15.990451185s ago: executing program 33 (id=435): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10) write(r2, &(0x7f00000000c0)="510003000000", 0x6) r3 = socket$kcm(0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000001c0)="020000000980ffff", 0x8) 24m28.678102055s ago: executing program 34 (id=509): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'team_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r7, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xf73, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002400)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r8, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rt_sigprocmask(0x0, 0x0, 0x0, 0x0) utimensat(r9, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 20m28.179915446s ago: executing program 35 (id=1070): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) utimes(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") 18m57.710651569s ago: executing program 36 (id=1292): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") socket$netlink(0x10, 0x3, 0x0) statfs(&(0x7f0000000180)='./file1\x00', &(0x7f00000004c0)=""/214) 13m33.463598869s ago: executing program 37 (id=2086): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', 0x0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8004, 0x0, 0xb49, 0x200000000001, 0x6, 0x8, 0x3}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0xe00, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) close_range(r2, r3, 0x200000000000000) 13m19.535360659s ago: executing program 38 (id=2113): socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="0200000001000200000000000200", @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES32=0x0, @ANYBLOB="10000500000000002000000000000000"], 0x34, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mq_open(0x0, 0x42, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x2c020400) r2 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r2, 0x8ba, 0x696d, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 7m45.34215099s ago: executing program 39 (id=2915): socket$can_j1939(0x1d, 0x2, 0x7) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x1, 0x3}, 0x18, 0x0) open(0x0, 0x141080, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r0, 0x5) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffdfe}) 6m41.542133501s ago: executing program 40 (id=3028): r0 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x1}, 0x0, 0x0, 0x8, 0xffff, 0xa8, 0x4, 0x1d, 0x100000000}}], 0x58, 0x20048050}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x2000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xff29, &(0x7f00000001c0)=ANY=[]) 6m18.948248781s ago: executing program 41 (id=3148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) accept4$inet6(r0, 0x0, 0x0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 5m36.072361417s ago: executing program 9 (id=3420): ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5m35.014160373s ago: executing program 9 (id=3421): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() tkill(r2, 0x100) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, 0x0, &(0x7f0000000280)) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x7) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000080)=0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=@newlink={0x3c, 0x10, 0x300, 0x70bd2b, 0x506, {0x0, 0x0, 0x0, 0x0, 0x24f2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5m32.206446094s ago: executing program 1 (id=3434): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f00000008c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5m30.015607395s ago: executing program 42 (id=3440): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 5m30.009447924s ago: executing program 9 (id=3442): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x40000000000000, 0x0, 0x8000, 0x6, 0x200000000, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) 5m28.404329721s ago: executing program 9 (id=3449): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 5m28.112334614s ago: executing program 1 (id=3452): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000017c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x8084) recvmsg$can_j1939(r1, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x60) 5m27.794212333s ago: executing program 1 (id=3454): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() tkill(r2, 0x100) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, 0x0, &(0x7f0000000280)) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x7) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000080)=0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=@newlink={0x3c, 0x10, 0x300, 0x70bd2b, 0x506, {0x0, 0x0, 0x0, 0x0, 0x24f2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5m27.753850018s ago: executing program 9 (id=3456): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$unix(0x1, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x880) socket$alg(0x26, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 5m26.18476651s ago: executing program 9 (id=3461): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x4, 0x1, 0x1, "580015654102844914c2672abe34969575c676f21376d5fb9b4e53640322d05f", 0x3136564e}) 5m25.642694291s ago: executing program 43 (id=3461): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x4, 0x1, 0x1, "580015654102844914c2672abe34969575c676f21376d5fb9b4e53640322d05f", 0x3136564e}) 5m25.564004218s ago: executing program 1 (id=3467): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 5m25.189115236s ago: executing program 1 (id=3468): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 5m23.985989777s ago: executing program 2 (id=3471): writev(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 5m23.857837923s ago: executing program 1 (id=3472): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000010dc0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="28703adbdb70", 'gretap0\x00'}}, 0x1e) 5m23.85766116s ago: executing program 0 (id=3473): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 5m23.601456651s ago: executing program 44 (id=3472): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000010dc0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="28703adbdb70", 'gretap0\x00'}}, 0x1e) 5m23.596995682s ago: executing program 0 (id=3475): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) poll(&(0x7f00000000c0)=[{r0, 0x3388}], 0x1, 0x800) 5m23.595944866s ago: executing program 2 (id=3476): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, 0x0, 0x0) 5m23.533249725s ago: executing program 2 (id=3477): r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x84, @multicast2, 0x4e23, 0x1, 'nq\x00', 0xc, 0x800, 0x68}, 0x2c) 5m23.394294878s ago: executing program 2 (id=3478): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 5m23.230230757s ago: executing program 2 (id=3479): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0xb5) pwritev2(r0, 0x0, 0x0, 0x1400, 0x0, 0x0) 5m22.742196104s ago: executing program 2 (id=3482): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 5m22.399675125s ago: executing program 45 (id=3482): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 5m20.890540688s ago: executing program 0 (id=3487): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000000101040000000000000000020000001c001880080001400000000008000240000000000800"], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 5m20.811041974s ago: executing program 0 (id=3488): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 5m20.511731912s ago: executing program 0 (id=3489): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f00000008c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5m18.930406757s ago: executing program 0 (id=3491): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) getcwd(&(0x7f0000000000)=""/110, 0x6e) 5m17.915770705s ago: executing program 46 (id=3491): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) getcwd(&(0x7f0000000000)=""/110, 0x6e) 23.291698387s ago: executing program 7 (id=4857): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 22.218081807s ago: executing program 7 (id=4862): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 21.546608254s ago: executing program 7 (id=4865): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000240)={0x40, 0x8}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1c00, 0x80}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0xd}, &(0x7f0000000480)={0x40, 0xb, 0x2, 'E\''}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="6f46e0ad6753"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @random="7d84fb2e4fa2"}, &(0x7f0000000580)={0x40, 0x19, 0x2, "498f"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x9}, 0x0, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 18.311386398s ago: executing program 7 (id=4883): clock_getres(0xd6c79f3ee28bc1b, 0x0) pipe(&(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) socket$kcm(0x10, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$sndmidi(0x0, 0x80000001, 0x439143) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000140)={&(0x7f0000329000/0x4000)=nil}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close(r0) 13.246203972s ago: executing program 7 (id=4899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) 12.829030571s ago: executing program 7 (id=4901): r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000200)={&(0x7f0000001000)={[{0x0, 0x80000, 0x1}]}, 0x1}, 0x1) 5.909690425s ago: executing program 6 (id=4929): syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) mount(0x0, 0x0, 0x0, 0x1001, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x181000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 5.470319929s ago: executing program 6 (id=4931): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) 5.096718669s ago: executing program 5 (id=4934): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4) 4.923427848s ago: executing program 4 (id=4937): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0xf6}, {0x20, 0x0, 0x2, 0xfffff034}, {0x6, 0xfc, 0x0, 0xd}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 4.842303198s ago: executing program 5 (id=4938): syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.607890195s ago: executing program 6 (id=4939): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "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"}, 0x418, 0x6}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.440021059s ago: executing program 6 (id=4941): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40}, 0x0, 0x0, 0x0, 0x0}) 3.95361537s ago: executing program 4 (id=4943): openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "f58ce70fab0d3eaa30fc"}}, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 3.06259804s ago: executing program 5 (id=4944): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x44) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="632a1eb3f0c0d7e1f3e8d83e8279b7e98f2a563510c1fcfd07c0d1e58d723f809bb0322337f15e8d329d0926517a3148030a1d29dd671ac729d9cef6e520827a2201ccd77c7dc703e9116d512859f12dceb0dad478a2369aba7403b262e45c11c1290b59d473d3beb8d3a31bc7f5dcd1a708ed0be6f4770112b98b16c93db109594b2a4b04efb89f5ef215ff6d9d93fb8edbcf8d1c62b39759c68e1a184914791d5462c363b80e38ea6cd8556c46c6252445e967b63edceb1040badab4eef2ef162c734cb8052dabd2bfedbdfd0b22bdc6b9dc0fca9b566b32c4dc85d26161877f60652000000031ae091ccaa53c0faf409dee0d109e684a93bc32e715052d24d7349df7bdaa7aea658d7b0a53376ca1c71ad1a878ceacf5ce8a8c64ace50f4d18f1027b9efc61a4b4a61e4b323fad5c47e4341c1292d0d1", 0x138}, {&(0x7f0000000580)="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", 0x20c}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000280)=@usbdevfs_driver={0x0, 0x4, 0x0}) sendto$inet6(r0, &(0x7f0000000500)="0cd139220fca0b", 0x7, 0x4c081, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @mcast2, 0x9}, 0x1c) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcf, 0x69, 0x54, 0x10, 0x403, 0xf850, 0x17b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x17, 0x0, 0x0, 0x5, 0x7d, 0x44}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.553844782s ago: executing program 3 (id=4946): bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.386071616s ago: executing program 3 (id=4947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20], 0x20}}, 0x0) 2.014584073s ago: executing program 3 (id=4949): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) syz_open_dev$tty20(0xc, 0x4, 0x0) 1.85535139s ago: executing program 3 (id=4950): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1010}, 0x4) 1.839282496s ago: executing program 8 (id=4951): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[], 0x0) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r1}, &(0x7f0000000500)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40080382}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x609}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.660587366s ago: executing program 4 (id=4952): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, 0x0) 1.594298345s ago: executing program 3 (id=4953): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "4145fdc5fec7663a106cef95c8d86f03d655b82e62dc5204ff06732791d90936bf31f7b4eafad3ed43e8da42de6780edce2e2f941399c9b9002a6a538fc1ebd3e994ce6fa4a67c775c476cdbedebbe34904cbe0d5808cf5892aa1e563f949f38cd2ebaa2c46464183ead798b1af0ba7ad5db77736a5329e7297e674242854f87ef03b0fba724523033529e64be44188740b9e9a0ba6944e9724c4aaa8470ab8d35a1746a1da4dfa2112cb5135d97efae0975e7fa5e421fe7ec12a8bbd7714076b63ddaca822d7c0383ccc4e21b11c8a0443850c05f4bb6716b6ba83016b709b44a9959c44daa717ed76b43f7c235fae47730ff2d435ed29d062451ab74bd9f65d9bf96e1afc645ca2249c89146fc815210d465ca0ede0acbfe1165b15d222ed668b79b14f901178d35e7421637588c887b0f2335ea84a442fc95bbcf0ea3b308ee18d913901cb8f40dd2798e781c4b1c620c23565b5bc18e25c206f772c863c8a8864f460c239033717d41f94fbf13b1d0c7271364bd6d144160e1df33fcb33e5d45a5e7ea4264d089397d7e022c6e1f37a2e464c01b4df6a906d3a46d9432ba1966d73aa0627491e3b3c33bee03ff2138896b64862910f24dbacc3c686e0059ff5915c8b69bce3c4022c5c80d574274d1107c9935898ae444a6c38dbd8319e778e1a86a293094bd98d0ae3ae2c32a4bcb20e0517c03e7b46839f4e3601ff98244ca5485cacbfe53c935cf14038bba908af19834a86b56cf68a7170448a434b55d66c080ea095b02ba4c3f8ba492c9e50111bf1b3085cc0f3938a58609a337e89eba9271ee071a8b9f3ab4ad0fc3c92a48cb6bc63ed74877d8425c88eb40d18c6260d2221dc295d1fa1557cfcfe1cb3a1d61b4b1235e28903ae5a4d3d358f6d3e2c87b110e38aab0fd1ca2c047b3ea826d8cd9b980b3fc64fbf38d0d3fed0057b30612880a3d93aa3e16e1c1902cc8c206d7732f426fbb063b020a03d08e3bcd4ff32c30c8ea424ea0c746e72c23e8d53576cc801bdf82f8bba865074e5dde3177820c24be87b9bd36e30a81d1d50b5aa0628262d46d19060ae37a33aa8e515fed3f8bfdf65ba5f8e11e4d517a50ce03f82bc5b3c8e9b3eb6572f1a686430170ce64bc1a61246fd99b2d8a3215104478eead271fcca07bc66e637d5543ad47147f5ad50cc5a203a37b7d2f67bb0387ae189ee7d5cfc0a421b0f0e6286aaf28a3eadfad1b8c83a26ac0a1d4a3846d93e161c82be100278d94e35fc7b5f1feb833f1b975adb33bec5d777cfbdb2c5fe171e205fd6596b37ba646b9ecb163fabcd89a469f6ad539a80937748105298b0a6364d75c6de3cbcbb96c440d5489f3f47149551e7f53d3a22d837cfb59c3e43f0c95760791ed36ff84ae82a679e4e062461bda5db7c27fb00c3238266734bc7c16d45ce7cd3f0b7e63c309877816048f24"}, 0x418, 0x6}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.542468999s ago: executing program 5 (id=4954): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents(r2, &(0x7f0000000100)=""/155, 0x9b) rename(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.476232459s ago: executing program 4 (id=4955): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0xf6}, {0x20, 0x0, 0x2, 0xfffff034}, {0x6, 0xfc, 0x0, 0xd}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 1.317659954s ago: executing program 6 (id=4956): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c636f686572656e63793d66756c6c2c6865617274626561743d6e6f6e652c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f757365725f78617474722c008e1d54758732e066b2e39f7bd9e6e2dab460"], 0x1, 0x4460, &(0x7f000000db00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fstat(r0, &(0x7f0000000300)) 1.293941467s ago: executing program 3 (id=4957): r0 = open(&(0x7f0000000040)='./file0\x00', 0x141080, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000300), 0x40000000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000004e00)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) getuid() getgid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000006240)={'\x00', 0x400, 0x683, 0x463, 0x7, 0x9}) newfstatat(0xffffffffffffff9c, &(0x7f00000062c0)='./file0\x00', &(0x7f0000006300), 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4]) fcntl$getownex(r2, 0x10, &(0x7f0000006380)) getuid() fstat(r0, &(0x7f00000063c0)) gettid() getuid() 962.859588ms ago: executing program 5 (id=4958): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005fd0a00020005", 0x1d}], 0x1}, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000300000009021b00010100000509e4ffba02070101010905"], 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f0000000000"], 0x78) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 861.93474ms ago: executing program 8 (id=4959): bpf$MAP_CREATE(0x0, 0x0, 0x0) 682.227965ms ago: executing program 8 (id=4960): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB], 0xe) 567.017385ms ago: executing program 8 (id=4961): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='X\x00\x00\x00', 0x4}], 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}}) 377.705724ms ago: executing program 4 (id=4962): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006210200010000001ffe02000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 276.841291ms ago: executing program 8 (id=4963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0xfa8, 0x0, @wg=@data={0x4, 0x82, 0x8, "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"}}}}, 0xfce) 174.161509ms ago: executing program 5 (id=4964): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000280)={[{@uid_ignore}, {@uid_forget}, {}, {@uid}, {@rootdir={'rootdir', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@dmode={'dmode', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@unhide}, {@uid_ignore}]}, 0x1, 0xc43, &(0x7f00000010c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 173.937524ms ago: executing program 4 (id=4965): openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "f58ce70fab0d3eaa30fc"}}, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 20.768515ms ago: executing program 6 (id=4966): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x8, "09df168a0000"}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 0s ago: executing program 8 (id=4967): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$tipc2(0x0, r6) kernel console output (not intermixed with test programs): or too short [ 1622.916041][T15090] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.929044][T13081] usb 9-1: Using ep0 maxpacket: 16 [ 1622.953786][T15090] usb 6-1: string descriptor 0 read error: -22 [ 1622.969740][T15090] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1622.972812][T13081] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1623.017638][T13081] usb 9-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1623.121470][T13081] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1623.143329][T13081] usb 9-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1623.159028][T13081] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.167020][T13081] usb 9-1: Product: syz [ 1623.171599][T13081] usb 9-1: Manufacturer: syz [ 1623.176776][T13081] usb 9-1: SerialNumber: syz [ 1623.183653][T15090] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.346699][T21182] fuse: Unknown parameter 'user_i00000000000000000000' [ 1623.384703][T15090] usb 6-1: reset high-speed USB device number 65 using dummy_hcd [ 1623.449350][T21168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.492853][T13081] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input46 [ 1623.529305][T21168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.575308][ T5213] bcm5974 9-1:1.0: could not read from device [ 1623.632683][ T5213] bcm5974 9-1:1.0: could not read from device [ 1623.669248][ T5213] bcm5974 9-1:1.0: could not read from device [ 1623.692016][T13081] usb 9-1: USB disconnect, device number 47 [ 1623.952700][T11198] usb 7-1: USB disconnect, device number 56 [ 1623.997724][T11198] mcba_usb 7-1:0.0 can0: device disconnected [ 1624.281909][T21200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4350'. [ 1624.356564][T15090] usb 6-1: USB disconnect, device number 65 [ 1624.630218][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1624.630240][ T30] audit: type=1800 audit(1754594974.622:514): pid=21203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4349" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1625.879412][T15090] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1626.039527][T15090] usb 6-1: Using ep0 maxpacket: 16 [ 1626.065748][T15090] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1626.089753][T15090] usb 6-1: config 0 has no interface number 0 [ 1626.134365][T15090] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1626.143671][T15090] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.251913][T15090] usb 6-1: Product: syz [ 1626.256118][T15090] usb 6-1: Manufacturer: syz [ 1626.269061][T15090] usb 6-1: SerialNumber: syz [ 1626.276582][T15090] usb 6-1: config 0 descriptor?? [ 1626.287883][T15090] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1626.720403][T15090] gspca_spca1528: reg_w err -71 [ 1626.739140][T15090] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 1626.772104][T15090] usb 6-1: USB disconnect, device number 66 [ 1626.829154][T18732] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1627.010742][T18732] usb 7-1: Using ep0 maxpacket: 16 [ 1627.016705][T21238] vivid-007: ================= START STATUS ================= [ 1627.024460][T21238] vivid-007: Generate PTS: true [ 1627.029741][T21238] vivid-007: Generate SCR: true [ 1627.034796][T21238] tpg source WxH: 320x240 (Y'CbCr) [ 1627.040084][T21238] tpg field: 1 [ 1627.043464][T21238] tpg crop: (0,0)/320x240 [ 1627.047904][T21238] tpg compose: (0,0)/320x240 [ 1627.052586][T21238] tpg colorspace: 8 [ 1627.056483][T21238] tpg transfer function: 0/0 [ 1627.061201][T21238] tpg Y'CbCr encoding: 0/0 [ 1627.065626][T21238] tpg quantization: 0/0 [ 1627.111064][T21238] tpg RGB range: 0/2 [ 1627.115032][T21238] vivid-007: ================== END STATUS ================== [ 1628.366229][T18732] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1628.584666][T18732] usb 7-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1628.618015][T21239] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(12) [ 1628.624625][T21239] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1628.632491][T21239] vhci_hcd vhci_hcd.0: Device attached [ 1628.644557][T21240] vhci_hcd: connection closed [ 1628.672414][T17951] vhci_hcd: stop threads [ 1628.740371][T18732] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1628.765504][T17951] vhci_hcd: release socket [ 1629.239573][T17951] vhci_hcd: disconnect device [ 1629.320438][T15090] vhci_hcd: vhci_device speed not set [ 1629.325930][T18732] usb 7-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1629.359126][T18732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.369904][T18732] usb 7-1: Product: syz [ 1629.375659][T18732] usb 7-1: Manufacturer: syz [ 1629.380552][T18732] usb 7-1: SerialNumber: syz [ 1629.479299][T21245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4366'. [ 1629.634006][T18732] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input47 [ 1629.709365][ T5213] bcm5974 7-1:1.0: could not read from device [ 1629.747129][T18732] usb 7-1: USB disconnect, device number 57 [ 1629.769684][ T5213] bcm5974 7-1:1.0: could not read from device [ 1632.302394][T21293] binder: 21290:21293 ioctl c0306201 2000000002c0 returned -14 [ 1634.864250][T21301] loop7: detected capacity change from 0 to 8 [ 1635.118110][T21301] SQUASHFS error: Failed to read block 0x4de: -5 [ 1635.133553][T21301] SQUASHFS error: Failed to read block 0x4de: -5 [ 1635.192450][ T30] audit: type=1800 audit(1754594985.302:515): pid=21301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4387" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1635.243905][T21301] SQUASHFS error: Failed to read block 0x4de: -5 [ 1635.267152][T21301] SQUASHFS error: Failed to read block 0x4de: -5 [ 1635.333687][T21318] veth0: entered promiscuous mode [ 1635.359618][T21317] veth0: left promiscuous mode [ 1636.946712][T11198] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1637.159006][T11198] usb 7-1: Using ep0 maxpacket: 16 [ 1637.297495][T11198] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1637.308766][T11198] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1637.315624][T11198] usb 7-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1637.386485][T11198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.402707][T11198] usb 7-1: config 0 descriptor?? [ 1637.647521][T11198] usbhid 7-1:0.0: can't add hid device: -71 [ 1637.683410][T11198] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1637.715341][T11198] usb 7-1: USB disconnect, device number 58 [ 1638.039051][T18732] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1638.132264][T21345] IPv6: Can't replace route, no match found [ 1638.202078][T18732] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1638.230956][T18732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.291208][T18732] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1638.340097][T18732] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1638.383884][T18732] usb 5-1: Manufacturer: syz [ 1638.426829][T18732] usb 5-1: config 0 descriptor?? [ 1638.438268][T21347] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4403'. [ 1638.719325][T18732] rc_core: IR keymap rc-hauppauge not found [ 1638.726345][T18732] Registered IR keymap rc-empty [ 1638.737106][T18732] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1638.748503][T15090] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1639.068681][T18732] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input48 [ 1639.082865][T15090] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1639.094163][T15090] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1639.130153][T15090] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1639.164308][T15090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.194353][T21347] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1639.209669][ C0] igorplugusb 5-1:0.0: receive overflow invalid: 13 [ 1639.247596][T15090] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1639.418365][T18732] usb 5-1: USB disconnect, device number 82 [ 1639.457762][T15090] usb 7-1: USB disconnect, device number 59 [ 1639.491935][T21366] loop3: detected capacity change from 0 to 128 [ 1639.525203][T21366] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1640.081941][T21370] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1641.555983][ T30] audit: type=1326 audit(1754594991.702:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21389 comm="syz.3.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275638ebe9 code=0x7ffc0000 [ 1641.607399][ T30] audit: type=1326 audit(1754594991.702:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21389 comm="syz.3.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275638ebe9 code=0x7ffc0000 [ 1641.671029][ T30] audit: type=1326 audit(1754594991.702:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21389 comm="syz.3.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f275638ebe9 code=0x7ffc0000 [ 1641.767527][ T30] audit: type=1326 audit(1754594991.702:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21389 comm="syz.3.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275638ebe9 code=0x7ffc0000 [ 1641.790376][ T30] audit: type=1326 audit(1754594991.702:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21389 comm="syz.3.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f275638ebe9 code=0x7ffc0000 [ 1641.815289][ T30] audit: type=1326 audit(1754594991.702:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21389 comm="syz.3.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f275638ec23 code=0x7ffc0000 [ 1641.846774][ T30] audit: type=1326 audit(1754594991.702:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21389 comm="syz.3.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f275638ec23 code=0x7ffc0000 [ 1641.874847][ T30] audit: type=1326 audit(1754594991.702:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21389 comm="syz.3.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275638ebe9 code=0x7ffc0000 [ 1641.918273][ T30] audit: type=1326 audit(1754594991.712:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21389 comm="syz.3.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275638ebe9 code=0x7ffc0000 [ 1641.945142][ T30] audit: type=1326 audit(1754594991.712:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21389 comm="syz.3.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275638ebe9 code=0x7ffc0000 [ 1641.949151][T15090] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1642.170872][T15090] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1642.184002][T15090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.195171][T15090] usb 5-1: config 0 descriptor?? [ 1642.410781][T15090] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1642.435018][T15090] [drm:udl_init] *ERROR* Selecting channel failed [ 1642.478708][T15090] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1642.492569][T15090] [drm] Initialized udl on minor 2 [ 1642.501783][T15090] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1642.502560][T21401] loop3: detected capacity change from 0 to 512 [ 1642.524942][T15090] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1642.552462][T18732] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1642.563109][T15090] usb 5-1: USB disconnect, device number 83 [ 1642.570172][T18732] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1642.641223][T21401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1642.835920][T18428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.183936][T21413] loop3: detected capacity change from 0 to 256 [ 1643.204483][T21413] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1643.268963][T21416] veth0: entered promiscuous mode [ 1643.450010][T21415] veth0: left promiscuous mode [ 1645.219048][T13144] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1645.401455][T13144] usb 6-1: Using ep0 maxpacket: 8 [ 1645.592616][T13144] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.617022][T13144] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1645.617827][T21439] IPv6: Can't replace route, no match found [ 1645.750582][T21440] hub 9-0:1.0: USB hub found [ 1645.760776][T21440] hub 9-0:1.0: 1 port detected [ 1646.143356][T21440] loop8: detected capacity change from 0 to 4096 [ 1646.243815][T21440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1646.259081][T13144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.280787][T13144] usb 6-1: config 0 descriptor?? [ 1646.334481][T13144] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1646.522600][T13144] gspca_vc032x: reg_r err -32 [ 1646.529076][T13144] vc032x 6-1:0.0: probe with driver vc032x failed with error -32 [ 1646.547722][T18564] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.895051][T21451] loop4: detected capacity change from 0 to 2048 [ 1646.953362][T21458] syzkaller1: entered promiscuous mode [ 1646.964230][T21458] syzkaller1: entered allmulticast mode [ 1646.999051][T21451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1647.219222][T18732] hid_parser_main: 31 callbacks suppressed [ 1647.219249][T18732] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1647.250251][T18732] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1647.429227][T21475] IPv6: Can't replace route, no match found [ 1648.013887][T18732] usb 6-1: USB disconnect, device number 67 [ 1648.670711][T21498] loop4: detected capacity change from 0 to 4096 [ 1648.809125][T18732] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1648.819709][T21498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1649.737331][T13144] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1650.041062][T13144] usb 9-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1650.066428][T13144] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.116329][T13144] usb 9-1: config 0 descriptor?? [ 1650.138833][T13144] pwc: Philips SPC 900NC USB webcam detected. [ 1650.227852][T15090] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1650.241386][T18484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.252682][T18732] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1650.269017][T18732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.281106][T18732] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1650.309429][T18732] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1650.317436][T18732] usb 6-1: Manufacturer: syz [ 1650.337786][T18732] usb 6-1: config 0 descriptor?? [ 1650.364626][T13144] pwc: Failed to set LED on/off time (-71) [ 1650.397695][T13144] pwc: send_video_command error -71 [ 1650.409078][T15090] usb 7-1: Using ep0 maxpacket: 32 [ 1650.420441][T13144] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1650.428789][T15090] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.457395][T13144] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 1650.468860][T15090] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1650.489361][T13144] usb 9-1: USB disconnect, device number 48 [ 1650.491592][T18732] rc_core: IR keymap rc-hauppauge not found [ 1650.508002][T15090] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1650.527297][T18732] Registered IR keymap rc-empty [ 1650.538532][T18732] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1650.559279][T15090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.581787][T18732] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input50 [ 1650.594011][T15090] usb 7-1: config 0 descriptor?? [ 1650.903329][ C0] igorplugusb 6-1:0.0: receive overflow invalid: 13 [ 1651.058719][T21526] overlayfs: workdir and upperdir must reside under the same mount [ 1651.112136][T18732] usb 6-1: USB disconnect, device number 68 [ 1651.149116][T18397] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1651.196517][T21510] loop3: detected capacity change from 0 to 32768 [ 1651.221069][T21510] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1651.306576][T18397] usb 5-1: Using ep0 maxpacket: 16 [ 1651.315105][T18397] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1651.330552][T18397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1651.395520][T18397] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1651.420927][T21510] XFS (loop3): Ending clean mount [ 1651.428791][T18397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.437247][T18397] usb 5-1: Product: syz [ 1651.450922][T21510] XFS (loop3): Quotacheck needed: Please wait. [ 1651.461751][T18397] usb 5-1: Manufacturer: syz [ 1651.498721][T18397] usb 5-1: SerialNumber: syz [ 1651.514162][T18397] usb 5-1: config 0 descriptor?? [ 1651.529174][T21510] XFS (loop3): Quotacheck: Done. [ 1651.545137][T18397] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1651.582245][T18397] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1651.825916][T18428] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1651.992758][T13144] usb 7-1: USB disconnect, device number 60 [ 1652.147245][T18397] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1652.179453][T18397] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1653.381949][T21559] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4479'. [ 1653.482950][T18397] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1653.496354][T18397] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1653.503521][T18397] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1653.513588][T18397] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1653.523779][T18397] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1653.531222][T18397] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1653.551868][T18397] usb 5-1: USB disconnect, device number 84 [ 1653.859039][T11198] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1654.402837][T21579] random: crng reseeded on system resumption [ 1654.639379][T18732] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1654.659025][T11198] usb 4-1: Using ep0 maxpacket: 16 [ 1654.675267][T11198] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1654.703969][T11198] usb 4-1: config 0 has no interface number 0 [ 1654.729630][T11198] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1654.756419][T11198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.789177][T18732] usb 9-1: Using ep0 maxpacket: 16 [ 1654.794426][T11198] usb 4-1: Product: syz [ 1654.827614][T11198] usb 4-1: Manufacturer: syz [ 1654.837605][T18732] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1654.849087][T11198] usb 4-1: SerialNumber: syz [ 1654.853814][T18732] usb 9-1: config 0 has no interface number 0 [ 1654.872434][T11198] usb 4-1: config 0 descriptor?? [ 1654.883857][T11198] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1654.899501][T18732] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1654.914066][T18732] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.938723][T18732] usb 9-1: Product: syz [ 1654.954628][T18732] usb 9-1: Manufacturer: syz [ 1654.969145][T18732] usb 9-1: SerialNumber: syz [ 1654.988691][T18732] usb 9-1: config 0 descriptor?? [ 1655.008534][T18732] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1655.080365][T11198] gspca_spca1528: reg_w err -71 [ 1655.109295][T11198] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1655.140420][T11198] usb 4-1: USB disconnect, device number 82 [ 1655.214322][T18732] gspca_spca1528: reg_w err -71 [ 1655.249183][T18732] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71 [ 1655.269876][T18732] usb 9-1: USB disconnect, device number 49 [ 1656.062404][T21607] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4496'. [ 1656.119649][T18397] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1656.329823][T18397] usb 4-1: Using ep0 maxpacket: 16 [ 1656.360601][T18397] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1656.398025][T18397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1656.451367][T18397] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1656.468993][T18397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.476984][T18397] usb 4-1: Product: syz [ 1656.508977][T18397] usb 4-1: Manufacturer: syz [ 1656.513578][T18397] usb 4-1: SerialNumber: syz [ 1656.549878][T18397] usb 4-1: config 0 descriptor?? [ 1656.572060][T18397] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1656.618992][T18397] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1657.784734][T21626] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4504'. [ 1657.879617][T18397] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1657.909154][T18397] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1657.922203][T21629] IPv6: Can't replace route, no match found [ 1658.461543][T21636] loop8: detected capacity change from 0 to 16 [ 1658.509760][T21636] erofs (device loop8): mounted with root inode @ nid 36. [ 1658.563792][T21636] erofs (device loop8): readahead error at folio 87 @ nid 36 [ 1658.571503][T21636] erofs (device loop8): readahead error at folio 86 @ nid 36 [ 1658.579783][T21636] erofs (device loop8): bogus lookback distance 363 @ lcn 82 of nid 36 [ 1658.588083][T21636] erofs (device loop8): readahead error at folio 83 @ nid 36 [ 1658.595844][T21636] erofs (device loop8): bogus lookback distance 363 @ lcn 82 of nid 36 [ 1658.604209][T21636] erofs (device loop8): readahead error at folio 82 @ nid 36 [ 1658.612360][T21636] erofs (device loop8): readahead error at folio 79 @ nid 36 [ 1658.619828][T21636] erofs (device loop8): readahead error at folio 78 @ nid 36 [ 1658.627350][T21636] erofs (device loop8): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 1658.635792][T21636] erofs (device loop8): readahead error at folio 76 @ nid 36 [ 1658.643296][T21636] erofs (device loop8): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 1658.651734][T21636] erofs (device loop8): readahead error at folio 75 @ nid 36 [ 1658.659380][T21636] erofs (device loop8): readahead error at folio 74 @ nid 36 [ 1658.666951][T21636] erofs (device loop8): readahead error at folio 72 @ nid 36 [ 1658.674428][T21636] erofs (device loop8): readahead error at folio 71 @ nid 36 [ 1658.682040][T21636] erofs (device loop8): readahead error at folio 70 @ nid 36 [ 1658.691862][T21636] erofs (device loop8): readahead error at folio 63 @ nid 36 [ 1658.699615][T21636] erofs (device loop8): readahead error at folio 61 @ nid 36 [ 1658.707190][T21636] erofs (device loop8): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 1658.715635][T21636] erofs (device loop8): readahead error at folio 59 @ nid 36 [ 1658.723106][T21636] erofs (device loop8): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 1658.731545][T21636] erofs (device loop8): readahead error at folio 58 @ nid 36 [ 1658.739068][T21636] erofs (device loop8): readahead error at folio 56 @ nid 36 [ 1658.747978][T21636] erofs (device loop8): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 1658.756421][T21636] erofs (device loop8): readahead error at folio 47 @ nid 36 [ 1658.763899][T21636] erofs (device loop8): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 1658.772423][T21636] erofs (device loop8): readahead error at folio 46 @ nid 36 [ 1658.779985][T21636] erofs (device loop8): readahead error at folio 45 @ nid 36 [ 1658.787595][T21636] erofs (device loop8): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1658.796194][T21636] erofs (device loop8): readahead error at folio 43 @ nid 36 [ 1658.803716][T21636] erofs (device loop8): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1658.812172][T21636] erofs (device loop8): readahead error at folio 42 @ nid 36 [ 1658.819724][T21636] erofs (device loop8): bogus lookback distance 774 @ lcn 40 of nid 36 [ 1658.828023][T21636] erofs (device loop8): readahead error at folio 41 @ nid 36 [ 1658.835528][T21636] erofs (device loop8): bogus lookback distance 774 @ lcn 40 of nid 36 [ 1658.843862][T21636] erofs (device loop8): readahead error at folio 40 @ nid 36 [ 1658.851397][T21636] erofs (device loop8): readahead error at folio 39 @ nid 36 [ 1658.858833][T21636] erofs (device loop8): readahead error at folio 38 @ nid 36 [ 1658.867073][T21636] erofs (device loop8): readahead error at folio 36 @ nid 36 [ 1658.875665][T21636] erofs (device loop8): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 1658.884191][T21636] erofs (device loop8): readahead error at folio 31 @ nid 36 [ 1658.892287][T21636] erofs (device loop8): readahead error at folio 25 @ nid 36 [ 1658.899702][T21636] erofs (device loop8): readahead error at folio 24 @ nid 36 [ 1658.907341][T21636] erofs (device loop8): readahead error at folio 19 @ nid 36 [ 1658.916514][T21636] syz.8.4507: attempt to access beyond end of device [ 1658.916514][T21636] loop8: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1658.930458][T21636] syz.8.4507: attempt to access beyond end of device [ 1658.930458][T21636] loop8: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1658.945074][T21636] syz.8.4507: attempt to access beyond end of device [ 1658.945074][T21636] loop8: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1658.959584][T21636] syz.8.4507: attempt to access beyond end of device [ 1658.959584][T21636] loop8: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 1658.973355][T21636] syz.8.4507: attempt to access beyond end of device [ 1658.973355][T21636] loop8: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1658.987034][T21636] syz.8.4507: attempt to access beyond end of device [ 1658.987034][T21636] loop8: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 1659.050711][T21639] loop6: detected capacity change from 0 to 256 [ 1659.207778][T18397] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1659.234074][T18397] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1659.248388][T18397] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1659.282368][T18397] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1659.312756][T18397] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1659.509726][T18397] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1659.539393][T18652] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1659.565123][T18397] usb 4-1: USB disconnect, device number 83 [ 1659.721209][T18652] usb 9-1: config 0 has an invalid interface number: 20 but max is 0 [ 1659.736928][T18652] usb 9-1: config 0 has no interface number 0 [ 1659.757189][T18652] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1659.789085][T11198] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1659.810567][T18652] usb 9-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1659.839251][T18652] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.883591][T18652] usb 9-1: Product: syz [ 1659.900837][T18652] usb 9-1: Manufacturer: syz [ 1659.905457][T18652] usb 9-1: SerialNumber: syz [ 1659.923819][T21650] loop3: detected capacity change from 0 to 128 [ 1659.933784][T18652] usb 9-1: config 0 descriptor?? [ 1659.954539][T21643] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1659.976457][T21650] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1659.981289][T11198] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.009844][T11198] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.019727][T11198] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1660.028825][T11198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.040530][T11198] usb 7-1: config 0 descriptor?? [ 1660.051550][T21650] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1660.052079][T18652] usb-storage 9-1:0.20: USB Mass Storage device detected [ 1660.237554][T18652] usb-storage 9-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1660.264231][T18652] scsi host1: usb-storage 9-1:0.20 [ 1660.316621][T21645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.399785][T21645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.544054][T18428] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1660.692869][T21662] loop7: detected capacity change from 0 to 128 [ 1660.734044][T11198] usbhid 7-1:0.0: can't add hid device: -71 [ 1660.765109][T11198] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1660.788230][T21662] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1660.839397][T11198] usb 7-1: USB disconnect, device number 61 [ 1660.867942][T21662] ext4 filesystem being mounted at /399/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1660.971257][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1660.971279][ T30] audit: type=1326 audit(1754595011.122:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21667 comm="syz.4.4519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x0 [ 1661.293091][T13859] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1661.519245][T21658] usb 9-1: reset full-speed USB device number 50 using dummy_hcd [ 1661.563017][T21675] IPv6: Can't replace route, no match found [ 1661.986490][T21677] loop6: detected capacity change from 0 to 40427 [ 1661.995888][T21677] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1662.003929][T21677] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1662.016263][T21677] F2FS-fs (loop6): invalid crc value [ 1662.127860][T21677] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1662.148889][T21677] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1662.155977][T21677] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1662.171003][T11198] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1662.333230][T11198] usb 6-1: Using ep0 maxpacket: 16 [ 1662.351331][T11198] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1662.391673][T11198] usb 6-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1662.441157][T11198] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1662.465834][T11198] usb 6-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1662.611474][T21701] syz.6.4521: attempt to access beyond end of device [ 1662.611474][T21701] loop6: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 1663.115369][T11198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.130369][T11198] usb 6-1: Product: syz [ 1663.134540][T11198] usb 6-1: Manufacturer: syz [ 1663.139735][T11198] usb 6-1: SerialNumber: syz [ 1663.176765][T18513] syz-executor: attempt to access beyond end of device [ 1663.176765][T18513] loop6: rw=2051, sector=77824, nr_sectors = 520 limit=40427 [ 1663.226865][T18513] F2FS-fs (loop6): Issue discard(9728, 9728, 65) failed, ret: -5 [ 1663.360153][T18652] usb 9-1: USB disconnect, device number 50 [ 1663.377234][T11198] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input51 [ 1663.478836][ T5213] bcm5974 6-1:1.0: could not read from device [ 1663.558373][ T5213] bcm5974 6-1:1.0: could not read from device [ 1663.574833][T11198] usb 6-1: USB disconnect, device number 69 [ 1666.449210][T11198] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1666.599155][T11198] usb 5-1: device descriptor read/64, error -71 [ 1666.839059][T11198] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1667.990950][T21755] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 1667.998285][T21755] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1668.037700][T21755] vhci_hcd vhci_hcd.0: Device attached [ 1668.083549][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.090687][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.150194][T11198] usb 5-1: device descriptor read/64, error -71 [ 1668.279247][T18397] usb 49-1: new high-speed USB device number 6 using vhci_hcd [ 1668.279818][T11198] usb usb5-port1: attempt power cycle [ 1668.319397][ T6032] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1668.616139][T18652] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1668.633055][ T6032] usb 9-1: Using ep0 maxpacket: 16 [ 1668.646801][ T6032] usb 9-1: config 0 has no interfaces? [ 1668.656535][ T6032] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1668.670743][T11198] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1668.814636][ T6032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.833439][ T6032] usb 9-1: config 0 descriptor?? [ 1668.854838][T11198] usb 5-1: device descriptor read/8, error -71 [ 1668.889084][T18652] usb 7-1: Using ep0 maxpacket: 16 [ 1668.938198][T18652] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.957270][T18652] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1668.964274][T18652] usb 7-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1668.977797][T18652] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.993429][T18652] usb 7-1: config 0 descriptor?? [ 1669.066649][T21756] usbip_core: unknown command [ 1669.067780][T13144] usb 9-1: USB disconnect, device number 51 [ 1669.087132][T21756] vhci_hcd: unknown pdu 0 [ 1669.095532][T21756] usbip_core: unknown command [ 1669.103324][T16902] vhci_hcd: stop threads [ 1669.132606][T11198] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1669.140475][T16902] vhci_hcd: release socket [ 1669.145251][T16902] vhci_hcd: disconnect device [ 1669.245197][T11198] usb 5-1: device descriptor read/8, error -71 [ 1669.304654][T18652] usbhid 7-1:0.0: can't add hid device: -71 [ 1669.473097][T11198] usb usb5-port1: unable to enumerate USB device [ 1669.506318][T18652] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1670.381975][T18652] usb 7-1: USB disconnect, device number 62 [ 1670.464309][T21781] vivid-007: ================= START STATUS ================= [ 1670.509176][T21781] vivid-007: Generate PTS: true [ 1670.518617][T21781] vivid-007: Generate SCR: true [ 1670.528813][T21781] tpg source WxH: 320x240 (Y'CbCr) [ 1670.569045][T21781] tpg field: 1 [ 1670.572416][T21781] tpg crop: (0,0)/320x240 [ 1670.578985][T21781] tpg compose: (0,0)/320x240 [ 1670.591663][T21781] tpg colorspace: 8 [ 1670.609674][T21781] tpg transfer function: 0/0 [ 1670.624661][T21781] tpg Y'CbCr encoding: 0/0 [ 1670.635749][T21781] tpg quantization: 0/0 [ 1670.640584][T21781] tpg RGB range: 0/2 [ 1670.674045][T21781] vivid-007: ================== END STATUS ================== [ 1670.699233][T21784] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1670.705839][T21784] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1670.976990][T21784] vhci_hcd vhci_hcd.0: Device attached [ 1671.828974][T21785] vhci_hcd: connection closed [ 1671.835530][ T3550] vhci_hcd: stop threads [ 1671.871466][ T3550] vhci_hcd: release socket [ 1671.876026][ T3550] vhci_hcd: disconnect device [ 1671.919035][T11198] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 1671.929475][T11198] usb 41-1: enqueue for inactive port 0 [ 1671.999175][T11198] vhci_hcd: vhci_device speed not set [ 1672.095745][T21803] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4566'. [ 1672.619562][T21814] loop8: detected capacity change from 0 to 4096 [ 1672.883124][T18652] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1672.911127][T21814] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1673.039362][T18652] usb 6-1: Using ep0 maxpacket: 32 [ 1673.046318][T18652] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1673.057017][T18652] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1673.076371][T18652] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1673.140311][T18652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.198514][T18652] usb 6-1: config 0 descriptor?? [ 1673.429506][T18397] vhci_hcd: vhci_device speed not set [ 1673.808160][T18564] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1674.179090][T11198] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1674.283779][T21835] loop7: detected capacity change from 0 to 512 [ 1674.296779][T21835] EXT4-fs: Ignoring removed bh option [ 1674.307292][T21835] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1674.336465][T21835] EXT4-fs (loop7): 1 truncate cleaned up [ 1674.347015][T21835] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1674.359059][T11198] usb 5-1: Using ep0 maxpacket: 32 [ 1674.364929][T18652] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1674.365845][T11198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.427082][T11198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.466651][T11198] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1674.512433][T11198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.516775][T11198] usb 5-1: config 0 descriptor?? [ 1675.533558][T11198] hub 5-1:0.0: USB hub found [ 1675.629702][T18652] usb 4-1: Using ep0 maxpacket: 16 [ 1675.782913][T18652] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1675.957083][T18652] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1675.972409][T13859] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.981847][T11198] hub 5-1:0.0: 1 port detected [ 1676.005945][T18652] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1676.026877][T18652] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.060158][T18652] usb 4-1: config 0 descriptor?? [ 1676.071353][ T90] usb 6-1: USB disconnect, device number 70 [ 1676.157457][ T30] audit: type=1326 audit(1754595026.312:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21847 comm="syz.8.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d89b8ebe9 code=0x7ffc0000 [ 1676.288228][T21855] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4579'. [ 1676.430681][ T30] audit: type=1326 audit(1754595026.312:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21847 comm="syz.8.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d89b8ebe9 code=0x7ffc0000 [ 1676.459480][ T30] audit: type=1326 audit(1754595026.312:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21847 comm="syz.8.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d89b8ebe9 code=0x7ffc0000 [ 1676.510658][T18652] usbhid 4-1:0.0: can't add hid device: -71 [ 1676.518263][T18652] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1676.528281][ T30] audit: type=1326 audit(1754595026.312:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21847 comm="syz.8.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d89b8ebe9 code=0x7ffc0000 [ 1676.564925][T18652] usb 4-1: USB disconnect, device number 84 [ 1676.583814][ T30] audit: type=1326 audit(1754595026.312:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21847 comm="syz.8.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d89b8ebe9 code=0x7ffc0000 [ 1676.620498][ T30] audit: type=1326 audit(1754595026.322:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21847 comm="syz.8.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2d89b8ebe9 code=0x7ffc0000 [ 1676.651789][ T30] audit: type=1326 audit(1754595026.382:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21847 comm="syz.8.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d89b8ec23 code=0x7ffc0000 [ 1676.681685][ T30] audit: type=1326 audit(1754595026.382:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21847 comm="syz.8.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d89b8ec23 code=0x7ffc0000 [ 1676.709157][ T30] audit: type=1326 audit(1754595026.382:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21847 comm="syz.8.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d89b8ebe9 code=0x7ffc0000 [ 1676.743076][ T30] audit: type=1326 audit(1754595026.382:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21847 comm="syz.8.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d89b8ebe9 code=0x7ffc0000 [ 1676.835391][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4581'. [ 1676.919665][T15090] hub 5-1:0.0: activate --> -90 [ 1677.160133][T21866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1677.200884][T21868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1677.212550][T21868] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4582'. [ 1677.770776][T18652] usb 5-1: USB disconnect, device number 89 [ 1678.140822][T21868] syz.5.4582 (21868): drop_caches: 2 [ 1678.254794][T18652] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1678.459053][T18652] usb 4-1: Using ep0 maxpacket: 16 [ 1678.469777][T18652] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 1678.478236][T18652] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.497595][T18652] usb 4-1: config 0 has no interface number 0 [ 1678.521747][T18652] usb 4-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 1678.633980][T18652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.649744][T18652] usb 4-1: Product: syz [ 1678.654387][T18652] usb 4-1: Manufacturer: syz [ 1678.681258][T18652] usb 4-1: SerialNumber: syz [ 1678.774515][T18652] usb 4-1: config 0 descriptor?? [ 1679.078247][T21873] netlink: 'syz.3.4585': attribute type 1 has an invalid length. [ 1679.111104][T21873] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4585'. [ 1679.192003][T18652] usb 4-1: Found UVC 0.00 device syz (0408:4034) [ 1679.212767][T18652] usb 4-1: No valid video chain found. [ 1679.755895][T21898] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4592'. [ 1680.519044][T15090] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1680.742900][T15090] usb 6-1: Using ep0 maxpacket: 8 [ 1680.765514][T15090] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.781912][T15090] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1680.794340][T21922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1680.801412][T15090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.882859][T15090] usb 6-1: config 0 descriptor?? [ 1680.922616][T15090] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 1681.106132][T21928] loop8: detected capacity change from 0 to 256 [ 1681.106617][T15090] usb 4-1: USB disconnect, device number 85 [ 1681.113713][T21928] exfat: Deprecated parameter 'namecase' [ 1681.289009][T21928] exfat: Deprecated parameter 'namecase' [ 1681.325291][T21928] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1682.145097][T11198] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1683.058996][T11198] usb 9-1: Using ep0 maxpacket: 16 [ 1683.147688][T11198] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1683.198729][T11198] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1683.214523][T21943] loop6: detected capacity change from 0 to 4096 [ 1683.224031][T11198] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1683.243769][T11198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.249340][T18652] usb 6-1: USB disconnect, device number 71 [ 1683.271233][T11198] usb 9-1: Product: syz [ 1683.281144][T11198] usb 9-1: Manufacturer: syz [ 1683.300458][T11198] usb 9-1: SerialNumber: syz [ 1683.327569][T11198] usb 9-1: config 0 descriptor?? [ 1683.345387][T11198] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1683.346704][T21943] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1683.379628][T11198] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1683.403278][T21943] NILFS (loop6): trying rollback from an earlier position [ 1683.463654][T21943] NILFS (loop6): recovery complete [ 1683.722277][T21953] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1684.832369][T11198] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1684.839185][T11198] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1685.821068][T11198] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1685.863551][T21972] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4613'. [ 1685.877716][T11198] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1685.927301][T11198] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1685.974168][T11198] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1686.012016][T11198] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1686.046076][T11198] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1686.118889][T11198] usb 9-1: USB disconnect, device number 52 [ 1686.719218][T11198] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1686.889007][T11198] usb 4-1: Using ep0 maxpacket: 16 [ 1686.916273][T11198] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.951405][T11198] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1687.004751][T11198] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1687.019194][T11198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.047879][T11198] usb 4-1: Product: syz [ 1687.067439][T11198] usb 4-1: Manufacturer: syz [ 1687.076640][T11198] usb 4-1: SerialNumber: syz [ 1687.293659][T11198] usb 4-1: 0:2 : does not exist [ 1687.977190][T11198] usb 4-1: USB disconnect, device number 86 [ 1688.549182][T22010] loop8: detected capacity change from 0 to 256 [ 1689.812647][T22015] loop8: detected capacity change from 0 to 1024 [ 1689.833380][T22015] EXT4-fs: Ignoring removed nobh option [ 1689.899227][T22015] EXT4-fs: Ignoring removed bh option [ 1690.048263][T22015] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1690.381635][T22015] evm: overlay not supported [ 1690.642271][T18564] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1690.978934][T18652] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1690.987998][T13081] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1691.153902][T13081] usb 9-1: Using ep0 maxpacket: 8 [ 1691.164188][T18652] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1691.182390][T13081] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1691.191736][T13081] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.205728][T18652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.222216][T13081] usb 9-1: Product: syz [ 1691.233293][T13081] usb 9-1: Manufacturer: syz [ 1691.243721][T18652] usb 5-1: config 0 descriptor?? [ 1691.253777][T13081] usb 9-1: SerialNumber: syz [ 1691.280912][T13081] usb 9-1: config 0 descriptor?? [ 1691.506756][T13081] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1691.523819][T22040] loop7: detected capacity change from 0 to 256 [ 1691.534890][T22040] exfat: Deprecated parameter 'namecase' [ 1691.544220][T22040] exfat: Deprecated parameter 'namecase' [ 1691.573407][T22040] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1691.786734][T13081] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1691.842484][T13081] usb 9-1: USB disconnect, device number 53 [ 1691.853009][T22047] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4637'. [ 1692.833011][T18732] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1692.965136][T18732] usb 6-1: device descriptor read/64, error -71 [ 1693.362531][T18732] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1693.494998][T18732] usb 6-1: device descriptor read/64, error -71 [ 1693.658542][T18732] usb usb6-port1: attempt power cycle [ 1694.204194][T22069] loop8: detected capacity change from 0 to 2048 [ 1694.257063][T11198] usb 5-1: USB disconnect, device number 90 [ 1694.282108][T22060] loop7: detected capacity change from 0 to 32768 [ 1694.507786][T18732] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1694.550590][T18732] usb 6-1: device descriptor read/8, error -71 [ 1694.784365][T18732] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1694.821564][T18732] usb 6-1: device descriptor read/8, error -71 [ 1694.933796][T18732] usb usb6-port1: unable to enumerate USB device [ 1695.282442][T13081] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1695.305819][T22060] JBD2: Ignoring recovery information on journal [ 1695.324274][T22069] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1695.337971][T22082] loop6: detected capacity change from 0 to 2048 [ 1695.356078][T22082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1695.411161][T22060] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1695.436587][T13081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1695.478950][T13081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1695.508068][T13081] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1695.509476][T13859] ocfs2: Unmounting device (7,7) on (node local) [ 1695.528242][T13081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.575453][T13081] usb 4-1: config 0 descriptor?? [ 1695.663491][T18564] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1695.757152][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4655'. [ 1695.786162][T13081] ath6kl: Failed to submit usb control message: -71 [ 1695.792895][T13081] ath6kl: unable to send the bmi data to the device: -71 [ 1695.795096][T22094] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4656'. [ 1695.809238][T13081] ath6kl: Unable to send get target info: -71 [ 1695.820815][T22092] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4655'. [ 1695.831542][T13081] ath6kl: Failed to init ath6kl core: -71 [ 1695.844221][T22094] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4656'. [ 1695.853925][T13081] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1696.060091][T13081] usb 4-1: USB disconnect, device number 87 [ 1696.191649][T18397] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 1696.351579][T18397] usb 7-1: config 0 has an invalid interface number: 23 but max is 0 [ 1696.360708][T18652] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1696.377028][T18397] usb 7-1: config 0 has no interface number 0 [ 1696.452804][T18397] usb 7-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 1696.462555][T18397] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.470655][T18397] usb 7-1: Product: syz [ 1696.475390][T18397] usb 7-1: Manufacturer: syz [ 1696.482974][T18397] usb 7-1: SerialNumber: syz [ 1696.512353][T18397] usb 7-1: config 0 descriptor?? [ 1696.523736][T18397] ftdi_sio 7-1:0.23: FTDI USB Serial Device converter detected [ 1696.545951][T18397] usb 7-1: Detected SIO [ 1696.551230][T18652] usb 5-1: Using ep0 maxpacket: 8 [ 1696.559213][T18652] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.580804][T18397] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1696.591082][T18652] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1696.614520][T18652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.638876][T18652] usb 5-1: config 0 descriptor?? [ 1696.657887][T18652] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1696.717248][T18397] usb 7-1: USB disconnect, device number 63 [ 1696.727794][T18397] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1696.738589][T18397] ftdi_sio 7-1:0.23: device disconnected [ 1696.763036][T22115] loop5: detected capacity change from 0 to 512 [ 1696.770672][T22115] EXT4-fs: Ignoring removed nobh option [ 1696.784768][T22115] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1696.899673][T22115] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 1697.225328][T18652] gspca_vc032x: reg_r err -32 [ 1697.230111][T18652] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 1697.242173][T22121] loop3: detected capacity change from 0 to 512 [ 1697.248581][T18732] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1697.331506][T22126] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1697.334306][T22121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1697.338041][T22126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1697.340213][T22126] vhci_hcd vhci_hcd.0: Device attached [ 1697.370439][T22121] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1697.381838][T18732] usb 6-1: device descriptor read/64, error -71 [ 1697.420656][T18428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1697.570676][T15090] usb 45-1: new high-speed USB device number 4 using vhci_hcd [ 1697.601871][T11198] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1697.620727][T18732] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1697.744189][T18732] usb 6-1: device descriptor read/64, error -71 [ 1697.750602][T11198] usb 7-1: Using ep0 maxpacket: 16 [ 1697.762472][T11198] usb 7-1: config 0 has no interfaces? [ 1697.770109][T11198] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1697.789167][T11198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.810536][T11198] usb 7-1: config 0 descriptor?? [ 1697.867226][T18732] usb usb6-port1: attempt power cycle [ 1697.927713][T22130] loop3: detected capacity change from 0 to 32768 [ 1697.938031][T22130] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4667 (22130) [ 1697.959873][T22130] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1697.975987][T22130] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1697.985481][T22130] BTRFS info (device loop3): using free-space-tree [ 1698.018249][T22127] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 1698.021438][T18652] usb 7-1: USB disconnect, device number 64 [ 1698.042747][ T3550] vhci_hcd: stop threads [ 1698.049158][ T3550] vhci_hcd: release socket [ 1698.053790][ T3550] vhci_hcd: disconnect device [ 1698.185877][T18428] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1698.207784][T18732] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1698.247685][T18732] usb 6-1: device descriptor read/8, error -71 [ 1698.482728][T18732] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1698.521307][T18732] usb 6-1: device descriptor read/8, error -71 [ 1698.629329][T18732] usb usb6-port1: unable to enumerate USB device [ 1699.048322][T18732] usb 5-1: USB disconnect, device number 91 [ 1700.555563][T18732] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1700.666885][T22177] loop5: detected capacity change from 0 to 512 [ 1700.706303][T22177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1700.726584][T22177] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1700.728021][T18732] usb 9-1: Using ep0 maxpacket: 16 [ 1700.770265][T18732] usb 9-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.811246][T18732] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1700.865496][T18732] usb 9-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1700.877798][T18732] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.918777][T18732] usb 9-1: config 0 descriptor?? [ 1700.961554][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1701.125247][T18732] usbhid 9-1:0.0: can't add hid device: -71 [ 1701.131464][T18732] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1701.142981][T18732] usb 9-1: USB disconnect, device number 54 [ 1701.357670][ T5961] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1701.553161][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 1701.577736][ T5961] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1701.733827][ T5961] usb 5-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1701.785148][ T5961] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1701.835246][ T5961] usb 5-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1701.883784][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.937045][ T5961] usb 5-1: Product: syz [ 1701.956539][ T5961] usb 5-1: Manufacturer: syz [ 1701.962583][ T5961] usb 5-1: SerialNumber: syz [ 1702.206069][ T5961] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input52 [ 1702.217566][ T5213] bcm5974 5-1:1.0: could not read from device [ 1702.225891][ T5213] bcm5974 5-1:1.0: could not read from device [ 1702.273984][ T5213] bcm5974 5-1:1.0: could not read from device [ 1702.287987][ T5961] usb 5-1: USB disconnect, device number 92 [ 1702.319620][ T5213] bcm5974 5-1:1.0: could not read from device [ 1702.402484][T15090] vhci_hcd: vhci_device speed not set [ 1702.780896][T18732] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1702.934335][T18732] usb 6-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1702.983627][T18732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.036801][T18732] usb 6-1: config 0 descriptor?? [ 1703.105667][T18732] pwc: Philips SPC 900NC USB webcam detected. [ 1703.216412][ T5961] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1703.368097][ T5961] usb 5-1: Using ep0 maxpacket: 8 [ 1703.389250][ T5961] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.415614][ T5961] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1703.463385][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.573095][ T5961] usb 5-1: config 0 descriptor?? [ 1703.592989][ T5961] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1703.775489][T15090] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1703.938809][T15090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1703.950646][T15090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.012123][T18732] pwc: send_video_command error -71 [ 1704.039158][T18732] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1704.049859][T15090] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1704.056934][T22208] random: crng reseeded on system resumption [ 1704.059237][T18732] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1704.074148][T15090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.086934][T15090] usb 4-1: config 0 descriptor?? [ 1704.095633][T18732] usb 6-1: USB disconnect, device number 80 [ 1704.158712][ T30] audit: type=1326 audit(1754595823.273:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22207 comm="syz.7.4689" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c7938ebe9 code=0x0 [ 1704.310649][T22206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.324999][T22206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.362169][T15090] usbhid 4-1:0.0: can't add hid device: -71 [ 1704.368329][T15090] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1704.382706][T15090] usb 4-1: USB disconnect, device number 88 [ 1704.580759][ T5961] gspca_vc032x: reg_r err -32 [ 1704.585655][ T5961] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 1705.363347][T22229] random: crng reseeded on system resumption [ 1705.886912][T13081] usb 5-1: USB disconnect, device number 93 [ 1705.973871][T18652] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1706.175942][T18397] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1706.186770][T18652] usb 6-1: Using ep0 maxpacket: 8 [ 1706.756699][T18652] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.801614][T18652] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1706.844334][T18652] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1706.862832][T18652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.906060][T18652] usb 6-1: config 0 descriptor?? [ 1706.919553][T18652] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 1706.932172][T18397] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1706.951290][T18397] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1706.966965][T18397] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1706.976409][T18397] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.001889][T18397] usb 9-1: config 0 descriptor?? [ 1707.203621][T18397] ath6kl: Failed to submit usb control message: -71 [ 1707.212683][T18397] ath6kl: unable to send the bmi data to the device: -71 [ 1707.227651][T18397] ath6kl: Unable to send get target info: -71 [ 1707.253671][T18397] ath6kl: Failed to init ath6kl core: -71 [ 1707.272085][T18397] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1707.356785][T18397] usb 9-1: USB disconnect, device number 55 [ 1708.248830][T22269] loop4: detected capacity change from 0 to 2048 [ 1708.289840][T22272] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1708.642205][T18732] usb 6-1: USB disconnect, device number 81 [ 1708.791980][T15090] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1708.878763][T22279] loop5: detected capacity change from 0 to 64 [ 1708.938199][T15090] usb 7-1: Using ep0 maxpacket: 8 [ 1708.944884][T15090] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.955222][T15090] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1708.964643][T22279] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 1708.983671][T15090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.032481][T15090] usb 7-1: config 0 descriptor?? [ 1709.045827][T15090] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1709.226733][T22272] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1709.251521][T22272] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1709.285374][T22272] Remounting filesystem read-only [ 1709.374379][T18397] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1709.525795][T18652] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1709.601053][T18397] usb 9-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1709.632723][T18397] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.661517][T18397] usb 9-1: config 0 descriptor?? [ 1709.668625][T18652] usb 4-1: device descriptor read/64, error -71 [ 1709.678251][T18397] pwc: Philips SPC 900NC USB webcam detected. [ 1709.850064][ T30] audit: type=1326 audit(1754595829.289:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22301 comm="syz.4.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1709.931793][ T30] audit: type=1326 audit(1754595829.310:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22301 comm="syz.4.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1709.999534][T18652] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1710.003907][T15090] gspca_vc032x: reg_r err -32 [ 1710.012392][T15090] vc032x 7-1:0.0: probe with driver vc032x failed with error -32 [ 1710.014950][ T30] audit: type=1326 audit(1754595829.310:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22301 comm="syz.4.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1710.047039][ T30] audit: type=1326 audit(1754595829.310:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22301 comm="syz.4.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1710.208074][T18652] usb 4-1: device descriptor read/64, error -71 [ 1710.332978][T18397] pwc: send_video_command error -71 [ 1710.338211][T18397] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1710.340785][T22311] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4724'. [ 1710.345815][ T30] audit: type=1326 audit(1754595829.310:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22301 comm="syz.4.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1710.523683][T18652] usb usb4-port1: attempt power cycle [ 1710.529305][T18397] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 1710.552085][T18397] usb 9-1: USB disconnect, device number 56 [ 1710.562793][ T30] audit: type=1326 audit(1754595829.310:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22301 comm="syz.4.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1710.666280][ T30] audit: type=1326 audit(1754595829.310:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22301 comm="syz.4.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f459a98ec23 code=0x7ffc0000 [ 1710.713468][ T30] audit: type=1326 audit(1754595829.321:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22301 comm="syz.4.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f459a98ec23 code=0x7ffc0000 [ 1710.745970][ T30] audit: type=1326 audit(1754595829.321:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22301 comm="syz.4.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1710.769976][ T30] audit: type=1326 audit(1754595829.321:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22301 comm="syz.4.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1710.918838][T18652] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1710.972204][T18652] usb 4-1: device descriptor read/8, error -71 [ 1711.234405][T18652] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1711.308486][T18652] usb 4-1: device descriptor read/8, error -71 [ 1711.369021][ T5961] usb 7-1: USB disconnect, device number 65 [ 1711.430939][T18652] usb usb4-port1: unable to enumerate USB device [ 1711.485757][T22322] loop6: detected capacity change from 0 to 128 [ 1711.608585][T22322] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1711.630203][T22328] loop4: detected capacity change from 0 to 512 [ 1711.635311][T22322] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1711.679065][T22330] loop8: detected capacity change from 0 to 2048 [ 1711.723441][T22334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1711.734788][T22334] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4731'. [ 1711.906838][T22328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1711.939527][T22337] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1711.954176][T22328] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1712.076820][T18513] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1712.161140][T18484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1712.334167][T22337] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1712.932652][T22337] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1713.102663][T22337] Remounting filesystem read-only [ 1713.124808][T18564] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 1713.398916][T22352] netlink: 996 bytes leftover after parsing attributes in process `syz.8.4735'. [ 1713.657663][T22354] loop6: detected capacity change from 0 to 512 [ 1713.679090][T22354] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1713.728575][T22354] EXT4-fs (loop6): 1 truncate cleaned up [ 1713.787131][T22354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1713.876242][T13144] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1714.046764][T13144] usb 5-1: Using ep0 maxpacket: 8 [ 1714.087689][T13144] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.100270][T13144] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1714.110164][T13144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.583957][T22334] syz.5.4731 (22334): drop_caches: 2 [ 1714.594927][T13144] usb 5-1: config 0 descriptor?? [ 1714.603666][T13144] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1714.618105][T18513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.656413][T22372] loop8: detected capacity change from 0 to 128 [ 1714.712645][T22372] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1714.725208][T22372] ext4 filesystem being mounted at /245/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1714.818244][T22376] loop7: detected capacity change from 0 to 2048 [ 1714.860320][T22379] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1714.917660][T18564] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1714.977762][T22379] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1714.989128][T22379] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1715.003672][T22379] Remounting filesystem read-only [ 1715.026359][T13859] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 1715.136871][T18397] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1715.178647][T22388] loop7: detected capacity change from 0 to 4096 [ 1715.217806][T22388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1715.284204][T18397] usb 4-1: device descriptor read/64, error -71 [ 1715.526515][T18397] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1715.610119][T13144] gspca_vc032x: reg_r err -32 [ 1715.615373][T13144] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 1715.658276][T18397] usb 4-1: device descriptor read/64, error -71 [ 1715.791310][T18397] usb usb4-port1: attempt power cycle [ 1716.062456][T13859] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.153718][T18397] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1716.194024][T18397] usb 4-1: device descriptor read/8, error -71 [ 1716.214591][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4756'. [ 1716.234042][T22400] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4756'. [ 1716.243242][T22400] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4756'. [ 1716.540887][T18397] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1716.677998][T18397] usb 4-1: device descriptor read/8, error -71 [ 1716.909387][T18397] usb usb4-port1: unable to enumerate USB device [ 1717.076217][T22405] loop6: detected capacity change from 0 to 512 [ 1717.097087][T13144] usb 5-1: USB disconnect, device number 94 [ 1717.217897][T22415] loop4: detected capacity change from 0 to 1024 [ 1717.227380][T22415] EXT4-fs: Ignoring removed nobh option [ 1717.234509][T22415] EXT4-fs: Ignoring removed bh option [ 1717.251958][ T6032] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1717.257717][T22405] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1717.289393][T18397] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1717.300630][T22415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1717.403268][ T6032] usb 6-1: Using ep0 maxpacket: 16 [ 1717.450353][T18397] usb 9-1: Using ep0 maxpacket: 32 [ 1717.460679][T22425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1717.472954][T22425] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4762'. [ 1717.927637][T22425] syz.7.4762 (22425): drop_caches: 2 [ 1717.956260][T18397] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.967373][T18397] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1718.001691][T18397] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1718.012864][T18397] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.022315][ T6032] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.047883][ T6032] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1718.215423][T18397] usb 9-1: config 0 descriptor?? [ 1718.260686][ T6032] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1718.279681][ T6032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.299200][T18397] hub 9-1:0.0: bad descriptor, ignoring hub [ 1718.301251][T22405] EXT4-fs (loop6): failed to open journal device unknown-block(0,9) -6 [ 1718.320177][ T6032] usb 6-1: Product: syz [ 1718.332624][ T6032] usb 6-1: Manufacturer: syz [ 1718.337313][ T6032] usb 6-1: SerialNumber: syz [ 1718.349191][T18397] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1718.378652][T18397] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1718.431869][T22431] loop3: detected capacity change from 0 to 2048 [ 1718.494893][T18484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1718.540505][T22432] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1718.554462][ T6032] usb 6-1: 0:2 : does not exist [ 1718.630943][ T6032] usb 6-1: USB disconnect, device number 82 [ 1718.767394][T22432] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1718.796442][T22432] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1718.835892][T22432] Remounting filesystem read-only [ 1718.842611][T18428] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 1718.968563][T22439] loop3: detected capacity change from 0 to 2048 [ 1719.014953][T15090] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1719.033116][T22439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1719.045582][T22439] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1719.169505][T15090] usb 7-1: Using ep0 maxpacket: 16 [ 1719.205904][T15090] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1719.213700][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1719.213718][ T30] audit: type=1326 audit(1754595839.163:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22443 comm="syz.5.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02db38ebe9 code=0x7ffc0000 [ 1719.259860][ T30] audit: type=1326 audit(1754595839.163:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22443 comm="syz.5.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f02db38ebe9 code=0x7ffc0000 [ 1719.260262][T15090] usb 7-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1719.283902][ T30] audit: type=1326 audit(1754595839.163:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22443 comm="syz.5.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02db38ebe9 code=0x7ffc0000 [ 1719.331489][T18428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.341022][ T30] audit: type=1326 audit(1754595839.163:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22443 comm="syz.5.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02db38ebe9 code=0x7ffc0000 [ 1719.378114][ T30] audit: type=1326 audit(1754595839.184:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22443 comm="syz.5.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f02db38ebe9 code=0x7ffc0000 [ 1719.400203][T15090] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1719.409764][ T30] audit: type=1326 audit(1754595839.310:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22443 comm="syz.5.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f02db38ec23 code=0x7ffc0000 [ 1719.439356][ T30] audit: type=1326 audit(1754595839.310:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22443 comm="syz.5.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f02db38ec23 code=0x7ffc0000 [ 1719.463107][T15090] usb 7-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1719.481051][ T30] audit: type=1326 audit(1754595839.310:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22443 comm="syz.5.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02db38ebe9 code=0x7ffc0000 [ 1719.488199][T15090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.607037][T15090] usb 7-1: Product: syz [ 1719.615491][T15090] usb 7-1: Manufacturer: syz [ 1719.620432][T15090] usb 7-1: SerialNumber: syz [ 1719.664595][ T30] audit: type=1326 audit(1754595839.310:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22443 comm="syz.5.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02db38ebe9 code=0x7ffc0000 [ 1719.794527][T13144] usb 9-1: USB disconnect, device number 57 [ 1719.843195][T15090] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input53 [ 1719.875768][ T30] audit: type=1326 audit(1754595839.342:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22443 comm="syz.5.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02db38ebe9 code=0x7ffc0000 [ 1719.927893][ T5213] bcm5974 7-1:1.0: could not read from device [ 1720.195337][T13144] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1720.224523][ T5213] bcm5974 7-1:1.0: could not read from device [ 1720.239252][T15090] usb 7-1: USB disconnect, device number 66 [ 1720.342719][T13144] usb 9-1: Using ep0 maxpacket: 8 [ 1720.369182][T13144] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.921426][T13144] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1721.024790][T13144] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.059873][T13144] usb 9-1: config 0 descriptor?? [ 1721.076832][T13144] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1721.098963][T22470] loop5: detected capacity change from 0 to 1024 [ 1721.140860][T22470] EXT4-fs: Ignoring removed nobh option [ 1721.194896][T22470] EXT4-fs: Ignoring removed bh option [ 1721.203806][T22465] loop3: detected capacity change from 0 to 8192 [ 1721.239088][T22470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1721.251946][ T6032] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1721.395560][ T6032] usb 5-1: Using ep0 maxpacket: 16 [ 1721.412946][ T6032] usb 5-1: no configurations [ 1721.417635][ T6032] usb 5-1: can't read configurations, error -22 [ 1721.557064][ T6032] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1721.673018][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1721.727463][ T6032] usb 5-1: Using ep0 maxpacket: 16 [ 1721.754005][ T6032] usb 5-1: no configurations [ 1721.781699][ T6032] usb 5-1: can't read configurations, error -22 [ 1721.812888][ T6032] usb usb5-port1: attempt power cycle [ 1721.825452][T22478] loop3: detected capacity change from 0 to 2048 [ 1721.884395][T22484] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1721.996112][T18652] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1722.034051][T13144] gspca_vc032x: reg_r err -32 [ 1722.038893][T13144] vc032x 9-1:0.0: probe with driver vc032x failed with error -32 [ 1722.173740][ T6032] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1722.187770][T18652] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.225413][ T6032] usb 5-1: Using ep0 maxpacket: 16 [ 1722.227747][T18652] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1722.237955][ T6032] usb 5-1: no configurations [ 1722.248659][ T6032] usb 5-1: can't read configurations, error -22 [ 1722.258896][T18652] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.281300][T18652] usb 7-1: config 0 descriptor?? [ 1722.298539][T18652] pwc: Askey VC010 type 2 USB webcam detected. [ 1722.391543][ T6032] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1722.440201][ T6032] usb 5-1: Using ep0 maxpacket: 16 [ 1722.447184][ T6032] usb 5-1: no configurations [ 1722.455053][ T6032] usb 5-1: can't read configurations, error -22 [ 1722.518810][ T6032] usb usb5-port1: unable to enumerate USB device [ 1722.674626][T18652] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1722.689130][T18652] pwc: recv_control_msg error -32 req 02 val 2700 [ 1722.700445][T18652] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1722.711095][T18652] pwc: recv_control_msg error -32 req 04 val 1000 [ 1722.718698][T18652] pwc: recv_control_msg error -32 req 04 val 1300 [ 1722.726350][T18652] pwc: recv_control_msg error -32 req 04 val 1400 [ 1722.733880][T18652] pwc: recv_control_msg error -32 req 02 val 2000 [ 1722.746460][T18652] pwc: recv_control_msg error -32 req 02 val 2100 [ 1722.759922][T18652] pwc: recv_control_msg error -32 req 04 val 1500 [ 1722.771834][T18652] pwc: recv_control_msg error -32 req 02 val 2500 [ 1722.783932][T18652] pwc: recv_control_msg error -32 req 02 val 2400 [ 1722.793457][T18652] pwc: recv_control_msg error -32 req 02 val 2600 [ 1722.804137][T18652] pwc: recv_control_msg error -32 req 02 val 2900 [ 1722.815000][T18652] pwc: recv_control_msg error -32 req 02 val 2800 [ 1722.822617][T18652] pwc: recv_control_msg error -32 req 04 val 1100 [ 1722.828048][ T6032] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1722.831574][T18652] pwc: Registered as video103. [ 1722.843501][T18652] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input54 [ 1722.990866][ T6032] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 1723.007926][ T6032] usb 6-1: config 0 has no interface number 0 [ 1723.026697][ T6032] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1723.041814][T18732] usb 9-1: USB disconnect, device number 58 [ 1723.055405][ T6032] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1723.066664][ T6032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.075080][ T6032] usb 6-1: Product: syz [ 1723.079253][ T6032] usb 6-1: Manufacturer: syz [ 1723.083845][ T6032] usb 6-1: SerialNumber: syz [ 1723.093321][ T6032] usb 6-1: config 0 descriptor?? [ 1723.108098][T15090] usb 7-1: USB disconnect, device number 67 [ 1723.124709][T22505] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1723.142062][ T6032] usb-storage 6-1:0.20: USB Mass Storage device detected [ 1723.159943][ T6032] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1723.275996][T22525] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4796'. [ 1723.293927][T22525] team_slave_0: entered promiscuous mode [ 1723.299876][T22525] team_slave_1: entered promiscuous mode [ 1723.305864][T22525] macsec1: entered promiscuous mode [ 1723.311068][T22525] team0: entered promiscuous mode [ 1723.316731][T22525] macsec1: entered allmulticast mode [ 1723.322043][T22525] team0: entered allmulticast mode [ 1723.327152][T22525] team_slave_0: entered allmulticast mode [ 1723.332900][T22525] team_slave_1: entered allmulticast mode [ 1723.340967][T22525] team0: Device macsec1 is already an upper device of the team interface [ 1723.351735][T22525] team0: left allmulticast mode [ 1723.356599][T22525] team_slave_0: left allmulticast mode [ 1723.362125][T22525] team_slave_1: left allmulticast mode [ 1723.367593][T22525] team0: left promiscuous mode [ 1723.373284][T22525] team_slave_0: left promiscuous mode [ 1723.374539][ T6032] scsi host1: usb-storage 6-1:0.20 [ 1723.378738][T22525] team_slave_1: left promiscuous mode [ 1723.656955][T22516] loop7: detected capacity change from 0 to 32768 [ 1723.672258][T22516] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4793 (22516) [ 1723.716459][T22516] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1723.737034][T22516] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 1723.747434][T22516] BTRFS info (device loop7): using free-space-tree [ 1723.979832][T13859] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1724.004243][ T6032] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1724.127406][T13144] usb 6-1: USB disconnect, device number 83 [ 1724.178866][ T6032] usb 7-1: Using ep0 maxpacket: 32 [ 1724.196544][ T6032] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1724.207073][ T6032] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1724.248271][ T6032] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.275939][ T6032] usb 7-1: config 0 descriptor?? [ 1724.310281][ T6032] hub 7-1:0.0: bad descriptor, ignoring hub [ 1724.324256][ T6032] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1724.386214][ T6032] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1724.796350][T22566] loop7: detected capacity change from 0 to 4096 [ 1724.844097][T22566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1725.029031][ T6032] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1725.108816][T22578] loop5: detected capacity change from 0 to 512 [ 1725.142934][T18732] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1725.159817][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 1725.159835][ T30] audit: type=1326 audit(1754595845.435:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1725.220439][ T6032] usb 9-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1725.229997][ T6032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.243961][T22578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1725.271124][ T6032] usb 9-1: config 0 descriptor?? [ 1725.280156][ T30] audit: type=1326 audit(1754595845.478:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1725.281781][T22578] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1725.302706][ T30] audit: type=1326 audit(1754595845.478:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1725.302761][ T30] audit: type=1326 audit(1754595845.478:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1725.302814][ T30] audit: type=1326 audit(1754595845.488:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1725.314817][T18732] usb 4-1: Using ep0 maxpacket: 8 [ 1725.335965][ T30] audit: type=1326 audit(1754595845.488:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f459a98ec23 code=0x7ffc0000 [ 1725.362271][ T6032] pwc: Philips SPC 900NC USB webcam detected. [ 1725.424032][ T30] audit: type=1326 audit(1754595845.488:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f459a98ec23 code=0x7ffc0000 [ 1725.427671][T18732] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.451886][ T30] audit: type=1326 audit(1754595845.488:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1725.456947][T18732] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1725.487701][ T30] audit: type=1326 audit(1754595845.488:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1725.488307][T18732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.518130][ T30] audit: type=1326 audit(1754595845.488:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1725.524400][T18732] usb 4-1: config 0 descriptor?? [ 1725.565835][T18732] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1725.581355][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1725.738356][T13859] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1725.813884][T22590] loop7: detected capacity change from 0 to 512 [ 1725.824515][T22590] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1725.834772][ T6032] pwc: send_video_command error -71 [ 1725.840361][ T6032] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1725.844078][T22590] EXT4-fs (loop7): 1 truncate cleaned up [ 1725.852667][ T6032] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 1725.859032][T22590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1725.870956][ T6032] usb 9-1: USB disconnect, device number 59 [ 1725.973182][T13859] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1726.450639][T22601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1726.545024][T18732] gspca_vc032x: reg_r err -32 [ 1726.562489][T18732] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 1726.647612][T22607] vivid-007: ================= START STATUS ================= [ 1726.655485][T22607] vivid-007: Generate PTS: true [ 1726.660544][T22607] vivid-007: Generate SCR: true [ 1726.665691][T22607] tpg source WxH: 320x240 (Y'CbCr) [ 1726.670924][T22607] tpg field: 1 [ 1726.674301][T22607] tpg crop: (0,0)/320x240 [ 1726.678734][T22607] tpg compose: (0,0)/320x240 [ 1726.683565][T22607] tpg colorspace: 8 [ 1726.687488][T22607] tpg transfer function: 0/0 [ 1726.692247][T22607] tpg Y'CbCr encoding: 0/0 [ 1726.696711][T22607] tpg quantization: 0/0 [ 1726.700941][T22607] tpg RGB range: 0/2 [ 1726.704851][T22607] vivid-007: ================== END STATUS ================== [ 1727.253817][T22607] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 1727.260450][T22607] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1727.268388][T22607] vhci_hcd vhci_hcd.0: Device attached [ 1727.382685][T22609] vhci_hcd: connection closed [ 1727.384719][T16899] vhci_hcd: stop threads [ 1727.435420][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1727.451816][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1727.526747][T16899] vhci_hcd: release socket [ 1727.580143][T16899] vhci_hcd: disconnect device [ 1727.862827][ T6032] usb 7-1: USB disconnect, device number 68 [ 1728.424339][T13144] usb 4-1: USB disconnect, device number 97 [ 1728.644463][T22625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4822'. [ 1728.893741][T13144] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1728.936539][T22625] bridge0: entered promiscuous mode [ 1728.945624][T22625] bridge0: port 3(macvlan2) entered blocking state [ 1728.952595][T22625] bridge0: port 3(macvlan2) entered disabled state [ 1728.959616][T22625] macvlan2: entered allmulticast mode [ 1728.966142][T22625] bridge0: entered allmulticast mode [ 1728.974219][T22625] macvlan2: left allmulticast mode [ 1729.006020][T22625] bridge0: left allmulticast mode [ 1729.014582][T22625] bridge0: left promiscuous mode [ 1729.081517][T13144] usb 7-1: Using ep0 maxpacket: 16 [ 1729.093532][T13144] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1729.104407][T13144] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1729.124544][T13144] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1729.157047][T13144] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1729.166190][T13144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.174171][T13144] usb 7-1: Product: syz [ 1729.192677][T13144] usb 7-1: Manufacturer: syz [ 1729.198542][T22615] loop4: detected capacity change from 0 to 32768 [ 1729.215033][T13144] usb 7-1: SerialNumber: syz [ 1729.237354][T13144] usb 7-1: config 0 descriptor?? [ 1729.237716][T22615] JBD2: Ignoring recovery information on journal [ 1729.261856][T22627] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1729.283859][T13144] mcba_usb 7-1:0.0 can0: failed tx_urb -90 [ 1729.289839][T13144] mcba_usb 7-1:0.0 can0: Failed to send cmd (169) [ 1729.296336][T13144] mcba_usb 7-1:0.0 can0: failed tx_urb -90 [ 1729.303068][T13144] mcba_usb 7-1:0.0 can0: Failed to send cmd (169) [ 1729.309529][T13144] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 1729.419883][T22615] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1729.584298][T18732] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1729.608166][T18484] ocfs2: Unmounting device (7,4) on (node local) [ 1729.716261][T18732] usb 4-1: device descriptor read/64, error -71 [ 1729.966455][T18732] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1730.105212][T18732] usb 4-1: device descriptor read/64, error -71 [ 1730.211089][T18732] usb usb4-port1: attempt power cycle [ 1730.280409][T22653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1730.620329][T18732] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1730.784931][T18732] usb 4-1: device descriptor read/8, error -71 [ 1731.045503][T18732] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1731.054275][T13144] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1731.066114][T18732] usb 4-1: device descriptor read/8, error -71 [ 1731.168477][T18732] usb usb4-port1: unable to enumerate USB device [ 1731.231510][T22668] loop4: detected capacity change from 0 to 2048 [ 1731.261524][T22668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1731.282053][T13144] usb 6-1: Using ep0 maxpacket: 8 [ 1731.303181][T13144] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.317803][T13144] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1731.329271][T13144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.352737][T13144] usb 6-1: config 0 descriptor?? [ 1731.369523][T13144] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1731.576464][T18484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1732.028119][T22664] loop7: detected capacity change from 0 to 32768 [ 1732.061937][T22664] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4835 (22664) [ 1732.125580][T22664] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1732.195063][T22664] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 1732.236965][T22664] BTRFS info (device loop7): using free-space-tree [ 1732.342048][T13144] gspca_vc032x: reg_r err -32 [ 1732.347132][T13144] vc032x 6-1:0.0: probe with driver vc032x failed with error -32 [ 1732.424196][ T5961] usb 7-1: USB disconnect, device number 69 [ 1732.448450][T22695] loop3: detected capacity change from 0 to 512 [ 1732.473266][ T5961] mcba_usb 7-1:0.0 can0: device disconnected [ 1732.504085][T22695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1732.525243][T22695] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1732.542453][T13859] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1732.648274][T18428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1732.990960][T13144] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 1733.011179][T22712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1733.161552][T13144] usb 9-1: config 0 has an invalid interface number: 20 but max is 0 [ 1733.161587][T13144] usb 9-1: config 0 has no interface number 0 [ 1733.161634][T13144] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1733.169363][T13144] usb 9-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1733.169396][T13144] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.169423][T13144] usb 9-1: Product: syz [ 1733.169444][T13144] usb 9-1: Manufacturer: syz [ 1733.169465][T13144] usb 9-1: SerialNumber: syz [ 1733.178797][T13144] usb 9-1: config 0 descriptor?? [ 1733.179660][T22702] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1733.183005][T13144] usb-storage 9-1:0.20: USB Mass Storage device detected [ 1733.198606][T13144] usb-storage 9-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1733.376366][T13144] scsi host1: usb-storage 9-1:0.20 [ 1733.537021][T13144] usb 6-1: USB disconnect, device number 84 [ 1733.562799][T22726] loop6: detected capacity change from 0 to 512 [ 1733.610576][T22726] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1733.631154][T22726] System zones: 0-2, 18-18, 34-34 [ 1733.643806][T22726] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4852: bg 0: block 248: padding at end of block bitmap is not set [ 1733.664951][T22726] __quota_error: 29 callbacks suppressed [ 1733.664969][T22726] Quota error (device loop6): write_blk: dquota write failed [ 1733.684976][T22726] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1733.695177][T22726] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4852: Failed to acquire dquot type 1 [ 1733.719442][T22726] EXT4-fs (loop6): 1 truncate cleaned up [ 1733.728110][T22726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1733.741274][T22726] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1733.756765][T22726] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.4852: deleted inode referenced: 12 [ 1733.775591][T22726] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.4852: deleted inode referenced: 12 [ 1733.859073][T18513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1734.069942][T22741] loop4: detected capacity change from 0 to 512 [ 1734.115640][T22741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1734.207525][T22741] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1734.272263][ T5961] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1734.387391][T18484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1734.456855][ T5961] usb 7-1: Using ep0 maxpacket: 8 [ 1734.536675][T22722] usb 9-1: reset full-speed USB device number 60 using dummy_hcd [ 1734.550536][ T5961] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1734.559021][ T5961] usb 7-1: config 179 has no interface number 0 [ 1734.565298][ T5961] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1734.576578][ T5961] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1734.588090][ T5961] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1734.600537][ T5961] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1734.623915][ T5961] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1734.642565][ T5961] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1734.651685][ T5961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.663860][T22740] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1734.842077][T13144] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1734.905404][ T5961] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input55 [ 1735.033073][T13144] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.079077][T13144] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1735.101343][T18652] usb 7-1: USB disconnect, device number 70 [ 1735.101353][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1735.116438][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1735.141500][T13144] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1735.335449][T13144] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1735.395862][T15090] usb 9-1: USB disconnect, device number 60 [ 1735.547745][T13144] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1735.563040][T13144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.571568][T13144] usb 6-1: Product: syz [ 1735.576411][T13144] usb 6-1: Manufacturer: syz [ 1735.605241][T13144] usb 6-1: SerialNumber: syz [ 1735.673103][T22749] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1735.720672][T13144] cdc_mbim 6-1:1.0: skipping garbage [ 1736.246978][ T30] audit: type=1326 audit(1754595857.110:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22774 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1736.247039][ T30] audit: type=1326 audit(1754595857.110:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22774 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1736.254050][ T30] audit: type=1326 audit(1754595857.121:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22774 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1736.254732][ T30] audit: type=1326 audit(1754595857.121:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22774 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1736.255622][ T30] audit: type=1326 audit(1754595857.121:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22774 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1736.258527][ T30] audit: type=1326 audit(1754595857.131:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22774 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1736.260076][ T30] audit: type=1326 audit(1754595857.131:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22774 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1736.261043][ T30] audit: type=1326 audit(1754595857.131:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22774 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f459a98ebe9 code=0x7ffc0000 [ 1736.427128][T15090] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1736.448979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1736.694834][T15090] usb 9-1: Using ep0 maxpacket: 16 [ 1736.702022][T15090] usb 9-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.713786][T15090] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1736.720415][T15090] usb 9-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1736.735679][T15090] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.747566][T13144] cdc_mbim 6-1:1.0: bind() failure [ 1736.750830][T15090] usb 9-1: config 0 descriptor?? [ 1736.763003][T13144] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1736.772391][T13144] cdc_ncm 6-1:1.1: bind() failure [ 1736.791369][T13144] usb 6-1: USB disconnect, device number 85 [ 1736.911331][T13081] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1737.071057][T13081] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1737.091236][T13081] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.118887][T13081] usb 7-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 1737.135613][T15090] usbhid 9-1:0.0: can't add hid device: -71 [ 1737.141673][T15090] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1737.152389][T15090] usb 9-1: USB disconnect, device number 61 [ 1737.174759][T13081] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1737.190109][T13081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.201130][T13081] usb 7-1: Product: syz [ 1737.205314][T13081] usb 7-1: Manufacturer: syz [ 1737.696544][T22790] loop4: detected capacity change from 0 to 1024 [ 1737.847748][T13081] usb 7-1: SerialNumber: syz [ 1737.856308][T22790] EXT4-fs: Ignoring removed orlov option [ 1737.880647][T22790] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1738.026880][T22795] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4875'. [ 1738.027943][T22790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1738.088573][T13081] usb 7-1: USB disconnect, device number 71 [ 1738.176258][T22802] Bluetooth: MGMT ver 1.23 [ 1738.189921][T18484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1738.288606][T15090] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1738.468235][T15090] usb 6-1: Using ep0 maxpacket: 32 [ 1738.489587][T15090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.500653][T15090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.510445][T15090] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1738.525992][T15090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.549248][T15090] usb 6-1: config 0 descriptor?? [ 1738.560504][T15090] hub 6-1:0.0: USB hub found [ 1738.601925][T13081] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1738.855284][T15090] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1739.057462][T13081] usb 7-1: Using ep0 maxpacket: 16 [ 1739.066497][T13081] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1739.075277][T13081] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1739.091345][T13081] usb 7-1: can't read configurations, error -71 [ 1739.261293][T15090] usbhid 6-1:0.0: can't add hid device: -71 [ 1739.333082][T15090] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1739.356734][T18732] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1739.367479][T15090] usb 6-1: USB disconnect, device number 86 [ 1739.532328][T18732] usb 5-1: Using ep0 maxpacket: 32 [ 1739.668704][T18732] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1739.689657][T18732] usb 5-1: config 0 has no interface number 0 [ 1739.720042][T18732] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1739.747702][T18732] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1739.790657][T18732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.835866][T18732] usb 5-1: Product: syz [ 1739.848129][T18732] usb 5-1: Manufacturer: syz [ 1739.879131][T18732] usb 5-1: SerialNumber: syz [ 1739.925776][T18732] usb 5-1: config 0 descriptor?? [ 1740.614339][T15090] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1740.778504][T15090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1740.800466][T15090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1740.825967][T15090] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1740.837545][T15090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.874928][T15090] usb 7-1: config 0 descriptor?? [ 1741.098145][T22830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1741.135043][T22830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1741.163745][T22830] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1741.314672][T15090] usbhid 7-1:0.0: can't add hid device: -71 [ 1741.326919][T15090] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1741.341611][T15090] usb 7-1: USB disconnect, device number 74 [ 1741.500798][T22827] loop3: detected capacity change from 0 to 32768 [ 1741.519394][T22827] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4886 (22827) [ 1741.548622][T22827] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1741.623281][T22827] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1741.725063][T22827] BTRFS info (device loop3): using free-space-tree [ 1741.816744][T18732] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71 [ 1741.829039][T18732] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1741.836606][T18732] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1741.844703][T18732] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1741.860767][T18732] usb 5-1: USB disconnect, device number 99 [ 1742.022178][T22845] loop6: detected capacity change from 0 to 128 [ 1742.191392][T22845] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1742.385956][T22845] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1742.510831][T18428] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1742.944728][T22854] tipc: Started in network mode [ 1742.949754][T22854] tipc: Node identity 4, cluster identity 4711 [ 1742.956099][T22854] tipc: Node number set to 4 [ 1743.617597][T18513] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1743.683547][T22856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4893'. [ 1745.202200][T18397] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1745.448374][T18397] usb 7-1: Using ep0 maxpacket: 16 [ 1745.487086][T18397] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1745.517474][T18397] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1745.603554][T18397] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1745.643428][T18397] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.698639][T18397] usb 7-1: Product: syz [ 1745.710480][T18397] usb 7-1: Manufacturer: syz [ 1745.719969][T18397] usb 7-1: SerialNumber: syz [ 1745.742024][T18397] usb 7-1: config 0 descriptor?? [ 1745.981008][T18397] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1746.000006][T18397] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1746.027124][T22899] loop3: detected capacity change from 0 to 1024 [ 1746.067396][T22899] EXT4-fs: Ignoring removed nobh option [ 1746.109100][T22899] EXT4-fs: Ignoring removed bh option [ 1746.169958][T22899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1746.413574][T18397] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1746.420604][T18397] em28xx 7-1:0.0: Config register raw data: 0x00 [ 1746.441413][T22899] overlayfs: failed to resolve './bus': -2 [ 1746.834395][T18428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1747.633963][T13081] usb 7-1: USB disconnect, device number 75 [ 1747.641339][T13081] em28xx 7-1:0.0: Disconnecting em28xx [ 1747.660722][T13081] em28xx 7-1:0.0: Freeing device [ 1748.316348][T22938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1748.593625][T22943] tipc: Started in network mode [ 1748.598557][T22943] tipc: Node identity 4, cluster identity 4711 [ 1748.604879][T22943] tipc: Node number set to 4 [ 1748.677215][T22946] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4924'. [ 1749.333394][T15090] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1749.489890][T15090] usb 9-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1749.500177][T15090] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.676533][T15090] usb 9-1: config 0 descriptor?? [ 1749.692192][T15090] pwc: Philips SPC 900NC USB webcam detected. [ 1749.951086][T13081] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1750.112522][T13081] usb 5-1: Using ep0 maxpacket: 16 [ 1750.161172][T13081] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1750.204449][T13081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1750.274686][T13081] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1750.302531][T13081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.340318][T13081] usb 5-1: Product: syz [ 1750.387922][T13081] usb 5-1: Manufacturer: syz [ 1750.392598][T13081] usb 5-1: SerialNumber: syz [ 1750.480530][T13081] usb 5-1: config 0 descriptor?? [ 1750.509951][T13081] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1750.638823][T15090] pwc: send_video_command error -71 [ 1750.644042][T15090] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1750.692448][T15090] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 1750.720263][T13081] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1750.743816][T15090] usb 9-1: USB disconnect, device number 62 [ 1751.131794][T13081] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1751.168617][T13081] em28xx 5-1:0.0: Config register raw data: 0x00 [ 1752.388607][T18732] usb 5-1: USB disconnect, device number 100 [ 1752.416459][T18732] em28xx 5-1:0.0: Disconnecting em28xx [ 1752.457072][T18732] em28xx 5-1:0.0: Freeing device [ 1752.461369][T22985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1752.763645][T18397] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1752.920181][T18397] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1752.969243][T18397] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1753.001099][T18397] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 1753.023818][T18397] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1753.041850][T18397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.058035][T18397] usb 4-1: Product: syz [ 1753.062193][T18397] usb 4-1: Manufacturer: syz [ 1753.066778][T18397] usb 4-1: SerialNumber: syz [ 1753.143373][T18732] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1753.381279][T18397] usb 4-1: USB disconnect, device number 102 [ 1753.604933][T18732] usb 7-1: Using ep0 maxpacket: 16 [ 1753.622093][T18732] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1753.652592][T18732] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1753.688268][T18732] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1753.700012][T18732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.722948][T13144] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1753.734906][T18732] usb 7-1: Product: syz [ 1753.746929][T18732] usb 7-1: Manufacturer: syz [ 1753.765353][T18732] usb 7-1: SerialNumber: syz [ 1753.781362][T18732] usb 7-1: config 0 descriptor?? [ 1753.791979][T18732] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1753.801544][ T5961] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1753.828573][T18732] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1753.925794][T13144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1753.940825][T13144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1753.951517][ T5961] usb 4-1: Using ep0 maxpacket: 16 [ 1753.962665][ T5961] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1753.971602][ T5961] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1753.989950][ T5961] usb 4-1: can't read configurations, error -71 [ 1754.002161][T13144] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1754.046084][T13144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.096233][T13144] usb 5-1: config 0 descriptor?? [ 1754.366340][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4944'. [ 1754.379282][T18732] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1754.392986][T18732] em28xx 7-1:0.0: Config register raw data: 0x00 [ 1754.401284][T23005] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4944'. [ 1754.654090][T18732] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 1754.817604][T18732] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 1754.859469][T18732] usb 6-1: config 0 has no interface number 0 [ 1754.882761][T18732] usb 6-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 1754.902757][T18732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.920557][T18732] usb 6-1: Product: syz [ 1754.937794][T18732] usb 6-1: Manufacturer: syz [ 1754.964429][T18732] usb 6-1: SerialNumber: syz [ 1754.992714][T18732] usb 6-1: config 0 descriptor?? [ 1755.030134][T18732] ftdi_sio 6-1:0.23: FTDI USB Serial Device converter detected [ 1755.060294][T18732] usb 6-1: Detected SIO [ 1755.067727][T13144] uclogic 0003:256C:006D.0030: failed retrieving string descriptor #200: -71 [ 1755.077502][T18732] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1755.148541][T13144] uclogic 0003:256C:006D.0030: failed retrieving pen parameters: -71 [ 1755.175133][T13144] uclogic 0003:256C:006D.0030: failed probing pen v2 parameters: -71 [ 1755.229584][T18732] usb 6-1: USB disconnect, device number 87 [ 1755.235566][T13144] uclogic 0003:256C:006D.0030: failed probing parameters: -71 [ 1755.243127][T13144] uclogic 0003:256C:006D.0030: probe with driver uclogic failed with error -71 [ 1755.269518][T18732] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1755.305548][T13144] usb 5-1: USB disconnect, device number 101 [ 1755.311693][T18732] ftdi_sio 6-1:0.23: device disconnected [ 1755.712814][T23028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1755.930921][T18732] usb 7-1: USB disconnect, device number 76 [ 1755.946578][T18732] em28xx 7-1:0.0: Disconnecting em28xx [ 1755.958765][T18732] em28xx 7-1:0.0: Freeing device [ 1756.573773][T18732] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1756.727626][T18732] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 1756.745005][T18732] usb 4-1: config 0 has no interface number 0 [ 1756.751111][T18732] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1756.803897][T18732] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1756.817695][T18732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.845909][T18732] usb 4-1: Product: syz [ 1756.858682][T18732] usb 4-1: Manufacturer: syz [ 1756.871345][T18732] usb 4-1: SerialNumber: syz [ 1756.917210][T18732] usb 4-1: config 0 descriptor?? [ 1756.923173][T23037] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1756.954662][T23039] loop6: detected capacity change from 0 to 32768 [ 1756.961202][T18732] usb-storage 4-1:0.20: USB Mass Storage device detected [ 1757.015627][T18732] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1757.049236][T23039] JBD2: Ignoring recovery information on journal [ 1757.150514][T23039] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1757.176876][T18732] scsi host1: usb-storage 4-1:0.20 [ 1757.196914][T23058] loop5: detected capacity change from 0 to 2048 [ 1757.250671][T23058] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1757.274615][T18513] ocfs2: Unmounting device (7,6) on (node local) [ 1757.343187][T22885] ------------[ cut here ]------------ [ 1757.349039][T22885] WARNING: CPU: 0 PID: 22885 at mm/vmalloc.c:542 __vmap_pages_range_noflush+0xd4e/0xe10 [ 1757.358877][T22885] Modules linked in: [ 1757.363075][T22885] CPU: 0 UID: 0 PID: 22885 Comm: syz.7.4901 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1757.374909][T22885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1757.385005][T22885] RIP: 0010:__vmap_pages_range_noflush+0xd4e/0xe10 [ 1757.391593][T22885] Code: ad ff eb 2f e8 23 72 ad ff 45 31 e4 eb 25 e8 19 72 ad ff 90 0f 0b 90 eb 14 e8 0e 72 ad ff 90 0f 0b 90 eb 09 e8 03 72 ad ff 90 <0f> 0b 90 41 bc f4 ff ff ff 44 89 e0 48 81 c4 e0 00 00 00 5b 41 5c [ 1757.411268][T22885] RSP: 0018:ffffc9000ee778d8 EFLAGS: 00010246 [ 1757.417347][T22885] RAX: ffffffff821239ad RBX: ffff888091dc9a68 RCX: 0000000000080000 [ 1757.425360][T22885] RDX: ffffc9001e07c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1757.433396][T22885] RBP: ffffea0003000000 R08: 0000000000000000 R09: ffffffff82123ba5 [ 1757.441417][T22885] R10: dffffc0000000000 R11: fffffbfff1c483f7 R12: ffffc9008954e000 [ 1757.449626][T22885] R13: 1ffff110123b934d R14: 0000000000000000 R15: dffffc0000000000 [ 1757.457640][T22885] FS: 00007f5c7a22a6c0(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 1757.457722][T18397] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1757.466595][T22885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1757.480902][T22885] CR2: 00007f2d8a8e56c0 CR3: 0000000032955000 CR4: 0000000000350ef0 [ 1757.488944][T22885] Call Trace: [ 1757.492246][T22885] [ 1757.495260][T22885] vmap+0x1ca/0x310 [ 1757.499129][T22885] io_region_init_ptr+0x24d/0x350 [ 1757.504180][T22885] ? __pfx_io_region_init_ptr+0x10/0x10 [ 1757.509817][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1757.515515][T22885] ? io_region_allocate_pages+0x3aa/0x4b0 [ 1757.521271][T22885] io_create_region+0x3a4/0x480 [ 1757.526325][T22885] io_create_region_mmap_safe+0xc0/0x180 [ 1757.531982][T22885] ? __pfx_io_create_region_mmap_safe+0x10/0x10 [ 1757.538290][T22885] io_register_mem_region+0x27a/0x3c0 [ 1757.543744][T22885] ? __se_sys_io_uring_register+0x1e1/0x11b0 [ 1757.549744][T22885] ? __pfx_io_register_mem_region+0x10/0x10 [ 1757.555688][T22885] ? __fget_files+0x2a/0x420 [ 1757.560305][T22885] ? __fget_files+0x2a/0x420 [ 1757.564969][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1757.570610][T22885] ? io_is_uring_fops+0xd/0x50 [ 1757.575435][T22885] __se_sys_io_uring_register+0x3b1/0x11b0 [ 1757.581327][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1757.586981][T22885] ? __se_sys_futex+0x36f/0x400 [ 1757.591898][T22885] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1757.598165][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1757.603866][T22885] ? rcu_is_watching+0x15/0xb0 [ 1757.608655][T22885] ? do_syscall_64+0xbe/0x3b0 [ 1757.613408][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1757.619134][T22885] do_syscall_64+0xfa/0x3b0 [ 1757.623654][T22885] ? lockdep_hardirqs_on+0x9c/0x150 [ 1757.628918][T22885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.634988][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1757.640695][T22885] ? exc_page_fault+0x9f/0xf0 [ 1757.645387][T22885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.649495][T18397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1757.651337][T22885] RIP: 0033:0x7f5c7938ebe9 [ 1757.666649][T22885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1757.680333][T18397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1757.686532][T22885] RSP: 002b:00007f5c7a22a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1757.686566][T22885] RAX: ffffffffffffffda RBX: 00007f5c795b5fa0 RCX: 00007f5c7938ebe9 [ 1757.686588][T22885] RDX: 0000200000000200 RSI: 0000000000000022 RDI: 0000000000000003 [ 1757.686608][T22885] RBP: 00007f5c79411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1757.686626][T22885] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1757.686646][T22885] R13: 00007f5c795b6038 R14: 00007f5c795b5fa0 R15: 00007ffee9f7dde8 [ 1757.725482][T18397] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1757.728815][T22885] [ 1757.756987][T22885] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1757.764261][T22885] CPU: 0 UID: 0 PID: 22885 Comm: syz.7.4901 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1757.775965][T22885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1757.786006][T22885] Call Trace: [ 1757.789273][T22885] [ 1757.792191][T22885] dump_stack_lvl+0x99/0x250 [ 1757.796789][T22885] ? __asan_memcpy+0x40/0x70 [ 1757.801378][T22885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1757.806579][T22885] ? __pfx__printk+0x10/0x10 [ 1757.811180][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1757.816813][T22885] vpanic+0x281/0x750 [ 1757.820792][T22885] ? __pfx__printk+0x10/0x10 [ 1757.825382][T22885] ? __pfx_vpanic+0x10/0x10 [ 1757.829894][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1757.835539][T22885] ? is_bpf_text_address+0x292/0x2b0 [ 1757.840854][T22885] panic+0xb9/0xc0 [ 1757.844572][T22885] ? __pfx_panic+0x10/0x10 [ 1757.849000][T22885] __warn+0x31b/0x4b0 [ 1757.852977][T22885] ? __vmap_pages_range_noflush+0xd4e/0xe10 [ 1757.858871][T22885] ? __vmap_pages_range_noflush+0xd4e/0xe10 [ 1757.864762][T22885] report_bug+0x2be/0x4f0 [ 1757.869086][T22885] ? __vmap_pages_range_noflush+0xd4e/0xe10 [ 1757.874982][T22885] ? __vmap_pages_range_noflush+0xd4e/0xe10 [ 1757.880870][T22885] ? __vmap_pages_range_noflush+0xd50/0xe10 [ 1757.886794][T22885] handle_bug+0x84/0x160 [ 1757.891055][T22885] exc_invalid_op+0x1a/0x50 [ 1757.895560][T22885] asm_exc_invalid_op+0x1a/0x20 [ 1757.900400][T22885] RIP: 0010:__vmap_pages_range_noflush+0xd4e/0xe10 [ 1757.906902][T22885] Code: ad ff eb 2f e8 23 72 ad ff 45 31 e4 eb 25 e8 19 72 ad ff 90 0f 0b 90 eb 14 e8 0e 72 ad ff 90 0f 0b 90 eb 09 e8 03 72 ad ff 90 <0f> 0b 90 41 bc f4 ff ff ff 44 89 e0 48 81 c4 e0 00 00 00 5b 41 5c [ 1757.926505][T22885] RSP: 0018:ffffc9000ee778d8 EFLAGS: 00010246 [ 1757.932569][T22885] RAX: ffffffff821239ad RBX: ffff888091dc9a68 RCX: 0000000000080000 [ 1757.940530][T22885] RDX: ffffc9001e07c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1757.948491][T22885] RBP: ffffea0003000000 R08: 0000000000000000 R09: ffffffff82123ba5 [ 1757.956459][T22885] R10: dffffc0000000000 R11: fffffbfff1c483f7 R12: ffffc9008954e000 [ 1757.964427][T22885] R13: 1ffff110123b934d R14: 0000000000000000 R15: dffffc0000000000 [ 1757.972400][T22885] ? pfn_valid+0x125/0x4d0 [ 1757.976816][T22885] ? __vmap_pages_range_noflush+0xd4d/0xe10 [ 1757.982734][T22885] ? __vmap_pages_range_noflush+0xd4d/0xe10 [ 1757.988653][T22885] vmap+0x1ca/0x310 [ 1757.992473][T22885] io_region_init_ptr+0x24d/0x350 [ 1757.997523][T22885] ? __pfx_io_region_init_ptr+0x10/0x10 [ 1758.003073][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1758.008702][T22885] ? io_region_allocate_pages+0x3aa/0x4b0 [ 1758.014440][T22885] io_create_region+0x3a4/0x480 [ 1758.019321][T22885] io_create_region_mmap_safe+0xc0/0x180 [ 1758.024987][T22885] ? __pfx_io_create_region_mmap_safe+0x10/0x10 [ 1758.031248][T22885] io_register_mem_region+0x27a/0x3c0 [ 1758.036623][T22885] ? __se_sys_io_uring_register+0x1e1/0x11b0 [ 1758.042606][T22885] ? __pfx_io_register_mem_region+0x10/0x10 [ 1758.048510][T22885] ? __fget_files+0x2a/0x420 [ 1758.053113][T22885] ? __fget_files+0x2a/0x420 [ 1758.057713][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1758.063340][T22885] ? io_is_uring_fops+0xd/0x50 [ 1758.068100][T22885] __se_sys_io_uring_register+0x3b1/0x11b0 [ 1758.073911][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1758.079543][T22885] ? __se_sys_futex+0x36f/0x400 [ 1758.084396][T22885] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1758.090648][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1758.096282][T22885] ? rcu_is_watching+0x15/0xb0 [ 1758.101044][T22885] ? do_syscall_64+0xbe/0x3b0 [ 1758.105722][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1758.111355][T22885] do_syscall_64+0xfa/0x3b0 [ 1758.115859][T22885] ? lockdep_hardirqs_on+0x9c/0x150 [ 1758.121055][T22885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.127132][T22885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1758.132849][T22885] ? exc_page_fault+0x9f/0xf0 [ 1758.137529][T22885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.143413][T22885] RIP: 0033:0x7f5c7938ebe9 [ 1758.147824][T22885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1758.167423][T22885] RSP: 002b:00007f5c7a22a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1758.175840][T22885] RAX: ffffffffffffffda RBX: 00007f5c795b5fa0 RCX: 00007f5c7938ebe9 [ 1758.183804][T22885] RDX: 0000200000000200 RSI: 0000000000000022 RDI: 0000000000000003 [ 1758.191770][T22885] RBP: 00007f5c79411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1758.199735][T22885] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1758.207698][T22885] R13: 00007f5c795b6038 R14: 00007f5c795b5fa0 R15: 00007ffee9f7dde8 [ 1758.215683][T22885] [ 1758.218892][T22885] Kernel Offset: disabled [ 1758.223206][T22885] Rebooting in 86400 seconds..